$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05.cer File: e2c44d35-830c-4692-bbac-6503c8123d05.cer (raw, json) Hash identifier: fq7WY+0d9hD2TC8/mOWYWA/xyh3ZDxvTQ9a3n3p8WbQ= Subject key identifier: DF:21:99:84:FC:74:D5:04:C4:B3:6B:02:F6:94:9C:E8:7F:52:FF:0C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847CAF6BF68E463CAE5CA688E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/e2c44d35-830c-4692-bbac-6503c8123d05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Nov 2024 20:10:24 +0000 Certificate not after: Tue 09 Feb 2027 20:10:24 +0000 Subordinate resources: AS: 19925 IP: 142.76.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:f6:bf:68:e4:63:ca:e5:ca:68:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 6 20:10:24 2024 GMT Not After : Feb 9 20:10:24 2027 GMT Subject: CN=e2c44d35-830c-4692-bbac-6503c8123d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:d6:09:c4:da:f9:3c:14:f8:24:bf:1c:d8: cf:a4:8d:57:5e:8a:ac:3a:64:2a:f8:f7:c1:71:91: 9a:40:d4:5b:b1:59:a4:37:22:51:22:00:d5:4c:69: 3e:24:02:6a:7f:d9:f5:b8:0c:2f:a0:60:d1:02:53: a0:31:ae:e1:be:d3:a2:c7:65:33:b4:01:0d:ad:b1: 05:b8:f8:25:7a:ee:54:a0:64:02:3d:82:25:4c:ae: e9:25:5b:49:db:43:ea:36:9e:6d:d6:00:d5:60:e1: 02:a2:58:a1:0a:cf:71:38:ae:36:12:7c:1d:92:57: a1:93:3d:ae:8f:77:82:7f:42:80:fd:6b:e7:1a:52: 2c:93:6b:3e:1d:1d:c2:4a:a8:e7:d9:b3:64:ab:bb: 50:1a:7b:16:27:25:ec:ac:8d:b1:40:55:6e:2d:5f: 18:b3:1a:f1:6f:bd:26:21:b3:19:ce:93:f2:45:a4: ad:d8:79:64:be:fd:28:eb:05:24:ea:9f:f4:ed:3b: 53:82:67:a4:33:e0:c9:13:3c:ca:7c:14:a9:da:b9: c2:2b:fa:39:3c:ad:ce:b6:23:44:29:6a:7c:47:15: 85:d6:29:8c:0f:ca:25:e9:7e:42:87:ad:14:6f:4a: c3:ca:b1:d4:37:60:41:af:f8:f8:03:8e:1a:6f:f5: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:99:84:FC:74:D5:04:C4:B3:6B:02:F6:94:9C:E8:7F:52:FF:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/e2c44d35-830c-4692-bbac-6503c8123d05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.76.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19925 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e9:12:14:58:a8:9d:37:88:48:e9:86:15:c2:c5:15:b8:83: 27:67:d1:af:76:7f:9c:6d:56:75:bb:76:cf:94:76:4b:46:59: 24:70:c5:fd:84:21:50:10:26:40:73:5c:62:51:c2:c7:c1:9e: f8:5b:70:e1:33:a1:79:52:82:85:30:ad:35:d9:38:32:26:85: 04:97:31:72:af:77:1f:ad:ce:7e:7d:36:83:54:95:6d:cc:6b: d8:83:6c:ba:91:d7:26:61:41:33:59:d9:ff:f8:18:0e:0b:0b: 6c:b5:60:33:e1:42:64:5d:df:58:c0:55:a3:c9:dc:e6:cf:03: df:3e:7f:32:c1:03:2b:a6:ac:1f:7f:61:85:05:34:00:52:60: f6:77:56:29:7d:a0:81:5c:e7:1b:92:f3:1d:75:f6:dd:f2:e0: 09:e7:a5:e8:25:1a:1c:b2:6d:bb:3b:e3:da:4a:da:96:2e:8d: a5:3c:b8:3a:bd:b4:bc:3d:99:57:54:29:16:3f:de:c4:0a:af: 8d:4e:25:0c:0f:b7:e7:6c:b2:23:9b:54:76:4f:29:f4:2d:14: d0:ce:6e:fe:eb:3b:9f:62:6e:75:2a:d8:eb:f8:89:ff:5a:c6: e2:b4:c7:f1:25:20:6e:27:68:3d:f3:b3:3b:a4:2c:e0:37:fa: 68:da:38:f1 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEfK9r9o5GPK5cpojgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTEwNjIwMTAyNFoXDTI3MDIwOTIwMTAyNFowLzEtMCsGA1UEAxMk ZTJjNDRkMzUtODMwYy00NjkyLWJiYWMtNjUwM2M4MTIzZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTPWCcTa+TwU+CS/HNjPpI1XXoqsOmQq+PfB cZGaQNRbsVmkNyJRIgDVTGk+JAJqf9n1uAwvoGDRAlOgMa7hvtOix2UztAENrbEF uPgleu5UoGQCPYIlTK7pJVtJ20PqNp5t1gDVYOEColihCs9xOK42Enwdklehkz2u j3eCf0KA/WvnGlIsk2s+HR3CSqjn2bNkq7tQGnsWJyXsrI2xQFVuLV8Ysxrxb70m IbMZzpPyRaSt2Hlkvv0o6wUk6p/07TtTgmekM+DJEzzKfBSp2rnCK/o5PK3OtiNE KWp8RxWF1imMD8ol6X5Ch60Ub0rDyrHUN2BBr/j4A44ab/V85wIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFN8hmYT8dNUExLNrAvaUnOh/Uv8MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9l MmM0NGQzNS04MzBjLTQ2OTItYmJhYy02NTAzYzgxMjNkMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2UyYzQ0ZDM1LTgzMGMtNDY5Mi1i YmFjLTY1MDNjODEyM2QwNS9lMmM0NGQzNS04MzBjLTQ2OTItYmJhYy02NTAzYzgx MjNkMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCOTDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJN 1TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAt6RIUWKidN4hI6YYVwsUVuIMnZ9Gvdn+cbVZ1u3bPlHZLRlkk cMX9hCFQECZAc1xiUcLHwZ74W3DhM6F5UoKFMK012TgyJoUElzFyr3cfrc5+fTaD VJVtzGvYg2y6kdcmYUEzWdn/+BgOCwtstWAz4UJkXd9YwFWjydzmzwPfPn8ywQMr pqwff2GFBTQAUmD2d1YpfaCBXOcbkvMddfbd8uAJ56XoJRocsm27O+PaStqWLo2l PLg6vbS8PZlXVCkWP97ECq+NTiUMD7fnbLIjm1R2Tyn0LRTQzm7+6zufYm51Ktjr +In/WsbitMfxJSBuJ2g987M7pCzgN/po2jjx -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:11 2024 by rpki-client on console-ams.rpki-client.org