$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer File: f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer (raw, json) Hash identifier: 02RJIQFTQUbvu3fz4rcZbOKCNoTQYxQtFwsBZq8WiTg= Subject key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847F4F5E267D952B5C5685DC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Nov 2024 21:12:37 +0000 Certificate not after: Wed 24 Feb 2027 21:12:37 +0000 Subordinate resources: AS: 22121 IP: 172.99.224.0/22 IP: 199.21.136.0/21 IP: 2604:14c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:f5:e2:67:d9:52:b5:c5:68:5d:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 21 21:12:37 2024 GMT Not After : Feb 24 21:12:37 2027 GMT Subject: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:b6:dc:30:57:cd:42:08:98:88:d4:bf:d6: b1:50:63:74:b7:2e:89:a8:a0:66:fe:df:93:0f:9b: 08:a7:c0:2b:06:fe:1e:d9:1a:33:b8:13:7f:ca:16: 3d:05:16:f3:72:5b:67:a7:4e:65:12:64:26:ca:b2: 3b:96:f3:5e:5e:e0:8f:4c:8d:bf:60:71:3f:60:3c: 14:4c:9a:34:df:a5:c4:f1:4f:34:f5:83:31:62:41: 89:a5:3d:a0:7d:df:e0:ca:cf:0e:25:9c:a1:24:c3: 23:9c:a5:3d:76:be:ff:fe:e1:d2:20:f7:4f:9c:97: 65:20:08:f7:21:c8:32:ef:f9:fb:94:e8:f8:66:f7: 0a:46:27:96:fb:e4:44:6d:2e:1b:a4:32:9c:62:b6: 9b:bb:47:d6:40:39:b6:66:f4:19:01:90:12:b4:89: 65:f2:d7:dd:58:ec:5c:76:1d:93:b0:a6:09:c3:fa: 35:f4:94:0d:ef:01:04:b7:fb:8d:c5:17:8f:f2:7e: 82:70:04:bd:f8:7e:d9:e8:7a:4a:5c:80:23:66:4d: 8d:f1:d2:f6:e2:ec:3a:16:b5:85:92:52:bb:b7:c0: 89:f9:d1:15:0e:a7:b3:62:ff:20:ef:9a:90:0e:ce: b9:b0:96:c6:5c:17:f3:a9:77:b3:53:9f:69:f9:63: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ce:c4:eb:b9:f7:d0:5a:50:37:7f:96:af:2c:12:95:b4:53: 72:6c:bf:d9:c5:ba:f6:61:27:a3:29:3d:82:91:70:e2:99:e1: 21:64:a7:cf:75:b8:39:ef:64:42:9d:a1:c8:1a:82:ed:cc:48: e7:50:83:aa:55:ea:e3:90:78:02:55:8e:96:33:fe:63:38:34: 5c:47:68:20:35:82:85:a3:53:af:aa:16:77:cf:eb:94:52:c6: ad:82:94:78:19:3f:25:16:73:2d:14:eb:1f:1b:de:2e:8a:16: a6:94:e8:f4:c3:39:d5:f6:e6:07:fb:be:e1:51:17:5b:a8:9f: ab:c7:ac:e0:87:92:a3:33:4e:39:6f:ae:f9:0d:f1:14:f5:aa: f4:b2:a0:a2:da:53:8b:bd:53:6f:eb:4a:f3:0a:c6:27:b9:be: 53:4c:40:f5:d6:08:b2:7d:0c:09:3a:6f:9a:dc:a6:88:68:1d: cb:7b:9b:3f:e3:f6:f0:b4:d5:2f:8c:25:e2:5c:b8:57:f7:98: bd:03:3f:1d:ed:33:cb:18:60:89:69:de:16:1c:93:c4:09:07: 99:0d:b0:19:b4:7e:58:26:0c:3a:a8:d3:1f:80:08:19:96:d6: 26:bf:ff:95:ac:09:24:4e:b4:87:fb:6c:a6:90:d4:d8:49:8b: 54:56:7d:11 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEf09eJn2VK1xWhdyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTEyMTIxMTIzN1oXDTI3MDIyNDIxMTIzN1owLzEtMCsGA1UEAxMk ZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31S23DBXzUIImIjUv9axUGN0ty6JqKBm/t+T D5sIp8ArBv4e2RozuBN/yhY9BRbzcltnp05lEmQmyrI7lvNeXuCPTI2/YHE/YDwU TJo036XE8U809YMxYkGJpT2gfd/gys8OJZyhJMMjnKU9dr7//uHSIPdPnJdlIAj3 Icgy7/n7lOj4ZvcKRieW++REbS4bpDKcYrabu0fWQDm2ZvQZAZAStIll8tfdWOxc dh2TsKYJw/o19JQN7wEEt/uNxReP8n6CcAS9+H7Z6HpKXIAjZk2N8dL24uw6FrWF klK7t8CJ+dEVDqezYv8g75qQDs65sJbGXBfzqXezU59p+WPUgQIDAQABo4IELzCC BCswHQYDVR0OBBYEFHzKIPorHY/UdJYKjEmIt1RgoMb6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m NjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y2NWJlMmUwLTZhNDAtNGNmMS04 MjM0LTZlYjRmNDBjNzg4YS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQw Yzc4OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKsY+ADBAPHFYgwDQQCAAIwBwMFACYEFMAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICVmkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcc7E67n30FpQN3+WrywS lbRTcmy/2cW69mEnoyk9gpFw4pnhIWSnz3W4Oe9kQp2hyBqC7cxI51CDqlXq45B4 AlWOljP+Yzg0XEdoIDWChaNTr6oWd8/rlFLGrYKUeBk/JRZzLRTrHxveLooWppTo 9MM51fbmB/u+4VEXW6ifq8es4IeSozNOOW+u+Q3xFPWq9LKgotpTi71Tb+tK8wrG J7m+U0xA9dYIsn0MCTpvmtymiGgdy3ubP+P28LTVL4wl4ly4V/eYvQM/He0zyxhg iWneFhyTxAkHmQ2wGbR+WCYMOqjTH4AIGZbWJr//lawJJE60h/tsppDU2EmLVFZ9 EQ== -----END CERTIFICATE-----Generated at Sat Nov 23 04:31:47 2024 by rpki-client on console-ams.rpki-client.org