$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer File: f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer (raw, json) Hash identifier: VgQccQmdkCCz2GPbTy8IEBBrGa1gW93snA4gnSKPMZE= Subject key identifier: A7:DE:15:60:B1:CB:BA:40:6B:DA:E9:4E:F4:ED:B0:81:3C:51:7C:33 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584842512C23725E35BA9BCC54D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Dec 2024 14:13:47 +0000 Certificate not after: Wed 24 Mar 2027 13:13:47 +0000 Subordinate resources: AS: 16909 AS: 401507 IP: 23.129.212.0/24 IP: 2602:f78a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:51:2c:23:72:5e:35:ba:9b:cc:54:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 19 14:13:47 2024 GMT Not After : Mar 24 13:13:47 2027 GMT Subject: CN=f914ac1a-b017-4cf4-9c3d-349dd19000d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:8d:c9:99:66:b0:50:a8:69:5f:23:79:e3: 95:27:4b:5d:29:a1:01:0b:d7:98:de:96:7b:2e:b3: 7e:6d:35:7e:ab:af:38:3c:2c:ed:c9:a5:07:f9:fc: d9:de:85:8c:e9:48:1e:22:8c:a2:c4:f7:70:37:91: 9b:7b:4e:f4:09:49:63:ff:8e:16:63:6c:55:e9:48: f1:21:33:e2:ea:41:c3:f7:e9:7c:5e:e7:0d:e0:2e: b1:99:db:16:6a:3a:46:9c:4a:15:1a:90:78:07:53: df:c2:50:d9:a9:a0:4b:5f:68:7f:7c:68:db:6f:ae: 85:1b:05:a6:45:d4:69:2f:78:72:bc:78:4f:b7:eb: 54:c6:93:1c:a1:9a:d9:60:52:c3:0d:37:6f:c5:c1: 5a:29:61:9b:50:2c:9c:66:54:ec:57:e3:6c:a2:5a: bd:9d:30:cf:95:60:8e:3d:b9:55:17:96:77:d0:94: 53:f9:10:87:a7:27:96:6c:ed:5f:57:84:24:49:d8: b0:ac:e2:43:9d:c9:01:03:61:5e:1a:f2:7a:aa:b3: f9:8d:70:9f:4e:0c:2a:26:06:51:1c:44:0f:95:f3: 38:ba:bb:ba:74:1b:ad:a7:ab:f1:1c:87:4a:cb:10: 04:7f:7b:15:67:18:ee:8e:d0:9a:cd:84:f0:e2:27: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DE:15:60:B1:CB:BA:40:6B:DA:E9:4E:F4:ED:B0:81:3C:51:7C:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.129.212.0/24 IPv6: 2602:f78a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16909 401507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7a:c6:3c:af:e8:25:25:30:99:f7:53:97:ee:7d:c5:62:ce: 8b:d8:e7:3b:a4:7b:14:8b:63:87:b2:c9:0d:d0:57:26:f5:6d: b9:ee:41:12:a6:9c:99:88:46:51:b6:98:ef:0e:0c:3e:1d:da: 4a:2e:ec:fc:af:56:c7:7d:f4:5c:22:a1:72:3a:29:84:4f:47: 7e:9c:00:1c:22:b7:21:4b:18:17:74:07:70:f9:f7:10:4a:44: 82:64:85:c6:d0:47:1b:7c:f2:24:78:89:73:38:37:21:15:49: 52:12:4a:56:e3:6f:07:c8:3b:86:af:62:f8:a2:36:41:d6:26: 30:4e:a6:59:7b:3c:f3:10:d3:1a:f5:92:01:d7:a2:11:0a:42: 92:82:90:24:3f:62:9b:87:c6:4f:72:1a:51:0e:3e:26:ae:f8: 8d:78:ef:e7:c5:49:e3:33:2b:99:5d:97:19:ca:55:59:ec:29: d1:e4:bb:0c:92:e3:9a:e8:5f:21:37:25:9b:7e:5f:81:04:d6: 02:e6:4d:0d:23:68:2a:d2:89:93:25:88:2f:e6:32:a4:ca:93: ed:f6:15:2c:c5:41:80:ee:b1:a0:66:b9:08:99:dd:32:ac:b5: 65:97:58:f5:3a:4e:aa:04:16:13:bd:f0:8c:83:98:6e:33:d6: 58:8e:51:76 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEhCUSwjcl41upvMVNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTIxOTE0MTM0N1oXDTI3MDMyNDEzMTM0N1owLzEtMCsGA1UEAxMk ZjkxNGFjMWEtYjAxNy00Y2Y0LTljM2QtMzQ5ZGQxOTAwMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH+NyZlmsFCoaV8jeeOVJ0tdKaEBC9eY3pZ7 LrN+bTV+q684PCztyaUH+fzZ3oWM6UgeIoyixPdwN5Gbe070CUlj/44WY2xV6Ujx ITPi6kHD9+l8XucN4C6xmdsWajpGnEoVGpB4B1PfwlDZqaBLX2h/fGjbb66FGwWm RdRpL3hyvHhPt+tUxpMcoZrZYFLDDTdvxcFaKWGbUCycZlTsV+Nsolq9nTDPlWCO PblVF5Z30JRT+RCHpyeWbO1fV4QkSdiwrOJDnckBA2FeGvJ6qrP5jXCfTgwqJgZR HEQPlfM4uru6dButp6vxHIdKyxAEf3sVZxjujtCazYTw4ieSrwIDAQABo4IELzCC BCswHQYDVR0OBBYEFKfeFWCxy7pAa9rpTvTtsIE8UXwzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m OTE0YWMxYS1iMDE3LTRjZjQtOWMzZC0zNDlkZDE5MDAwZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05 YzNkLTM0OWRkMTkwMDBkMy9mOTE0YWMxYS1iMDE3LTRjZjQtOWMzZC0zNDlkZDE5 MDAwZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgdQwDgQCAAIwCAMGACYC94oAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAkINAgMGIGMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWHrGPK/oJSUwmfdTl+59 xWLOi9jnO6R7FItjh7LJDdBXJvVtue5BEqacmYhGUbaY7w4MPh3aSi7s/K9Wx330 XCKhcjophE9HfpwAHCK3IUsYF3QHcPn3EEpEgmSFxtBHG3zyJHiJczg3IRVJUhJK VuNvB8g7hq9i+KI2QdYmME6mWXs88xDTGvWSAdeiEQpCkoKQJD9im4fGT3IaUQ4+ Jq74jXjv58VJ4zMrmV2XGcpVWewp0eS7DJLjmuhfITclm35fgQTWAuZNDSNoKtKJ kyWIL+YypMqT7fYVLMVBgO6xoGa5CJndMqy1ZZdY9TpOqgQWE73wjIOYbjPWWI5R dg== -----END CERTIFICATE-----Generated at Wed Feb 5 07:01:55 2025 by rpki-client