$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer File: fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer (raw, json) Hash identifier: tPgYrIEh+CcGQIPsKlSELUxp35iKYhwemOs6AYiKttM= Subject key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285846E0A0AC68851D96FB1D63C8D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Aug 2024 21:37:49 +0000 Certificate not after: Tue 17 Nov 2026 22:37:49 +0000 Subordinate resources: AS: 26347 IP: 64.90.32.0/19 IP: 64.111.96.0/19 IP: 66.33.192.0/19 IP: 67.205.0.0/18 IP: 69.163.128.0/17 IP: 75.119.192.0/19 IP: 107.180.224.0/19 IP: 173.236.128.0/17 IP: 205.196.208.0/20 IP: 208.97.128.0/18 IP: 208.113.128.0/17 IP: 2607:f298::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:e0:a0:ac:68:85:1d:96:fb:1d:63:c8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 14 21:37:49 2024 GMT Not After : Nov 17 22:37:49 2026 GMT Subject: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:6f:98:60:c2:e1:e2:80:9e:c7:81:06:07: d5:1d:21:a5:1a:51:a3:b4:98:c9:47:1e:79:15:cb: e2:82:15:bb:b2:b2:b9:b0:6d:33:b9:8e:1c:1e:b1: 73:c8:80:4e:c6:72:7e:2e:d4:99:31:64:59:c7:21: 59:6d:0e:ee:15:29:3e:5f:83:3e:cf:61:89:ca:c3: 0a:13:55:f6:14:fe:09:b6:65:08:6f:6e:18:c2:fe: 4b:71:16:ad:fc:a8:80:10:f6:d6:f4:38:97:4a:b3: 46:76:b4:14:6c:8f:01:5f:48:8d:23:02:7c:34:ef: 47:33:bc:a2:06:5e:50:85:8e:cc:70:4c:de:04:d0: 1b:fa:f2:ce:36:40:57:c3:40:ab:3c:f4:8e:d3:60: b7:0c:b0:cc:7e:37:f6:08:fa:18:d7:25:2e:45:09: e1:f1:78:3e:0a:bd:d8:81:3c:91:a1:5e:81:78:e1: be:b9:71:12:e6:0e:44:db:54:cb:93:ff:63:3d:2a: 9a:92:3b:e3:e5:f0:5d:a2:72:d9:9a:e2:c8:7c:82: 71:94:d5:96:af:10:83:eb:2e:59:84:45:e3:ed:a4: 03:16:66:ea:44:22:1a:50:da:36:d5:b5:22:b0:b3: 0a:31:4c:90:9f:35:c4:ac:2a:0d:c2:79:e7:6b:0d: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 64.90.32.0/19 64.111.96.0/19 66.33.192.0/19 67.205.0.0/18 69.163.128.0/17 75.119.192.0/19 107.180.224.0/19 173.236.128.0/17 205.196.208.0/20 208.97.128.0/18 208.113.128.0/17 IPv6: 2607:f298::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26347 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:36:2e:2b:35:0e:99:bd:65:19:c0:6f:3b:69:ba:92:e1:88: 41:b6:ff:55:83:dd:d0:e6:c2:57:8d:7f:4b:26:94:74:5e:3e: f0:63:71:1c:05:40:22:bd:a3:37:19:17:71:d4:6b:7c:11:88: a3:01:ef:ce:3c:65:6d:12:a8:a0:fa:da:f1:45:f9:ae:05:02: 3d:d7:90:c7:7e:7a:e8:59:e8:f1:39:b3:65:5c:cd:66:fd:da: 76:9e:2d:20:4e:c4:71:3a:17:11:8d:8f:b1:5c:87:f8:a1:5f: 52:a3:c0:cb:d3:f3:6c:de:a0:11:bb:37:46:46:5a:bf:e0:b8: cb:47:65:42:9c:ef:e7:13:78:cf:05:8c:6d:97:7d:d7:83:5e: ce:b5:93:25:56:16:b1:28:79:af:fe:0e:2c:36:66:76:b0:28: 4b:a6:61:4d:db:04:1d:ff:21:47:3e:a4:f6:b7:e2:bd:e4:9a: 16:3f:d9:60:4f:a9:de:34:a9:16:ed:dc:0c:a8:1c:cc:e2:72: fc:30:e6:85:4d:98:ad:d6:f2:9d:40:bd:5e:93:64:18:bf:21: ae:c6:bb:34:f7:b0:d5:fe:47:a8:e0:95:02:22:6d:f4:e2:0f: 2f:70:6f:c8:dd:b3:a9:c9:56:67:a1:15:8f:f1:1e:70:a6:e2: 53:fa:42:19 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEbgoKxohR2W+x1jyNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgxNDIxMzc0OVoXDTI2MTExNzIyMzc0OVowLzEtMCsGA1UEAxMk ZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0YmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYVvmGDC4eKAnseBBgfVHSGlGlGjtJjJRx55 FcvighW7srK5sG0zuY4cHrFzyIBOxnJ+LtSZMWRZxyFZbQ7uFSk+X4M+z2GJysMK E1X2FP4JtmUIb24Ywv5LcRat/KiAEPbW9DiXSrNGdrQUbI8BX0iNIwJ8NO9HM7yi Bl5QhY7McEzeBNAb+vLONkBXw0CrPPSO02C3DLDMfjf2CPoY1yUuRQnh8Xg+Cr3Y gTyRoV6BeOG+uXES5g5E21TLk/9jPSqakjvj5fBdonLZmuLIfIJxlNWWrxCD6y5Z hEXj7aQDFmbqRCIaUNo21bUisLMKMUyQnzXErCoNwnnnaw1KdQIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFLn1olGiO+rEsA9S/IZpui40UeQLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m ZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2ZlM2UxMDRlLWRhZWYtNGZkYi05 ZDY1LWFhMWVlNmRjNGJlMC9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZk YzRiZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIDBAVAWiADBAVAb2ADBAVCIcADBAZDzQADBAdFo4AD BAVLd8ADBAVrtOADBAet7IADBATNxNADBAbQYYADBAfQcYAwDQQCAAIwBwMFACYH 8pgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICZuswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHDYuKzUOmb1l GcBvO2m6kuGIQbb/VYPd0ObCV41/SyaUdF4+8GNxHAVAIr2jNxkXcdRrfBGIowHv zjxlbRKooPra8UX5rgUCPdeQx3566Fno8TmzZVzNZv3adp4tIE7EcToXEY2PsVyH +KFfUqPAy9PzbN6gEbs3RkZav+C4y0dlQpzv5xN4zwWMbZd914NezrWTJVYWsSh5 r/4OLDZmdrAoS6ZhTdsEHf8hRz6k9rfiveSaFj/ZYE+p3jSpFu3cDKgczOJy/DDm hU2YrdbynUC9XpNkGL8hrsa7NPew1f5HqOCVAiJt9OIPL3BvyN2zqclWZ6EVj/Ee cKbiU/pCGQ== -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:56 2024 by rpki-client on console-ams.rpki-client.org