$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer File: 4cd4075b-ef78-4472-b954-b5adf4a534e5.cer (raw, json) Hash identifier: Ay29HxLg9zzbYMA4/oY0vPTBgZI1CiDd7TT99vcbCGg= Subject key identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285846656BEEEAA6732C4C2AED1500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jul 2024 18:27:08 +0000 Certificate not after: Sun 04 Oct 2026 18:27:08 +0000 Subordinate resources: AS: 4579 AS: 17214 AS: 19097 AS: 20434 IP: 199.91.42.0/23 IP: 204.154.121.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Sep 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:65:6b:ee:ea:a6:73:2c:4c:2a:ed:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 1 18:27:08 2024 GMT Not After : Oct 4 18:27:08 2026 GMT Subject: CN=4cd4075b-ef78-4472-b954-b5adf4a534e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:f9:79:1d:19:5f:b1:5f:f1:fb:e2:1e:38: 6c:6c:e1:81:97:92:2b:c1:6a:d6:b1:61:3b:74:23: 6d:a5:69:e5:b1:1e:5d:ea:aa:5d:2f:5a:35:c0:52: fc:9d:32:1d:c5:10:aa:c2:38:05:46:e0:d5:5f:b5: c2:fb:9f:76:12:5d:58:b1:b3:44:98:24:70:7f:82: 74:02:3f:a5:19:f7:6a:3e:c5:57:76:9c:20:20:41: 81:9d:89:a8:99:2c:a9:97:bb:2e:c2:f0:c4:43:f4: 1e:9e:4b:70:e2:ee:9e:b4:9b:54:c1:fe:ca:00:6e: c8:66:59:1d:8f:cb:8b:65:36:c4:bb:40:85:7b:36: fb:9f:1c:3f:f2:b8:0d:a3:33:f0:be:5f:60:bd:a6: 55:2c:5e:16:3d:44:56:b3:e9:6e:af:a4:db:a4:03: 0c:b2:ca:28:93:9b:19:c3:4f:24:e2:53:da:4f:29: 65:7f:8e:2c:62:00:20:85:88:5d:67:16:42:70:f8: 97:ff:bc:5f:6e:18:05:a1:0e:80:64:8e:72:d1:89: 2f:86:95:8e:61:79:42:c1:62:9e:7f:9e:01:ce:bf: 72:f7:08:75:25:fb:2f:c6:6d:75:a7:2d:00:3e:4d: d9:03:e7:57:f6:e6:b1:9d:69:70:a1:34:4a:34:c0: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.91.42.0/23 204.154.121.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4579 17214 19097 20434 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:92:75:73:1a:71:f5:ac:bf:d4:71:01:a3:61:3e:b6:b9:de: 38:30:9a:7f:0a:a5:b0:f3:54:69:4c:dd:b4:41:40:72:0a:7c: fb:28:de:84:d3:a5:52:ac:6f:1f:ec:7e:22:29:f5:77:b1:0e: 8d:3c:4c:cc:ef:f4:72:a0:bd:c3:43:6d:8a:53:46:4a:8d:0d: ee:6a:02:f9:4d:0a:fb:e1:e7:d9:2f:42:9f:c3:79:a0:fd:db: 6f:5b:6e:d8:1d:11:69:96:18:a9:70:fe:e1:64:f6:2f:5a:29: 20:2b:8a:f4:e4:e5:01:69:b3:05:68:82:40:99:03:19:9a:21: ec:a8:e9:f3:2e:1a:08:a1:54:6b:15:37:6e:c5:81:f3:e3:88: 1a:6d:a0:da:47:a2:7a:5a:a8:5c:aa:d1:b5:5b:08:e9:c8:da: 8f:a7:60:ff:14:2e:bd:3a:08:89:50:2b:1b:a2:66:bc:93:9b: 11:4e:3e:ad:d7:da:70:ee:42:52:cb:aa:b5:28:1d:43:4a:24: 49:9c:52:1e:f4:3b:ec:49:c1:e1:3b:47:63:f7:cd:fe:93:47: ce:77:03:92:27:30:89:31:de:69:a1:7b:82:c9:21:58:e1:ae: af:95:14:ca:30:1d:f6:0a:51:f6:02:30:29:be:5b:12:25:ac: 25:e9:79:b9 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEZla+7qpnMsTCrtFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcwMTE4MjcwOFoXDTI2MTAwNDE4MjcwOFowLzEtMCsGA1UEAxMk NGNkNDA3NWItZWY3OC00NDcyLWI5NTQtYjVhZGY0YTUzNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjz5eR0ZX7Ff8fviHjhsbOGBl5IrwWrWsWE7 dCNtpWnlsR5d6qpdL1o1wFL8nTIdxRCqwjgFRuDVX7XC+592El1YsbNEmCRwf4J0 Aj+lGfdqPsVXdpwgIEGBnYmomSypl7suwvDEQ/Qenktw4u6etJtUwf7KAG7IZlkd j8uLZTbEu0CFezb7nxw/8rgNozPwvl9gvaZVLF4WPURWs+lur6TbpAMMssook5sZ w08k4lPaTyllf44sYgAghYhdZxZCcPiX/7xfbhgFoQ6AZI5y0YkvhpWOYXlCwWKe f54Bzr9y9wh1Jfsvxm11py0APk3ZA+dX9uaxnWlwoTRKNMCaFQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNGHbjKphKBZK9fxeZI+zB36wkbGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 Y2Q0MDc1Yi1lZjc4LTQ0NzItYjk1NC1iNWFkZjRhNTM0ZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRjZDQwNzViLWVmNzgtNDQ3Mi1i OTU0LWI1YWRmNGE1MzRlNS80Y2Q0MDc1Yi1lZjc4LTQ0NzItYjk1NC1iNWFkZjRh NTM0ZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHHWyoDBADMmnkwJQYIKwYBBQUHAQgBAf8EFjAU oBIwEAICEeMCAkM+AgJKmQICT9IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQJJ1cxpx9ay/1HEBo2E+trne ODCafwqlsPNUaUzdtEFAcgp8+yjehNOlUqxvH+x+Iin1d7EOjTxMzO/0cqC9w0Nt ilNGSo0N7moC+U0K++Hn2S9Cn8N5oP3bb1tu2B0RaZYYqXD+4WT2L1opICuK9OTl AWmzBWiCQJkDGZoh7Kjp8y4aCKFUaxU3bsWB8+OIGm2g2keielqoXKrRtVsI6cja j6dg/xQuvToIiVArG6JmvJObEU4+rdfacO5CUsuqtSgdQ0okSZxSHvQ77EnB4TtH Y/fN/pNHzncDkicwiTHeaaF7gskhWOGur5UUyjAd9gpR9gIwKb5bEiWsJel5uQ== -----END CERTIFICATE-----Generated at Sun Sep 15 19:57:56 2024 by rpki-client on console-fra.rpki-client.org