$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer File: 9612d9a4-803d-4413-aef7-b133b4ff80b7.cer (raw, json) Hash identifier: WTspATLQq+JWCVLG8k7DALgw29a3KsXU2HMXFhxVegE= Subject key identifier: D1:8C:77:06:50:9E:BA:71:D1:74:C9:6F:81:D9:9A:4D:C0:86:B0:BD Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584635B2168B32060B690B5C0660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Jun 2024 16:09:41 +0000 Certificate not after: Thu 17 Sep 2026 16:09:41 +0000 Subordinate resources: IP: 192.70.176.0/24 IP: 192.208.1.0 -- 192.208.15.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:35:b2:16:8b:32:06:0b:69:0b:5c:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jun 14 16:09:41 2024 GMT Not After : Sep 17 16:09:41 2026 GMT Subject: CN=9612d9a4-803d-4413-aef7-b133b4ff80b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:f8:4f:23:c2:08:2b:ba:16:70:31:17:3e: 1a:44:72:13:d9:2b:03:96:50:bf:55:d3:92:18:be: 10:89:52:72:bb:c9:72:e3:86:63:6d:93:f7:9e:09: 33:02:d3:86:06:54:4a:c7:af:21:f3:e4:3c:56:59: cf:76:7e:e1:fb:c6:db:6d:21:e3:d7:40:b8:05:52: ad:47:df:21:9e:e2:f8:3b:75:08:06:c8:02:10:5c: 9b:78:09:74:99:7d:35:81:a7:0c:a2:12:8c:f4:3c: ef:c4:2d:bc:6b:59:a9:8a:3a:7e:7a:d0:f6:21:f6: 48:61:ab:48:94:df:2a:b6:89:cd:60:6a:61:72:1a: ed:6c:ef:7f:31:c2:4d:fd:41:d0:4e:b9:c6:8c:be: 86:c7:69:67:10:2a:56:a5:31:5b:22:2c:d5:4e:2e: 52:71:41:ec:6d:55:2e:8a:f3:70:1c:14:7a:5a:a8: e4:59:5c:2e:b7:dc:81:b8:85:e1:e5:52:9f:16:cc: 62:5c:d1:c3:29:ca:a3:c6:f8:75:cf:c8:3b:77:40: 46:3c:86:23:67:31:3a:0d:c3:47:93:45:91:c8:15: 35:5b:22:61:93:b1:1a:7f:15:75:84:82:6f:19:73: f1:4d:a2:a3:d1:36:71:0a:8d:18:ac:88:f2:57:52: 84:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8C:77:06:50:9E:BA:71:D1:74:C9:6F:81:D9:9A:4D:C0:86:B0:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 192.70.176.0/24 192.208.1.0-192.208.15.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3a:15:d1:5b:8d:3e:59:c8:e6:2e:73:e5:5a:34:b8:c7:a4: 5f:75:c3:42:0a:d3:42:42:99:5d:f0:5f:df:2f:fd:2a:e0:2b: 85:7c:8e:f0:07:5c:6c:e2:cc:20:51:e9:ce:09:3b:24:54:10: 5a:2f:72:61:2d:96:ae:62:04:98:7c:d0:e9:be:36:67:9b:9e: 78:49:62:53:cf:23:b9:d4:20:fe:b3:1e:87:3a:d3:b4:50:f0: 9f:d3:12:44:12:3a:f0:97:0d:4e:ea:d5:a5:40:bc:37:c4:fa: e0:c6:9a:24:46:ea:8a:c1:c2:79:d3:b0:a2:90:84:36:fd:5e: 13:c7:b9:12:49:2a:c6:5a:65:2f:26:b3:48:42:72:e4:04:ff: 05:1e:6d:35:f4:0b:ec:87:8b:63:43:eb:3c:ab:1c:2c:71:b1: e2:0c:9f:88:43:d7:d5:b8:9e:32:b3:c5:d8:f5:05:25:77:99: d7:f9:29:45:55:27:bb:c0:a1:58:b9:23:88:c5:e8:30:0f:b7: cc:af:f9:85:8a:d8:5f:a6:55:8a:83:20:f6:6a:7e:01:e3:8a: ab:b1:1f:8b:09:95:23:9d:65:c1:11:73:d5:ad:70:aa:c4:03: 01:f6:cd:99:7a:be:cb:4d:d9:8f:e4:57:75:90:f5:dd:f2:f4: 56:44:01:f5 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEY1shaLMgYLaQtcBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDYxNDE2MDk0MVoXDTI2MDkxNzE2MDk0MVowLzEtMCsGA1UEAxMk OTYxMmQ5YTQtODAzZC00NDEzLWFlZjctYjEzM2I0ZmY4MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOj4TyPCCCu6FnAxFz4aRHIT2SsDllC/VdOS GL4QiVJyu8ly44ZjbZP3ngkzAtOGBlRKx68h8+Q8VlnPdn7h+8bbbSHj10C4BVKt R98hnuL4O3UIBsgCEFybeAl0mX01gacMohKM9DzvxC28a1mpijp+etD2IfZIYatI lN8qtonNYGphchrtbO9/McJN/UHQTrnGjL6Gx2lnECpWpTFbIizVTi5ScUHsbVUu ivNwHBR6WqjkWVwut9yBuIXh5VKfFsxiXNHDKcqjxvh1z8g7d0BGPIYjZzE6DcNH k0WRyBU1WyJhk7EafxV1hIJvGXPxTaKj0TZxCo0YrIjyV1KEVQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNGMdwZQnrpx0XTJb4HZmk3AhrC9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 NjEyZDlhNC04MDNkLTQ0MTMtYWVmNy1iMTMzYjRmZjgwYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1h ZWY3LWIxMzNiNGZmODBiNy85NjEyZDlhNC04MDNkLTQ0MTMtYWVmNy1iMTMzYjRm ZjgwYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADARrAwDAMEAMDQAQMEBMDQADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAu OhXRW40+WcjmLnPlWjS4x6RfdcNCCtNCQpld8F/fL/0q4CuFfI7wB1xs4swgUenO CTskVBBaL3JhLZauYgSYfNDpvjZnm554SWJTzyO51CD+sx6HOtO0UPCf0xJEEjrw lw1O6tWlQLw3xPrgxpokRuqKwcJ507CikIQ2/V4Tx7kSSSrGWmUvJrNIQnLkBP8F Hm019Avsh4tjQ+s8qxwscbHiDJ+IQ9fVuJ4ys8XY9QUld5nX+SlFVSe7wKFYuSOI xegwD7fMr/mFithfplWKgyD2an4B44qrsR+LCZUjnWXBEXPVrXCqxAMB9s2Zer7L TdmP5Fd1kPXd8vRWRAH1 -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org