$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer File: 977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer (raw, json) Hash identifier: Xv3ZX2UB1q+2bPN4j+P7dOfgo3KrPdE+h8/T7seNwcw= Subject key identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285846AB884EA78CCE4530E27959C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jul 2024 21:10:53 +0000 Certificate not after: Thu 29 Oct 2026 21:10:53 +0000 Subordinate resources: AS: 22667 IP: 67.59.192.0/20 IP: 69.39.240.0/20 IP: 173.213.192.0/20 IP: 173.249.96.0/19 IP: 192.40.208.0/21 IP: 206.176.224.0/19 IP: 2604:8f80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:ab:88:4e:a7:8c:ce:45:30:e2:79:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 26 21:10:53 2024 GMT Not After : Oct 29 21:10:53 2026 GMT Subject: CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:7a:50:44:e5:f2:fa:1c:87:fc:1e:d7:69: 1e:66:b1:88:01:09:8a:a2:2d:1b:2b:c8:a0:41:65: 9c:3d:ed:31:c1:62:55:9f:7d:98:2b:bc:4e:45:03: 47:b3:35:67:a6:dd:97:f8:95:cb:87:c8:c2:9c:47: 06:3c:cb:e0:04:1c:3d:ae:0f:96:51:ee:c7:93:bd: da:04:57:03:96:0f:18:bc:1d:ee:52:d1:3b:fe:99: 8c:f1:ea:0d:57:d3:20:d9:03:d2:1d:d1:61:68:53: 85:15:6b:59:78:a0:20:2f:e8:7c:1b:65:f1:8a:f3: ec:be:7d:92:c2:e7:20:bf:07:49:95:aa:53:7d:cf: 0c:d5:cf:e5:f0:2c:1d:5a:0a:1d:62:1e:96:82:29: f6:90:9b:20:e4:a7:da:f1:6e:5f:c9:2e:39:17:dc: 54:53:a1:7d:c1:b9:9d:7f:c0:c1:b9:16:0a:39:c9: 21:69:26:f0:d7:d3:53:2c:f5:9c:52:ee:7a:eb:fc: 19:2d:cd:dd:1a:9f:53:79:ba:79:6c:51:a8:8d:6b: 54:b3:66:76:48:ff:2b:f4:5c:e2:86:ea:53:7b:60: c4:1e:79:5e:3e:0c:2f:ac:d2:c1:c3:d5:43:84:00: 74:72:eb:49:68:40:e6:ed:99:1a:12:21:fa:da:27: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 67.59.192.0/20 69.39.240.0/20 173.213.192.0/20 173.249.96.0/19 192.40.208.0/21 206.176.224.0/19 IPv6: 2604:8f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e3:3f:b0:1a:33:6a:8a:c1:99:9e:66:0a:f8:a5:55:43:13: 08:04:25:ef:2f:a4:d9:69:0f:28:c1:d9:74:25:f2:d9:9d:86: fd:39:c5:8f:13:1d:95:48:d1:22:8f:97:46:18:fb:e6:6b:f4: 73:62:15:6b:ee:7f:ed:20:e0:3a:a7:a2:84:17:a4:8e:e0:d1: 10:c1:4f:f5:32:9a:ec:70:ef:a0:58:d4:c5:f0:91:15:31:27: 8b:a2:a9:4c:1c:cb:ba:0a:63:4d:3c:01:ae:9c:1d:53:f6:e9: 1a:17:5b:e0:77:4e:ec:38:6f:3a:41:87:ee:18:bc:27:14:97: 23:5b:f4:37:a3:72:e0:0b:f6:3b:8f:72:48:0d:4f:9d:b5:11: 50:b4:96:53:39:16:c3:62:0f:52:01:30:07:3b:66:46:4f:0f: 26:8d:8b:7d:f8:15:a3:ec:b8:57:c1:b1:6b:47:d3:56:34:76: b0:be:6b:48:95:87:81:fe:f0:98:4e:a7:56:ab:6c:16:b4:4f: 78:90:2a:02:99:47:73:ad:42:4c:43:10:63:a8:b2:87:04:7e: 54:8f:df:bc:26:2f:45:11:5b:36:64:8d:b7:4c:51:a3:84:47: 0e:ec:4c:0d:9c:4c:fb:9e:59:af:c5:e7:79:26:0c:50:35:1f: bc:b8:54:e6 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEariE6njM5FMOJ5WcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcyNjIxMTA1M1oXDTI2MTAyOTIxMTA1M1owLzEtMCsGA1UEAxMk OTc3YzBkM2EtMjg2Yy00YzU3LWE3Y2EtODRlYTU3ZDY0M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMh6UETl8voch/we12keZrGIAQmKoi0bK8ig QWWcPe0xwWJVn32YK7xORQNHszVnpt2X+JXLh8jCnEcGPMvgBBw9rg+WUe7Hk73a BFcDlg8YvB3uUtE7/pmM8eoNV9Mg2QPSHdFhaFOFFWtZeKAgL+h8G2XxivPsvn2S wucgvwdJlapTfc8M1c/l8CwdWgodYh6Wgin2kJsg5Kfa8W5fyS45F9xUU6F9wbmd f8DBuRYKOckhaSbw19NTLPWcUu566/wZLc3dGp9Tebp5bFGojWtUs2Z2SP8r9Fzi hupTe2DEHnlePgwvrNLBw9VDhAB0cutJaEDm7ZkaEiH62ieZoQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFH742o0OkIdGMTDMvEfKhSzkExV2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 NzdjMGQzYS0yODZjLTRjNTctYTdjYS04NGVhNTdkNjQzYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzk3N2MwZDNhLTI4NmMtNGM1Ny1h N2NhLTg0ZWE1N2Q2NDNhMC85NzdjMGQzYS0yODZjLTRjNTctYTdjYS04NGVhNTdk NjQzYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARDO8ADBARFJ/ADBASt1cADBAWt+WADBAPAKNAD BAXOsOAwDQQCAAIwBwMFACYEj4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICWIsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXOM/sBozaorBmZ5mCvilVUMTCAQl7y+k2WkPKMHZdCXy2Z2G/TnF jxMdlUjRIo+XRhj75mv0c2IVa+5/7SDgOqeihBekjuDREMFP9TKa7HDvoFjUxfCR FTEni6KpTBzLugpjTTwBrpwdU/bpGhdb4HdO7DhvOkGH7hi8JxSXI1v0N6Ny4Av2 O49ySA1PnbURULSWUzkWw2IPUgEwBztmRk8PJo2LffgVo+y4V8Gxa0fTVjR2sL5r SJWHgf7wmE6nVqtsFrRPeJAqAplHc61CTEMQY6iyhwR+VI/fvCYvRRFbNmSNt0xR o4RHDuxMDZxM+55Zr8XneSYMUDUfvLhU5g== -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org