$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer File: 9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer (raw, json) Hash identifier: nZ+4Ndumkb82Jxh0EsQVrZq9TxdLyTzA6fNn2P6ugX8= Subject key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285847DF27E0ADC1934D2F10F56980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Nov 2024 01:45:33 +0000 Certificate not after: Wed 17 Feb 2027 01:45:33 +0000 Subordinate resources: IP: 64.250.128.0/20 IP: 104.145.16.0/20 IP: 130.51.44.0/22 IP: 2620:e6:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:27:e0:ad:c1:93:4d:2f:10:f5:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Nov 14 01:45:33 2024 GMT Not After : Feb 17 01:45:33 2027 GMT Subject: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:f4:82:10:ba:37:fd:af:45:cd:2d:99:c4: 84:58:d1:7a:e3:18:c8:ce:2c:04:83:57:1e:a5:0f: 85:53:74:dc:75:0e:31:ef:26:50:75:0c:19:02:34: f2:5f:c5:b0:0b:bf:54:29:3a:77:d1:92:8c:1e:04: 39:3b:40:16:77:cc:36:7a:de:06:b4:04:50:be:45: 1b:6e:93:3e:bf:91:58:35:f6:67:c9:bc:b4:05:aa: 3e:d0:8e:6d:96:e5:d9:f1:c7:fc:54:38:4c:54:25: 7e:da:2f:fa:54:18:7e:bb:ad:3c:d7:0e:14:c2:a0: 7d:ca:6f:cd:24:5b:99:5a:28:cf:9a:9c:60:dd:21: ee:a0:8f:78:65:5d:88:24:b5:d9:5f:99:e1:2a:f6: b8:39:2f:a8:b4:84:34:2b:6b:4c:97:91:b3:5f:eb: 31:70:3d:50:0c:de:54:d9:d4:16:3e:de:5f:4d:8c: 77:03:ac:b7:94:30:55:ac:eb:14:d0:aa:83:ce:d0: b3:52:30:86:7d:6b:5c:69:49:cb:df:46:11:57:96: 3d:3c:21:46:47:c0:4e:f0:38:8c:99:df:73:c7:1c: a5:d7:e5:aa:51:eb:83:f4:16:22:88:b0:62:71:d3: 89:72:b6:99:22:d0:71:ac:87:1a:79:64:fd:d9:82: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.250.128.0/20 104.145.16.0/20 130.51.44.0/22 IPv6: 2620:e6:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a7:29:76:6e:4b:6b:dc:98:06:72:f3:b2:3d:cd:56:4a:36: 3b:11:6d:00:77:99:cc:dd:e4:da:4d:0f:af:4c:4e:38:4f:e0: f5:a7:a1:d7:c9:3b:65:fb:7e:90:78:0d:95:46:0a:03:35:5c: 01:e6:f2:32:a2:c0:73:68:50:49:f1:f3:52:32:92:01:32:d0: 7f:a4:58:6e:eb:a9:34:de:ec:34:79:46:95:a3:4c:62:90:59: db:a0:1c:16:cf:e0:5f:38:74:86:9b:93:80:5b:2b:91:9e:0d: 3a:ed:e9:eb:54:ad:ee:51:85:96:39:d5:bd:e9:62:ee:cb:b1: 00:12:6b:e6:ec:36:b6:7c:f0:2e:9a:4f:31:2d:8a:5c:c3:63: f9:cc:28:e2:2e:a0:b6:4e:26:a1:3d:d0:58:43:91:64:83:bf: 3d:21:c3:30:d5:cb:56:81:2f:3f:28:76:2c:04:61:9d:6e:b8: 02:db:de:59:c5:69:ff:b3:a5:98:58:0b:32:06:67:eb:ca:0f: ea:63:95:9b:f6:6e:3e:06:47:f8:b6:f1:23:6a:3d:50:95:cb: 46:17:1a:74:b0:ea:90:c2:be:18:d2:39:c4:8a:ea:42:77:85: bd:e9:47:0c:66:f0:43:83:e3:e9:60:e0:4a:77:cd:86:52:32: 60:ff:1e:c2 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEffJ+CtwZNNLxD1aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MTExNDAxNDUzM1oXDTI3MDIxNzAxNDUzM1owLzEtMCsGA1UEAxMk OWZmNDNhYWItYzhjMi00ZjIzLTkxZTUtMzczYmUyNDYyZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo70ghC6N/2vRc0tmcSEWNF64xjIziwEg1ce pQ+FU3TcdQ4x7yZQdQwZAjTyX8WwC79UKTp30ZKMHgQ5O0AWd8w2et4GtARQvkUb bpM+v5FYNfZnyby0Bao+0I5tluXZ8cf8VDhMVCV+2i/6VBh+u6081w4UwqB9ym/N JFuZWijPmpxg3SHuoI94ZV2IJLXZX5nhKva4OS+otIQ0K2tMl5GzX+sxcD1QDN5U 2dQWPt5fTYx3A6y3lDBVrOsU0KqDztCzUjCGfWtcaUnL30YRV5Y9PCFGR8BO8DiM md9zxxyl1+WqUeuD9BYiiLBicdOJcraZItBxrIcaeWT92YL1TwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFZFdabcmTkWiLzT/oaa/Zzp/XQbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0NjJlOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzlmZjQzYWFiLWM4YzItNGYyMy05 MWU1LTM3M2JlMjQ2MmU5Zi85ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0 NjJlOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBARA+oADBARokRADBAKCMywwDwQCAAIwCQMHACYg AObAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA4pyl2bktr3JgGcvOyPc1WSjY7EW0Ad5nM3eTaTQ+vTE44 T+D1p6HXyTtl+36QeA2VRgoDNVwB5vIyosBzaFBJ8fNSMpIBMtB/pFhu66k03uw0 eUaVo0xikFnboBwWz+BfOHSGm5OAWyuRng067enrVK3uUYWWOdW96WLuy7EAEmvm 7Da2fPAumk8xLYpcw2P5zCjiLqC2TiahPdBYQ5Fkg789IcMw1ctWgS8/KHYsBGGd brgC295ZxWn/s6WYWAsyBmfryg/qY5Wb9m4+Bkf4tvEjaj1QlctGFxp0sOqQwr4Y 0jnEiupCd4W96UcMZvBDg+PpYOBKd82GUjJg/x7C -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:08 2024 by rpki-client on console-ams.rpki-client.org