$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer File: d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer (raw, json) Hash identifier: 9AAcwS4TVq6SbzIViAKuDdAJtDOipSwMP4L6gMMtOf0= Subject key identifier: 77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2 Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F432858472AE4FC371AFA396D08DF1F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 10 Sep 2024 12:05:17 +0000 Certificate not after: Mon 14 Dec 2026 13:05:17 +0000 Subordinate resources: AS: 26561 IP: 23.164.152.0/24 IP: 2602:f9fa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Sep 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2a:e4:fc:37:1a:fa:39:6d:08:df:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Sep 10 12:05:17 2024 GMT Not After : Dec 14 13:05:17 2026 GMT Subject: CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:b3:99:46:e2:f9:8e:9d:7f:3b:7e:9c:56: 7c:08:42:84:12:7e:9c:da:c8:93:59:ed:08:d8:4d: 21:7c:ea:12:ba:a6:18:41:43:f8:fe:25:28:8f:45: 10:f3:6b:67:cc:19:d8:da:1f:2a:93:32:83:00:37: 99:11:df:55:9e:34:ec:d0:ca:fd:60:9a:d6:a0:66: 93:cd:5d:bf:a1:8d:78:5f:40:0a:48:e9:5f:06:c0: 7c:e2:37:79:69:e9:48:10:99:4c:e8:e8:7c:b3:69: 83:fe:d1:d4:d6:4d:19:f3:1f:87:17:82:ca:4b:07: 8f:57:4d:f3:b9:22:d4:51:8f:88:d7:60:cf:47:37: 8a:fc:c4:02:ae:70:51:58:61:64:f1:56:dd:d5:22: 78:c0:2a:71:e1:f9:fa:5e:66:c3:b4:9b:51:9e:21: d1:fa:86:ac:6a:96:11:8a:cb:a5:49:4e:f1:22:36: 2b:a2:2b:6c:15:36:a4:61:6b:90:65:77:74:67:18: 97:e1:3c:79:9e:57:66:00:7e:84:19:88:ce:aa:cf: 56:fa:cd:4a:84:62:43:ec:07:7c:7c:78:6b:8c:af: 4c:75:1b:1f:a6:5c:96:f5:b9:af:e4:61:c8:80:4a: e9:74:bd:df:da:13:77:60:72:58:8f:0a:19:80:1f: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: 23.164.152.0/24 IPv6: 2602:f9fa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26561 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2b:f6:0f:5e:26:85:e9:a9:c7:a0:cf:30:b0:57:cc:f4:39: 17:84:e9:98:2b:c2:8a:b0:47:f2:4b:c3:bf:2b:e7:23:81:3c: 5d:dc:ad:95:aa:46:51:86:6c:0a:02:4a:a9:97:fb:18:2d:c7: 2b:f3:94:a4:01:d9:7b:cd:4e:33:43:4c:01:8b:44:25:aa:00: d2:a8:63:ab:67:22:77:ac:bf:67:92:74:f1:9a:6b:e3:51:c6: 3e:d1:42:f7:7f:4f:b2:5f:9f:b0:fc:71:35:4f:a0:86:64:6f: c1:ed:74:1e:b6:fd:e1:b3:9a:3b:91:04:ca:7e:f1:e4:4b:e7: 1b:3b:fc:a9:ac:25:dc:c9:31:4c:cd:ca:33:b7:2b:98:31:c2: 3d:0d:67:f2:7f:35:61:99:c9:df:0d:27:2f:7d:22:f1:fb:21: 7d:c1:92:0c:28:80:64:06:ee:48:f6:e0:c1:6c:7a:83:58:9a: 35:37:fa:c6:a3:6e:24:9a:02:5f:fd:99:19:e9:ea:2e:fb:36: 02:06:d9:23:c6:44:c8:a1:4c:3d:e5:31:f3:c8:07:ef:bf:24: 7a:e8:87:60:f1:41:52:5d:1f:fa:a0:74:a6:c3:9b:db:60:fa: 2d:f5:b6:4d:05:a3:76:a6:c3:fd:13:e7:70:c3:c8:e5:5f:78: 29:6a:b8:43 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEcq5Pw3Gvo5bQjfH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI0MDkxMDEyMDUxN1oXDTI2MTIxNDEzMDUxN1owPTE7MDkGA1UEAxMy ZDkwZDhhYmEyYTAxMzgyMTM5NzNjYWMwYzJiNzIwMDI5MGQ0NjIwN2Y0NzQ1MWNm NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7rOZRuL5jp1/O36c VnwIQoQSfpzayJNZ7QjYTSF86hK6phhBQ/j+JSiPRRDza2fMGdjaHyqTMoMAN5kR 31WeNOzQyv1gmtagZpPNXb+hjXhfQApI6V8GwHziN3lp6UgQmUzo6HyzaYP+0dTW TRnzH4cXgspLB49XTfO5ItRRj4jXYM9HN4r8xAKucFFYYWTxVt3VInjAKnHh+fpe ZsO0m1GeIdH6hqxqlhGKy6VJTvEiNiuiK2wVNqRha5Bld3RnGJfhPHmeV2YAfoQZ iM6qz1b6zUqEYkPsB3x8eGuMr0x1Gx+mXJb1ua/kYciASul0vd/aE3dgcliPChmA HxW5AgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUdwIr8YepKmrkGDgQi4r3s7rxsrIw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNk OS05ZjZjLWZjNTMwNjZiZWI4OC8yLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2I4NmNiNzctNjlhYy00 M2Q5LTlmNmMtZmM1MzA2NmJlYjg4LzIvNzcwMjJCRjE4N0E5MkE2QUU0MTgzODEw OEI4QUY3QjNCQUYxQjJCMi5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMy MWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcx NTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQzMGUyLmNybDAfBgNVHSMEGDAWgBTL VH2/JIelcbKwx4iWmec5ID9yYzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBl YzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0MzBlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpJgwDgQCAAIwCAMGBCYC+foAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmfBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE0r9g9eJoXpqcegzzCwV8z0OReE 6ZgrwoqwR/JLw78r5yOBPF3crZWqRlGGbAoCSqmX+xgtxyvzlKQB2XvNTjNDTAGL RCWqANKoY6tnInesv2eSdPGaa+NRxj7RQvd/T7Jfn7D8cTVPoIZkb8HtdB62/eGz mjuRBMp+8eRL5xs7/KmsJdzJMUzNyjO3K5gxwj0NZ/J/NWGZyd8NJy99IvH7IX3B kgwogGQG7kj24MFseoNYmjU3+sajbiSaAl/9mRnp6i77NgIG2SPGRMihTD3lMfPI B++/JHroh2DxQVJdH/qgdKbDm9tg+i31tk0Fo3amw/0T53DDyOVfeClquEM= -----END CERTIFICATE-----Generated at Sat Sep 28 14:31:35 2024 by rpki-client on console-ams.rpki-client.org