$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer File: 04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer (raw, json) Hash identifier: abwCHGZyJ+r9bznOLVKTOXs2NzYFWazfhdIIfc4XFKU= Subject key identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584774F408991BCD438283B75E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Oct 2024 00:45:24 +0000 Certificate not after: Sun 10 Jan 2027 01:45:24 +0000 Subordinate resources: AS: 14726 AS: 395168 IP: 130.51.68.0/22 IP: 148.59.142.0/24 IP: 148.59.240.0/23 IP: 158.51.201.0/24 IP: 2604:7e40::/32 IP: 2605:d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:f4:08:99:1b:cd:43:82:83:b7:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 7 00:45:24 2024 GMT Not After : Jan 10 01:45:24 2027 GMT Subject: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2d:31:b5:0e:47:b4:07:da:f1:88:b4:e6:a2: c6:f7:6c:b4:94:06:77:e6:35:b4:5f:d4:c0:79:6a: 49:bf:3c:b3:1d:27:ff:65:88:df:7a:81:f2:10:23: 5d:85:b4:57:65:c7:be:e2:94:08:b1:92:f7:6c:9a: 2c:c8:5f:d7:dc:67:6d:3a:7b:5a:4a:88:96:5c:56: 8f:67:8e:b1:37:33:4b:81:be:12:3d:ed:1f:d4:16: 08:8d:bd:1f:55:d9:0e:59:44:fa:90:59:28:ce:0b: e6:6d:04:61:3c:9d:d4:94:f1:a8:24:6b:17:37:37: e4:2a:f2:76:43:19:95:50:c6:2f:94:aa:ed:8a:a1: d8:1a:52:92:d2:18:fa:4c:3f:9d:e8:12:80:9c:bf: fa:6d:81:2a:3b:71:a2:38:2c:1f:84:c6:3e:1e:6b: df:70:57:0d:68:f6:24:5c:e8:2e:6c:8c:98:5a:ef: f6:7a:44:54:5c:da:08:81:44:d9:41:a3:ef:7e:0c: 27:d2:2d:7e:d6:52:91:d0:49:8c:ce:d7:a8:20:9b: 5d:a4:c6:5a:51:bc:c6:90:53:4c:4d:cb:16:7c:33: ec:ea:77:09:53:e6:47:12:98:e7:b0:46:ca:f8:d7: ad:39:05:c3:89:99:ef:3d:b7:02:d8:65:b7:4f:7b: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.68.0/22 148.59.142.0/24 148.59.240.0/23 158.51.201.0/24 IPv6: 2604:7e40::/32 2605:d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14726 395168 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c5:f4:b9:ea:1c:fc:75:2d:2c:47:08:17:68:92:d5:c6:c6: 17:1e:b0:99:7b:ee:5c:af:ab:a0:9d:91:df:72:34:53:0f:f4: b1:f2:4f:92:12:ad:64:1c:7a:b7:48:34:88:be:d7:a4:9c:74: dc:70:0d:ad:70:b7:10:0d:37:f1:2c:05:2f:f5:67:2c:ea:2a: 5a:26:31:c8:45:52:a2:c8:63:b8:00:e2:f8:c0:b0:f6:01:41: 7a:dd:9a:fe:c4:ae:0f:e7:8e:18:23:4f:41:27:c6:5d:b5:4e: 94:12:b6:08:9c:9d:b4:b5:dd:fc:63:5d:bb:d3:56:49:95:ad: 3e:4b:6b:7d:51:d9:33:02:db:9f:de:2d:6a:ef:65:3a:dd:ef: 2d:14:de:dd:c8:da:ce:f1:c4:79:f6:fd:53:2f:a0:f5:20:df: a3:ec:b2:fb:46:73:0e:16:02:87:56:4d:6a:49:e7:0e:a3:3e: c9:e3:ac:a6:1d:c5:48:fa:37:1f:42:1f:56:72:68:e7:f3:8f: 65:88:f1:fc:d9:c0:d4:0f:e0:f5:8c:c6:81:48:4e:60:1f:cc: 22:91:18:cc:d2:b8:1a:80:b0:d3:1f:11:3b:f5:45:5f:08:fc: 64:a1:6f:2a:b5:84:10:a7:3e:6a:da:76:62:a9:17:8e:ed:02: 13:14:ae:2b -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEd09AiZG81DgoO3XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAwNzAwNDUyNFoXDTI3MDExMDAxNDUyNFowLzEtMCsGA1UEAxMk MDRkNzBlMDYtM2FhMC00NTM2LWEzYzctZWUyN2E4ZGRlNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i0xtQ5HtAfa8Yi05qLG92y0lAZ35jW0X9TA eWpJvzyzHSf/ZYjfeoHyECNdhbRXZce+4pQIsZL3bJosyF/X3GdtOntaSoiWXFaP Z46xNzNLgb4SPe0f1BYIjb0fVdkOWUT6kFkozgvmbQRhPJ3UlPGoJGsXNzfkKvJ2 QxmVUMYvlKrtiqHYGlKS0hj6TD+d6BKAnL/6bYEqO3GiOCwfhMY+HmvfcFcNaPYk XOgubIyYWu/2ekRUXNoIgUTZQaPvfgwn0i1+1lKR0EmMzteoIJtdpMZaUbzGkFNM TcsWfDPs6ncJU+ZHEpjnsEbK+NetOQXDiZnvPbcC2GW3T3sX5QIDAQABo4IERzCC BEMwHQYDVR0OBBYEFHFdhrVBmE1RbenASpha94jGaiXgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w NGQ3MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3YThkZGU1ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzA0ZDcwZTA2LTNhYTAtNDUzNi1h M2M3LWVlMjdhOGRkZTVmYy8wNGQ3MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3YThk ZGU1ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MB4EAgABMBgDBAKCM0QDBACUO44DBAGUO/ADBACeM8kwFAQCAAIw DgMFACYEfkADBQAmBQ1AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAjmGAgMGB6Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANMX0ueoc/HUtLEcIF2iS1cbGFx6wmXvuXK+roJ2R33I0Uw/0sfJP khKtZBx6t0g0iL7XpJx03HANrXC3EA038SwFL/VnLOoqWiYxyEVSoshjuADi+MCw 9gFBet2a/sSuD+eOGCNPQSfGXbVOlBK2CJydtLXd/GNdu9NWSZWtPktrfVHZMwLb n94tau9lOt3vLRTe3cjazvHEefb9Uy+g9SDfo+yy+0ZzDhYCh1ZNaknnDqM+yeOs ph3FSPo3H0IfVnJo5/OPZYjx/NnA1A/g9YzGgUhOYB/MIpEYzNK4GoCw0x8RO/VF Xwj8ZKFvKrWEEKc+atp2YqkXju0CExSuKw== -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:09 2024 by rpki-client on console-fra.rpki-client.org