$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.cer File: 46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.cer (raw, json) Hash identifier: +Km7Ehi8/TYlKFyA+1OuZJUKeAlkJlCWv2wR5c5als0= Subject key identifier: CB:DE:E2:64:F8:10:A5:A3:29:6A:35:38:12:C9:11:81:95:1A:9A:24 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584706AE071197816D9CF5443400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Aug 2024 12:45:26 +0000 Certificate not after: Tue 01 Dec 2026 13:45:26 +0000 Subordinate resources: AS: 400121 IP: 147.185.185.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:06:ae:07:11:97:81:6d:9c:f5:44:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 28 12:45:26 2024 GMT Not After : Dec 1 13:45:26 2026 GMT Subject: CN=46c4e48a-9ab3-4a1b-a9b7-68fc9016407a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:b1:0d:64:f8:a6:25:e1:3e:da:06:db:b2: 2c:32:0e:aa:eb:65:f5:1a:50:73:8b:0d:96:22:45: a9:87:d2:e3:1c:68:72:26:60:a5:48:8c:a7:93:4c: 83:d2:60:e6:ab:a0:a3:34:4b:4f:53:db:22:53:8f: 2e:49:fc:09:f0:09:6f:8b:f9:86:56:32:35:3a:c9: 81:14:b1:d2:d4:46:a4:92:e1:61:68:69:d8:78:95: 0b:6a:3f:32:e1:41:4f:6e:5e:2a:09:aa:a5:ef:df: 4d:c2:2d:e2:4f:59:d6:42:9f:f5:80:52:c1:2b:dc: 87:87:5c:31:97:e8:0f:ab:72:6e:c7:8a:55:7d:dd: a2:e8:3d:38:07:49:bc:a8:ed:b7:65:21:dd:66:b5: 21:77:59:d0:7c:87:58:f2:c5:30:56:db:2c:0f:b3: b7:6b:a3:82:40:4a:18:5a:4d:71:db:9a:1b:85:33: 65:ee:96:c0:d6:2f:f7:7d:1b:3d:e5:f8:d0:fe:a8: 82:e3:91:38:f1:ad:eb:3b:97:d3:de:43:43:37:2f: f3:6b:ad:bc:44:5f:08:1c:c1:b3:13:23:b4:a7:f6: d9:15:6b:7d:93:65:cf:a7:58:e3:db:cf:d9:ba:7d: 6f:0f:5e:30:50:83:b2:64:e5:04:9d:3e:32:68:05: 9d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DE:E2:64:F8:10:A5:A3:29:6A:35:38:12:C9:11:81:95:1A:9A:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 147.185.185.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:23:59:37:bb:d1:86:c6:72:87:f1:1f:24:65:2a:6e:2e:aa: a2:35:83:cf:bb:7e:61:5d:54:da:ab:1f:0b:bf:1f:1f:65:e1: 88:20:b0:ae:0d:e0:4e:b4:d7:65:c9:cb:ba:b0:27:c8:e8:76: 63:5f:8b:ff:23:e0:9a:38:cc:9b:96:ba:5b:b2:59:08:77:b4: 09:e1:c4:53:4e:85:2b:be:e3:1d:53:46:47:00:d5:10:df:f5: b6:e1:d0:f1:4c:fd:73:28:13:75:ac:76:66:aa:b9:ca:f1:55: 41:9e:65:4f:37:a3:ad:c4:e6:a7:7e:b2:a4:08:88:b5:d4:80: cf:23:08:8e:f2:33:ba:41:e4:77:d0:f1:da:9b:ba:a4:10:3b: 81:93:32:58:cf:b2:40:2c:cf:42:eb:c4:5c:0f:63:a3:c6:af: b1:f0:b9:cd:e7:e8:c7:5b:17:44:ed:82:94:29:4c:1a:4b:80: 94:fc:af:0b:1c:d3:75:57:81:ac:89:0d:d8:2d:61:95:93:2c: 3d:e2:6e:0d:71:89:a2:15:9f:d2:21:69:ac:16:fd:50:a4:9f: c9:ae:6d:84:e2:9e:6c:6d:34:f8:28:8f:98:18:13:cc:51:df: c2:a0:f6:1a:ae:c9:50:40:3c:99:66:80:d3:47:4f:12:32:b5: d4:b8:43:ae -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEcGrgcRl4FtnPVENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgyODEyNDUyNloXDTI2MTIwMTEzNDUyNlowLzEtMCsGA1UEAxMk NDZjNGU0OGEtOWFiMy00YTFiLWE5YjctNjhmYzkwMTY0MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcKxDWT4piXhPtoG27IsMg6q62X1GlBziw2W IkWph9LjHGhyJmClSIynk0yD0mDmq6CjNEtPU9siU48uSfwJ8Alvi/mGVjI1OsmB FLHS1EakkuFhaGnYeJULaj8y4UFPbl4qCaql799Nwi3iT1nWQp/1gFLBK9yHh1wx l+gPq3Jux4pVfd2i6D04B0m8qO23ZSHdZrUhd1nQfIdY8sUwVtssD7O3a6OCQEoY Wk1x25obhTNl7pbA1i/3fRs95fjQ/qiC45E48a3rO5fT3kNDNy/za628RF8IHMGz EyO0p/bZFWt9k2XPp1jj28/Zun1vD14wUIOyZOUEnT4yaAWdKQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMve4mT4EKWjKWo1OBLJEYGVGpokMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 NmM0ZTQ4YS05YWIzLTRhMWItYTliNy02OGZjOTAxNjQwN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YzRlNDhhLTlhYjMtNGExYi1h OWI3LTY4ZmM5MDE2NDA3YS80NmM0ZTQ4YS05YWIzLTRhMWItYTliNy02OGZjOTAx NjQwN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACTubkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhr5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACojWTe70YbGcofxHyRlKm4uqqI1g8+7fmFdVNqrHwu/Hx9l 4YggsK4N4E6012XJy7qwJ8jodmNfi/8j4Jo4zJuWuluyWQh3tAnhxFNOhSu+4x1T RkcA1RDf9bbh0PFM/XMoE3WsdmaqucrxVUGeZU83o63E5qd+sqQIiLXUgM8jCI7y M7pB5HfQ8dqbuqQQO4GTMljPskAsz0LrxFwPY6PGr7Hwuc3n6MdbF0TtgpQpTBpL gJT8rwsc03VXgayJDdgtYZWTLD3ibg1xiaIVn9IhaawW/VCkn8mubYTinmxtNPgo j5gYE8xR38Kg9hquyVBAPJlmgNNHTxIytdS4Q64= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org