$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0.cer File: 6cdd8b44-43e6-416a-bf05-93e5fc5417b0.cer (raw, json) Hash identifier: 2cXtHL0cR//0nRW74EAHxXc5WbgAPSVS0Sv2+1gIxEA= Subject key identifier: AF:04:0D:0C:F8:E5:96:3C:CA:71:15:12:48:21:EE:48:6F:00:EA:44 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584652978A6A07AD6C4309284180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/6cdd8b44-43e6-416a-bf05-93e5fc5417b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Jun 2024 00:34:38 +0000 Certificate not after: Mon 28 Sep 2026 00:34:38 +0000 Subordinate resources: AS: 55004 IP: 23.147.104.0 -- 23.147.108.255 IP: 2602:2a1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:52:97:8a:6a:07:ad:6c:43:09:28:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 25 00:34:38 2024 GMT Not After : Sep 28 00:34:38 2026 GMT Subject: CN=6cdd8b44-43e6-416a-bf05-93e5fc5417b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:79:a0:1a:82:84:51:8a:f9:53:fb:c9:ba: 0a:eb:ef:8a:f2:44:13:ff:eb:4c:91:a2:ff:dd:cc: 75:61:33:d3:e2:30:3f:b1:8c:37:87:3e:13:04:91: 07:d7:0f:e9:b9:d4:34:72:7e:1d:2f:81:57:3d:77: c7:23:10:63:48:d1:7d:d4:89:db:05:60:ec:9b:73: d2:02:14:bf:84:98:0a:19:92:cf:84:4b:dc:5a:7f: 7a:63:74:29:87:56:ad:39:8a:ac:1a:4d:dd:fb:c2: a3:d3:4f:cd:d4:d5:ba:ed:80:f9:08:1e:4a:47:87: e2:5d:cf:6c:bf:ea:79:1a:2b:39:d2:7b:cc:37:3d: f2:a4:99:e9:ce:34:c7:d5:b9:3a:6a:d6:53:2e:81: 3c:54:10:91:fd:37:74:55:58:7f:72:25:01:c0:57: d1:e4:28:a4:c1:7b:60:85:a6:40:2f:c4:c2:6f:78: f2:c6:49:0e:de:57:d8:56:3d:6e:93:34:bd:13:b3: 50:19:87:2b:aa:e4:9e:6b:14:78:cd:f8:9b:e7:f3: 2d:d5:00:59:67:29:be:17:2b:ae:3d:fe:1e:c8:a7: c0:50:5f:80:bf:ae:63:39:37:b5:94:1b:17:85:3f: 77:4e:4e:15:36:9e:1f:a1:11:64:86:ab:3b:cb:f2: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:04:0D:0C:F8:E5:96:3C:CA:71:15:12:48:21:EE:48:6F:00:EA:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cdd8b44-43e6-416a-bf05-93e5fc5417b0/6cdd8b44-43e6-416a-bf05-93e5fc5417b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.104.0-23.147.108.255 IPv6: 2602:2a1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55004 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:55:a8:c0:7f:ae:88:b2:0f:17:ac:4d:51:aa:9f:13:06:92: 62:9d:1f:91:6b:50:94:2b:f9:0d:97:9c:13:b2:1a:7f:b3:a2: 9d:ed:8f:9a:5f:49:33:0e:1a:8b:e3:65:5b:fe:14:f6:30:0b: b1:04:c1:c3:2c:25:cc:22:bf:00:1b:d2:a0:4e:42:7d:7e:85: 9d:90:07:5b:78:0e:20:7a:e2:92:a2:f6:29:2c:aa:36:34:da: e7:c8:00:14:fe:38:a9:c2:80:7f:b5:71:29:ee:e4:1c:b0:74: 32:99:f3:25:56:24:8d:17:6e:37:30:7a:5d:8d:89:4b:a2:79: 42:a6:ef:bd:20:c9:54:72:af:b4:72:1b:cb:63:b7:02:46:63: e2:69:a3:69:78:ac:8d:10:27:f2:c5:f4:02:bc:f0:80:a6:9e: ae:cc:0d:5c:ab:d0:9f:41:5b:7e:64:5e:d8:56:ad:ac:3b:20: d4:ce:86:f5:63:4f:7a:8c:73:15:6d:8f:90:8b:f8:f8:b5:b7: 6f:be:4c:67:e4:13:68:cb:94:a1:8d:37:79:af:07:8b:79:f6: 07:1a:32:31:e0:1a:ce:0c:4a:06:5e:5a:00:61:18:0b:ab:fa: 8a:17:b8:d7:04:be:dc:01:0f:09:05:f0:b4:b0:bd:c7:d0:b4: 99:6e:32:40 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEZSl4pqB61sQwkoQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDYyNTAwMzQzOFoXDTI2MDkyODAwMzQzOFowLzEtMCsGA1UEAxMk NmNkZDhiNDQtNDNlNi00MTZhLWJmMDUtOTNlNWZjNTQxN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nt5oBqChFGK+VP7yboK6++K8kQT/+tMkaL/ 3cx1YTPT4jA/sYw3hz4TBJEH1w/pudQ0cn4dL4FXPXfHIxBjSNF91InbBWDsm3PS AhS/hJgKGZLPhEvcWn96Y3Qph1atOYqsGk3d+8Kj00/N1NW67YD5CB5KR4fiXc9s v+p5Gis50nvMNz3ypJnpzjTH1bk6atZTLoE8VBCR/Td0VVh/ciUBwFfR5CikwXtg haZAL8TCb3jyxkkO3lfYVj1ukzS9E7NQGYcrquSeaxR4zfib5/Mt1QBZZym+Fyuu Pf4eyKfAUF+Av65jOTe1lBsXhT93Tk4VNp4foRFkhqs7y/JoawIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFK8EDQz45ZY8ynEVEkgh7khvAOpEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 Y2RkOGI0NC00M2U2LTQxNmEtYmYwNS05M2U1ZmM1NDE3YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZjZGQ4YjQ0LTQzZTYtNDE2YS1i ZjA1LTkzZTVmYzU0MTdiMC82Y2RkOGI0NC00M2U2LTQxNmEtYmYwNS05M2U1ZmM1 NDE3YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEAxeTaAMEABeTbDAOBAIAAjAIAwYEJgICoQAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANbcMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABlVqMB/roiyDxes TVGqnxMGkmKdH5FrUJQr+Q2XnBOyGn+zop3tj5pfSTMOGovjZVv+FPYwC7EEwcMs JcwivwAb0qBOQn1+hZ2QB1t4DiB64pKi9iksqjY02ufIABT+OKnCgH+1cSnu5Byw dDKZ8yVWJI0Xbjcwel2NiUuieUKm770gyVRyr7RyG8tjtwJGY+Jpo2l4rI0QJ/LF 9AK88ICmnq7MDVyr0J9BW35kXthWraw7INTOhvVjT3qMcxVtj5CL+Pi1t2++TGfk E2jLlKGNN3mvB4t59gcaMjHgGs4MSgZeWgBhGAur+ooXuNcEvtwBDwkF8LSwvcfQ tJluMkA= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:14 2024 by rpki-client on console-fra.rpki-client.org