$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer File: 747306d8-f469-4e78-a1fc-d958dfc4f31b.cer (raw, json) Hash identifier: bWeOikRE74x+mhSvkCsTSGSu8JN6OByKnHnVGt9iPRQ= Subject key identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847BABF25194F04670BF72F1D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Nov 2024 00:45:25 +0000 Certificate not after: Thu 04 Feb 2027 01:45:25 +0000 Subordinate resources: AS: 30581 IP: 23.147.232.0/24 IP: 23.163.8.0/24 IP: 140.235.36.0/22 IP: 2602:2a3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:bf:25:19:4f:04:67:0b:f7:2f:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 1 00:45:25 2024 GMT Not After : Feb 4 01:45:25 2027 GMT Subject: CN=747306d8-f469-4e78-a1fc-d958dfc4f31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:23:ba:59:98:4d:87:74:32:ae:7c:b9:5e: 18:6a:33:99:44:f9:0f:29:5d:34:03:ba:12:2f:60: fd:c7:a7:c0:4b:3f:5e:f7:2d:9b:14:48:3f:ca:01: 27:67:d3:ab:45:49:53:40:3d:38:4c:8b:c3:f5:89: da:40:3c:30:58:5f:c4:4a:1a:c0:0e:3d:4b:e1:ba: 01:d7:b0:63:9c:10:0a:39:42:f5:67:fc:20:36:12: f1:24:b5:bf:38:ab:8d:8c:c0:2e:93:f6:97:f7:0c: ef:6d:72:43:57:28:d4:1a:b7:51:2b:e6:b9:96:18: ea:be:5d:8c:3e:28:37:cf:5b:6a:c2:18:aa:5b:05: b8:dc:db:47:2c:cf:dc:1c:71:6a:5d:8b:8c:4f:35: 9c:10:92:19:84:14:47:e8:9f:1c:51:fa:3f:26:cf: 62:87:f4:34:b9:59:90:56:4e:e3:be:da:e5:33:ed: 07:33:78:54:c6:eb:f7:74:29:fe:55:1d:30:8d:5a: e6:1c:8d:19:30:31:af:71:89:a8:ce:a5:22:3c:f0: 14:7d:a0:d1:51:b0:dd:d0:3a:14:f6:eb:32:8d:56: f2:23:8a:4e:63:03:aa:85:f1:1b:64:40:5c:f7:49: 49:0b:89:30:ae:45:68:7c:03:cf:f0:68:1f:4c:a8: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.232.0/24 23.163.8.0/24 140.235.36.0/22 IPv6: 2602:2a3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:27:b4:fd:9c:c5:9a:68:f9:7c:68:9b:79:9c:36:d0:97: 19:55:b1:c8:9b:5d:41:ec:ec:9b:f2:3a:f0:46:dd:95:0c:65: 25:38:d0:19:45:a8:29:b0:64:a9:fe:54:26:4c:7e:eb:57:21: 04:77:0f:5e:27:79:ed:2f:a4:05:29:87:29:0e:eb:83:b3:98: 6e:01:c3:62:f2:ab:37:7f:74:26:40:90:3b:2a:dc:a9:1d:dd: ab:70:66:6a:5c:e7:df:fa:9b:ca:1b:76:9b:0b:28:4a:b3:93: 42:71:c7:36:17:e6:1e:fb:ed:12:65:25:86:15:67:c8:4d:2f: 5d:a6:33:d7:d1:33:e0:7f:82:9c:6c:b4:a6:dc:17:d2:d2:24: 5d:f3:95:5d:f2:81:04:3b:d5:95:7b:c7:40:5a:1c:ee:28:80: 5e:24:b1:c0:66:48:08:22:6d:64:f5:df:53:47:92:eb:ff:88: 7a:e6:58:97:97:d5:f7:c0:42:73:6c:e0:03:f8:20:f1:03:9b: 8b:6d:7b:96:5c:98:d8:99:97:60:95:39:6e:43:bc:ab:84:39: 08:5e:db:90:06:28:26:98:7a:10:59:02:5f:f4:06:95:a1:c8: 25:02:5c:89:1d:9d:b3:a3:13:4f:20:64:5a:bf:ba:ea:4b:58: bc:91:21:c0 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEe6vyUZTwRnC/cvHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTEwMTAwNDUyNVoXDTI3MDIwNDAxNDUyNVowLzEtMCsGA1UEAxMk NzQ3MzA2ZDgtZjQ2OS00ZTc4LWExZmMtZDk1OGRmYzRmMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMjulmYTYd0Mq58uV4YajOZRPkPKV00A7oS L2D9x6fASz9e9y2bFEg/ygEnZ9OrRUlTQD04TIvD9YnaQDwwWF/EShrADj1L4boB 17BjnBAKOUL1Z/wgNhLxJLW/OKuNjMAuk/aX9wzvbXJDVyjUGrdRK+a5lhjqvl2M Pig3z1tqwhiqWwW43NtHLM/cHHFqXYuMTzWcEJIZhBRH6J8cUfo/Js9ih/Q0uVmQ Vk7jvtrlM+0HM3hUxuv3dCn+VR0wjVrmHI0ZMDGvcYmozqUiPPAUfaDRUbDd0DoU 9usyjVbyI4pOYwOqhfEbZEBc90lJC4kwrkVofAPP8GgfTKgPowIDAQABo4IENjCC BDIwHQYDVR0OBBYEFDprxPOoftRGHjXcxVhjSq6KtpSsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 NDczMDZkOC1mNDY5LTRlNzgtYTFmYy1kOTU4ZGZjNGYzMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc0NzMwNmQ4LWY0NjktNGU3OC1h MWZjLWQ5NThkZmM0ZjMxYi83NDczMDZkOC1mNDY5LTRlNzgtYTFmYy1kOTU4ZGZj NGYzMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXk+gDBAAXowgDBAKM6yQwDgQCAAIwCAMGBCYC AqMAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnd1MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH4cJ7T9nMWa aPl8aJt5nDbQlxlVscibXUHs7JvyOvBG3ZUMZSU40BlFqCmwZKn+VCZMfutXIQR3 D14nee0vpAUphykO64OzmG4Bw2Lyqzd/dCZAkDsq3Kkd3atwZmpc59/6m8obdpsL KEqzk0JxxzYX5h777RJlJYYVZ8hNL12mM9fRM+B/gpxstKbcF9LSJF3zlV3ygQQ7 1ZV7x0BaHO4ogF4kscBmSAgibWT131NHkuv/iHrmWJeX1ffAQnNs4AP4IPEDm4tt e5ZcmNiZl2CVOW5DvKuEOQhe25AGKCaYehBZAl/0BpWhyCUCXIkdnbOjE08gZFq/ uupLWLyRIcA= -----END CERTIFICATE-----Generated at Fri Nov 22 07:01:52 2024 by rpki-client on console-fra.rpki-client.org