$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer File: 9ac7679f-d727-44b3-9b13-6e689c3eff61.cer (raw, json) Hash identifier: fXUgIz4iFOb6rFJAehXCKt2HfSlgJXBWupHg9XOpPKE= Subject key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858470ADE0CA4FDDE7FB77DE607E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Aug 2024 00:45:26 +0000 Certificate not after: Thu 03 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 399385 IP: 205.137.249.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:0a:de:0c:a4:fd:de:7f:b7:7d:e6:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 30 00:45:26 2024 GMT Not After : Dec 3 01:45:26 2026 GMT Subject: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ca:b4:06:a9:ac:99:73:a8:66:fe:ee:2f:1e: 69:e0:a2:e0:c9:a5:04:35:b2:9f:69:ad:c6:ee:97: 4e:a1:ec:65:48:ac:25:5b:bf:b2:dd:05:6d:6f:8f: 35:65:e0:63:43:4d:dc:16:1b:a0:20:10:6d:d0:4f: 93:6e:62:06:ab:78:a9:49:c2:09:3f:ba:9e:3b:ba: 2e:c1:34:c0:29:e3:db:eb:0c:8c:39:4d:1f:c2:17: a1:9f:ea:4e:2b:40:01:26:36:2a:ed:25:37:74:b7: 34:44:ff:4c:ba:f0:6b:e0:9f:e6:c2:36:6c:fc:1f: 46:70:e8:c7:47:b1:8e:24:d1:02:d9:72:6e:a0:27: 5d:a8:5a:d9:16:92:a6:b8:b7:63:64:22:6d:b6:47: 04:78:70:94:2c:d8:99:33:38:d9:5f:61:ed:f3:19: aa:79:63:e5:33:3c:e2:d1:23:01:04:e8:27:7a:a4: 52:e3:b5:07:d8:f0:8f:cd:1b:da:b1:da:5b:7b:f9: 36:47:9e:8d:24:5a:e6:d5:dc:f6:cf:7c:7e:69:6f: 2c:bc:b9:ee:d9:8d:83:e1:b7:a6:da:d5:dd:3b:90: 6e:f9:48:ef:ae:93:0d:9d:cd:42:f9:83:49:ff:d5: b7:9f:af:4c:df:89:d4:9c:45:84:62:2d:0b:52:32: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 205.137.249.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399385 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:54:b2:26:18:d9:af:bc:12:a2:f4:c2:90:d7:96:74:bc:27: 1a:97:4e:3a:ad:c3:cf:32:71:0b:20:a7:bf:c6:7c:97:ca:54: dd:2b:a5:6b:30:5b:1f:f8:42:1c:f2:1c:05:f6:d0:be:51:26: 88:0e:71:55:d5:b1:e2:53:9c:9a:78:f5:85:d3:f1:df:51:d9: 9a:6b:9f:a4:84:d5:7d:28:73:bb:08:85:66:c2:4e:2a:41:8f: ef:e9:d6:8d:71:c6:74:c4:df:66:3b:84:ca:8d:08:df:3b:af: 40:97:7c:15:56:2d:82:33:33:fe:a5:60:b0:3f:38:f3:6e:81: a9:39:de:88:99:6f:27:8f:21:41:cc:0e:3b:1e:94:8b:92:76: 8a:ec:49:37:51:d1:ec:c5:1b:00:04:8e:7d:38:f9:aa:20:38: c3:cd:16:c0:bb:aa:01:c6:ac:ff:20:41:f7:c7:2b:e9:1c:8c: 6c:54:46:7a:ce:39:39:ae:55:e2:f8:30:f4:ee:dd:8d:be:c9: c7:b6:e7:ca:d6:b0:d0:ca:45:37:01:67:d5:69:c5:03:ee:49: 80:1f:c8:fb:8e:8d:d7:55:08:fa:86:21:0e:77:8d:fe:38:4f: 0d:d1:15:de:32:25:27:87:a7:2f:32:c4:7c:fd:34:0f:ce:d3: 35:08:d3:f8 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEcK3gyk/d5/t33mB+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgzMDAwNDUyNloXDTI2MTIwMzAxNDUyNlowLzEtMCsGA1UEAxMk OWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2VmZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcq0BqmsmXOoZv7uLx5p4KLgyaUENbKfaa3G 7pdOoexlSKwlW7+y3QVtb481ZeBjQ03cFhugIBBt0E+TbmIGq3ipScIJP7qeO7ou wTTAKePb6wyMOU0fwhehn+pOK0ABJjYq7SU3dLc0RP9MuvBr4J/mwjZs/B9GcOjH R7GOJNEC2XJuoCddqFrZFpKmuLdjZCJttkcEeHCULNiZMzjZX2Ht8xmqeWPlMzzi 0SMBBOgneqRS47UH2PCPzRvasdpbe/k2R56NJFrm1dz2z3x+aW8svLnu2Y2D4bem 2tXdO5Bu+UjvrpMNnc1C+YNJ/9W3n69M34nUnEWEYi0LUjLJPwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNwOOgtd5WTbZ1xrEmoCxbtj10FgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzlhYzc2NzlmLWQ3MjctNDRiMy05 YjEzLTZlNjg5YzNlZmY2MS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMz ZWZmNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADNifkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhgZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGhUsiYY2a+8EqL0wpDXlnS8JxqXTjqtw88ycQsgp7/GfJfK VN0rpWswWx/4QhzyHAX20L5RJogOcVXVseJTnJp49YXT8d9R2Zprn6SE1X0oc7sI hWbCTipBj+/p1o1xxnTE32Y7hMqNCN87r0CXfBVWLYIzM/6lYLA/OPNugak53oiZ byePIUHMDjselIuSdorsSTdR0ezFGwAEjn04+aogOMPNFsC7qgHGrP8gQffHK+kc jGxURnrOOTmuVeL4MPTu3Y2+yce258rWsNDKRTcBZ9VpxQPuSYAfyPuOjddVCPqG IQ53jf44Tw3RFd4yJSeHpy8yxHz9NA/O0zUI0/g= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:17 2024 by rpki-client on console-fra.rpki-client.org