$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer File: 9c2a7225-dfea-460d-aa69-804ae5740036.cer (raw, json) Hash identifier: qnLl1j2WuKblwir7o3GF8DjsaI7Ju5JncFa6yUzRG0Y= Subject key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285846F3233DE8AF9F1EE7C16B3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Aug 2024 12:45:27 +0000 Certificate not after: Tue 24 Nov 2026 13:45:27 +0000 Subordinate resources: AS: 20112 AS: 30221 IP: 63.247.144.0/20 IP: 68.68.192.0 -- 68.68.216.255 IP: 68.68.218.0/24 IP: 68.68.220.0/24 IP: 208.122.112.0/20 IP: 2607:fa28::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f3:23:3d:e8:af:9f:1e:e7:c1:6b:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 21 12:45:27 2024 GMT Not After : Nov 24 13:45:27 2026 GMT Subject: CN=9c2a7225-dfea-460d-aa69-804ae5740036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:b5:78:a9:18:72:8a:56:37:da:2a:29:06: 9e:f4:bb:2d:d7:21:18:80:38:07:46:48:c0:35:95: 20:5f:f8:06:90:c3:1e:9d:40:8a:fb:38:17:aa:a2: 88:24:d2:4f:48:ff:75:91:8e:e6:49:f1:87:74:9a: e3:9f:7c:7b:07:84:12:0a:de:c4:95:27:02:07:c6: 4f:91:a6:45:99:a6:28:6a:c2:83:bf:18:6b:4d:8c: 54:5b:42:c0:b7:a0:cb:1e:26:38:b9:da:34:33:2d: d5:6e:6c:8f:fe:db:c8:b2:ed:c1:61:f1:79:ac:db: cb:ca:54:26:11:cf:b7:e4:79:d9:93:1c:3d:23:8f: ad:61:08:3d:e1:4d:cf:dd:ad:52:20:a2:18:44:f5: f1:14:b2:05:47:dc:21:1f:7c:3f:ef:bb:8b:79:40: 3b:58:a4:a1:78:c4:10:ed:05:49:43:0e:c0:39:86: a0:90:08:1d:23:51:7c:e2:d2:14:81:65:01:0b:e4: a7:09:2d:8e:3c:03:47:ea:43:88:28:16:21:c9:3e: d9:4a:f2:84:a9:1b:e8:de:55:31:b8:c1:7f:7e:b0: 7f:88:4c:b2:5e:cc:03:43:5c:5f:67:b1:b6:99:bb: 0a:95:ec:b6:8f:a4:2d:39:e1:43:ad:01:76:97:39: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 63.247.144.0/20 68.68.192.0-68.68.216.255 68.68.218.0/24 68.68.220.0/24 208.122.112.0/20 IPv6: 2607:fa28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20112 30221 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:69:0c:7d:93:61:12:eb:c5:08:7b:51:bc:f4:0f:cf:04:d1: 60:e6:62:7b:95:44:90:cf:23:50:e0:ef:e5:a1:7a:ac:c0:7a: 98:19:fa:05:ad:bc:92:0f:ef:22:ba:91:a8:a0:c4:6e:64:31: 5b:60:1a:a3:99:36:f9:26:5e:94:a6:3b:92:20:07:7c:90:28: 81:36:b7:32:79:62:c7:23:f7:a9:30:50:d0:12:cd:42:d9:10: 8e:73:86:22:6e:dc:f3:17:d2:7d:13:25:66:b7:e1:b1:42:ac: 30:d4:2c:0f:66:92:63:f0:b0:54:25:7a:7e:58:63:b4:ac:bd: 9c:88:f1:2e:f9:9b:a3:cd:81:d2:06:11:f9:3e:64:70:2c:a1: f3:4b:1b:ee:22:34:40:11:d8:4f:43:78:a0:77:41:20:91:5e: 98:01:e8:c0:f8:af:ce:0a:d1:f2:f0:56:c1:63:f9:69:9a:40: 6b:d7:f3:b4:5c:50:5e:91:df:9b:71:84:42:35:81:49:a0:d2: dd:16:3e:c4:0f:d1:d7:09:65:00:72:3f:16:f9:bb:5d:f9:d1: 8e:a3:5e:dc:c2:0f:be:14:d6:8e:0a:09:53:24:fd:84:ba:1e: cd:0d:16:01:66:64:4b:10:91:53:b0:c4:0d:75:44:97:7c:f5: 52:b4:80:f9 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEbzIz3or58e58FrMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgyMTEyNDUyN1oXDTI2MTEyNDEzNDUyN1owLzEtMCsGA1UEAxMk OWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQwMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVq1eKkYcopWN9oqKQae9Lst1yEYgDgHRkjA NZUgX/gGkMMenUCK+zgXqqKIJNJPSP91kY7mSfGHdJrjn3x7B4QSCt7ElScCB8ZP kaZFmaYoasKDvxhrTYxUW0LAt6DLHiY4udo0My3VbmyP/tvIsu3BYfF5rNvLylQm Ec+35HnZkxw9I4+tYQg94U3P3a1SIKIYRPXxFLIFR9whH3w/77uLeUA7WKSheMQQ 7QVJQw7AOYagkAgdI1F84tIUgWUBC+SnCS2OPANH6kOIKBYhyT7ZSvKEqRvo3lUx uMF/frB/iEyyXswDQ1xfZ7G2mbsKley2j6QtOeFDrQF2lzlusQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFJWK/sbIMwlYgT6Q6O+eySw623fDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljMmE3MjI1LWRmZWEtNDYwZC1h YTY5LTgwNGFlNTc0MDAzNi85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3 NDAwMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYDBAQ/95AwDAMEBkREwAMEAERE2AMEAERE2gMEAERE 3AMEBNB6cDANBAIAAjAHAwUAJgf6KDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgJO kAICdg0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAK2kMfZNhEuvFCHtRvPQPzwTRYOZie5VEkM8jUODv5aF6 rMB6mBn6Ba28kg/vIrqRqKDEbmQxW2Aao5k2+SZelKY7kiAHfJAogTa3MnlixyP3 qTBQ0BLNQtkQjnOGIm7c8xfSfRMlZrfhsUKsMNQsD2aSY/CwVCV6flhjtKy9nIjx Lvmbo82B0gYR+T5kcCyh80sb7iI0QBHYT0N4oHdBIJFemAHowPivzgrR8vBWwWP5 aZpAa9fztFxQXpHfm3GEQjWBSaDS3RY+xA/R1wllAHI/Fvm7XfnRjqNe3MIPvhTW jgoJUyT9hLoezQ0WAWZkSxCRU7DEDXVEl3z1UrSA+Q== -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:22 2024 by rpki-client on console-ams.rpki-client.org