$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer File: ae85d24a-77d4-4cf7-80aa-c071199c2889.cer (raw, json) Hash identifier: lOdIX2XTZKTLaCuCiCmUHv5OBfeyUBx/jr24jzfvmSQ= Subject key identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285846BF7D8D6E0A058B371747F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Aug 2024 00:45:23 +0000 Certificate not after: Fri 06 Nov 2026 01:45:23 +0000 Subordinate resources: AS: 395841 IP: 64.4.168.0/22 IP: 208.91.188.0/22 IP: 2604:7c0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:bf:7d:8d:6e:0a:05:8b:37:17:47:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 3 00:45:23 2024 GMT Not After : Nov 6 01:45:23 2026 GMT Subject: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:62:3d:fa:dd:f6:91:a5:e7:23:2e:eb:fa: 6e:b8:b3:59:bc:16:e6:38:d9:ee:cc:9c:29:29:41: 7e:fb:1e:e4:ce:d6:19:82:42:af:6f:09:ff:b0:87: 3d:d4:fe:43:46:e3:bd:0d:f3:c6:c0:8a:1b:01:17: 89:e3:fd:11:7e:e6:27:c4:e1:40:5f:a5:bc:42:37: c1:27:b7:8a:65:32:c5:23:b5:bc:ab:9f:94:8a:ab: a2:3f:d3:5e:74:e1:8c:cd:90:01:fe:57:32:12:fd: ab:94:f3:ce:ec:8c:fe:2e:41:c6:34:f8:d1:ff:49: 8a:a2:20:27:df:12:36:51:18:ee:84:90:a8:3e:19: cb:1f:24:7d:fe:c5:f3:ac:31:79:b8:5d:bb:db:9b: a7:b2:c8:d5:3e:c1:5a:cf:13:9c:d6:62:8b:89:7f: 9f:88:24:a3:07:7a:f3:ff:80:70:b7:88:75:43:11: f0:46:ea:b7:80:28:16:c2:e5:e2:21:ff:6c:cc:66: 84:9f:8a:93:6f:f3:0f:9e:5f:72:90:25:60:9c:d1: 1f:2a:59:da:07:b2:94:c2:8b:48:a6:a3:d6:bf:c2: af:41:3a:ae:7e:dc:0f:97:bf:92:30:a5:69:df:46: 6e:87:ca:d8:93:94:09:ca:72:2b:34:49:2c:d1:23: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.4.168.0/22 208.91.188.0/22 IPv6: 2604:7c0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b6:44:a4:59:d4:b4:dc:ac:af:71:8a:97:ac:44:3c:ea:36: 18:1c:61:35:fa:52:69:5b:5c:3e:39:09:d7:8b:d2:94:97:b1: 89:fc:18:06:e8:56:04:c0:e4:bb:a4:14:f8:1b:17:36:37:e3: ba:c1:d5:4c:08:4b:92:c4:37:3f:81:3a:91:6b:ea:ae:21:0b: ed:0d:8f:51:08:fa:0d:37:2a:33:db:7f:58:f0:7e:c7:01:d2: 55:0b:2e:37:7c:2b:60:06:99:ad:4f:15:0a:ce:40:5f:11:cc: 8e:8c:92:25:d6:43:1e:41:d2:8f:58:3e:57:32:d3:df:59:0b: 62:e2:59:88:9e:69:00:1d:23:f3:c0:e5:5b:b4:64:55:b0:92: 9f:32:9e:da:02:3c:a4:a7:73:19:15:71:a5:30:b0:27:cb:eb: 77:59:22:37:b3:f2:78:35:db:0b:01:ff:f5:8e:44:17:cf:08: 97:0a:a3:87:73:6a:4f:95:01:5c:f2:73:c5:b4:eb:07:cb:b4: 4f:3b:51:59:db:f6:0d:0d:7f:29:0c:43:54:9f:4e:69:91:d1: ab:bf:a7:21:f1:d3:52:cd:46:a6:71:ad:e9:2a:71:88:7b:8e: f5:0d:9a:7c:35:43:c3:23:da:1b:36:71:01:bd:72:aa:3b:37: 7b:3d:ed:80 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEa/fY1uCgWLNxdH8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgwMzAwNDUyM1oXDTI2MTEwNjAxNDUyM1owLzEtMCsGA1UEAxMk YWU4NWQyNGEtNzdkNC00Y2Y3LTgwYWEtYzA3MTE5OWMyODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuptiPfrd9pGl5yMu6/puuLNZvBbmONnuzJwp KUF++x7kztYZgkKvbwn/sIc91P5DRuO9DfPGwIobAReJ4/0RfuYnxOFAX6W8QjfB J7eKZTLFI7W8q5+UiquiP9NedOGMzZAB/lcyEv2rlPPO7Iz+LkHGNPjR/0mKoiAn 3xI2URjuhJCoPhnLHyR9/sXzrDF5uF2725unssjVPsFazxOc1mKLiX+fiCSjB3rz /4Bwt4h1QxHwRuq3gCgWwuXiIf9szGaEn4qTb/MPnl9ykCVgnNEfKlnaB7KUwotI pqPWv8KvQTquftwPl7+SMKVp30Zuh8rYk5QJynIrNEks0SMEPQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFH0m49UksgqxUz+FOHEKirKX3wceMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5YzI4ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04 MGFhLWMwNzExOTljMjg4OS9hZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5 YzI4ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJABKgDBALQW7wwDgQCAAIwCAMGBCYEB8AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYKQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgtkSkWdS03KyvcYqX rEQ86jYYHGE1+lJpW1w+OQnXi9KUl7GJ/BgG6FYEwOS7pBT4Gxc2N+O6wdVMCEuS xDc/gTqRa+quIQvtDY9RCPoNNyoz239Y8H7HAdJVCy43fCtgBpmtTxUKzkBfEcyO jJIl1kMeQdKPWD5XMtPfWQti4lmInmkAHSPzwOVbtGRVsJKfMp7aAjykp3MZFXGl MLAny+t3WSI3s/J4NdsLAf/1jkQXzwiXCqOHc2pPlQFc8nPFtOsHy7RPO1FZ2/YN DX8pDENUn05pkdGrv6ch8dNSzUamca3pKnGIe471DZp8NUPDI9obNnEBvXKqOzd7 Pe2A -----END CERTIFICATE-----Generated at Fri Nov 22 08:07:04 2024 by rpki-client on console-ams.rpki-client.org