$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer File: b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer (raw, json) Hash identifier: 9Z8X2VkAQNpLnebyPRdsiHq4JFEkaqvL0NAdndp+rLU= Subject key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858470548AF8671A0C000923E8E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Aug 2024 00:45:26 +0000 Certificate not after: Tue 01 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 397913 IP: 204.108.182.0/23 IP: 204.235.160.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:48:af:86:71:a0:c0:00:92:3e:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 28 00:45:26 2024 GMT Not After : Dec 1 01:45:26 2026 GMT Subject: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:ba:de:48:32:7f:ff:c5:9d:d3:82:b2:db: da:13:1a:c6:e0:fd:14:92:06:0d:c3:40:a7:15:9d: 98:b4:20:7f:42:e1:a1:cc:d8:4c:66:d2:06:ff:e9: a3:09:28:d5:58:50:55:6d:63:8a:c1:29:b5:5c:3e: e4:fa:b8:4d:37:fc:49:b7:4c:38:6c:9f:61:de:7c: 01:9e:fc:59:fe:cd:88:6a:7a:42:1d:06:c4:26:fd: 0c:ea:c6:3e:40:5d:75:6e:f5:45:9a:5e:18:6a:af: a7:4d:47:74:ac:b4:ff:4c:f9:9a:1e:a2:75:9b:d3: 0c:f8:8b:d3:38:0d:96:28:20:96:39:a8:e7:24:c5: 47:d6:c3:bc:75:ba:43:a4:fc:e2:d0:62:d8:3c:f0: 65:96:74:de:93:35:52:72:a4:cf:9a:5a:5d:c7:80: ef:1f:28:4a:eb:19:73:d7:91:c6:5b:ad:d0:44:bd: 98:30:cd:51:05:0c:dd:42:74:d9:64:fd:7f:86:7e: 84:50:0b:3b:38:06:a7:25:02:d6:01:41:39:2a:61: 22:eb:8d:74:43:c3:4a:e7:31:df:a5:02:c8:b0:09: 76:95:13:20:b4:24:7d:91:52:82:ff:b5:0b:3a:d1: b7:a5:b0:7e:1f:ed:1c:89:d3:76:96:ff:3d:0a:c2: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.108.182.0/23 204.235.160.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ea:85:99:34:0b:67:f4:23:fa:ae:77:29:ef:c9:a8:8f:5a: 63:44:f7:0f:34:c5:1a:ab:96:63:9d:e7:cd:e0:81:16:15:96: c2:14:47:dc:d2:50:1c:4c:e6:ef:64:76:49:3b:16:23:ee:65: a5:6b:17:12:11:9b:36:71:b1:86:40:7c:61:70:10:d9:d3:76: a3:01:93:ec:1b:0e:f9:5c:5f:d6:c9:6e:78:5f:66:e8:cb:b0: 63:71:52:f2:7f:e6:59:3c:02:79:1c:0b:32:2a:4e:6f:da:05: e3:e3:0a:66:78:46:4d:16:e6:a3:fc:bd:28:0b:d7:61:57:6c: d5:2a:cf:0b:b8:43:5f:dd:79:2c:e1:97:b9:bd:36:33:c2:77: f7:7d:84:39:90:38:2b:c7:d0:38:f3:5d:45:ad:83:d7:3d:40: c5:4a:58:76:89:d3:de:f9:83:91:c6:e2:59:1f:0c:a6:fd:8b: ac:cc:a7:c0:f0:5f:81:a5:df:a2:02:09:19:42:92:a6:b0:43: 56:5d:60:e5:8f:c6:48:ac:6f:f5:05:5c:64:67:55:35:c6:62: f1:7e:c4:3e:3a:5e:b8:af:14:9e:11:2b:79:b9:59:69:af:00: 7b:27:78:9f:46:03:f6:b5:8b:a1:52:eb:f4:68:df:2c:2b:5e: 5d:3a:56:cb -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEcFSK+GcaDAAJI+jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgyODAwNDUyNloXDTI2MTIwMTAxNDUyNlowLzEtMCsGA1UEAxMk YjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMyMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLq63kgyf//FndOCstvaExrG4P0UkgYNw0Cn FZ2YtCB/QuGhzNhMZtIG/+mjCSjVWFBVbWOKwSm1XD7k+rhNN/xJt0w4bJ9h3nwB nvxZ/s2IanpCHQbEJv0M6sY+QF11bvVFml4Yaq+nTUd0rLT/TPmaHqJ1m9MM+IvT OA2WKCCWOajnJMVH1sO8dbpDpPzi0GLYPPBllnTekzVScqTPmlpdx4DvHyhK6xlz 15HGW63QRL2YMM1RBQzdQnTZZP1/hn6EUAs7OAanJQLWAUE5KmEi6410Q8NK5zHf pQLIsAl2lRMgtCR9kVKC/7ULOtG3pbB+H+0cidN2lv89CsKswQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPPT7XUQlaBYZ3NaYe+X+dbzFpS8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i MjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IyNDIyNGJhLTgzNDAtNGEyZS05 ODZhLTVlMWY5YjJjMjE4Mi9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIy YzIxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHMbLYDBAHM66AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhJZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACTqhZk0C2f0I/qudynvyaiPWmNE9w80xRqrlmOd 583ggRYVlsIUR9zSUBxM5u9kdkk7FiPuZaVrFxIRmzZxsYZAfGFwENnTdqMBk+wb DvlcX9bJbnhfZujLsGNxUvJ/5lk8AnkcCzIqTm/aBePjCmZ4Rk0W5qP8vSgL12FX bNUqzwu4Q1/deSzhl7m9NjPCd/d9hDmQOCvH0DjzXUWtg9c9QMVKWHaJ0975g5HG 4lkfDKb9i6zMp8DwX4Gl36ICCRlCkqawQ1ZdYOWPxkisb/UFXGRnVTXGYvF+xD46 XrivFJ4RK3m5WWmvAHsneJ9GA/a1i6FS6/Ro3ywrXl06Vss= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:45 2024 by rpki-client on console-ams.rpki-client.org