$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer File: bc942f68-cb33-4a05-a727-3f93e610393e.cer (raw, json) Hash identifier: zUzVimW7/g64ljzmCo0BeQE/Q1tXn21dWOWpsilOQ9E= Subject key identifier: FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847765DD1A7EE0840CBC12D9480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Oct 2024 12:54:22 +0000 Certificate not after: Wed 06 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 54218 IP: 23.148.232.0/24 IP: 140.235.128.0/22 IP: 2602:fa9b::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:5d:d1:a7:ee:08:40:cb:c1:2d:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 7 12:54:22 2024 GMT Not After : Jan 6 01:45:26 2027 GMT Subject: CN=bc942f68-cb33-4a05-a727-3f93e610393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:3f:51:47:df:3b:4e:21:46:f4:3c:9d:88: 87:bb:86:ab:d7:47:e3:64:17:25:69:54:f9:cc:96: f5:bc:ad:a9:c4:e6:f8:89:4c:c0:da:3c:6a:3a:75: 15:19:93:1d:31:55:00:f9:f5:d2:70:a9:28:6e:07: ff:1b:31:d8:34:66:75:3b:ef:4a:62:89:71:72:bc: 15:91:dc:22:30:bf:13:39:7b:60:a0:02:06:74:cc: 70:22:8c:03:bd:83:19:5d:f2:83:9b:0b:ac:24:14: b3:af:b2:96:87:d6:1c:1b:9d:0a:76:d7:17:5a:61: 32:5c:80:1d:d3:eb:59:b4:b6:8c:25:06:2f:f3:02: 93:8f:94:93:2b:55:15:e8:0d:64:9f:2d:20:2f:ce: 26:9f:63:9a:a7:5e:fd:bd:6d:da:37:37:c9:2b:c2: 8d:2e:8e:7b:b2:81:24:db:45:a1:ae:c8:61:7b:60: dd:24:39:9b:e8:b3:88:dd:19:3f:d6:09:df:4d:f0: dd:58:0b:7f:ee:12:58:09:55:1b:43:5e:fc:c2:28: 7b:39:3a:d3:5e:f8:6e:a5:e5:65:74:2c:fa:17:8f: 66:d8:8e:46:18:cc:b7:c8:a0:2e:b5:dc:f6:69:cf: 34:d7:a0:da:d2:d1:30:a1:5a:4e:d6:9e:19:02:35: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.232.0/24 140.235.128.0/22 IPv6: 2602:fa9b::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54218 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dd:00:a5:cd:01:b2:dc:55:68:75:0b:44:47:a0:c5:e5:09: df:14:9d:7f:aa:e9:f2:c3:0d:1e:0e:9a:57:67:86:28:2c:8c: 1b:ad:94:fc:9b:07:8b:52:73:c0:11:65:cf:53:fd:44:cd:4a: 30:be:4c:42:57:ca:3b:38:a1:59:ef:20:ad:ee:09:21:7d:3c: 76:9a:df:3b:89:ba:93:41:22:86:96:8f:4c:8b:0b:8e:bf:7c: 75:92:03:db:e0:f0:15:1f:d2:13:6c:4b:51:e8:d9:aa:3a:0e: 3f:db:22:a9:b3:28:5a:7f:d6:39:3a:b7:fc:e5:71:b7:d6:7d: bb:85:04:9f:55:69:48:df:c5:3d:4b:44:6e:db:32:2e:d5:d4: 6c:6d:65:ba:d4:d5:41:bb:af:b3:30:f9:f3:c6:97:f9:51:ff: ea:6c:b9:cb:08:2b:61:cd:05:e7:4a:45:23:24:59:c3:73:a6: 0d:a4:d0:f7:a1:4e:24:64:96:69:ff:1a:e9:fc:aa:f3:04:26: 1c:37:b6:28:47:3f:9e:cf:53:71:56:a6:cd:53:12:86:96:b8: 91:a6:43:8d:e0:18:6e:25:81:15:f5:50:bf:7c:ca:81:4a:18: ab:d8:7b:6d:79:e9:4f:c2:52:96:b6:24:c7:c7:04:69:6e:78: 04:a4:cb:c1 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEd2XdGn7ghAy8EtlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAwNzEyNTQyMloXDTI3MDEwNjAxNDUyNlowLzEtMCsGA1UEAxMk YmM5NDJmNjgtY2IzMy00YTA1LWE3MjctM2Y5M2U2MTAzOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEs/UUffO04hRvQ8nYiHu4ar10fjZBclaVT5 zJb1vK2pxOb4iUzA2jxqOnUVGZMdMVUA+fXScKkobgf/GzHYNGZ1O+9KYolxcrwV kdwiML8TOXtgoAIGdMxwIowDvYMZXfKDmwusJBSzr7KWh9YcG50KdtcXWmEyXIAd 0+tZtLaMJQYv8wKTj5STK1UV6A1kny0gL84mn2Oap179vW3aNzfJK8KNLo57soEk 20Whrshhe2DdJDmb6LOI3Rk/1gnfTfDdWAt/7hJYCVUbQ178wih7OTrTXvhupeVl dCz6F49m2I5GGMy3yKAutdz2ac8016Da0tEwoVpO1p4ZAjVoNQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPy7+kTeXKfac+iPdhGe5dsmprH1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i Yzk0MmY2OC1jYjMzLTRhMDUtYTcyNy0zZjkzZTYxMDM5M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1h NzI3LTNmOTNlNjEwMzkzZS9iYzk0MmY2OC1jYjMzLTRhMDUtYTcyNy0zZjkzZTYx MDM5M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXlOgDBAKM64AwDQQCAAIwBwMFACYC+pswGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANPKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE/dAKXNAbLcVWh1C0RH oMXlCd8UnX+q6fLDDR4OmldnhigsjButlPybB4tSc8ARZc9T/UTNSjC+TEJXyjs4 oVnvIK3uCSF9PHaa3zuJupNBIoaWj0yLC46/fHWSA9vg8BUf0hNsS1Ho2ao6Dj/b IqmzKFp/1jk6t/zlcbfWfbuFBJ9VaUjfxT1LRG7bMi7V1GxtZbrU1UG7r7Mw+fPG l/lR/+psucsIK2HNBedKRSMkWcNzpg2k0PehTiRklmn/Gun8qvMEJhw3tihHP57P U3FWps1TEoaWuJGmQ43gGG4lgRX1UL98yoFKGKvYe2156U/CUpa2JMfHBGlueASk y8E= -----END CERTIFICATE-----Generated at Sat Nov 23 07:34:39 2024 by rpki-client on console-fra.rpki-client.org