$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer File: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer (raw, json) Hash identifier: ejsoMO73YTfXOrSccfQ75fBnQKuBOXEHstvU+Xxem9k= Subject key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584766FEA204D6142C5373538900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Oct 2024 00:45:27 +0000 Certificate not after: Tue 05 Jan 2027 01:45:27 +0000 Subordinate resources: AS: 398949 AS: 400952 IP: 192.64.206.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:fe:a2:04:d6:14:2c:53:73:53:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 2 00:45:27 2024 GMT Not After : Jan 5 01:45:27 2027 GMT Subject: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:7a:97:5f:e0:f8:f0:71:bb:10:ce:e5:a7: 9b:4e:6c:dd:87:1a:20:ee:39:1f:af:d0:f5:f3:b1: 55:26:19:66:ca:0a:1c:aa:2a:89:eb:ae:d8:89:21: cc:a0:dd:c0:6e:29:bd:4c:87:b2:d5:48:cb:06:f0: 65:73:35:45:4a:3f:bd:54:dc:53:78:20:30:d9:35: 0d:a4:41:46:43:6f:a9:c7:dd:14:eb:30:1d:02:ca: 8c:dd:7f:13:2f:22:59:94:00:bf:76:c1:23:fb:20: 67:6b:82:c1:bf:d3:e4:c1:66:39:60:e5:3f:63:19: cb:6f:f0:4e:d8:78:b6:d3:2d:7c:7d:61:34:b2:fa: f0:18:5e:fc:30:c4:07:86:5d:08:e5:71:c1:7c:46: a7:0f:a1:4d:73:39:e5:99:2c:a5:e5:76:5d:b2:c0: d2:04:99:81:91:8f:78:e6:96:71:87:14:61:f6:39: 5f:57:a5:f7:ef:f7:a9:ca:d7:3e:ca:d9:fa:c6:41: 79:bd:bf:93:c5:46:5d:8b:d4:12:fa:30:33:75:ff: ee:bf:f5:0d:e5:cf:c7:9a:85:f8:a9:11:dc:77:e0: b6:86:9a:41:24:a7:89:c0:13:65:76:e1:9a:80:54: ca:bd:68:d3:d8:95:cd:28:8d:30:a9:fa:b8:b5:a1: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.64.206.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398949 400952 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b2:44:9c:5c:d4:37:47:8a:33:8e:e5:27:25:91:0f:c2:50: a8:d8:5d:6a:65:9b:56:a9:f4:ab:13:32:f8:d3:71:db:42:18: f2:d9:e3:ae:31:8b:12:66:4e:e9:06:a9:af:61:6d:4a:c9:66: b8:0d:32:fb:6d:f0:89:51:65:8f:90:76:5f:51:ce:34:8e:d1: 32:94:d0:3f:3d:42:42:e1:a2:64:05:18:62:03:62:f8:97:af: ec:03:26:16:75:6f:ff:4c:46:24:0d:05:b4:1b:43:47:79:76: e9:36:14:40:ca:f3:74:6f:03:70:8a:e4:70:48:f4:00:54:ab: 53:43:42:8b:8e:2d:ab:eb:d1:10:90:29:c4:92:ab:a0:0e:2b: 1e:02:49:80:50:86:b3:7e:18:f1:32:91:73:63:f2:02:bd:29: bf:54:3b:53:2b:c7:5b:92:7c:60:d8:5b:3d:51:08:de:13:9f: 54:39:79:d1:1e:05:0d:e1:0a:0f:65:f2:95:3d:fa:38:e5:46: 25:91:8a:53:4f:84:6e:1b:d7:f6:ed:50:0d:43:26:32:21:3e: d5:cb:73:4a:52:1c:01:37:36:dd:56:1e:ac:1c:79:cd:a9:99: d1:81:c1:70:21:cb:48:73:9e:01:d8:51:47:5d:ed:35:e5:2d: 99:f6:6b:de -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEdm/qIE1hQsU3NTiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAwMjAwNDUyN1oXDTI3MDEwNTAxNDUyN1owLzEtMCsGA1UEAxMk YmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFiNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzp6l1/g+PBxuxDO5aebTmzdhxog7jkfr9D1 87FVJhlmygocqiqJ667YiSHMoN3Abim9TIey1UjLBvBlczVFSj+9VNxTeCAw2TUN pEFGQ2+px90U6zAdAsqM3X8TLyJZlAC/dsEj+yBna4LBv9PkwWY5YOU/YxnLb/BO 2Hi20y18fWE0svrwGF78MMQHhl0I5XHBfEanD6FNcznlmSyl5XZdssDSBJmBkY94 5pZxhxRh9jlfV6X37/epytc+ytn6xkF5vb+TxUZdi9QS+jAzdf/uv/UN5c/HmoX4 qRHcd+C2hppBJKeJwBNlduGagFTKvWjT2JXNKI0wqfq4taEOXwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFPFVajZbzSq7YcClrDe1fuLW1u4KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i ZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JlOTA4OTVhLTNjNDMtNGIzOC1h NWFhLWIxZWJjMjYxYjZmOS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2 MWI2ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAQM4wHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID BhZlAgMGHjgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAV7JEnFzUN0eKM47lJyWRD8JQqNhdamWbVqn0qxMy +NNx20IY8tnjrjGLEmZO6Qapr2FtSslmuA0y+23wiVFlj5B2X1HONI7RMpTQPz1C QuGiZAUYYgNi+Jev7AMmFnVv/0xGJA0FtBtDR3l26TYUQMrzdG8DcIrkcEj0AFSr U0NCi44tq+vREJApxJKroA4rHgJJgFCGs34Y8TKRc2PyAr0pv1Q7UyvHW5J8YNhb PVEI3hOfVDl50R4FDeEKD2XylT36OOVGJZGKU0+EbhvX9u1QDUMmMiE+1ctzSlIc ATc23VYerBx5zamZ0YHBcCHLSHOeAdhRR13tNeUtmfZr3g== -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:45 2024 by rpki-client on console-ams.rpki-client.org