$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer File: c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer (raw, json) Hash identifier: 4s2Ry61kNzFulKcxglsMozx65H/3cXD/W2XhdDsVevk= Subject key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858474DDE783FFEE679B2CED72A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Sep 2024 00:45:26 +0000 Certificate not after: Sun 27 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 106 AS: 22858 IP: 137.100.0.0/16 IP: 165.159.0.0/16 IP: 166.16.0.0/16 IP: 192.5.164.0/24 IP: 192.26.147.0/24 IP: 192.48.143.0/24 IP: 192.73.3.0/24 IP: 192.101.175.0/24 IP: 192.251.90.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:de:78:3f:fe:e6:79:b2:ce:d7:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 23 00:45:26 2024 GMT Not After : Dec 27 01:45:26 2026 GMT Subject: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:03:b4:af:18:b7:1d:7a:08:f7:ef:d1:c6: ea:1f:6e:a1:ec:05:db:1e:3f:e8:98:fa:d9:10:8c: 8a:bb:5d:29:91:07:1b:5a:ab:ad:32:1b:28:60:c9: f1:7a:bd:c8:93:06:9c:21:25:71:b2:6a:b5:92:a7: 30:fa:81:66:8d:d9:45:21:b1:83:54:a2:e7:a7:99: 9d:49:9b:fb:31:69:4c:1f:84:b2:60:83:39:a4:26: 47:cf:85:65:09:4c:e2:e7:28:8d:10:4d:c5:c5:14: e2:95:b3:47:4f:c9:98:2a:f2:47:56:06:d4:3a:83: 5f:dc:ba:29:2d:fc:9d:db:48:33:fb:be:a2:77:27: c0:55:4f:c5:74:16:44:a0:99:ab:44:19:1e:00:93: 8c:3f:6f:97:f5:97:1f:be:da:cc:b3:80:af:35:89: 50:0a:9c:0d:1d:de:74:53:4a:b6:66:69:f0:98:62: d5:f6:c8:80:6c:fe:25:86:41:44:1c:eb:cf:27:d2: 3c:38:2b:58:2e:e4:01:13:4b:f6:a9:a8:19:b2:69: 52:48:28:96:49:45:44:dd:07:04:99:f0:28:91:1b: a1:0f:ea:01:20:b3:f0:49:b1:c5:e4:c7:a5:89:6e: c6:4f:e8:4e:b0:04:4c:34:85:75:54:58:6e:1e:cf: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 137.100.0.0/16 165.159.0.0/16 166.16.0.0/16 192.5.164.0/24 192.26.147.0/24 192.48.143.0/24 192.73.3.0/24 192.101.175.0/24 192.251.90.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 106 22858 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:29:13:23:2d:69:c0:7e:f7:17:61:a0:b5:4b:c3:1d:d1:80: 8a:25:82:26:cf:2d:b0:20:db:58:4b:30:78:36:c8:8a:a6:d5: c8:3c:48:e9:df:5c:15:8d:ec:a3:87:52:59:68:24:0c:bb:cb: d0:f7:a3:34:fa:d1:ea:65:d8:2d:d6:cc:59:48:88:10:c8:32: 6d:25:d6:a7:2a:67:79:d8:b9:a9:34:0b:70:a2:a8:3e:c1:16: 99:98:96:60:08:c2:c2:ff:66:92:e6:75:08:7a:99:1e:91:44: d5:a8:e7:be:27:14:fc:04:a8:f5:45:fc:cc:1f:37:8a:71:83: cb:ba:06:b9:d7:89:d7:3d:71:31:52:65:b0:46:9f:57:68:a1: 18:51:8d:92:8f:84:13:ce:ee:7b:14:6c:88:2d:48:ce:0f:2d: 8e:a2:5d:fd:6b:a4:20:37:0f:de:71:8c:85:5a:b0:a4:67:fa: ac:cd:d1:96:4d:3e:39:72:8d:11:9c:aa:d7:9a:d9:aa:0e:a6: 79:0f:06:40:dd:d2:ba:84:ae:58:d7:b1:1a:60:03:15:48:28: 5b:e7:7f:45:90:ef:11:88:d5:be:2b:34:bb:37:77:b8:8e:27: 52:d4:6e:68:0d:05:87:33:07:e2:e8:cc:6d:5e:50:bb:b1:d6: 39:53:30:22 -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEdN3ng//uZ5ss7XKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkyMzAwNDUyNloXDTI2MTIyNzAxNDUyNlowLzEtMCsGA1UEAxMk YzAxN2VlNmMtMmYxZi00ZDVhLTgyZDktY2RlY2JmZmU2OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYcDtK8Ytx16CPfv0cbqH26h7AXbHj/omPrZ EIyKu10pkQcbWqutMhsoYMnxer3IkwacISVxsmq1kqcw+oFmjdlFIbGDVKLnp5md SZv7MWlMH4SyYIM5pCZHz4VlCUzi5yiNEE3FxRTilbNHT8mYKvJHVgbUOoNf3Lop Lfyd20gz+76idyfAVU/FdBZEoJmrRBkeAJOMP2+X9ZcfvtrMs4CvNYlQCpwNHd50 U0q2ZmnwmGLV9siAbP4lhkFEHOvPJ9I8OCtYLuQBE0v2qagZsmlSSCiWSUVE3QcE mfAokRuhD+oBILPwSbHF5MeliW7GT+hOsARMNIV1VFhuHs8D2QIDAQABo4IESjCC BEYwHQYDVR0OBBYEFMuP64Po0rV7FiA0a+XE+4CmBoZFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MDE3ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVjYmZmZTY4ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MwMTdlZTZjLTJmMWYtNGQ1YS04 MmQ5LWNkZWNiZmZlNjhmYS9jMDE3ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVjYmZm ZTY4ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MDkEAgABMDMDAwCJZAMDAKWfAwMAphADBADABaQDBADAGpMDBADA MI8DBADASQMDBADAZa8DBADA+1owHAYIKwYBBQUHAQgBAf8EDTALoAkwBwIBagIC WUowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAGSkTIy1pwH73F2GgtUvDHdGAiiWCJs8tsCDbWEsweDbIiqbV yDxI6d9cFY3so4dSWWgkDLvL0PejNPrR6mXYLdbMWUiIEMgybSXWpypnedi5qTQL cKKoPsEWmZiWYAjCwv9mkuZ1CHqZHpFE1ajnvicU/ASo9UX8zB83inGDy7oGudeJ 1z1xMVJlsEafV2ihGFGNko+EE87uexRsiC1Izg8tjqJd/WukIDcP3nGMhVqwpGf6 rM3Rlk0+OXKNEZyq15rZqg6meQ8GQN3SuoSuWNexGmADFUgoW+d/RZDvEYjVvis0 uzd3uI4nUtRuaA0FhzMH4ujMbV5Qu7HWOVMwIg== -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:58 2024 by rpki-client on console-fra.rpki-client.org