$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer File: c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer (raw, json) Hash identifier: Jq1W0OnWQlDZzy0juDbqJrYcrUWzZbv8O9PrQbu32Gc= Subject key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858470548AF008D12886E2AEC2700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Aug 2024 00:45:26 +0000 Certificate not after: Tue 01 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 10967 IP: 151.140.0.0/16 IP: 165.130.0.0/16 IP: 207.11.0.0/17 IP: 2601:e000::/24 IP: 2620:105:a000::/44 IP: 2620:1be::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:48:af:00:8d:12:88:6e:2a:ec:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 28 00:45:26 2024 GMT Not After : Dec 1 01:45:26 2026 GMT Subject: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:fd:c0:45:40:72:71:8d:0e:c1:72:0d:29: ee:82:e8:83:bb:b9:4c:f8:2c:7b:ef:6c:37:a7:3d: f0:68:06:e5:c7:4a:6a:15:08:8c:80:fd:6d:c8:5e: 80:bf:d6:e2:7a:b2:d9:55:9e:93:d5:84:1e:ff:ff: 73:ad:54:bf:bd:be:5c:04:cd:77:87:08:a7:a0:6b: be:63:4a:36:6e:ea:0f:21:0a:1c:1d:74:b5:84:05: 48:35:2f:b0:8a:02:e8:04:8a:46:88:6c:b2:c9:a3: ac:84:b5:6c:2a:78:d8:1b:a8:18:18:27:5e:16:f5: 55:a5:21:b0:7a:f2:58:e9:1d:95:29:b4:3b:3d:93: 31:50:25:08:11:15:91:66:5a:a0:a5:10:64:6c:f9: 8b:0e:db:ff:5f:bd:e9:d8:fd:24:7a:d9:0a:13:d7: b3:53:23:b1:28:74:f6:de:de:cb:22:37:71:f2:24: b1:14:4e:17:94:21:c2:f9:75:44:76:d6:75:b4:ab: 21:20:8d:69:ca:fe:00:41:91:98:5a:ef:4a:d5:39: 5a:6a:84:95:bd:35:c0:a1:30:ce:8f:ea:fd:9d:a6: 87:b5:b3:55:69:3d:4b:6b:5c:1d:65:c4:bc:1c:fb: 27:a5:3c:c9:8c:1e:8a:94:07:17:e7:de:24:7c:2a: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 151.140.0.0/16 165.130.0.0/16 207.11.0.0/17 IPv6: 2601:e000::/24 2620:105:a000::/44 2620:1be::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10967 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:05:ce:c3:ee:49:05:c7:f8:51:f6:e3:4f:b5:6a:db:df:7e: b8:23:18:64:63:6e:70:f6:45:55:dc:12:1b:0a:d5:f3:c6:08: 77:ad:f4:43:1c:48:d2:76:e0:a4:11:dc:eb:ce:63:df:c2:04: f2:e0:3b:e8:51:3f:bd:af:24:be:74:2f:5f:57:44:da:aa:d9: 74:79:5b:ec:a9:a5:c4:8c:e2:b8:30:14:64:4b:9e:54:3f:a1: 55:28:c7:65:fd:bd:38:25:46:e3:e0:3a:f7:33:21:79:ae:92: 83:0f:9a:4d:40:e9:6d:b8:60:d1:78:29:de:ec:25:36:3e:1b: d3:c6:4a:ea:63:f1:ce:d4:97:bb:a6:fb:a7:79:c0:5c:c6:3e: 44:9d:8c:b0:61:4e:65:71:b1:f4:60:97:d4:ea:c5:40:34:37: bb:a9:b8:81:c4:45:ba:98:f9:7b:12:1f:25:9a:85:6e:fb:57: 72:d4:86:f5:15:af:0c:38:28:92:40:d9:d4:e7:c7:42:ab:33: 8b:af:c5:17:11:4e:2c:3d:7a:c4:ad:59:39:35:82:e7:b0:19: 9f:17:8c:10:ee:0c:4d:30:c4:1e:3f:ed:43:0c:ea:f2:9e:6a: b7:33:d5:40:73:16:ce:e0:a2:02:f5:5a:b8:e7:7b:fe:94:aa: 8d:c2:44:43 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEcFSK8AjRKIbirsJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgyODAwNDUyNloXDTI2MTIwMTAxNDUyNlowLzEtMCsGA1UEAxMk Yzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15f9wEVAcnGNDsFyDSnuguiDu7lM+Cx772w3 pz3waAblx0pqFQiMgP1tyF6Av9bierLZVZ6T1YQe//9zrVS/vb5cBM13hwinoGu+ Y0o2buoPIQocHXS1hAVINS+wigLoBIpGiGyyyaOshLVsKnjYG6gYGCdeFvVVpSGw evJY6R2VKbQ7PZMxUCUIERWRZlqgpRBkbPmLDtv/X73p2P0ketkKE9ezUyOxKHT2 3t7LIjdx8iSxFE4XlCHC+XVEdtZ1tKshII1pyv4AQZGYWu9K1TlaaoSVvTXAoTDO j+r9naaHtbNVaT1La1wdZcS8HPsnpTzJjB6KlAcX594kfCoeDQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFLneJxbKNjQJvQsM9n2lIbx2gKjVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j OTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M5OTgxYzFmLTViOTAtNGFjNC1i ZDNhLTE3YzU0NTIxNDZjMy9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUy MTQ2YzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MBYEAgABMBADAwCXjAMDAKWCAwQHzwsAMB0EAgACMBcDBAAmAeAD BwQmIAEFoAADBgQmIAG+ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIq1zBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAGBc7D7kkFx/hR9uNPtWrb3364IxhkY25w9kVV3BIbCtXzxgh3rfRDHEjS duCkEdzrzmPfwgTy4DvoUT+9ryS+dC9fV0Taqtl0eVvsqaXEjOK4MBRkS55UP6FV KMdl/b04JUbj4Dr3MyF5rpKDD5pNQOltuGDReCne7CU2PhvTxkrqY/HO1Je7pvun ecBcxj5EnYywYU5lcbH0YJfU6sVANDe7qbiBxEW6mPl7Eh8lmoVu+1dy1Ib1Fa8M OCiSQNnU58dCqzOLr8UXEU4sPXrErVk5NYLnsBmfF4wQ7gxNMMQeP+1DDOrynmq3 M9VAcxbO4KIC9Vq453v+lKqNwkRD -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:34 2024 by rpki-client on console-fra.rpki-client.org