$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer File: c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer (raw, json) Hash identifier: jL3Opa/kq7ghqdIuwap8AZ4yRUdxI+OipVYQfJUcQ68= Subject key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584781EDCE5E39BAFD859A0C81EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Oct 2024 16:18:23 +0000 Certificate not after: Wed 25 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 40263 AS: 63210 IP: 104.244.96.0/22 IP: 199.34.242.0/23 IP: 199.48.208.0/22 IP: 199.116.176.0/22 IP: 208.71.104.0/22 IP: 2605:2c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:81:ed:ce:5e:39:ba:fd:85:9a:0c:81:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 11 16:18:23 2024 GMT Not After : Feb 25 01:45:15 2026 GMT Subject: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:83:45:b4:23:3d:b2:63:b8:26:6f:3f:89: 45:9d:ef:5e:67:f4:2e:7c:a6:50:27:b5:26:ef:83: 8a:6a:48:f7:57:76:a5:96:5d:c0:d2:31:e5:bb:01: 1d:63:0e:00:57:44:70:41:b6:1b:8b:db:52:88:9d: f7:fe:dd:e9:a8:d6:de:d5:70:53:01:aa:38:a2:10: 07:0e:de:2b:d5:c2:aa:26:cc:13:90:30:9c:c3:b7: b0:de:e6:7a:a4:bc:7d:7e:76:30:ab:d5:53:f0:7f: 8f:7e:cc:8c:ca:62:ca:17:7c:ab:2e:af:63:c1:b6: 4a:07:05:1d:64:ba:bc:d2:bd:10:7b:f6:67:2e:18: 01:25:55:6b:b3:09:fb:c4:9f:a4:a0:14:86:67:84: cd:4a:92:20:44:14:c1:5b:56:46:38:7d:51:14:39: 80:79:d8:6e:00:32:d3:d7:7f:a9:97:6f:95:b8:0b: a2:1c:d1:97:1d:46:2f:9b:28:1c:39:79:b1:ab:fc: d4:4c:d1:1b:53:d7:80:35:9b:5e:0d:fd:c6:d7:e8: 76:5b:39:fe:cf:4c:3c:69:4f:2d:7c:15:34:45:d4: f6:53:ca:33:0b:2d:90:8d:32:ef:a3:87:a9:57:d4: a0:e4:3a:ff:8a:36:51:3c:bf:de:ed:f1:3b:e5:c3: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.244.96.0/22 199.34.242.0/23 199.48.208.0/22 199.116.176.0/22 208.71.104.0/22 IPv6: 2605:2c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40263 63210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e7:d2:c3:65:0a:6e:54:ad:28:b4:a9:02:bb:91:95:50:f5: 63:59:4e:d3:d3:c1:4a:60:fa:db:c4:69:fb:40:f7:0f:08:c3: f2:54:f5:bc:35:52:e2:8d:17:80:59:50:f9:93:1b:8a:72:0f: ee:4c:75:05:18:17:6e:b0:a4:3d:97:0a:a5:1b:e8:de:2d:11: 9c:79:e7:67:81:0a:83:d3:4c:5d:c0:96:99:46:07:2a:3e:fe: 8e:e1:fe:ff:b2:ad:5f:6d:df:c9:ae:73:1b:69:95:63:0f:69: d6:80:17:01:09:34:87:62:41:f1:09:97:f2:50:98:14:ba:bd: c8:ff:eb:f2:59:5a:f2:15:1b:af:d2:c7:94:c9:da:29:7c:9e: 02:8f:4a:7d:2a:fb:3c:1e:83:ad:99:85:de:0e:8b:a4:06:68: da:f2:db:cf:a8:65:5d:03:fc:96:06:06:2b:95:76:a9:01:b4: b1:0e:ba:b7:37:34:04:96:d5:24:e1:c3:cb:9d:1d:74:9b:75: bf:27:ca:5e:e5:12:c5:ed:0c:0c:b3:60:3d:f8:d2:f0:61:7f: 89:29:ea:73:29:db:83:2c:c1:1b:bc:23:ee:42:4a:0b:10:e1: b5:3a:69:72:8a:45:f3:ed:8f:89:f4:2d:4a:e5:43:e4:84:43: ba:d0:17:dc -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEeB7c5eObr9hZoMgeowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAxMTE2MTgyM1oXDTI2MDIyNTAxNDUxNVowLzEtMCsGA1UEAxMk YzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWeDRbQjPbJjuCZvP4lFne9eZ/QufKZQJ7Um 74OKakj3V3alll3A0jHluwEdYw4AV0RwQbYbi9tSiJ33/t3pqNbe1XBTAao4ohAH Dt4r1cKqJswTkDCcw7ew3uZ6pLx9fnYwq9VT8H+PfsyMymLKF3yrLq9jwbZKBwUd ZLq80r0Qe/ZnLhgBJVVrswn7xJ+koBSGZ4TNSpIgRBTBW1ZGOH1RFDmAedhuADLT 13+pl2+VuAuiHNGXHUYvmygcOXmxq/zUTNEbU9eANZteDf3G1+h2Wzn+z0w8aU8t fBU0RdT2U8ozCy2QjTLvo4epV9Sg5Dr/ijZRPL/e7fE75cPw1QIDAQABo4IERzCC BEMwHQYDVR0OBBYEFPbindzzmGl8E7noUh1AB4gdIU0IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j OWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M5YWExNTY3LTg5YTktNGNlNC04 YmQ3LWU2MjQ5OTkwOTFlMy9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5 MDkxZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJo9GADBAHHIvIDBALHMNADBALHdLADBALQR2gw DQQCAAIwBwMFACYFLEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAJ1HAgMA9uow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcufSw2UKblStKLSpAruRlVD1Y1lO09PBSmD628Rp+0D3DwjD8lT1 vDVS4o0XgFlQ+ZMbinIP7kx1BRgXbrCkPZcKpRvo3i0RnHnnZ4EKg9NMXcCWmUYH Kj7+juH+/7KtX23fya5zG2mVYw9p1oAXAQk0h2JB8QmX8lCYFLq9yP/r8lla8hUb r9LHlMnaKXyeAo9KfSr7PB6DrZmF3g6LpAZo2vLbz6hlXQP8lgYGK5V2qQG0sQ66 tzc0BJbVJOHDy50ddJt1vyfKXuUSxe0MDLNgPfjS8GF/iSnqcynbgyzBG7wj7kJK CxDhtTppcopF8+2PifQtSuVD5IRDutAX3A== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:23 2024 by rpki-client on console-fra.rpki-client.org