$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer File: d3bf923d-6c9d-4713-887f-1f30075cf850.cer (raw, json) Hash identifier: s768oERIvqxa9C6qPM79wXhLdp3NcTbeOE+gfxOa6dY= Subject key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847EC855B9196A1BD25DAAC3C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Nov 2024 20:39:25 +0000 Certificate not after: Mon 14 Sep 2026 19:16:06 +0000 Subordinate resources: AS: 32746 AS: 53281 AS: 63427 IP: 199.175.56.0/22 IP: 199.201.96.0/21 IP: 204.8.88.0/22 IP: 208.86.40.0/22 IP: 216.129.152.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ec:85:5b:91:96:a1:bd:25:da:ac:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 18 20:39:25 2024 GMT Not After : Sep 14 19:16:06 2026 GMT Subject: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:f9:0f:f6:20:a3:d4:db:43:43:37:5a:be: 35:25:72:34:87:c9:13:38:42:6a:60:5c:9a:97:77: ba:a9:55:9b:c2:f8:59:fc:39:a9:65:c2:a6:29:63: 65:00:a8:05:92:37:df:26:13:7d:ae:4d:03:c6:1c: be:03:fc:08:c9:e9:2c:55:c7:e7:70:29:26:70:8f: 55:f7:23:c7:56:4d:a0:bb:f4:cd:dd:b5:8c:56:35: a4:0c:b2:e8:54:a4:16:40:ae:ee:0c:d9:c7:2a:ac: 11:91:94:04:2f:b9:07:03:06:1d:7c:15:21:f6:c3: e3:44:6d:5e:1c:39:2b:da:ae:4f:d7:95:53:33:cb: 47:81:bf:df:17:84:b3:17:4e:a4:cc:ea:e5:d2:c9: 37:d4:f0:4e:0e:51:15:55:9b:26:7a:eb:55:c6:69: 71:b8:87:22:17:d9:a2:8b:98:4e:dc:fd:af:fd:c0: da:37:6e:e6:28:98:d4:1e:3b:49:46:72:72:33:2d: de:54:09:18:2e:04:e4:1e:67:d8:b4:d4:35:a5:22: 4f:44:c4:64:06:fa:43:0a:14:58:71:d4:5b:d9:70: f2:e5:1f:8b:e8:cc:79:12:4c:e3:4e:b0:61:b1:e5: 28:1f:00:6a:a2:2f:74:4e:74:23:7e:30:56:06:1b: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.175.56.0/22 199.201.96.0/21 204.8.88.0/22 208.86.40.0/22 216.129.152.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32746 53281 63427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c6:fd:13:35:44:ee:92:f2:ca:5d:8b:a0:42:04:92:80:8c: 25:57:33:76:6d:a0:7b:7d:25:6c:e8:7d:e3:ac:d4:cd:20:38: b9:bc:11:72:d3:d5:66:b2:eb:0e:7f:c3:ab:ee:1c:43:d4:0f: 5e:b7:21:7c:d2:23:5d:a3:db:82:80:a5:63:54:17:f1:1b:36: 3a:cc:74:2a:00:fb:20:99:9c:45:3e:1f:9d:41:13:51:52:a3: ef:c7:22:b4:91:2d:1c:62:c2:36:a7:f5:c7:67:97:e4:13:74: c2:12:8d:8e:17:3d:16:3e:92:bb:2b:b9:65:57:9d:98:fb:99: e9:f2:bb:00:c8:d3:8f:6a:d1:3b:94:76:b9:bb:70:2b:5d:4f: 57:4e:8b:c7:f8:64:d4:62:1f:9a:3f:16:17:a8:b5:a1:6d:47: 91:58:f6:18:a9:92:63:8e:25:35:e1:a1:f9:db:b2:a3:1d:a6: 75:34:53:c7:24:9b:73:e4:54:08:50:25:b5:ef:34:4c:c0:0b: c1:1e:b1:9c:0c:5e:f9:79:ae:3f:58:f2:0a:ad:44:15:14:af: 85:f9:fa:be:63:55:c6:ef:e0:e7:23:00:e1:f3:6f:ee:2e:e4: 99:af:76:bc:86:e4:5c:f8:2a:f5:67:ef:f6:07:39:a9:77:5a: 9d:23:82:95 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEfshVuRlqG9JdqsPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTExODIwMzkyNVoXDTI2MDkxNDE5MTYwNlowLzEtMCsGA1UEAxMk ZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNmODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEr5D/Ygo9TbQ0M3Wr41JXI0h8kTOEJqYFya l3e6qVWbwvhZ/DmpZcKmKWNlAKgFkjffJhN9rk0Dxhy+A/wIyeksVcfncCkmcI9V 9yPHVk2gu/TN3bWMVjWkDLLoVKQWQK7uDNnHKqwRkZQEL7kHAwYdfBUh9sPjRG1e HDkr2q5P15VTM8tHgb/fF4SzF06kzOrl0sk31PBODlEVVZsmeutVxmlxuIciF9mi i5hO3P2v/cDaN27mKJjUHjtJRnJyMy3eVAkYLgTkHmfYtNQ1pSJPRMRkBvpDChRY cdRb2XDy5R+L6Mx5EkzjTrBhseUoHwBqoi90TnQjfjBWBhvNkQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFt+lGn7jxY/zMklUlRF+2272sW7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k M2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QzYmY5MjNkLTZjOWQtNDcxMy04 ODdmLTFmMzAwNzVjZjg1MC9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1 Y2Y4NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBALHrzgDBAPHyWADBALMCFgDBALQVigDBAPYgZgw IwYIKwYBBQUHAQgBAf8EFDASoBAwDgICf+oCAwDQIQIDAPfDMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACPG /RM1RO6S8spdi6BCBJKAjCVXM3ZtoHt9JWzofeOs1M0gOLm8EXLT1Way6w5/w6vu HEPUD163IXzSI12j24KApWNUF/EbNjrMdCoA+yCZnEU+H51BE1FSo+/HIrSRLRxi wjan9cdnl+QTdMISjY4XPRY+krsruWVXnZj7menyuwDI049q0TuUdrm7cCtdT1dO i8f4ZNRiH5o/FheotaFtR5FY9hipkmOOJTXhofnbsqMdpnU0U8ckm3PkVAhQJbXv NEzAC8EesZwMXvl5rj9Y8gqtRBUUr4X5+r5jVcbv4OcjAOHzb+4u5JmvdryG5Fz4 KvVn7/YHOal3Wp0jgpU= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:46 2024 by rpki-client on console-ams.rpki-client.org