$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer File: f08438f2-f343-4b2c-b0be-ac56b734d48d.cer (raw, json) Hash identifier: aqLss/2f02wjX52ersLp4PPEqDARfg4QA6tB+Oh55rc= Subject key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584779875F3FA0559355989AA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Oct 2024 16:05:31 +0000 Certificate not after: Mon 11 Jan 2027 17:05:31 +0000 Subordinate resources: AS: 17303 AS: 46933 IP: 185.212.4.0/24 IP: 195.85.116.0/24 IP: 206.55.212.0/24 IP: 208.67.108.0/22 IP: 216.250.99.0/24 IP: 2605:dec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:87:5f:3f:a0:55:93:55:98:9a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 8 16:05:31 2024 GMT Not After : Jan 11 17:05:31 2027 GMT Subject: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:77:3c:fe:db:6a:3a:1f:b1:ef:2f:14:4f: bf:5d:15:cb:7c:28:04:f9:d5:50:3b:c4:6f:1c:32: a3:b1:ea:a7:9d:8b:73:fd:6a:64:57:59:90:81:dc: 56:b9:57:f5:67:4a:e8:f9:81:36:41:c8:a4:18:95: cd:49:fa:96:cc:65:f0:03:a7:9a:47:41:e4:50:fe: da:6b:15:09:f2:98:da:92:57:1f:3a:07:d0:24:89: 2d:2f:2a:f7:bd:e2:d0:2f:36:c3:60:14:2d:81:c5: 1b:db:24:ea:e3:ec:8d:9d:a5:09:95:31:9f:93:89: 3e:95:85:01:85:71:de:bd:e0:61:28:89:e0:5b:0a: 5f:2f:05:c6:21:52:4a:e2:1a:cc:68:83:b4:35:0f: e1:8a:23:f0:db:87:c9:4b:8f:f9:c2:a6:79:ef:12: 98:32:c8:1f:7d:11:cc:7f:16:40:dc:ed:72:99:db: 5b:40:02:80:3f:05:36:24:cb:e2:97:2d:86:a5:2b: ed:25:cf:7c:8e:b8:e6:6f:37:bf:cc:ca:d2:7c:d4: 49:0c:7e:cb:62:a3:d5:1d:12:f2:a5:7f:e1:a5:7c: 64:b2:f3:5d:a9:db:02:b2:79:c1:f1:f7:22:fd:0e: 2a:d2:7b:d3:50:a3:5b:9b:ad:1a:22:cf:04:17:17: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 185.212.4.0/24 195.85.116.0/24 206.55.212.0/24 208.67.108.0/22 216.250.99.0/24 IPv6: 2605:dec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17303 46933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:13:90:96:df:99:31:8f:27:17:9a:63:a7:b1:a1:00:31:82: d6:5a:c8:23:bd:f9:95:0b:d9:85:5e:e0:2e:dc:9a:f6:86:e2: cf:03:18:ef:df:4a:f6:16:e8:21:0c:c4:b1:ac:2a:03:ef:28: bd:99:c7:61:08:e7:60:46:96:dd:e1:2d:68:d2:ca:78:cd:ed: 21:5e:6f:c2:64:3f:e1:25:3b:ee:6c:50:55:07:7f:15:55:58: cb:90:17:69:48:91:bf:39:69:19:37:f7:b3:d9:38:61:1e:ef: b9:7a:10:f1:68:d2:d3:45:4d:46:87:fe:a6:85:64:95:de:c2: d2:be:71:63:9e:c8:fd:58:11:e0:03:92:b0:7e:61:03:d1:0c: eb:b7:24:45:b4:47:43:b1:f1:ad:a7:59:d4:a8:4a:c5:30:39: 5b:34:db:c9:34:d5:d9:02:6f:dd:0b:31:e3:50:df:c2:bc:ca: a3:62:2b:77:74:d8:f7:43:4f:73:39:cb:c4:f4:96:06:47:36: 6c:1e:3a:2a:8d:d0:c4:6b:cc:5d:fe:86:35:fd:ff:15:94:d3: 92:ef:5a:4e:0b:f6:5b:e5:50:d4:62:3d:04:9e:a5:0f:46:e7: 0f:1c:b8:1a:5c:55:7c:2e:3d:14:11:e9:c9:c2:b6:38:e1:2b: e8:d7:c8:37 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEd5h18/oFWTVZiaooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAwODE2MDUzMVoXDTI3MDExMTE3MDUzMVowLzEtMCsGA1UEAxMk ZjA4NDM4ZjItZjM0My00YjJjLWIwYmUtYWM1NmI3MzRkNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bZ3PP7bajofse8vFE+/XRXLfCgE+dVQO8Rv HDKjseqnnYtz/WpkV1mQgdxWuVf1Z0ro+YE2QcikGJXNSfqWzGXwA6eaR0HkUP7a axUJ8pjaklcfOgfQJIktLyr3veLQLzbDYBQtgcUb2yTq4+yNnaUJlTGfk4k+lYUB hXHeveBhKIngWwpfLwXGIVJK4hrMaIO0NQ/hiiPw24fJS4/5wqZ57xKYMsgffRHM fxZA3O1ymdtbQAKAPwU2JMvily2GpSvtJc98jrjmbze/zMrSfNRJDH7LYqPVHRLy pX/hpXxksvNdqdsCsnnB8fci/Q4q0nvTUKNbm60aIs8EFxd4LwIDAQABo4IERjCC BEIwHQYDVR0OBBYEFAwZuQcWzhv4JEfgBZwCwDCWphdnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m MDg0MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2YjczNGQ0OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2YwODQzOGYyLWYzNDMtNGIyYy1i MGJlLWFjNTZiNzM0ZDQ4ZC9mMDg0MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2Yjcz NGQ0OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAC51AQDBADDVXQDBADON9QDBALQQ2wDBADY+mMw DQQCAAIwBwMFACYF3sAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICQ5cCAwC3VTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2E5CW35kxjycXmmOnsaEAMYLWWsgjvfmVC9mFXuAu3Jr2huLPAxjv 30r2FughDMSxrCoD7yi9mcdhCOdgRpbd4S1o0sp4ze0hXm/CZD/hJTvubFBVB38V VVjLkBdpSJG/OWkZN/ez2ThhHu+5ehDxaNLTRU1Gh/6mhWSV3sLSvnFjnsj9WBHg A5KwfmED0QzrtyRFtEdDsfGtp1nUqErFMDlbNNvJNNXZAm/dCzHjUN/CvMqjYit3 dNj3Q09zOcvE9JYGRzZsHjoqjdDEa8xd/oY1/f8VlNOS71pOC/Zb5VDUYj0EnqUP RucPHLgaXFV8Lj0UEenJwrY44Svo18g3 -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:36 2024 by rpki-client on console-fra.rpki-client.org