$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer File: 1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer (raw, json) Hash identifier: Pgda6i3qbLnFzz+JuhIrFQKjfU0PmRrBUDbck0sjTB8= Subject key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858481C95024FBACD2E1BD1C77F70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Dec 2024 01:49:45 +0000 Certificate not after: Thu 11 Mar 2027 01:49:45 +0000 Subordinate resources: AS: 46937 IP: 173.0.96.0/20 IP: 199.115.80.0/22 IP: 199.189.148.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:95:02:4f:ba:cd:2e:1b:d1:c7:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 6 01:49:45 2024 GMT Not After : Mar 11 01:49:45 2027 GMT Subject: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:90:65:55:42:9f:6a:50:92:86:5c:29:a9: 3d:d0:ea:c1:13:9b:c9:4c:36:d0:b1:bc:60:6b:01: cf:b7:ff:87:f4:0f:54:da:1d:8d:55:3f:bf:bf:61: 36:16:be:f3:92:15:2a:37:00:c0:77:1e:aa:77:ce: bc:61:d1:66:02:be:1d:f8:f6:ba:3c:a2:c5:2c:4d: e0:9e:15:6c:8b:49:e6:f3:da:06:89:ca:f4:f2:3f: 06:31:8a:f4:78:13:a6:73:46:c8:ac:33:e1:2c:fd: 98:2b:3f:49:85:05:bd:d7:da:46:27:99:b2:b5:31: f0:fd:6e:60:a3:d2:36:b0:ca:18:09:41:13:1b:bd: f7:cc:26:82:91:ca:8d:80:61:e0:80:8d:c6:b6:cf: 20:e4:a3:97:37:b9:4c:0a:c4:0a:50:b7:63:76:cd: 77:01:7f:05:2f:16:af:7a:8e:74:86:7d:62:76:90: ce:08:8f:04:4e:94:cd:36:23:47:c5:d0:26:bb:b4: aa:d1:e9:4a:06:7d:10:ab:8b:c9:ae:49:93:59:3c: 16:bb:3f:58:71:1c:ff:5b:b6:05:56:7c:23:f9:77: e0:1a:ce:ea:cc:4f:34:7e:5e:60:9c:e0:0f:f7:f8: 5d:74:87:20:58:87:70:c9:22:5f:9e:dc:68:77:4d: 2e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 173.0.96.0/20 199.115.80.0/22 199.189.148.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46937 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a2:45:08:9f:90:02:bf:fa:14:b5:95:8f:02:a0:3e:e3:24: 9e:a8:b1:22:7b:5a:e9:19:05:7f:5e:c1:69:11:57:3c:08:c3: ae:0a:10:7c:67:aa:26:b5:9a:47:b2:0d:26:b2:d4:4e:11:f3: 3e:07:93:9c:42:a2:86:25:c1:c4:28:4b:6e:d6:89:21:34:e4: b2:ae:a3:cc:0a:de:b7:dd:44:28:0c:9b:34:66:55:94:6b:7a: 2b:8b:19:c2:84:ab:28:47:04:28:3e:d6:81:19:73:6f:e6:13: 38:12:bc:5d:0f:5e:58:07:2c:d7:a8:cd:b0:09:da:cf:8a:01: 48:df:f2:b7:a7:a3:27:ec:06:de:2a:9c:cf:76:ed:56:14:5e: 91:29:98:00:9c:34:6b:73:2c:90:21:85:ab:7b:c4:55:07:d3: 83:c6:6b:22:8e:43:db:c2:5c:c1:80:b8:74:00:df:25:1b:58: 0b:13:a2:37:c9:98:f1:de:2a:15:eb:8a:91:46:b4:99:5e:60: e7:10:1f:9a:fc:19:ed:7a:7b:00:8c:0a:a9:ff:d7:3a:97:d2: 31:56:cb:b7:01:1c:03:58:c1:c9:5d:df:a3:16:80:99:70:29: df:eb:fc:23:ab:40:06:3b:6d:42:71:97:4c:22:1f:3c:d1:43: df:e8:04:21 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEgclQJPus0uG9HHf3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwNjAxNDk0NVoXDTI3MDMxMTAxNDk0NVowLzEtMCsGA1UEAxMk MWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJlMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBGQZVVCn2pQkoZcKak90OrBE5vJTDbQsbxg awHPt/+H9A9U2h2NVT+/v2E2Fr7zkhUqNwDAdx6qd868YdFmAr4d+Pa6PKLFLE3g nhVsi0nm89oGicr08j8GMYr0eBOmc0bIrDPhLP2YKz9JhQW919pGJ5mytTHw/W5g o9I2sMoYCUETG733zCaCkcqNgGHggI3Gts8g5KOXN7lMCsQKULdjds13AX8FLxav eo50hn1idpDOCI8ETpTNNiNHxdAmu7Sq0elKBn0Qq4vJrkmTWTwWuz9YcRz/W7YF Vnwj+XfgGs7qzE80fl5gnOAP9/hddIcgWIdwySJfntxod00uXQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFOC8Rm2PX9wjhGJCHCLIbMHu68uOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x YmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFiZDk3ZTdhLWMzMWQtNDE3YS1i YzA3LTFlY2RiOTZiZTA5Zi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2 YmUwOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAStAGADBALHc1ADBALHvZQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDALdZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFuiRQifkAK/+hS1lY8CoD7jJJ6osSJ7 WukZBX9ewWkRVzwIw64KEHxnqia1mkeyDSay1E4R8z4Hk5xCooYlwcQoS27WiSE0 5LKuo8wK3rfdRCgMmzRmVZRreiuLGcKEqyhHBCg+1oEZc2/mEzgSvF0PXlgHLNeo zbAJ2s+KAUjf8renoyfsBt4qnM927VYUXpEpmACcNGtzLJAhhat7xFUH04PGayKO Q9vCXMGAuHQA3yUbWAsTojfJmPHeKhXripFGtJleYOcQH5r8Ge16ewCMCqn/1zqX 0jFWy7cBHANYwcld36MWgJlwKd/r/COrQAY7bUJxl0wiHzzRQ9/oBCE= -----END CERTIFICATE-----Generated at Fri Dec 27 07:10:05 2024 by rpki-client on console-fra.rpki-client.org