$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer File: 25cf742f-4f64-4e51-b004-d972a8dd5948.cer (raw, json) Hash identifier: ypyhGIh6e3NuOtUkr0GEAlWQ7bhlWAP0GAi/Q1Floy8= Subject key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858480668AA2C053E144FC1127F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Nov 2024 03:12:37 +0000 Certificate not after: Wed 03 Mar 2027 03:12:37 +0000 Subordinate resources: AS: 401289 IP: 23.129.60.0/24 IP: 2602:f84e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:06:68:aa:2c:05:3e:14:4f:c1:12:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 28 03:12:37 2024 GMT Not After : Mar 3 03:12:37 2027 GMT Subject: CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:44:51:31:d5:23:9c:16:b5:09:24:ad:c7: 79:14:f5:ba:ff:07:bd:74:f9:95:e7:8b:56:c5:01: d7:38:6d:03:0e:dd:4c:fe:33:25:9f:09:61:0c:4a: 97:b8:db:67:ee:18:bf:a4:18:a4:c4:2d:8a:c6:fd: 36:ce:a6:6e:df:80:ca:23:8f:20:7c:38:0a:c3:73: 93:fe:4e:f8:b6:49:95:02:d3:9b:46:4d:13:a7:89: e7:3a:31:8d:73:41:7b:f5:dd:27:9c:df:7d:0c:a3: 96:7a:eb:1b:ad:51:ff:77:83:39:c2:ef:f9:ff:e5: 34:61:20:d2:45:21:12:4d:94:14:63:1e:d5:fa:8f: 9a:e9:19:b2:99:bb:0c:bd:df:51:82:4c:ed:4d:f5: eb:04:d6:24:aa:85:e2:a6:55:36:c2:31:a8:43:db: 11:7f:4c:ad:ed:c9:c3:47:8a:c2:91:11:b5:50:31: 2d:f9:6f:c7:a8:78:ee:38:e1:92:02:43:c5:36:c2: 79:bf:09:05:05:19:6e:8e:1b:45:01:c4:5e:c5:0f: 13:eb:bb:e5:44:8b:a0:6d:c5:94:38:49:06:6f:87: 5a:6a:f2:e2:f4:8c:f8:63:2f:93:34:84:87:ee:72: a4:42:15:46:23:bc:0c:e0:3a:ed:80:89:0e:37:65: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.60.0/24 IPv6: 2602:f84e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:34:e2:04:ac:c3:a8:7f:ce:40:c9:f2:e1:1e:5e:80:e4:3f: 8b:62:1f:84:c9:31:ef:a9:c1:51:ca:d0:a3:d7:62:19:1d:e6: 06:49:7f:6c:9a:c2:f9:be:d7:81:5a:01:de:47:a6:98:a5:f1: c9:2b:af:d6:1c:cc:03:5a:80:c4:a6:a9:31:09:62:9d:f6:e4: 5c:a8:c6:b4:00:75:42:86:42:75:95:e1:b0:e9:c7:19:8e:f9: b4:03:92:e4:f8:b8:13:47:76:cf:2b:bd:1d:52:fd:6c:da:45: cd:74:25:ea:69:f6:3e:51:30:ec:60:5f:b3:98:ab:dc:0f:e4: 2b:17:81:80:5b:78:8b:1a:85:7f:63:42:79:01:85:14:b8:6a: 44:aa:07:85:59:69:5c:b5:a7:cb:1b:e5:e0:69:7a:47:47:38: 37:52:9b:b2:70:2d:d8:e0:72:30:13:0b:24:63:57:b7:8b:94: 46:0f:69:35:61:b3:fa:09:e3:37:52:83:a1:b1:ba:4f:d1:b3: 28:49:41:aa:3c:41:2c:33:26:0a:b4:e5:09:03:15:05:38:65: 9f:f0:39:82:00:71:37:e5:9f:4b:ab:cd:a1:51:1d:8f:41:6e: 4b:8c:21:e9:f7:ed:24:84:31:2c:ef:32:89:33:1a:aa:15:14: 74:a2:4a:9e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEgGaKosBT4UT8ESf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyODAzMTIzN1oXDTI3MDMwMzAzMTIzN1owLzEtMCsGA1UEAxMk MjVjZjc0MmYtNGY2NC00ZTUxLWIwMDQtZDk3MmE4ZGQ1OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy5EUTHVI5wWtQkkrcd5FPW6/we9dPmV54tW xQHXOG0DDt1M/jMlnwlhDEqXuNtn7hi/pBikxC2Kxv02zqZu34DKI48gfDgKw3OT /k74tkmVAtObRk0Tp4nnOjGNc0F79d0nnN99DKOWeusbrVH/d4M5wu/5/+U0YSDS RSESTZQUYx7V+o+a6RmymbsMvd9RgkztTfXrBNYkqoXiplU2wjGoQ9sRf0yt7cnD R4rCkRG1UDEt+W/HqHjuOOGSAkPFNsJ5vwkFBRlujhtFAcRexQ8T67vlRIugbcWU OEkGb4daavLi9Iz4Yy+TNISH7nKkQhVGI7wM4DrtgIkON2XTPQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAehXpghlXa9OPrSOg5xjnsZDK9rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y NWNmNzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcyYThkZDU5NDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI1Y2Y3NDJmLTRmNjQtNGU1MS1i MDA0LWQ5NzJhOGRkNTk0OC8yNWNmNzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcyYThk ZDU5NDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgTwwDgQCAAIwCAMGBCYC+E4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsNOIErMOof85AyfLhHl6A5D+L Yh+EyTHvqcFRytCj12IZHeYGSX9smsL5vteBWgHeR6aYpfHJK6/WHMwDWoDEpqkx CWKd9uRcqMa0AHVChkJ1leGw6ccZjvm0A5Lk+LgTR3bPK70dUv1s2kXNdCXqafY+ UTDsYF+zmKvcD+QrF4GAW3iLGoV/Y0J5AYUUuGpEqgeFWWlctafLG+XgaXpHRzg3 UpuycC3Y4HIwEwskY1e3i5RGD2k1YbP6CeM3UoOhsbpP0bMoSUGqPEEsMyYKtOUJ AxUFOGWf8DmCAHE35Z9Lq82hUR2PQW5LjCHp9+0khDEs7zKJMxqqFRR0okqe -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org