$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer File: 27b41e1f-1561-4820-9e8b-d00057b5083a.cer (raw, json) Hash identifier: xNi0ab7Ohq/NRFFYpZuCXDTSON+cnSdCSpj1T2QzES8= Subject key identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584843E1A4739CC09CE1F3569E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 03:40:41 +0000 Certificate not after: Thu 25 Mar 2027 02:40:41 +0000 Subordinate resources: IP: 45.59.150.0/24 IP: 207.174.59.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:e1:a4:73:9c:c0:9c:e1:f3:56:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 20 03:40:41 2024 GMT Not After : Mar 25 02:40:41 2027 GMT Subject: CN=27b41e1f-1561-4820-9e8b-d00057b5083a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:bc:d5:10:3f:20:99:f2:20:5a:e9:f0:e1: 13:c5:be:cc:96:a8:ad:38:87:65:ac:03:0e:07:f9: 00:4c:f1:e0:c2:36:8d:1e:29:ca:ea:94:8e:82:9d: 16:ea:81:55:f1:81:25:76:d6:21:f6:ba:28:d8:a4: 98:c1:d3:04:bd:ca:e0:7a:e7:be:3d:18:dc:68:73: 96:b4:c5:4d:c3:b3:5c:c2:44:07:12:cf:d1:da:82: cc:41:75:55:37:56:45:0f:48:fa:73:81:76:da:1f: ce:3f:99:56:7c:ef:5b:6a:96:85:df:cf:0c:3e:87: 88:9f:79:6b:9f:a4:56:49:a3:6b:64:28:d5:0f:4a: d2:d6:46:e7:8c:fc:5d:ff:48:e5:9f:30:43:82:d1: 30:d5:69:6d:fd:f9:ac:ec:3e:4d:b8:1b:d0:66:2b: f1:36:79:5e:ab:f9:cd:1a:8b:71:01:2f:d4:7f:25: 7a:02:99:79:74:05:c7:e2:9b:c0:26:bb:98:2a:47: ac:e9:5c:7a:9b:15:82:2d:2a:bb:5a:65:04:0e:66: 2d:e6:85:1a:fe:b4:31:a6:24:fb:2c:cd:a8:25:21: 16:71:7d:3d:e1:da:7e:ee:85:61:ad:f2:c8:6e:4c: 3d:50:9d:6f:fa:f1:f9:76:b8:41:05:64:16:12:60: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 45.59.150.0/24 207.174.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:48:c0:6e:c6:94:33:8f:dd:de:4b:44:ac:8a:cc:86:86:e5: 84:9a:c0:f0:78:39:43:90:b8:72:fb:13:3d:90:fc:31:f8:0b: 1e:49:55:fa:34:2c:34:df:5a:fa:f8:cb:76:16:37:88:7c:ac: 0d:88:74:a3:1d:13:bc:7e:35:ab:76:59:11:d6:af:a1:56:e3: 6c:a9:6b:27:d7:bd:72:1b:3a:79:49:18:40:f1:46:66:ff:a5: 30:22:02:79:06:61:c3:08:32:18:75:c5:7a:a8:c7:cf:6a:ba: 59:54:e6:9a:20:24:23:32:8f:31:78:70:2f:e7:2e:eb:dd:fa: 62:36:9f:e3:16:df:f0:a7:91:de:31:a6:ce:74:b3:da:e2:82: 3b:b2:c7:1b:c3:c2:0a:ac:fc:46:b0:c9:7f:86:2f:62:00:d6: da:5f:43:c4:3c:ed:29:2a:46:ae:23:8b:68:d7:63:a9:e3:b8: 21:d6:be:f1:35:d9:29:81:dd:e4:23:3b:c3:c1:23:05:67:f8: 1d:d0:98:d4:9a:47:15:1a:d4:28:3f:22:31:34:84:2e:57:f1: 41:b0:c1:c5:11:c3:d5:10:36:2c:b6:1a:b5:18:15:05:da:dc: a9:2c:e8:f6:b1:32:49:ab:4c:e1:f1:ce:51:9f:a9:43:15:54: db:c5:80:38 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEhD4aRznMCc4fNWngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIyMDAzNDA0MVoXDTI3MDMyNTAyNDA0MVowLzEtMCsGA1UEAxMk MjdiNDFlMWYtMTU2MS00ODIwLTllOGItZDAwMDU3YjUwODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUy81RA/IJnyIFrp8OETxb7MlqitOIdlrAMO B/kATPHgwjaNHinK6pSOgp0W6oFV8YEldtYh9roo2KSYwdMEvcrgeue+PRjcaHOW tMVNw7NcwkQHEs/R2oLMQXVVN1ZFD0j6c4F22h/OP5lWfO9bapaF388MPoeIn3lr n6RWSaNrZCjVD0rS1kbnjPxd/0jlnzBDgtEw1Wlt/fms7D5NuBvQZivxNnleq/nN GotxAS/UfyV6Apl5dAXH4pvAJruYKkes6Vx6mxWCLSq7WmUEDmYt5oUa/rQxpiT7 LM2oJSEWcX094dp+7oVhrfLIbkw9UJ1v+vH5drhBBWQWEmBeqQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFN3Y9hrDDULJZtfn0nY/342DX1nYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y N2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdiNTA4M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI3YjQxZTFmLTE1NjEtNDgyMC05 ZThiLWQwMDA1N2I1MDgzYS8yN2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdi NTA4M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAtO5YDBADPrjswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAUjAbsaUM4/d 3ktErIrMhoblhJrA8Hg5Q5C4cvsTPZD8MfgLHklV+jQsNN9a+vjLdhY3iHysDYh0 ox0TvH41q3ZZEdavoVbjbKlrJ9e9chs6eUkYQPFGZv+lMCICeQZhwwgyGHXFeqjH z2q6WVTmmiAkIzKPMXhwL+cu6936Yjaf4xbf8KeR3jGmznSz2uKCO7LHG8PCCqz8 RrDJf4YvYgDW2l9DxDztKSpGriOLaNdjqeO4Ida+8TXZKYHd5CM7w8EjBWf4HdCY 1JpHFRrUKD8iMTSELlfxQbDBxRHD1RA2LLYatRgVBdrcqSzo9rEySatM4fHOUZ+p QxVU28WAOA== -----END CERTIFICATE-----Generated at Fri Dec 27 14:25:25 2024 by rpki-client on console-fra.rpki-client.org