$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer File: 3194b2e8-7001-4efa-9998-f4eded0d24d2.cer (raw, json) Hash identifier: +EuvaQ4bdOZKxbqu8Hrz3Bzx7Ek0SI0pwsov0yOaxyU= Subject key identifier: DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584813D340FD490C0D823A2C6C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Dec 2024 22:32:54 +0000 Certificate not after: Sun 07 Mar 2027 22:32:54 +0000 Subordinate resources: AS: 399081 IP: 104.151.144.0 -- 104.151.175.255 IP: 2606:ce40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:13:d3:40:fd:49:0c:0d:82:3a:2c:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 2 22:32:54 2024 GMT Not After : Mar 7 22:32:54 2027 GMT Subject: CN=3194b2e8-7001-4efa-9998-f4eded0d24d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:37:87:0d:3d:7b:d2:e5:9f:d1:8a:62:c1: fb:eb:4f:75:30:2c:cf:54:ef:93:2c:f6:c3:7e:98: b3:a1:87:17:41:ef:60:a9:66:ad:75:27:d9:f8:b4: ef:a9:67:27:09:18:ea:63:9b:4c:f8:16:6c:b6:12: dc:5d:ee:c5:91:69:66:d8:b9:30:1b:9a:6b:06:3b: 95:d3:48:b6:9b:48:b5:d4:70:cb:c6:50:df:f1:27: f2:ff:66:3c:0a:5b:ea:2e:a0:4d:e6:ac:d1:44:6b: a9:d0:45:1b:7e:c5:f8:79:ec:9c:2f:79:b3:16:9f: f2:87:7a:1a:12:69:95:06:c9:16:8d:42:36:a9:28: a7:a1:42:46:36:88:f3:ab:20:c0:6a:7e:0c:c8:35: 5e:a5:34:24:36:dc:7f:42:42:da:06:04:35:a2:b9: f7:39:c8:f2:b1:38:d6:bb:cc:68:ad:de:6f:c1:bc: 60:86:85:5f:da:94:24:0c:e5:c0:15:33:b8:88:b1: 2f:4d:76:43:1f:21:14:76:90:f3:cc:fe:37:9f:27: 28:44:12:9f:e9:8c:37:b2:ab:b8:ba:9c:ef:5d:22: 88:0f:78:00:60:d3:e4:9c:d0:95:fb:80:fb:16:07: ab:28:1f:cf:a5:88:0b:87:1d:c0:42:1a:37:21:91: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.151.144.0-104.151.175.255 IPv6: 2606:ce40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399081 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:57:70:e9:d2:c5:dc:69:d8:a7:a4:69:0e:fc:d6:b0:89:ae: 6c:1a:ee:81:64:8a:f2:01:8d:5a:3c:e2:10:23:05:f0:81:f5: c7:b3:3e:a9:31:f0:6f:d7:5b:75:84:e5:45:eb:bd:4a:06:d8: 29:a2:28:b0:a7:83:fb:fa:c7:0a:48:ad:98:ee:27:ee:55:62: cd:1c:8a:33:54:3d:98:e8:b1:28:78:81:87:a0:d0:98:dc:14: 0f:67:d3:59:0c:c0:be:ae:df:e7:7c:28:d6:5c:ed:e8:f7:71: 8d:e2:ca:45:f0:cf:5c:2d:58:a3:e9:71:1d:7b:2e:b7:2b:b4: 8c:ed:b1:49:ee:51:ce:3a:5e:45:c7:b5:7f:5c:5c:75:62:8a: d8:2a:49:90:98:a0:65:1e:cd:fb:f7:4c:8a:72:0e:25:1f:8d: 89:ad:5a:bc:d7:9f:7c:38:13:61:d1:76:e9:92:71:76:4c:06: a6:30:60:95:43:5b:7c:b1:1e:54:17:f4:fb:98:82:14:1f:16: fc:b8:5b:6c:f2:7d:5d:ca:8d:aa:c0:ad:9d:0c:1c:a1:d7:d2: f4:b6:5a:27:6a:ef:24:53:70:12:2c:5e:de:ca:7d:eb:c5:89: ab:0f:d1:a7:51:ee:cf:7f:ee:79:2c:dc:5f:84:92:df:a7:73: b1:92:62:1e -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEgT00D9SQwNgjosbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwMjIyMzI1NFoXDTI3MDMwNzIyMzI1NFowLzEtMCsGA1UEAxMk MzE5NGIyZTgtNzAwMS00ZWZhLTk5OTgtZjRlZGVkMGQyNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH03hw09e9Lln9GKYsH76091MCzPVO+TLPbD fpizoYcXQe9gqWatdSfZ+LTvqWcnCRjqY5tM+BZsthLcXe7FkWlm2LkwG5prBjuV 00i2m0i11HDLxlDf8Sfy/2Y8ClvqLqBN5qzRRGup0EUbfsX4eeycL3mzFp/yh3oa EmmVBskWjUI2qSinoUJGNojzqyDAan4MyDVepTQkNtx/QkLaBgQ1orn3OcjysTjW u8xord5vwbxghoVf2pQkDOXAFTO4iLEvTXZDHyEUdpDzzP43nycoRBKf6Yw3squ4 upzvXSKID3gAYNPknNCV+4D7FgerKB/PpYgLhx3AQho3IZEc1wIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFNreLcVebQ8ZMgIquA5o0fvsb4nsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z MTk0YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVkZWQwZDI0ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMxOTRiMmU4LTcwMDEtNGVmYS05 OTk4LWY0ZWRlZDBkMjRkMi8zMTk0YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVkZWQw ZDI0ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBQEAgABMA4wDAMEBGiXkAMEBGiXoDANBAIAAjAHAwUAJgbOQDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGFukwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf1dw6dLF3GnYp6Rp DvzWsImubBrugWSK8gGNWjziECMF8IH1x7M+qTHwb9dbdYTlReu9SgbYKaIosKeD +/rHCkitmO4n7lVizRyKM1Q9mOixKHiBh6DQmNwUD2fTWQzAvq7f53wo1lzt6Pdx jeLKRfDPXC1Yo+lxHXsutyu0jO2xSe5RzjpeRce1f1xcdWKK2CpJkJigZR7N+/dM inIOJR+Nia1avNeffDgTYdF26ZJxdkwGpjBglUNbfLEeVBf0+5iCFB8W/LhbbPJ9 XcqNqsCtnQwcodfS9LZaJ2rvJFNwEixe3sp968WJqw/Rp1Huz3/ueSzcX4SS36dz sZJiHg== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org