$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer File: 3505b615-7597-4cdc-9539-0a0a5c49dee8.cer (raw, json) Hash identifier: RTUUYnHFrKVd0irvgdHVWhBKH3CeA5eRd6DPzFD7qn4= Subject key identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858484E2170392CFE1747ED18F640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Dec 2024 19:47:19 +0000 Certificate not after: Sun 28 Mar 2027 18:47:19 +0000 Subordinate resources: AS: 25608 IP: 66.85.7.0/24 IP: 2620:8b:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:21:70:39:2c:fe:17:47:ed:18:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 23 19:47:19 2024 GMT Not After : Mar 28 18:47:19 2027 GMT Subject: CN=3505b615-7597-4cdc-9539-0a0a5c49dee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:1e:41:f7:fe:47:bc:c8:9f:48:c5:15:84: 4f:a3:17:ea:8a:5a:02:aa:2e:6f:97:8c:63:05:09: 9e:30:06:32:d9:2f:71:3b:f0:26:4a:3a:77:4a:66: 55:1b:5f:93:36:62:90:c1:73:74:21:5f:84:52:55: c6:e6:b8:eb:77:28:8d:dd:c0:75:84:1a:34:9a:54: 0a:2c:85:62:e0:82:fc:1e:8c:a8:67:70:ad:91:38: 0a:8c:13:f7:ba:80:e3:ad:b6:7d:e2:0b:47:4a:5b: 1d:dd:9a:08:3a:b7:04:02:1a:95:47:b3:7f:8b:e3: 95:b2:43:8b:7a:ad:61:f7:b7:66:75:77:02:38:f7: 23:f3:9a:44:61:0b:1f:1a:97:cb:19:35:2f:43:34: 59:55:2a:92:4d:39:ec:4e:e0:c1:75:10:48:c0:7f: 1b:dc:75:8a:41:91:63:32:bc:0c:ca:f5:5e:33:64: 78:fd:c9:b8:6e:23:37:0b:70:7a:ee:79:e2:80:b1: f6:73:e7:1d:ba:b6:61:ff:ae:b8:5e:84:70:db:d9: 6f:54:23:0e:47:e8:64:23:c6:e6:45:47:80:b2:54: b9:9e:28:a5:82:36:a6:46:7f:85:fc:36:c0:ad:1e: ae:81:db:1b:60:4c:5a:3d:03:4f:99:55:7f:69:25: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.85.7.0/24 IPv6: 2620:8b:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25608 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3e:6d:30:55:72:15:a5:ea:ef:56:66:d8:5b:bb:b7:fd:f9: 81:fa:d2:c3:27:6e:f0:b9:c2:d1:11:78:0e:9a:73:ab:40:55: 57:68:c1:7c:d1:e6:34:f7:d2:ff:d2:59:4d:0e:9b:27:75:f6: 52:6a:62:7e:24:4d:71:dd:b7:51:00:63:44:33:07:c8:c0:72: 10:3d:e5:7c:2a:91:d9:47:cd:62:b6:6a:6e:a7:2a:e6:d8:3a: 2c:2a:4d:e2:f1:e0:bc:35:ed:36:86:7b:9f:80:3d:7a:31:3f: 2b:d4:23:8d:c7:b2:bf:f3:9a:ff:b7:a5:12:dc:59:0e:d6:42: c9:c3:0f:c2:a7:43:df:df:49:7d:af:e5:38:60:cd:0b:f6:20: c4:d6:ab:e7:7b:52:09:94:51:62:57:7e:41:d2:19:a3:03:e9: 98:55:0f:ed:44:6f:18:d8:19:3b:37:9e:44:f2:05:8e:28:51: 0f:89:1e:c9:49:1d:07:f9:3b:18:d7:45:fe:19:94:39:5a:91: 46:cd:20:b3:4b:59:66:bb:6c:24:3e:ef:b7:a0:45:3b:a7:d8: 11:5f:92:6f:8d:8b:b8:b4:70:8a:4e:cb:d3:1a:9a:2d:19:8f: d1:31:ce:be:31:f5:3b:37:f6:c5:eb:e0:ab:95:49:b0:d0:86: 18:bd:6c:95 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEhOIXA5LP4XR+0Y9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIyMzE5NDcxOVoXDTI3MDMyODE4NDcxOVowLzEtMCsGA1UEAxMk MzUwNWI2MTUtNzU5Ny00Y2RjLTk1MzktMGEwYTVjNDlkZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYIeQff+R7zIn0jFFYRPoxfqiloCqi5vl4xj BQmeMAYy2S9xO/AmSjp3SmZVG1+TNmKQwXN0IV+EUlXG5rjrdyiN3cB1hBo0mlQK LIVi4IL8HoyoZ3CtkTgKjBP3uoDjrbZ94gtHSlsd3ZoIOrcEAhqVR7N/i+OVskOL eq1h97dmdXcCOPcj85pEYQsfGpfLGTUvQzRZVSqSTTnsTuDBdRBIwH8b3HWKQZFj MrwMyvVeM2R4/cm4biM3C3B67nnigLH2c+cdurZh/664XoRw29lvVCMOR+hkI8bm RUeAslS5niilgjamRn+F/DbArR6ugdsbYExaPQNPmVV/aSUC4wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDFVq+cwGiv0QKYBC6fLD8O0nfW0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z NTA1YjYxNS03NTk3LTRjZGMtOTUzOS0wYTBhNWM0OWRlZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzM1MDViNjE1LTc1OTctNGNkYy05 NTM5LTBhMGE1YzQ5ZGVlOC8zNTA1YjYxNS03NTk3LTRjZGMtOTUzOS0wYTBhNWM0 OWRlZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABCVQcwDwQCAAIwCQMHACYgAItgADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJkCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZPm0wVXIVpervVmbYW7u3/fmB +tLDJ27wucLREXgOmnOrQFVXaMF80eY099L/0llNDpsndfZSamJ+JE1x3bdRAGNE MwfIwHIQPeV8KpHZR81itmpupyrm2DosKk3i8eC8Ne02hnufgD16MT8r1CONx7K/ 85r/t6US3FkO1kLJww/Cp0Pf30l9r+U4YM0L9iDE1qvne1IJlFFiV35B0hmjA+mY VQ/tRG8Y2Bk7N55E8gWOKFEPiR7JSR0H+TsY10X+GZQ5WpFGzSCzS1lmu2wkPu+3 oEU7p9gRX5JvjYu4tHCKTsvTGpotGY/RMc6+MfU7N/bF6+CrlUmw0IYYvWyV -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org