$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer File: 58e96099-0986-4573-bb6b-873a9bcb3747.cer (raw, json) Hash identifier: Q5ioriH7uw05CO1n8hWJditc81dAQ5nFR7wEqvG8Eps= Subject key identifier: 83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584842F578889CC85A4F5BD09200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Dec 2024 19:44:50 +0000 Certificate not after: Wed 24 Mar 2027 18:44:50 +0000 Subordinate resources: AS: 32160 IP: 72.9.112.0/20 IP: 160.32.224.0/20 IP: 2607:f4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:f5:78:88:9c:c8:5a:4f:5b:d0:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 19 19:44:50 2024 GMT Not After : Mar 24 18:44:50 2027 GMT Subject: CN=58e96099-0986-4573-bb6b-873a9bcb3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:62:e5:e4:c7:12:b6:c6:6c:05:fe:63:ed: bc:ad:6b:e3:35:fc:59:ce:7e:f6:27:f2:34:a1:31: 9c:6f:d3:4f:a6:b6:3b:1d:4f:4e:2e:6e:ff:aa:cf: d7:7c:0d:7d:22:aa:14:eb:e4:a6:b9:c6:4f:52:e0: d2:1a:df:5c:ef:67:8e:45:34:79:61:97:21:ac:c2: a9:0c:58:0e:e0:43:08:cc:96:d0:a7:c0:a9:62:dd: 6a:9b:6d:1f:ef:e1:99:e3:3f:69:2d:8d:ff:78:ed: b4:df:f9:c6:72:e9:3e:99:62:34:13:2a:53:bf:06: f9:df:2c:94:b7:c5:fd:6e:53:5f:fe:01:5f:2f:14: a7:26:13:b7:6d:ff:08:cb:cb:55:27:37:41:6e:12: 60:58:d4:ff:ce:fb:a5:52:27:a2:77:fa:e3:3a:fd: 15:7a:26:51:b5:17:4a:8e:36:e5:32:74:fc:82:30: 77:41:7b:6f:4e:31:99:75:15:c4:fa:94:53:13:4c: 02:50:bb:10:57:7b:7e:f1:a1:92:db:c6:0f:a8:ff: ae:cc:22:a9:ed:df:44:d5:01:55:d8:3b:28:e1:84: 78:5c:94:21:56:c4:0b:06:54:d5:df:7e:a8:d2:d9: 80:34:97:4f:66:dd:cc:56:8e:6e:81:78:5f:7d:6b: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 72.9.112.0/20 160.32.224.0/20 IPv6: 2607:f4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32160 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:43:c8:1e:89:3e:28:25:5f:5e:fd:79:33:6e:16:3d:87:74: a4:b5:4b:49:ed:38:a7:14:75:b9:d7:18:f4:04:cf:82:6a:01: 65:a6:f1:e5:7a:f9:dc:37:95:fb:09:28:c0:f1:1e:88:59:80: 67:84:ad:65:08:51:2d:ec:d2:b9:2c:95:bb:e4:c4:92:4e:04: eb:1d:ad:b4:29:78:02:00:f2:5f:3d:bb:fa:78:78:30:2a:70: 0b:23:87:fb:3a:01:d5:1c:e5:7e:0b:2a:99:f6:36:4b:f9:39: 5a:cc:5f:c0:1d:0c:5a:f2:86:6a:46:61:f4:9f:c2:57:64:76: f6:1a:e2:dc:5e:7b:6f:1c:81:9c:be:3b:ad:a1:42:37:ed:2a: ed:ab:a1:86:d6:d1:1d:17:72:c4:c3:86:0f:82:67:c5:6f:49: ad:bc:5e:26:3f:35:2e:79:c7:5e:7d:c5:39:4e:56:99:0c:25: f7:e6:e8:af:c0:f9:af:2f:3a:36:55:c2:20:8e:29:87:1c:6a: b2:02:08:0a:0f:eb:b5:5a:ef:7b:58:5e:f3:52:bc:61:6b:4a: 7f:7e:d2:ef:c0:64:03:31:8c:5f:98:5d:d2:8c:d7:96:2e:86: 3d:ea:f5:74:06:b1:01:f0:96:0e:32:3d:d0:c5:95:19:ec:0a: 6f:e6:be:51 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEhC9XiInMhaT1vQkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIxOTE5NDQ1MFoXDTI3MDMyNDE4NDQ1MFowLzEtMCsGA1UEAxMk NThlOTYwOTktMDk4Ni00NTczLWJiNmItODczYTliY2IzNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGhi5eTHErbGbAX+Y+28rWvjNfxZzn72J/I0 oTGcb9NPprY7HU9OLm7/qs/XfA19IqoU6+SmucZPUuDSGt9c72eORTR5YZchrMKp DFgO4EMIzJbQp8CpYt1qm20f7+GZ4z9pLY3/eO203/nGcuk+mWI0EypTvwb53yyU t8X9blNf/gFfLxSnJhO3bf8Iy8tVJzdBbhJgWNT/zvulUieid/rjOv0VeiZRtRdK jjblMnT8gjB3QXtvTjGZdRXE+pRTE0wCULsQV3t+8aGS28YPqP+uzCKp7d9E1QFV 2Dso4YR4XJQhVsQLBlTV336o0tmANJdPZt3MVo5ugXhffWseAQIDAQABo4IELzCC BCswHQYDVR0OBBYEFIOv/bdf/6c1qHAMPtgKXr9CfXukMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 OGU5NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNhOWJjYjM3NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU4ZTk2MDk5LTA5ODYtNDU3My1i YjZiLTg3M2E5YmNiMzc0Ny81OGU5NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNhOWJj YjM3NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARICXADBASgIOAwDQQCAAIwBwMFACYH9MAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICfaAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAREPIHok+KCVfXv15M24W PYd0pLVLSe04pxR1udcY9ATPgmoBZabx5Xr53DeV+wkowPEeiFmAZ4StZQhRLezS uSyVu+TEkk4E6x2ttCl4AgDyXz27+nh4MCpwCyOH+zoB1RzlfgsqmfY2S/k5Wsxf wB0MWvKGakZh9J/CV2R29hri3F57bxyBnL47raFCN+0q7auhhtbRHRdyxMOGD4Jn xW9JrbxeJj81LnnHXn3FOU5WmQwl9+bor8D5ry86NlXCII4phxxqsgIICg/rtVrv e1he81K8YWtKf37S78BkAzGMX5hd0ozXli6GPer1dAaxAfCWDjI90MWVGewKb+a+ UQ== -----END CERTIFICATE-----Generated at Fri Dec 27 07:10:05 2024 by rpki-client on console-fra.rpki-client.org