$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer File: 5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer (raw, json) Hash identifier: LD9u2cPEeQwU2TcQMX5VZBDJBUlt5dE4VxxgQhEs2UU= Subject key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848301B044FAF5AB6F5481DEF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Dec 2024 01:40:07 +0000 Certificate not after: Thu 18 Mar 2027 00:40:07 +0000 Subordinate resources: AS: 401441 IP: 2602:f7b2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:1b:04:4f:af:5a:b6:f5:48:1d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 13 01:40:07 2024 GMT Not After : Mar 18 00:40:07 2027 GMT Subject: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:4e:54:d4:1e:d9:83:ba:9e:b1:5d:24:fc: c4:97:ce:c9:be:dc:90:a3:d8:b4:8c:7f:99:42:bd: 55:88:ba:57:4e:62:15:13:f2:96:1a:be:15:b5:bb: c0:a1:31:d3:6b:73:13:03:d8:b4:db:72:c3:09:a5: 5c:33:f6:7f:fe:e3:31:f8:99:b8:a2:43:72:1d:ed: c6:bc:12:6e:cf:2b:8e:87:94:ef:a1:9e:ad:ff:14: 5f:cb:0e:a7:45:2a:d8:25:94:5b:b4:2a:0f:f2:df: c3:a0:a2:1f:bc:7c:32:a2:09:17:cc:93:65:cf:56: f0:f5:5e:7b:93:dd:68:09:b5:21:08:3c:53:ae:61: a0:6c:01:d7:bd:81:da:f3:0f:59:ce:b6:2a:5e:2e: 93:42:8f:32:0e:67:33:cf:ce:24:d7:40:51:bf:5a: e7:98:af:67:f9:00:6d:6e:d8:15:e5:37:01:af:a4: 0c:88:3e:f2:ad:c7:26:6e:eb:d4:d7:a8:6d:eb:18: e7:f7:0c:ab:80:07:e1:e4:b6:07:b1:14:fc:f1:2c: 00:bc:d9:0e:ea:72:a2:60:8f:74:34:1f:c6:22:11: 74:46:57:ab:68:d0:96:bc:76:f1:ab:ca:a8:d6:b9: 43:c0:6c:6c:16:8d:b2:0c:af:f2:aa:47:89:15:e5: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f8:56:24:6c:ae:d1:4c:34:d9:f3:2f:eb:e4:7b:7d:7c:5e: 9a:83:6d:65:db:2d:6c:9e:4d:c6:81:80:83:1e:55:37:63:c2: 92:35:3b:22:7a:ad:1a:6c:8b:7a:f2:c2:21:71:56:46:9f:88: 5e:3a:17:df:15:20:13:37:99:f6:63:78:fa:e2:7e:30:58:5d: 00:99:4f:dc:0b:e4:a5:5f:fa:5c:81:60:c6:42:cf:bd:e4:4d: 20:c2:bf:c0:bd:a7:e2:69:c9:2c:42:fd:b1:73:2c:83:a4:9f: df:54:bc:e2:64:09:a9:fd:15:c9:00:ca:61:61:c6:8e:f7:53: c2:f5:ba:68:d8:fe:96:89:9c:53:57:6b:6f:af:12:d5:aa:8b: b4:b4:28:9c:2e:61:5d:07:91:c1:5e:49:3a:57:d4:d9:c6:31: 57:15:95:50:29:5c:5e:ee:c9:9b:fb:af:8c:77:21:34:f6:d9: 40:46:32:4e:71:27:e0:1f:66:f1:21:20:29:a1:a9:e6:bb:c8: db:c4:87:23:10:44:0e:6e:48:53:89:92:d2:f1:24:fe:77:0d: 3b:72:b2:40:7f:29:e9:0a:d6:d3:bd:c1:e8:ef:5c:15:a3:4c: da:5f:23:b4:d7:96:d8:96:01:e4:07:af:22:9d:40:55:eb:d7: 8f:24:1c:23 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEgwGwRPr1q29Ugd74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIxMzAxNDAwN1oXDTI3MDMxODAwNDAwN1owLzEtMCsGA1UEAxMk NWEwNjBmYTMtZTJmMS00ODU3LWFjZjMtOWE5OGE5OGRmNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXJOVNQe2YO6nrFdJPzEl87JvtyQo9i0jH+Z Qr1ViLpXTmIVE/KWGr4VtbvAoTHTa3MTA9i023LDCaVcM/Z//uMx+Jm4okNyHe3G vBJuzyuOh5TvoZ6t/xRfyw6nRSrYJZRbtCoP8t/DoKIfvHwyogkXzJNlz1bw9V57 k91oCbUhCDxTrmGgbAHXvYHa8w9ZzrYqXi6TQo8yDmczz84k10BRv1rnmK9n+QBt btgV5TcBr6QMiD7yrccmbuvU16ht6xjn9wyrgAfh5LYHsRT88SwAvNkO6nKiYI90 NB/GIhF0RleraNCWvHbxq8qo1rlDwGxsFo2yDK/yqkeJFeXSpQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFES7DjPSUih13GyXGfX+VZ/AbrB9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4ZGY2ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVhMDYwZmEzLWUyZjEtNDg1Ny1h Y2YzLTlhOThhOThkZjZmMi81YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4 ZGY2ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAveyADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGICEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAD/hWJGyu0Uw02fMv6+R7fXxemoNtZdstbJ5NxoGAgx5V N2PCkjU7InqtGmyLevLCIXFWRp+IXjoX3xUgEzeZ9mN4+uJ+MFhdAJlP3AvkpV/6 XIFgxkLPveRNIMK/wL2n4mnJLEL9sXMsg6Sf31S84mQJqf0VyQDKYWHGjvdTwvW6 aNj+lomcU1drb68S1aqLtLQonC5hXQeRwV5JOlfU2cYxVxWVUClcXu7Jm/uvjHch NPbZQEYyTnEn4B9m8SEgKaGp5rvI28SHIxBEDm5IU4mS0vEk/ncNO3KyQH8p6QrW 073B6O9cFaNM2l8jtNeW2JYB5AevIp1AVevXjyQcIw== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org