$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer File: 6988a68c-ec5c-4d72-9ee1-27118af98380.cer (raw, json) Hash identifier: r0jLZNRc+hhKNlpuf89W53ANqi9l6gaZi3e5kC14BOE= Subject key identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858480002F9A987E8CD5B4625B280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Nov 2024 20:12:53 +0000 Certificate not after: Sun 28 Feb 2027 20:12:53 +0000 Subordinate resources: AS: 29953 IP: 69.41.192.0/20 IP: 97.107.48.0/20 IP: 2605:1100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:00:02:f9:a9:87:e8:cd:5b:46:25:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 25 20:12:53 2024 GMT Not After : Feb 28 20:12:53 2027 GMT Subject: CN=6988a68c-ec5c-4d72-9ee1-27118af98380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:ec:cf:a1:36:63:5b:8e:2b:9b:ea:9c:88: a5:2d:37:9d:b3:2f:d2:fa:c9:fa:e7:e2:be:21:c0: 4e:71:bf:c4:4e:88:06:64:bb:d7:80:0b:ba:d6:d5: 49:8c:29:c6:73:49:94:77:64:88:f2:e2:ff:a3:1b: 5e:db:f9:01:e4:8b:5d:6f:09:e2:d1:f3:fe:fb:8f: 77:cb:01:47:c1:dc:7f:f7:6a:be:27:43:37:3b:8c: 80:95:e9:33:1c:bd:22:be:79:0c:4d:ca:45:6c:2c: 73:fc:45:d8:23:7c:df:80:5c:39:0e:29:c6:a1:72: aa:02:a9:3c:e1:9b:9f:cf:2a:9f:88:75:75:d7:53: 08:b0:4a:8f:f6:3b:d5:68:72:c0:cc:9d:d0:1f:67: 3e:02:f8:57:80:be:b2:3e:99:e3:03:eb:2d:1a:c1: a4:9c:00:3f:fb:da:04:5e:9d:15:6f:2b:44:0a:4b: 34:ba:76:ad:f6:99:be:c8:37:f2:5e:7d:e9:34:d2: 2a:c2:89:f3:e1:52:56:fa:82:48:56:e1:0f:0e:1a: 98:19:54:96:17:1c:c0:c1:85:76:19:2f:26:81:d2: a7:44:85:52:48:81:7e:fc:da:91:bc:3e:7e:aa:f2: dd:3c:be:5f:41:87:24:18:98:8b:73:a9:a7:25:14: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.41.192.0/20 97.107.48.0/20 IPv6: 2605:1100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29953 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8f:69:36:0e:41:41:1c:32:43:f0:c6:48:ad:f7:c4:a4:66: 13:93:b3:7b:3a:03:c3:a9:56:54:12:2f:86:c6:08:8b:df:b1: e7:aa:1d:77:5d:a6:18:49:d9:01:d7:54:8c:55:b0:43:6c:ac: e2:68:7e:0a:75:dc:db:fe:08:3f:7b:7f:94:29:b3:fe:d3:d2: f7:78:f9:88:64:b0:ff:f3:48:0a:f3:50:e0:8e:cc:ec:2b:be: 7f:6f:aa:4d:2b:ba:59:fa:df:d4:c3:e8:20:be:5b:4b:23:9c: 41:41:cd:9b:5e:4e:b6:04:2f:e3:7a:4b:b6:2b:42:91:e3:56: 75:c7:b5:0c:b3:77:2f:f4:a6:a8:2f:25:f4:bd:c2:ff:ac:3a: 7c:5d:94:43:31:a4:a9:1f:ef:1c:13:78:55:4d:b0:cb:83:a1: 31:8a:82:2b:78:7c:ab:c3:04:23:93:8c:9c:30:63:df:0f:6a: 14:97:66:82:5d:9c:9d:6a:76:f5:39:52:1f:58:56:0e:4a:03: 75:a8:8c:fb:c3:ea:02:73:0e:20:f7:03:28:e9:05:50:66:bf: f1:d9:58:5f:47:e9:7c:b9:99:02:0c:95:2b:c1:77:6a:e5:97: c3:b4:6c:0a:ae:d2:f6:13:ba:c6:61:8a:57:c7:e1:86:e0:04: f0:eb:fd:05 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEgAAvmph+jNW0YlsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyNTIwMTI1M1oXDTI3MDIyODIwMTI1M1owLzEtMCsGA1UEAxMk Njk4OGE2OGMtZWM1Yy00ZDcyLTllZTEtMjcxMThhZjk4MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpvsz6E2Y1uOK5vqnIilLTedsy/S+sn65+K+ IcBOcb/ETogGZLvXgAu61tVJjCnGc0mUd2SI8uL/oxte2/kB5Itdbwni0fP++493 ywFHwdx/92q+J0M3O4yAlekzHL0ivnkMTcpFbCxz/EXYI3zfgFw5DinGoXKqAqk8 4ZufzyqfiHV111MIsEqP9jvVaHLAzJ3QH2c+AvhXgL6yPpnjA+stGsGknAA/+9oE Xp0VbytECks0unat9pm+yDfyXn3pNNIqwonz4VJW+oJIVuEPDhqYGVSWFxzAwYV2 GS8mgdKnRIVSSIF+/NqRvD5+qvLdPL5fQYckGJiLc6mnJRQmmQIDAQABo4IELzCC BCswHQYDVR0OBBYEFFN0Kx5/edIa0ClIRZqTXLpU7nM7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 OTg4YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzExOGFmOTgzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY5ODhhNjhjLWVjNWMtNGQ3Mi05 ZWUxLTI3MTE4YWY5ODM4MC82OTg4YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzExOGFm OTgzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARFKcADBARhazAwDQQCAAIwBwMFACYFEQAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICdQEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC49pNg5BQRwyQ/DGSK33 xKRmE5OzezoDw6lWVBIvhsYIi9+x56odd12mGEnZAddUjFWwQ2ys4mh+CnXc2/4I P3t/lCmz/tPS93j5iGSw//NICvNQ4I7M7Cu+f2+qTSu6Wfrf1MPoIL5bSyOcQUHN m15OtgQv43pLtitCkeNWdce1DLN3L/SmqC8l9L3C/6w6fF2UQzGkqR/vHBN4VU2w y4OhMYqCK3h8q8MEI5OMnDBj3w9qFJdmgl2cnWp29TlSH1hWDkoDdaiM+8PqAnMO IPcDKOkFUGa/8dlYX0fpfLmZAgyVK8F3auWXw7RsCq7S9hO6xmGKV8fhhuAE8Ov9 BQ== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org