$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer File: 7ed23894-86e6-4cc5-bf0f-6e077e092448.cer (raw, json) Hash identifier: 2Z9hmt/Uvspw4ktSKz7u4pJPKpHEviRMnhtRMBbHORs= Subject key identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858481A144C523744EEC728E70B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Dec 2024 04:18:48 +0000 Certificate not after: Wed 10 Mar 2027 04:18:48 +0000 Subordinate resources: AS: 30086 IP: 173.214.205.0/24 IP: 192.5.31.0/24 IP: 192.41.138.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1a:14:4c:52:37:44:ee:c7:28:e7:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 5 04:18:48 2024 GMT Not After : Mar 10 04:18:48 2027 GMT Subject: CN=7ed23894-86e6-4cc5-bf0f-6e077e092448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:e6:aa:22:51:39:83:c2:96:a5:d8:3c:56: 7b:e4:b6:9e:a9:4e:d3:5c:22:43:50:c7:bc:ab:13: e4:11:1a:59:b0:b0:4c:ab:fb:20:9e:0f:e0:50:99: e7:e7:9a:50:35:56:85:de:5a:df:b6:53:d3:d1:5e: 5d:06:65:18:49:17:c7:1f:54:02:ca:76:7c:ef:04: ff:11:75:d8:1b:0a:19:0a:6d:7d:20:82:7c:60:e6: 16:ce:3c:91:8d:4a:d9:cf:d3:30:c5:8d:4a:ae:37: 59:5f:98:02:b6:85:7e:48:41:15:e2:e3:7f:e3:7e: 15:ab:d7:a2:4d:9c:2a:25:d3:d0:e9:cd:27:00:e9: 90:ba:47:eb:91:5f:0a:3c:fa:ee:f1:eb:bf:5e:ce: 37:b8:eb:09:38:d7:6c:ef:6b:d0:e5:5a:9d:80:f1: 7c:32:01:da:9e:91:50:55:ad:e6:51:f9:28:53:e9: 2e:1c:d8:8d:20:a0:6b:bf:1f:01:11:a2:63:5a:c4: 39:fb:f3:77:9e:9c:d7:1d:cb:07:05:49:81:0a:74: 19:43:a1:5f:3e:b0:79:f9:ac:37:03:91:64:18:c5: 56:38:1e:4e:2b:8d:ae:91:a1:33:b7:17:fa:e0:16: f3:8b:20:44:bb:eb:b9:80:e6:4a:1c:28:9e:2d:d9: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 173.214.205.0/24 192.5.31.0/24 192.41.138.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30086 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:24:00:13:84:75:cd:d7:2c:43:84:2b:a6:6f:c0:14:5b:5a: 4c:e4:7a:6e:58:32:83:df:35:47:92:59:f6:85:14:ff:c7:53: 54:a6:b2:6c:9c:ea:86:d1:75:d8:53:a4:28:0c:2a:e9:f3:87: 5e:24:46:36:75:92:f1:ef:06:62:53:bf:de:7b:ac:a3:36:a8: 1a:de:01:71:4e:ab:ea:fb:85:d7:ca:0a:a5:8c:79:01:1d:1a: 06:4a:af:77:c2:60:de:8f:07:03:85:3b:73:2b:1b:95:43:eb: 88:64:ad:fe:e6:c1:88:fb:37:54:14:0e:a5:32:9c:44:eb:4c: 87:ee:2f:e0:71:cf:70:86:eb:e0:31:16:e4:1c:95:27:71:c0: 0d:0d:cc:c4:03:ab:c7:5f:21:a5:59:4f:b7:bf:59:ae:9b:36: c1:17:30:9d:e3:10:77:62:f5:96:74:25:89:a9:63:75:e8:5a: 94:a5:eb:53:82:72:45:55:e1:73:00:ef:a5:a0:db:6a:38:21: b9:20:6a:20:65:8f:a5:ff:0d:30:86:c3:61:88:4a:81:e7:24: 81:22:83:6f:ca:04:51:eb:8c:45:cb:19:14:bd:5a:cb:f4:55: fe:1b:4f:83:c5:bd:92:d8:57:9d:03:a1:4f:4e:db:88:ec:1a: 97:a9:92:9c -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEgaFExSN0TuxyjnCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwNTA0MTg0OFoXDTI3MDMxMDA0MTg0OFowLzEtMCsGA1UEAxMk N2VkMjM4OTQtODZlNi00Y2M1LWJmMGYtNmUwNzdlMDkyNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnczmqiJROYPClqXYPFZ75LaeqU7TXCJDUMe8 qxPkERpZsLBMq/sgng/gUJnn55pQNVaF3lrftlPT0V5dBmUYSRfHH1QCynZ87wT/ EXXYGwoZCm19IIJ8YOYWzjyRjUrZz9MwxY1KrjdZX5gCtoV+SEEV4uN/434Vq9ei TZwqJdPQ6c0nAOmQukfrkV8KPPru8eu/Xs43uOsJONds72vQ5VqdgPF8MgHanpFQ Va3mUfkoU+kuHNiNIKBrvx8BEaJjWsQ5+/N3npzXHcsHBUmBCnQZQ6FfPrB5+aw3 A5FkGMVWOB5OK42ukaEztxf64BbziyBEu+u5gOZKHCieLdkdCwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFPt7uDNR1Z4aoBpt9WegE3gM1zF/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZWQyMzg5NC04NmU2LTRjYzUtYmYwZi02ZTA3N2UwOTI0NDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdlZDIzODk0LTg2ZTYtNGNjNS1i ZjBmLTZlMDc3ZTA5MjQ0OC83ZWQyMzg5NC04NmU2LTRjYzUtYmYwZi02ZTA3N2Uw OTI0NDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBACt1s0DBADABR8DBAHAKYowGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICdYYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIyQAE4R1zdcsQ4Qrpm/AFFtaTOR6blgy g981R5JZ9oUU/8dTVKaybJzqhtF12FOkKAwq6fOHXiRGNnWS8e8GYlO/3nusozao Gt4BcU6r6vuF18oKpYx5AR0aBkqvd8Jg3o8HA4U7cysblUPriGSt/ubBiPs3VBQO pTKcROtMh+4v4HHPcIbr4DEW5ByVJ3HADQ3MxAOrx18hpVlPt79Zrps2wRcwneMQ d2L1lnQlialjdehalKXrU4JyRVXhcwDvpaDbajghuSBqIGWPpf8NMIbDYYhKgeck gSKDb8oEUeuMRcsZFL1ay/RV/htPg8W9kthXnQOhT07biOwal6mSnA== -----END CERTIFICATE-----Generated at Fri Dec 27 07:10:06 2024 by rpki-client on console-fra.rpki-client.org