$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer File: 9305060e-d479-4a8f-8eba-23b31106c750.cer (raw, json) Hash identifier: ZoQ87IDaJOQbOMk2jL7KPAwZ4orgml5cznOXi4IgSS8= Subject key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848163A18B94C05B15E997C0380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Dec 2024 19:11:44 +0000 Certificate not after: Mon 08 Mar 2027 19:11:44 +0000 Subordinate resources: AS: 30596 IP: 2601:1900::/28 IP: 2620:12c:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:16:3a:18:b9:4c:05:b1:5e:99:7c:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 3 19:11:44 2024 GMT Not After : Mar 8 19:11:44 2027 GMT Subject: CN=9305060e-d479-4a8f-8eba-23b31106c750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:82:c2:aa:4e:12:dd:f1:39:66:ea:22:29: 87:bd:8d:dd:ff:ce:c0:18:86:e6:42:5c:65:ee:2f: 0b:d6:e4:8b:15:81:d7:94:37:ef:80:a4:a1:58:e7: 96:04:67:28:b3:3b:77:8c:65:48:7c:85:06:01:28: 11:d9:69:a3:74:3c:64:b4:f2:7b:45:a0:be:bb:ec: 19:ef:93:84:d9:2d:85:3f:99:74:e9:22:29:54:73: ae:ce:38:a3:72:4e:f2:ce:b6:a6:58:6d:49:f3:c6: 57:c5:45:6f:51:eb:0d:bd:9f:33:0f:ae:21:d2:97: 76:97:0e:f8:42:03:c4:a2:62:ad:50:4f:a1:85:24: bb:b4:17:e9:9e:e1:ad:c7:26:99:d9:66:7b:cb:61: 3a:c8:d8:d3:12:5d:3d:5e:85:ad:01:a7:bb:94:c6: 03:11:42:de:4f:20:2e:01:9d:93:29:2f:b0:8c:8e: 0b:5b:16:df:a2:e1:a7:93:7a:11:2f:82:8a:b7:b2: cf:3d:ab:ae:d5:c9:21:ca:2a:02:3d:8e:f5:dc:d3: 17:a4:3c:8e:24:0e:fa:a9:e3:09:b7:87:2c:55:aa: e0:7c:0f:9f:5b:b3:27:0d:db:de:fb:ea:00:3d:0d: 87:09:b2:7d:1c:93:40:d2:9c:5d:ac:4f:2c:e7:50: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2601:1900::/28 2620:12c:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30596 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0b:d3:57:8d:69:cb:7f:80:0d:31:4c:08:94:c0:c4:02:ec: 9e:26:69:53:40:66:31:10:f9:9b:16:9e:b6:b2:43:a4:97:1c: 09:9c:59:28:bb:8c:3f:75:1b:67:de:9a:c7:b0:a0:84:21:94: b0:64:d4:93:0e:a7:a5:d1:2c:bc:ca:41:eb:59:43:00:a2:cc: 27:c3:1c:db:59:eb:e3:2d:c2:f4:d0:5d:41:c7:64:22:cd:50: f9:d2:3c:a9:06:74:27:7d:4c:04:3c:c0:3a:af:f5:8d:36:1f: 6a:fd:49:24:6e:be:b9:47:96:66:ea:a8:6d:48:8e:01:93:c3: de:68:a2:d3:fa:d9:24:4e:51:2e:76:f3:ce:47:9d:e9:10:0c: 5b:7d:bb:20:7f:84:fb:71:2f:73:fe:1e:4a:10:43:4f:bb:5d: ab:17:af:cd:46:66:49:ec:8c:7b:57:97:6f:84:9e:9d:e4:c8: 2d:c4:7f:57:43:da:93:36:4f:20:dd:c4:90:a8:a1:59:12:89: 6a:db:15:3c:67:ab:8b:77:bb:5d:7b:87:c8:2a:a9:62:99:2a: c9:d3:00:3e:0d:c5:cd:82:c4:17:78:62:d9:bb:53:c7:b5:51: 06:13:97:f2:b5:6e:09:10:db:74:d3:ff:23:0c:f7:ec:84:84: 53:ea:79:1e -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWEgWOhi5TAWxXpl8A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwMzE5MTE0NFoXDTI3MDMwODE5MTE0NFowLzEtMCsGA1UEAxMk OTMwNTA2MGUtZDQ3OS00YThmLThlYmEtMjNiMzExMDZjNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+mCwqpOEt3xOWbqIimHvY3d/87AGIbmQlxl 7i8L1uSLFYHXlDfvgKShWOeWBGcoszt3jGVIfIUGASgR2WmjdDxktPJ7RaC+u+wZ 75OE2S2FP5l06SIpVHOuzjijck7yzramWG1J88ZXxUVvUesNvZ8zD64h0pd2lw74 QgPEomKtUE+hhSS7tBfpnuGtxyaZ2WZ7y2E6yNjTEl09XoWtAae7lMYDEULeTyAu AZ2TKS+wjI4LWxbfouGnk3oRL4KKt7LPPauu1ckhyioCPY713NMXpDyOJA76qeMJ t4csVargfA+fW7MnDdve++oAPQ2HCbJ9HJNA0pxdrE8s51D7uwIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFM0Qlpla5kiTjSCz1UgKgmFz9eQBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 MzA1MDYwZS1kNDc5LTRhOGYtOGViYS0yM2IzMTEwNmM3NTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzkzMDUwNjBlLWQ0NzktNGE4Zi04 ZWJhLTIzYjMxMTA2Yzc1MC85MzA1MDYwZS1kNDc5LTRhOGYtOGViYS0yM2IzMTEw NmM3NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKAYIKwYBBQUH AQcBAf8EGTAXMBUEAgACMA8DBQQmARkAAwYAJiABLIAwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICd4QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAIgvTV41py3+ADTFMCJTAxALsniZpU0BmMRD5 mxaetrJDpJccCZxZKLuMP3UbZ96ax7CghCGUsGTUkw6npdEsvMpB61lDAKLMJ8Mc 21nr4y3C9NBdQcdkIs1Q+dI8qQZ0J31MBDzAOq/1jTYfav1JJG6+uUeWZuqobUiO AZPD3mii0/rZJE5RLnbzzked6RAMW327IH+E+3Evc/4eShBDT7tdqxevzUZmSeyM e1eXb4SeneTILcR/V0PakzZPIN3EkKihWRKJatsVPGeri3e7XXuHyCqpYpkqydMA Pg3FzYLEF3hi2btTx7VRBhOX8rVuCRDbdNP/Iwz37ISEU+p5Hg== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org