$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer File: 938e1602-8093-4bcd-b527-f5d1756295fc.cer (raw, json) Hash identifier: 421CxZkcfrqhGVYRssuYRGWM6sDMxPBdSS0PNGk1qh0= Subject key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858481E2B5C59B92ECD9DFCB9F2A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Dec 2024 15:28:30 +0000 Certificate not after: Thu 11 Mar 2027 15:28:30 +0000 Subordinate resources: AS: 401482 IP: 2620:cf:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1e:2b:5c:59:b9:2e:cd:9d:fc:b9:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 6 15:28:30 2024 GMT Not After : Mar 11 15:28:30 2027 GMT Subject: CN=938e1602-8093-4bcd-b527-f5d1756295fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:68:99:10:47:18:66:ca:d7:d0:b6:27:21: 01:2f:16:cd:6b:0c:dc:ae:ec:a6:05:a3:1e:42:9f: 87:64:f1:e9:ce:57:d8:ba:0a:2a:dc:0c:33:c9:66: 78:9b:c6:2b:e5:9a:e0:46:b0:47:57:0e:68:10:68: 09:6e:75:95:61:d8:85:f3:28:a2:1f:f4:3e:a8:53: c5:d5:5b:21:10:fd:4a:4e:af:2f:60:06:a0:c7:0c: fe:b8:6b:2f:eb:10:14:21:cc:72:73:a4:ec:a7:ea: 97:cd:cf:ec:9d:65:60:2e:4a:a9:ac:d2:c8:3d:1f: 05:45:61:f3:3c:19:44:d6:cf:1b:86:13:a3:31:06: 05:33:02:bd:3d:e7:0a:a7:2a:b6:58:a3:2b:d3:fe: 65:4c:f3:4f:fd:fb:50:cb:c5:63:b5:7c:95:1a:78: 5a:9a:ba:4e:f0:f9:f2:a3:6b:03:34:0c:d0:bb:44: cf:08:64:42:44:a0:e8:89:52:fa:48:1a:aa:90:a8: 50:e0:d8:08:bd:76:7d:d3:47:6c:94:ab:a9:04:e2: 2a:93:ab:d7:b2:7b:60:8b:e2:4d:43:b5:9c:a3:db: df:12:0e:8a:ce:2a:81:14:05:a7:60:d5:39:42:9c: 1e:de:72:45:2b:35:8b:1b:54:04:62:88:3b:1f:91: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:cf:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401482 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c8:64:d7:3b:c0:7a:1f:86:e7:df:27:75:2b:9b:ff:af:b9: 13:79:d6:cb:00:31:a1:77:07:59:1d:c7:1f:0e:ef:5b:26:23: b9:5b:47:f5:b4:6b:78:9e:b7:33:4e:75:f4:13:c1:82:17:e6: c3:a5:93:b2:ca:63:a9:2a:b2:ca:50:9e:cb:88:dc:3c:46:3d: 74:55:c7:03:71:8a:cc:46:cb:29:13:82:0e:e9:3e:e3:b1:34: 4b:bc:e8:ce:51:f0:b6:b9:24:b2:81:b7:1a:ab:cd:31:2e:f2: 8e:da:fd:ee:38:64:6a:61:04:ab:40:75:2e:b5:c4:01:22:37: b3:e9:2a:1a:7d:95:bc:45:ea:1f:bb:14:fa:ac:d8:2b:57:13: a8:c3:52:ed:7a:c1:4c:91:48:6c:c6:1f:c0:dd:52:45:fe:b9: 33:8d:82:39:9f:c3:60:bd:4e:ef:a9:7d:ec:28:2c:90:a7:7d: c0:c7:08:71:a9:4c:13:3d:b3:0b:23:c1:6c:4b:3b:f8:90:82: ca:31:e1:34:00:f6:2b:7e:10:e6:2a:63:42:0d:62:c9:0c:1e: 55:92:a7:c8:8d:79:4f:46:e0:38:6d:86:22:a6:6d:7d:ce:13: e3:31:77:f9:d4:5d:66:d4:79:2b:9e:b1:c5:63:47:d3:d6:16: 01:8f:79:27 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEgeK1xZuS7Nnfy58qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwNjE1MjgzMFoXDTI3MDMxMTE1MjgzMFowLzEtMCsGA1UEAxMk OTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZomRBHGGbK19C2JyEBLxbNawzcruymBaMe Qp+HZPHpzlfYugoq3AwzyWZ4m8Yr5ZrgRrBHVw5oEGgJbnWVYdiF8yiiH/Q+qFPF 1VshEP1KTq8vYAagxwz+uGsv6xAUIcxyc6Tsp+qXzc/snWVgLkqprNLIPR8FRWHz PBlE1s8bhhOjMQYFMwK9PecKpyq2WKMr0/5lTPNP/ftQy8VjtXyVGnhamrpO8Pny o2sDNAzQu0TPCGRCRKDoiVL6SBqqkKhQ4NgIvXZ900dslKupBOIqk6vXsntgi+JN Q7Wco9vfEg6KziqBFAWnYNU5Qpwe3nJFKzWLG1QEYog7H5GgRwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFPzMALTGvYB8aVdmLRmp68I3iXj2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzkzOGUxNjAyLTgwOTMtNGJjZC1i NTI3LWY1ZDE3NTYyOTVmYy85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2 Mjk1ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADPoAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiBKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJ3IZNc7wHofhuffJ3Urm/+vuRN51ssAMaF3B1kdxx8O 71smI7lbR/W0a3ietzNOdfQTwYIX5sOlk7LKY6kqsspQnsuI3DxGPXRVxwNxisxG yykTgg7pPuOxNEu86M5R8La5JLKBtxqrzTEu8o7a/e44ZGphBKtAdS61xAEiN7Pp Khp9lbxF6h+7FPqs2CtXE6jDUu16wUyRSGzGH8DdUkX+uTONgjmfw2C9Tu+pfewo LJCnfcDHCHGpTBM9swsjwWxLO/iQgsox4TQA9it+EOYqY0INYskMHlWSp8iNeU9G 4DhthiKmbX3OE+Mxd/nUXWbUeSuescVjR9PWFgGPeSc= -----END CERTIFICATE-----Generated at Fri Dec 27 14:25:26 2024 by rpki-client on console-fra.rpki-client.org