$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer File: 98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer (raw, json) Hash identifier: FqCM+4xdU1CRKRL/MTEJ51uwOMa1O0WGGE2BBWeg90c= Subject key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285847FF6D546A85C73C8E64D3EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Nov 2024 15:11:22 +0000 Certificate not after: Sun 28 Feb 2027 15:11:22 +0000 Subordinate resources: AS: 400843 IP: 205.142.48.0/22 IP: 216.153.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ff:6d:54:6a:85:c7:3c:8e:64:d3:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 25 15:11:22 2024 GMT Not After : Feb 28 15:11:22 2027 GMT Subject: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:39:f3:07:66:3d:8c:b2:bf:1b:1a:8a:a0: f6:d1:ce:22:34:a3:77:36:4f:c0:4a:49:7a:46:b9: 97:eb:ab:7f:cd:99:f6:fa:dd:2d:19:f3:b0:72:19: 45:54:7a:f2:98:83:72:ab:e1:a8:0a:35:28:bb:20: 53:73:6a:32:0b:ef:1c:e6:c4:9f:b2:04:e6:5a:18: b8:24:9b:9d:6a:3f:71:d0:26:e7:8a:d4:06:ca:8a: a7:cc:74:26:5b:17:c0:a1:7d:ad:7c:b1:1a:40:11: e6:3b:4d:8f:be:c8:d2:2d:49:9b:10:9d:5f:27:e1: 30:aa:b3:72:f9:44:25:82:64:55:97:74:14:20:7c: 2c:b5:77:77:26:58:a0:69:cb:94:f8:99:60:f9:5b: f8:00:12:2e:23:6a:72:78:dc:cc:4e:0b:61:a8:77: 06:b9:fe:9d:43:a3:50:32:7a:2e:85:1b:c4:59:6f: 48:14:85:94:b7:cf:87:11:80:5b:45:90:a4:36:7c: c6:18:b4:be:e3:1a:70:00:2d:ef:d4:bf:ea:f0:be: 0c:13:bc:f2:c8:9e:8a:84:48:4d:62:0f:e4:28:f7: 08:8d:93:e7:01:39:c0:f0:3f:36:0c:67:6a:74:f9: 54:b8:b6:59:ca:6d:d6:e5:56:c6:97:7e:46:a6:0a: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 205.142.48.0/22 216.153.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400843 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:42:cd:45:8f:f0:bd:d6:ad:52:b4:41:00:f9:4c:c5:22:17: 6a:af:11:64:37:31:49:f4:49:2b:cd:76:36:a7:80:b5:b0:3c: 0b:54:41:46:d3:51:da:22:4e:7f:35:37:9d:1e:84:25:9a:27: 58:b8:a4:bb:5c:04:fb:79:a8:b6:e3:82:de:24:0a:a1:fe:e8: af:15:a8:95:2b:bb:01:0b:a1:b2:61:9c:22:f9:c9:f7:90:81: b5:cf:d1:e7:73:c5:78:da:5b:5b:f0:f8:fd:b1:d5:07:bd:62: 43:14:d0:de:d3:56:2c:d7:1e:c6:f2:de:9d:9d:89:2b:ee:1e: 9d:64:a5:8d:0d:4e:5b:f4:ef:92:26:34:81:93:c4:06:0c:27: 39:bd:07:4d:87:ba:6b:96:74:75:7a:0e:0b:16:ab:00:a1:34: 01:8c:1a:ab:a9:a7:2e:b8:64:66:53:63:13:f2:a2:3d:d4:e5: b9:92:e9:5f:4e:d6:71:6d:43:24:50:0b:15:51:c8:36:7c:ba: 94:72:28:d7:86:cf:ed:c6:09:a1:39:19:7d:f7:c4:fd:9e:c6: 28:df:5e:13:53:00:78:f7:5b:ff:8e:ce:19:ed:ed:8f:0d:6d: 72:f3:33:c5:31:20:5f:ea:ce:7a:9c:89:c9:79:15:fb:5b:d4: 3a:7e:8f:0a -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEf/bVRqhcc8jmTT6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyNTE1MTEyMloXDTI3MDIyODE1MTEyMlowLzEtMCsGA1UEAxMk OThmNThmM2QtNzA3YS00ZGMxLThkMjUtNWNkYzk1ZmIxNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPE58wdmPYyyvxsaiqD20c4iNKN3Nk/ASkl6 RrmX66t/zZn2+t0tGfOwchlFVHrymINyq+GoCjUouyBTc2oyC+8c5sSfsgTmWhi4 JJudaj9x0CbnitQGyoqnzHQmWxfAoX2tfLEaQBHmO02PvsjSLUmbEJ1fJ+EwqrNy +UQlgmRVl3QUIHwstXd3JligacuU+Jlg+Vv4ABIuI2pyeNzMTgthqHcGuf6dQ6NQ MnouhRvEWW9IFIWUt8+HEYBbRZCkNnzGGLS+4xpwAC3v1L/q8L4ME7zyyJ6KhEhN Yg/kKPcIjZPnATnA8D82DGdqdPlUuLZZym3W5VbGl35GpgoR0QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIgKBx0Zd7Xv/wINDrVsyYKgRF70MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVmYjE3NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk4ZjU4ZjNkLTcwN2EtNGRjMS04 ZDI1LTVjZGM5NWZiMTc0Ni85OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVm YjE3NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALNjjADBALYmRwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBh3LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ1CzUWP8L3WrVK0QQD5TMUiF2qvEWQ3MUn0SSvN djangLWwPAtUQUbTUdoiTn81N50ehCWaJ1i4pLtcBPt5qLbjgt4kCqH+6K8VqJUr uwELobJhnCL5yfeQgbXP0edzxXjaW1vw+P2x1Qe9YkMU0N7TVizXHsby3p2diSvu Hp1kpY0NTlv075ImNIGTxAYMJzm9B02HumuWdHV6DgsWqwChNAGMGquppy64ZGZT YxPyoj3U5bmS6V9O1nFtQyRQCxVRyDZ8upRyKNeGz+3GCaE5GX33xP2exijfXhNT AHj3W/+Ozhnt7Y8NbXLzM8UxIF/qznqcicl5Fftb1Dp+jwo= -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org