$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer File: 998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer (raw, json) Hash identifier: bwHdkl/nAc69x1cq/vBLdVmROxNaQ+BGFhq3hicv/8s= Subject key identifier: D7:CE:46:2F:71:0B:CD:F0:D8:75:3D:83:D8:EA:23:47:94:6A:7C:61 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584805E8D4C4192F403B09212680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Nov 2024 22:55:03 +0000 Certificate not after: Tue 02 Mar 2027 22:55:03 +0000 Subordinate resources: AS: 20383 IP: 199.83.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:05:e8:d4:c4:19:2f:40:3b:09:21:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 27 22:55:03 2024 GMT Not After : Mar 2 22:55:03 2027 GMT Subject: CN=998ce6c6-de76-4028-a6fe-ea03cffffbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:49:bb:9b:be:d9:b0:5c:2b:2d:4d:98:b5: ca:76:79:61:70:e5:fd:2f:a7:96:a4:62:30:3b:71: ce:e6:b5:42:cc:ae:8d:88:c8:a6:1d:63:1d:eb:99: e2:6a:76:51:a7:aa:a4:8e:3c:20:8a:7b:f3:50:7b: 0c:b1:14:eb:e5:25:a9:ab:fd:24:df:65:2e:d7:85: fe:b6:dc:46:7d:ed:e4:c6:a5:98:86:6b:79:04:74: 69:2f:20:f0:aa:96:82:2f:d4:31:bc:7a:dc:91:fe: 81:e4:26:2c:d9:63:96:dd:d0:c6:65:a6:a9:19:47: 10:68:44:d4:71:7e:5c:03:86:5f:44:18:d4:3b:c3: 5d:42:be:c0:99:32:d0:4f:57:f3:c1:45:56:92:e9: 65:5b:55:df:e6:98:8b:df:92:de:de:a2:59:0b:b2: 27:24:6b:01:05:9c:f8:78:56:cb:70:7b:88:60:15: c5:c9:2d:7e:30:16:6b:70:7f:85:0b:54:40:d0:06: 13:b6:f1:65:f1:06:6d:b3:b8:67:2f:05:77:28:f1: 42:15:ea:29:fa:38:b9:ea:08:88:26:c7:0b:07:9e: d7:1d:82:d7:9b:2d:a3:31:7c:62:bb:86:4a:92:58: 2e:a0:5c:8b:75:fe:5f:80:35:24:29:d5:65:08:9b: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:46:2F:71:0B:CD:F0:D8:75:3D:83:D8:EA:23:47:94:6A:7C:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.83.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20383 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e5:83:5d:6a:01:66:67:65:cc:5b:f1:85:66:eb:74:2f:de: ed:27:13:6c:bb:0b:95:67:3d:fe:12:dc:c9:4e:b1:f5:f9:c5: 27:fc:31:c6:00:b5:bc:00:a3:0e:6d:49:38:98:8e:9a:8b:8b: 1a:fd:e5:86:41:1d:68:2c:06:88:bf:9b:37:6b:c7:97:d0:2d: 2a:ed:02:06:60:07:25:e5:dd:f2:de:3f:b2:1b:3f:46:44:a7: 65:79:32:5c:51:f9:0e:fe:8c:a6:d6:eb:de:8b:61:15:3a:fe: 71:a5:30:75:a3:8c:55:52:d1:9f:dc:38:45:8e:dd:43:7a:82: 8d:25:bc:a8:6d:14:83:5c:a0:0f:9b:c8:ab:1b:74:73:ab:2d: 7c:2b:90:91:d7:c1:f6:fa:6a:4e:24:40:f3:65:1b:88:51:32: 07:ed:3a:77:8f:5c:4d:7a:04:fa:7d:51:e3:ba:d4:e5:6f:66: b2:ee:30:c2:53:cc:9f:c3:93:0b:22:d5:30:cd:a2:82:68:63: 8f:83:41:35:08:4d:d5:be:b4:2b:25:dd:0d:7a:26:31:15:24: fe:bf:6b:12:1e:86:53:00:3b:88:d8:f0:e5:66:79:7f:28:ed: 0c:56:ee:2e:06:6e:cc:1e:d9:87:14:d8:95:b3:62:c6:e9:e2: b0:b4:ac:de -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEgF6NTEGS9AOwkhJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyNzIyNTUwM1oXDTI3MDMwMjIyNTUwM1owLzEtMCsGA1UEAxMk OTk4Y2U2YzYtZGU3Ni00MDI4LWE2ZmUtZWEwM2NmZmZmYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrJJu5u+2bBcKy1NmLXKdnlhcOX9L6eWpGIw O3HO5rVCzK6NiMimHWMd65nianZRp6qkjjwginvzUHsMsRTr5SWpq/0k32Uu14X+ ttxGfe3kxqWYhmt5BHRpLyDwqpaCL9QxvHrckf6B5CYs2WOW3dDGZaapGUcQaETU cX5cA4ZfRBjUO8NdQr7AmTLQT1fzwUVWkullW1Xf5piL35Le3qJZC7InJGsBBZz4 eFbLcHuIYBXFyS1+MBZrcH+FC1RA0AYTtvFl8QZts7hnLwV3KPFCFeop+ji56giI JscLB57XHYLXmy2jMXxiu4ZKklguoFyLdf5fgDUkKdVlCJv6bQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNfORi9xC83w2HU9g9jqI0eUanxhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OThjZTZjNi1kZTc2LTQwMjgtYTZmZS1lYTAzY2ZmZmZiY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk5OGNlNmM2LWRlNzYtNDAyOC1h NmZlLWVhMDNjZmZmZmJjYi85OThjZTZjNi1kZTc2LTQwMjgtYTZmZS1lYTAzY2Zm ZmZiY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHU7QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC T58wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAOeWDXWoBZmdlzFvxhWbrdC/e7ScTbLsLlWc9/hLcyU6x9fnF J/wxxgC1vACjDm1JOJiOmouLGv3lhkEdaCwGiL+bN2vHl9AtKu0CBmAHJeXd8t4/ shs/RkSnZXkyXFH5Dv6Mptbr3othFTr+caUwdaOMVVLRn9w4RY7dQ3qCjSW8qG0U g1ygD5vIqxt0c6stfCuQkdfB9vpqTiRA82UbiFEyB+06d49cTXoE+n1R47rU5W9m su4wwlPMn8OTCyLVMM2igmhjj4NBNQhN1b60KyXdDXomMRUk/r9rEh6GUwA7iNjw 5WZ5fyjtDFbuLgZuzB7ZhxTYlbNixunisLSs3g== -----END CERTIFICATE-----Generated at Fri Dec 27 07:10:06 2024 by rpki-client on console-fra.rpki-client.org