$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer File: 9d5e8807-643a-46c3-a245-693c793610e4.cer (raw, json) Hash identifier: 0kEke558ys8D6m10qP1PGnIs265xAfa2mZqY4Uk7JvI= Subject key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848049A2CB9DE52ABB2F7694C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Nov 2024 11:40:46 +0000 Certificate not after: Tue 02 Mar 2027 11:40:46 +0000 Subordinate resources: IP: 23.129.220.0/24 IP: 2602:f787::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:04:9a:2c:b9:de:52:ab:b2:f7:69:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 27 11:40:46 2024 GMT Not After : Mar 2 11:40:46 2027 GMT Subject: CN=9d5e8807-643a-46c3-a245-693c793610e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:ed:a8:b0:5e:00:e7:11:0d:03:ad:77:41: 4b:b9:c0:51:59:14:87:61:5d:d9:3f:1f:94:cd:79: 2b:bb:92:c9:f1:86:44:86:ae:cf:29:05:9d:22:e5: 0d:c1:f2:1d:dc:73:c1:84:66:fd:0c:29:96:f3:ce: 20:e5:80:0e:5e:53:97:fd:88:4a:61:91:d1:17:27: b9:b4:d3:c1:cf:7b:d8:1f:db:50:5d:52:f5:cf:c7: 8b:97:6c:82:5a:73:8f:46:b2:33:0a:ad:a4:1c:21: e9:86:3a:c6:d9:ad:d1:da:86:a2:d9:94:a2:7e:80: d6:e4:40:4f:bc:a6:58:5f:02:94:f6:a2:7f:9d:42: 85:9d:9c:92:f7:7a:26:e8:25:6e:f7:bd:60:b6:df: 8b:21:e7:82:ee:e0:78:27:f0:0e:23:ff:05:12:d2: 8a:76:b7:b8:32:7f:6f:da:5c:48:17:f0:40:90:30: 46:8b:81:fc:aa:67:22:c1:38:77:22:bd:7e:f3:0a: 83:06:d9:d5:ff:87:94:bd:c8:c3:1a:64:66:53:d6: 68:48:c9:e4:52:70:37:11:cc:1e:9e:0b:4c:a5:e0: 71:0a:33:5b:29:fb:dc:65:31:1f:ed:4d:1c:29:ca: 47:2d:e9:fb:f5:c1:4c:94:d5:18:54:03:2b:a5:21: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 IPv6: 2602:f787::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:be:8d:5a:40:34:37:c4:b2:9c:70:0b:e4:82:dd:a9:b6:a5: 8e:c8:15:77:3b:86:3b:bb:65:2c:91:52:61:17:50:bb:e9:c1: e9:0d:fc:a4:b0:24:3c:5f:c5:1b:97:0d:81:d5:7c:05:e7:cb: 42:22:44:bd:10:7b:a3:a5:98:4d:dd:ff:3b:2f:1b:a9:c5:37: 17:c9:cd:1c:e0:0e:8d:47:23:be:31:2d:18:6e:81:67:95:f6: fa:b1:c7:91:2f:77:22:c9:e2:46:89:70:42:1a:f7:f8:a9:d6: 23:25:08:f7:65:6d:fb:d8:ac:e8:5a:9f:9b:40:61:ab:b2:81: 57:88:d6:0c:2e:b9:88:10:37:f9:3f:c7:13:06:1a:c6:79:46: 25:08:dc:82:b2:5c:bb:fb:ed:dc:99:cc:ee:8f:5f:60:45:cc: b0:99:45:e0:4f:aa:35:33:05:8a:c6:9b:82:47:ef:68:f6:ad: 3c:b0:77:9a:31:59:f6:b9:f9:41:ad:50:ff:da:d8:e7:c0:22: 6f:78:b8:22:45:5b:ef:ca:08:83:9a:00:6b:ea:d9:ce:f1:b1: 23:6a:0e:76:9e:ba:51:a3:23:43:b3:83:a3:54:fe:d9:df:ad: 09:2f:fa:49:87:2c:88:21:74:33:ae:a6:0f:cd:f7:12:85:03: 3b:95:66:fe -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEgEmiy53lKrsvdpTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyNzExNDA0NloXDTI3MDMwMjExNDA0NlowLzEtMCsGA1UEAxMk OWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYxMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYbtqLBeAOcRDQOtd0FLucBRWRSHYV3ZPx+U zXkru5LJ8YZEhq7PKQWdIuUNwfId3HPBhGb9DCmW884g5YAOXlOX/YhKYZHRFye5 tNPBz3vYH9tQXVL1z8eLl2yCWnOPRrIzCq2kHCHphjrG2a3R2oai2ZSifoDW5EBP vKZYXwKU9qJ/nUKFnZyS93om6CVu971gtt+LIeeC7uB4J/AOI/8FEtKKdre4Mn9v 2lxIF/BAkDBGi4H8qmciwTh3Ir1+8wqDBtnV/4eUvcjDGmRmU9ZoSMnkUnA3Ecwe ngtMpeBxCjNbKfvcZTEf7U0cKcpHLen79cFMlNUYVAMrpSER8wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBFPoE3U43g7ivBj6UkkLJljgzzLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzlkNWU4ODA3LTY0M2EtNDZjMy1h MjQ1LTY5M2M3OTM2MTBlNC85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkz NjEwZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgdwwDgQCAAIwCAMGACYC94cAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKa+jVpANDfEspxwC+SC3am2pY7IFXc7hju7ZSyRUmEXULvpwekN/KSwJDxfxRuX DYHVfAXny0IiRL0Qe6OlmE3d/zsvG6nFNxfJzRzgDo1HI74xLRhugWeV9vqxx5Ev dyLJ4kaJcEIa9/ip1iMlCPdlbfvYrOhan5tAYauygVeI1gwuuYgQN/k/xxMGGsZ5 RiUI3IKyXLv77dyZzO6PX2BFzLCZReBPqjUzBYrGm4JH72j2rTywd5oxWfa5+UGt UP/a2OfAIm94uCJFW+/KCIOaAGvq2c7xsSNqDnaeulGjI0Ozg6NU/tnfrQkv+kmH LIghdDOupg/N9xKFAzuVZv4= -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:08 2024 by rpki-client on console-ams.rpki-client.org