$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer File: b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer (raw, json) Hash identifier: WtW+aV2bsNVTnALgPXDHYwLfxWsjnPVcUzwlDXK5dDw= Subject key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858481F68DD55651861A6577EE500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Dec 2024 02:08:14 +0000 Certificate not after: Fri 12 Mar 2027 02:08:14 +0000 Subordinate resources: AS: 1074 IP: 141.195.104.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:68:dd:55:65:18:61:a6:57:7e:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 7 02:08:14 2024 GMT Not After : Mar 12 02:08:14 2027 GMT Subject: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:83:05:b3:67:05:d7:b0:5e:b1:77:3e:f8: d0:30:98:1d:97:33:87:cd:a1:15:ed:e6:86:61:34: 1a:4a:2d:05:23:52:a9:2f:cc:d9:fc:aa:0b:73:cd: cd:dc:7a:cb:3a:c9:03:53:17:ac:7c:d9:53:91:52: 9f:69:0a:75:ca:ac:ef:e1:84:70:ac:3f:df:76:72: 10:06:b6:1f:5f:af:22:dd:23:fb:16:57:a0:b8:ed: db:03:cb:b1:21:d3:e0:cb:bc:53:84:06:10:44:55: ee:da:92:43:0a:80:47:d0:9d:5f:fb:a4:5c:5f:c7: 72:e6:51:c1:8f:4d:1b:44:52:8f:33:4f:b2:a2:27: 70:e3:56:6e:c7:09:e5:62:d6:9b:e5:fe:31:ff:54: 61:7c:4d:b9:b0:59:4f:48:40:14:46:af:21:e8:f8: fb:2b:fc:51:9f:3a:ae:a1:a3:2c:63:37:16:f0:fa: 13:5c:38:13:00:d8:aa:98:36:40:ff:b7:90:95:21: e9:09:19:90:61:d3:09:f3:8b:fb:8f:1f:7b:40:dd: 87:43:d6:44:0c:d1:fc:0f:f5:9a:08:bd:f9:9a:c3: da:a7:80:bb:a6:30:31:41:44:54:77:70:25:77:ea: 45:f3:c9:0a:5a:06:b2:fa:d4:e7:b6:2a:ca:94:84: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 141.195.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1074 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:59:cf:4e:cf:ee:ff:c1:89:60:4a:31:c0:21:19:a3:4f:ce: 93:44:6e:68:15:b1:fd:1d:13:04:e5:e1:58:41:26:b1:61:12: 6d:a0:04:b2:f3:f7:30:d7:99:c8:c3:a4:1f:3a:ba:48:3a:5d: e8:3c:3f:c1:8e:4c:42:51:0c:d8:78:ef:55:ac:45:99:8d:73: 5c:3a:fc:77:57:ea:56:04:74:98:16:bf:ef:6d:07:2c:ce:d9: d4:c0:91:a7:9b:4d:46:77:61:67:bf:82:0b:ad:79:2d:27:62: ac:9c:a5:e2:f5:e2:51:14:da:ab:c0:fc:72:be:06:f1:10:0d: 2d:7f:e9:a6:0a:ce:ac:c2:7a:dc:00:83:88:34:11:ac:c8:43: be:1d:28:d8:6a:21:bd:e4:09:c3:d8:70:39:5f:66:13:a9:71: 3c:a2:55:04:05:68:52:54:c9:73:22:9d:63:94:68:91:32:cf: ee:87:87:a8:4b:a0:27:18:ea:6b:ec:6b:8c:04:f1:ae:b9:60: 02:8a:5d:4b:55:06:29:f7:b1:92:97:6c:98:d4:83:7f:0a:0e: 6b:9b:47:cc:e2:41:e4:b3:be:9c:8a:71:a6:d2:16:17:71:d2: df:8c:09:81:1e:8a:13:ef:5a:4a:9d:3a:ae:8e:dd:b2:1f:0f: 79:11:94:ad -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEgfaN1VZRhhpld+5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwNzAyMDgxNFoXDTI3MDMxMjAyMDgxNFowLzEtMCsGA1UEAxMk YjUxNGM5MTItYmJmNi00N2I4LThlNGUtYTgwZDBjYjk4YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sODBbNnBdewXrF3PvjQMJgdlzOHzaEV7eaG YTQaSi0FI1KpL8zZ/KoLc83N3HrLOskDUxesfNlTkVKfaQp1yqzv4YRwrD/fdnIQ BrYfX68i3SP7FleguO3bA8uxIdPgy7xThAYQRFXu2pJDCoBH0J1f+6RcX8dy5lHB j00bRFKPM0+yoidw41ZuxwnlYtab5f4x/1RhfE25sFlPSEAURq8h6Pj7K/xRnzqu oaMsYzcW8PoTXDgTANiqmDZA/7eQlSHpCRmQYdMJ84v7jx97QN2HQ9ZEDNH8D/Wa CL35msPap4C7pjAxQURUd3Ald+pF88kKWgay+tTntirKlIRcCQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAwVBHux7wK3GEPdRipFp92jDY4FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NTE0YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBkMGNiOThhM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I1MTRjOTEyLWJiZjYtNDdiOC04 ZTRlLWE4MGQwY2I5OGEzZS9iNTE0YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBkMGNi OThhM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKNw2gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC BDIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADlnPTs/u/8GJYEoxwCEZo0/Ok0RuaBWx/R0TBOXhWEEmsWES baAEsvP3MNeZyMOkHzq6SDpd6Dw/wY5MQlEM2HjvVaxFmY1zXDr8d1fqVgR0mBa/ 720HLM7Z1MCRp5tNRndhZ7+CC615LSdirJyl4vXiURTaq8D8cr4G8RANLX/ppgrO rMJ63ACDiDQRrMhDvh0o2GohveQJw9hwOV9mE6lxPKJVBAVoUlTJcyKdY5RokTLP 7oeHqEugJxjqa+xrjATxrrlgAopdS1UGKfexkpdsmNSDfwoOa5tHzOJB5LO+nIpx ptIWF3HS34wJgR6KE+9aSp06ro7dsh8PeRGUrQ== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:08 2024 by rpki-client on console-ams.rpki-client.org