$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer File: bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer (raw, json) Hash identifier: CqGqW1GHyY6/TucwfIpauoOEBOcyRXibJfYDc7TAlGQ= Subject key identifier: F4:E9:EE:D1:DC:52:88:37:CF:A1:49:76:C9:6F:19:11:14:63:78:6B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848051DDF2588E61691DAD18000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Nov 2024 16:06:07 +0000 Certificate not after: Tue 02 Mar 2027 16:06:07 +0000 Subordinate resources: AS: 11851 IP: 108.174.128.0/20 IP: 204.225.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:05:1d:df:25:88:e6:16:91:da:d1:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 27 16:06:07 2024 GMT Not After : Mar 2 16:06:07 2027 GMT Subject: CN=bd75a9a0-01bb-458c-8d2d-56a7b32fefeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:57:9c:86:17:67:18:2f:49:9e:55:62:76: 2d:33:10:9a:56:37:14:01:61:31:6d:5e:9e:49:25: 47:f8:72:84:34:8f:22:cb:6a:3f:12:4b:da:0b:e2: 33:5a:19:6a:20:5e:f0:ea:00:11:33:5a:4b:39:27: a0:86:2c:21:2b:15:ec:58:b7:78:a6:b0:8f:af:00: 36:a3:5b:5d:c6:1f:55:86:2c:11:21:fd:3c:92:e0: 2b:18:cb:69:95:b5:91:c1:c4:48:e8:96:05:b9:96: 68:dc:2c:93:b3:1f:27:07:6b:53:c8:d3:77:ea:83: 1e:16:f3:dd:75:60:39:fb:96:b5:33:b3:e3:9f:ce: 55:eb:5c:fd:2b:e4:9e:7a:f2:f9:a6:cd:ee:10:37: b7:8e:38:bf:65:58:79:8a:2d:cc:67:a2:40:99:c3: 1c:90:49:10:31:a1:26:f5:48:b4:cd:47:f4:d4:d6: 1d:50:6d:7d:f1:20:f7:0d:54:df:82:ec:63:3b:51: 12:8a:89:a3:42:08:13:c9:69:c1:59:95:d8:1e:7f: ea:08:2e:bf:45:65:ee:e4:44:1c:bb:9b:25:e8:c6: c9:1d:cf:7e:bb:f3:c2:b7:e7:42:87:fd:41:97:25: de:b8:7b:3d:05:98:b1:6c:d7:ee:20:3c:b6:b5:56: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:EE:D1:DC:52:88:37:CF:A1:49:76:C9:6F:19:11:14:63:78:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 108.174.128.0/20 204.225.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11851 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:41:52:4a:85:40:91:84:f6:17:16:66:18:73:80:cb:f0:dd: b0:88:65:93:c4:02:e5:6e:fa:18:db:55:49:44:b3:dd:0a:ef: 44:89:70:e8:e8:d6:a7:ce:87:4e:78:d0:83:58:9f:cc:38:0b: 48:aa:74:5c:b7:df:f3:ee:a1:72:86:91:78:90:27:d5:e8:11: d6:37:69:90:59:23:72:c9:77:ee:ff:1c:2f:fd:a6:87:92:8a: 09:ea:85:5c:9f:0c:d0:22:0c:9f:bc:32:72:e1:41:8c:61:47: 3e:7e:fb:5f:67:50:89:01:81:66:5a:91:41:42:ed:85:87:4d: 97:12:c4:b5:2c:f1:29:5f:43:52:38:5d:fd:08:f2:c5:aa:50: 8d:b2:0f:a7:df:52:85:19:d7:2c:cb:60:d9:b6:d8:ca:e9:5a: 8d:e9:45:e3:ad:3b:66:ef:f2:89:6f:54:a3:0f:b9:d2:20:0a: c5:16:99:86:46:22:73:80:e0:f6:b5:2c:df:f8:b4:15:5e:08: 4b:25:4d:36:9b:67:4a:b6:be:1f:4d:69:88:71:b3:d7:e7:24: 25:ee:c1:88:2f:06:86:d6:37:d9:d0:e3:53:2a:48:50:96:22: b8:b8:f7:5a:2c:09:03:ed:59:7d:a6:1c:a2:82:75:4e:86:cb: 74:09:aa:a4 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEgFHd8liOYWkdrRgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyNzE2MDYwN1oXDTI3MDMwMjE2MDYwN1owLzEtMCsGA1UEAxMk YmQ3NWE5YTAtMDFiYi00NThjLThkMmQtNTZhN2IzMmZlZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5FXnIYXZxgvSZ5VYnYtMxCaVjcUAWExbV6e SSVH+HKENI8iy2o/EkvaC+IzWhlqIF7w6gARM1pLOSeghiwhKxXsWLd4prCPrwA2 o1tdxh9VhiwRIf08kuArGMtplbWRwcRI6JYFuZZo3CyTsx8nB2tTyNN36oMeFvPd dWA5+5a1M7Pjn85V61z9K+SeevL5ps3uEDe3jji/ZVh5ii3MZ6JAmcMckEkQMaEm 9Ui0zUf01NYdUG198SD3DVTfguxjO1ESiomjQggTyWnBWZXYHn/qCC6/RWXu5EQc u5sl6MbJHc9+u/PCt+dCh/1BlyXeuHs9BZixbNfuIDy2tVbclQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFPTp7tHcUog3z6FJdslvGREUY3hrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i ZDc1YTlhMC0wMWJiLTQ1OGMtOGQyZC01NmE3YjMyZmVmZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JkNzVhOWEwLTAxYmItNDU4Yy04 ZDJkLTU2YTdiMzJmZWZlYi9iZDc1YTlhMC0wMWJiLTQ1OGMtOGQyZC01NmE3YjMy ZmVmZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARsroADBADM4f8wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLkswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAPEFSSoVAkYT2FxZmGHOAy/DdsIhlk8QC5W76GNtV SUSz3QrvRIlw6OjWp86HTnjQg1ifzDgLSKp0XLff8+6hcoaReJAn1egR1jdpkFkj csl37v8cL/2mh5KKCeqFXJ8M0CIMn7wycuFBjGFHPn77X2dQiQGBZlqRQULthYdN lxLEtSzxKV9DUjhd/QjyxapQjbIPp99ShRnXLMtg2bbYyulajelF4607Zu/yiW9U ow+50iAKxRaZhkYic4Dg9rUs3/i0FV4ISyVNNptnSra+H01piHGz1+ckJe7BiC8G htY32dDjUypIUJYiuLj3WiwJA+1ZfaYcooJ1TobLdAmqpA== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:08 2024 by rpki-client on console-ams.rpki-client.org