$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer File: c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer (raw, json) Hash identifier: vmKzDSjH/q/XgOWFuQnQq4HLjTxbtmW8tqX+b/HfOXw= Subject key identifier: 1C:02:94:02:FD:1B:BC:16:B3:45:21:4F:94:93:48:D9:FA:B5:18:4A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858484DA452F873BD03A9DBB347E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Dec 2024 15:35:13 +0000 Certificate not after: Sun 28 Mar 2027 14:35:13 +0000 Subordinate resources: AS: 11282 IP: 192.0.16.0/20 IP: 198.1.128.0/18 IP: 198.15.128.0/17 IP: 198.105.160.0/19 IP: 198.177.56.0/21 IP: 199.231.64.0/21 IP: 2605:b0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:a4:52:f8:73:bd:03:a9:db:b3:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 23 15:35:13 2024 GMT Not After : Mar 28 14:35:13 2027 GMT Subject: CN=c576135d-7a7b-4781-acb2-21a0d33eb1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:2e:11:af:30:16:f3:6e:c8:77:3d:10:1c: d2:fa:7b:c0:6a:c8:33:7c:70:46:2e:43:e2:71:57: bf:c9:bc:d3:7d:e9:6c:5d:89:0f:5c:a9:68:f2:87: 85:de:70:8b:43:e9:80:78:21:0b:2c:0d:2a:02:e6: a8:87:59:cf:f6:94:2c:2a:de:90:35:4f:bd:0e:c1: 0d:8e:28:7f:c7:94:3f:a6:82:92:5f:10:41:12:17: 65:6b:9c:dc:1a:18:fa:a3:c0:ac:64:f8:59:7e:ab: ba:34:f7:bc:f7:2e:d4:21:a2:c8:ce:a9:ff:41:dd: 8c:4f:de:72:33:47:46:b7:b1:3a:49:9b:a4:57:11: e0:25:91:5d:23:95:65:5e:6f:33:66:31:85:cb:93: da:f6:0f:fd:6c:d1:48:b0:80:c4:db:3d:3d:7d:de: 6c:c3:2c:f3:4b:63:87:64:3f:2b:a8:92:20:7e:1f: f8:5d:ce:bf:2e:a8:0a:9b:12:db:b3:94:13:cc:d8: f0:e2:ec:21:98:4a:4b:80:3a:54:ac:b7:1b:aa:85: 83:fc:7f:79:df:ab:18:1a:17:44:9a:49:d8:bf:ba: 32:2c:39:af:ff:ac:51:46:b8:84:28:be:dd:ac:c9: 7f:8d:fc:e1:5c:ef:8c:4c:9b:4e:83:1a:6e:20:65: 5f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:94:02:FD:1B:BC:16:B3:45:21:4F:94:93:48:D9:FA:B5:18:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.0.16.0/20 198.1.128.0/18 198.15.128.0/17 198.105.160.0/19 198.177.56.0/21 199.231.64.0/21 IPv6: 2605:b0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11282 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:cb:46:9d:50:0c:4b:1c:a5:e5:03:b8:a2:1e:e6:6c:e6:e4: ad:e5:7f:0f:d8:93:2a:87:ae:1c:32:23:73:89:c0:4d:0a:71: cd:e0:0a:3f:52:a8:6c:44:ee:12:14:57:3c:ce:11:f9:a5:ee: 34:cb:07:1a:a7:7d:6d:26:49:6c:f3:c0:2e:a8:40:12:0d:f7: 6b:9e:17:66:6a:e8:92:1e:8a:42:b6:35:a3:18:43:c1:d4:ac: 70:c2:42:11:1d:20:11:59:08:50:22:df:fe:fe:97:a2:8f:36: 03:62:5a:03:92:5f:13:f3:ba:76:34:66:c9:9a:6a:b5:d0:f1: 63:fb:5d:ec:71:b4:7d:4f:8f:67:8f:21:fc:79:dd:97:11:7c: e8:e9:cb:f4:ae:71:2d:dd:ca:e6:de:02:bb:f0:34:1e:92:0e: 73:7a:74:f2:b1:0a:3d:7b:66:a0:10:bf:6c:94:3b:ad:b6:88: ad:f1:e3:e9:44:ef:9e:2f:ce:f7:1b:56:37:8d:bf:95:89:c4: 43:3a:ca:cb:5f:c1:19:a2:9b:a1:e7:5f:cb:f2:7b:99:88:0e: fe:0c:9f:8c:a6:ef:a9:74:de:01:52:5b:56:11:a4:5b:f1:99: 7e:33:7d:cd:00:b8:65:02:0a:02:37:31:e6:b4:a8:df:11:f9: ee:07:3e:3b -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEhNpFL4c70DqduzR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIyMzE1MzUxM1oXDTI3MDMyODE0MzUxM1owLzEtMCsGA1UEAxMk YzU3NjEzNWQtN2E3Yi00NzgxLWFjYjItMjFhMGQzM2ViMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxAuEa8wFvNuyHc9EBzS+nvAasgzfHBGLkPi cVe/ybzTfelsXYkPXKlo8oeF3nCLQ+mAeCELLA0qAuaoh1nP9pQsKt6QNU+9DsEN jih/x5Q/poKSXxBBEhdla5zcGhj6o8CsZPhZfqu6NPe89y7UIaLIzqn/Qd2MT95y M0dGt7E6SZukVxHgJZFdI5VlXm8zZjGFy5Pa9g/9bNFIsIDE2z09fd5swyzzS2OH ZD8rqJIgfh/4Xc6/LqgKmxLbs5QTzNjw4uwhmEpLgDpUrLcbqoWD/H9536sYGhdE mknYv7oyLDmv/6xRRriEKL7drMl/jfzhXO+MTJtOgxpuIGVfuwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFBwClAL9G7wWs0UhT5STSNn6tRhKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NTc2MTM1ZC03YTdiLTQ3ODEtYWNiMi0yMWEwZDMzZWIxZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1h Y2IyLTIxYTBkMzNlYjFkMS9jNTc2MTM1ZC03YTdiLTQ3ODEtYWNiMi0yMWEwZDMz ZWIxZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBATAABADBAbGAYADBAfGD4ADBAXGaaADBAPGsTgD BAPH50AwDQQCAAIwBwMFACYFsMAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLBIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoMtGnVAMSxyl5QO4oh7mbObkreV/D9iTKoeuHDIjc4nATQpxzeAK P1KobETuEhRXPM4R+aXuNMsHGqd9bSZJbPPALqhAEg33a54XZmrokh6KQrY1oxhD wdSscMJCER0gEVkIUCLf/v6Xoo82A2JaA5JfE/O6djRmyZpqtdDxY/td7HG0fU+P Z48h/HndlxF86OnL9K5xLd3K5t4Cu/A0HpIOc3p08rEKPXtmoBC/bJQ7rbaIrfHj 6UTvni/O9xtWN42/lYnEQzrKy1/BGaKboedfy/J7mYgO/gyfjKbvqXTeAVJbVhGk W/GZfjN9zQC4ZQIKAjcx5rSo3xH57gc+Ow== -----END CERTIFICATE-----Generated at Fri Dec 27 07:10:07 2024 by rpki-client on console-fra.rpki-client.org