$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer File: d299820b-c679-4c6f-a4de-fc9b11c710bc.cer (raw, json) Hash identifier: 3kdPxQXKtIdtn8Foi9fy9aHz8Vtu03VjCuXWlsX0Xwk= Subject key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858482BE9281FB7E1F4EF7FA24700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Dec 2024 13:36:26 +0000 Certificate not after: Mon 08 Mar 2027 02:52:30 +0000 Subordinate resources: AS: 401529 IP: 23.130.188.0/24 IP: 2607:e440::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:e9:28:1f:b7:e1:f4:ef:7f:a2:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 11 13:36:26 2024 GMT Not After : Mar 8 02:52:30 2027 GMT Subject: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:a9:0a:71:ba:01:e1:af:7d:07:64:6f:d0: ee:29:bd:ca:c5:55:c7:c8:12:95:56:a7:9f:99:92: cf:05:05:0e:d6:2d:f7:1a:9d:3b:8e:5d:71:b9:8e: ae:f1:d0:a2:ad:de:dc:b3:9f:8a:e5:1b:a9:00:d1: 8e:09:d7:09:08:f1:87:ce:15:d8:1d:e4:1e:84:49: 64:d4:32:86:f0:c7:b4:62:06:ba:5f:8a:a9:7c:aa: 1f:b5:38:6f:c8:58:45:03:aa:7a:6e:06:9b:9b:33: 14:6f:33:0e:cb:41:05:d3:41:70:63:8b:fc:67:e1: af:db:fe:1a:9e:1a:0e:43:96:34:ef:b1:f0:90:c1: b8:7d:34:c8:b7:fd:4e:be:2f:17:5d:82:f6:c2:fa: 48:72:d1:8d:6a:69:04:c6:9b:b9:38:a4:1f:e0:56: 46:19:b8:45:0b:94:5e:11:35:58:8f:2f:d0:12:9a: 76:25:72:9b:f5:80:0e:75:e5:4f:c2:86:68:d0:26: 4d:fb:50:01:07:f3:d8:41:f1:fd:ac:9b:61:91:a6: 04:b2:37:fb:44:6e:e3:5a:c1:14:08:23:1a:30:08: 3e:58:5b:78:91:c3:83:12:43:fb:5f:43:4a:a3:02: c8:ee:31:dc:3b:90:fd:ce:dc:49:3b:e6:24:90:61: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.188.0/24 IPv6: 2607:e440::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401529 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f4:3e:1b:1c:74:16:a9:47:06:4a:ff:3c:c0:e5:75:cd:c3: a3:23:27:c3:67:05:77:b7:48:76:9c:4c:69:af:a4:df:3a:33: 82:7b:2b:bf:de:9b:7a:36:04:e5:13:86:bb:2c:5d:a6:21:e9: 6e:86:34:ed:40:57:63:0c:63:c6:48:15:82:b5:e1:0a:37:ac: f4:0c:02:70:a2:69:78:83:48:08:b7:cd:38:98:cf:43:36:ca: a8:3b:5e:22:e9:f3:a5:59:d5:d3:6e:5a:1d:6a:7c:2c:7a:35: 3b:8b:d8:52:35:bd:46:07:3d:c1:e5:95:13:84:d3:c4:08:6d: d4:2d:e7:f1:c3:3c:bc:89:83:79:4b:ac:c0:b0:71:7d:9f:80: 6e:10:b9:25:09:b9:63:07:0f:59:bc:02:1f:a9:d2:ba:c6:c3: d8:6c:03:52:63:a4:80:6b:61:82:91:bf:a9:13:af:07:d7:e9: 9b:f0:ff:28:ce:2f:16:2d:ef:f9:ad:5f:9e:31:e6:8d:15:26: c3:c7:0b:89:38:66:d6:fd:a1:cb:e3:85:b5:31:31:10:36:2d: 11:ba:f0:4b:b6:94:62:c0:7e:7d:da:5b:99:5f:32:aa:b6:1f: 4f:1e:9b:4d:e8:e1:82:4e:78:de:5f:71:bc:83:7e:71:01:9b: 9d:4f:46:d6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEgr6Sgft+H073+iRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIxMTEzMzYyNloXDTI3MDMwODAyNTIzMFowLzEtMCsGA1UEAxMk ZDI5OTgyMGItYzY3OS00YzZmLWE0ZGUtZmM5YjExYzcxMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTupCnG6AeGvfQdkb9DuKb3KxVXHyBKVVqef mZLPBQUO1i33Gp07jl1xuY6u8dCird7cs5+K5RupANGOCdcJCPGHzhXYHeQehElk 1DKG8Me0Yga6X4qpfKoftThvyFhFA6p6bgabmzMUbzMOy0EF00FwY4v8Z+Gv2/4a nhoOQ5Y077HwkMG4fTTIt/1Ovi8XXYL2wvpIctGNamkExpu5OKQf4FZGGbhFC5Re ETVYjy/QEpp2JXKb9YAOdeVPwoZo0CZN+1ABB/PYQfH9rJthkaYEsjf7RG7jWsEU CCMaMAg+WFt4kcODEkP7X0NKowLI7jHcO5D9ztxJO+YkkGFg/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCjLM6aXiS01XpEZwWB4zn42fWTCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k Mjk5ODIwYi1jNjc5LTRjNmYtYTRkZS1mYzliMTFjNzEwYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QyOTk4MjBiLWM2NzktNGM2Zi1h NGRlLWZjOWIxMWM3MTBiYy9kMjk5ODIwYi1jNjc5LTRjNmYtYTRkZS1mYzliMTFj NzEwYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgrwwDgQCAAIwCAMGBCYH5EAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp9D4bHHQWqUcGSv88wOV1zcOj IyfDZwV3t0h2nExpr6TfOjOCeyu/3pt6NgTlE4a7LF2mIeluhjTtQFdjDGPGSBWC teEKN6z0DAJwoml4g0gIt804mM9DNsqoO14i6fOlWdXTblodanwsejU7i9hSNb1G Bz3B5ZUThNPECG3ULefxwzy8iYN5S6zAsHF9n4BuELklCbljBw9ZvAIfqdK6xsPY bANSY6SAa2GCkb+pE68H1+mb8P8ozi8WLe/5rV+eMeaNFSbDxwuJOGbW/aHL44W1 MTEQNi0RuvBLtpRiwH592luZXzKqth9PHptN6OGCTnjeX3G8g35xAZudT0bW -----END CERTIFICATE-----Generated at Fri Dec 27 07:10:07 2024 by rpki-client on console-fra.rpki-client.org