$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer File: d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer (raw, json) Hash identifier: OLUa9Wj6Shk6jfpVegqzGKOAjH7g4F7UlcKQ6VKItM8= Subject key identifier: E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858483A0CFA569139289907D68840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/d9f752bf-5611-40d8-90f2-7c7c59c005f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Dec 2024 15:09:55 +0000 Certificate not after: Sun 21 Mar 2027 14:09:55 +0000 Subordinate resources: AS: 53271 IP: 24.38.128.0/20 IP: 107.181.0.0/20 IP: 162.216.220.0/22 IP: 162.218.160.0/21 IP: 162.250.80.0/21 IP: 198.23.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3a:0c:fa:56:91:39:28:99:07:d6:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 16 15:09:55 2024 GMT Not After : Mar 21 14:09:55 2027 GMT Subject: CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:8b:59:97:b9:7a:cb:b1:81:d0:2c:eb:52: 23:ea:8b:f7:f1:e2:c4:c4:39:5c:19:ec:3d:f7:f3: 54:62:01:2f:e2:eb:30:22:72:3e:90:67:c1:df:a3: 10:58:80:cf:e4:69:6a:ce:25:77:f2:e0:16:3f:d7: eb:f2:ea:fa:db:e3:eb:05:cb:80:92:95:a1:a2:9d: 66:30:88:b1:fd:29:62:ac:f6:64:f6:a8:8f:51:55: 30:1e:2f:70:d1:78:24:09:bf:95:fb:87:a5:0d:28: 44:46:c1:c6:e1:aa:70:a6:c5:1d:4b:99:4d:f2:35: 72:c6:06:56:80:4c:e8:64:d0:da:39:b1:7e:96:88: 78:86:ce:85:10:ad:4c:0d:51:b8:1e:02:15:53:59: b4:c3:67:16:99:77:7a:01:74:ae:5f:5e:05:55:30: 26:f8:70:cd:d7:bc:e7:61:ef:c4:89:c0:26:dc:17: 21:12:d3:9a:06:b3:28:2f:2a:e5:31:9c:b3:25:55: 02:b0:1d:49:b8:09:75:a5:71:d9:fd:20:78:59:71: 27:1d:12:67:e1:93:d1:ca:74:1f:8f:2b:28:55:03: 7d:c2:bc:ea:cf:bb:5b:ac:6d:3f:c7:33:3f:18:44: 93:ba:c5:4c:88:8b:86:de:cc:9e:4b:5c:0c:c4:e5: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/d9f752bf-5611-40d8-90f2-7c7c59c005f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 24.38.128.0/20 107.181.0.0/20 162.216.220.0/22 162.218.160.0/21 162.250.80.0/21 198.23.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53271 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f9:3c:f1:d4:ba:ce:47:d8:97:31:ee:94:c2:f9:b7:d1:d7: 5d:41:c8:52:91:ae:99:eb:15:cf:db:d6:b7:b0:e8:fc:28:9e: 71:9b:e5:df:0f:05:7c:45:9e:ac:bb:a7:3d:fa:e8:06:6f:2c: b6:3d:7e:8c:6c:f4:17:b2:f0:50:5b:1e:c7:9f:99:8e:9c:a6: a4:17:7f:b8:7c:91:1e:85:ad:95:3d:bb:6e:da:00:e7:37:3f: b2:d0:68:6c:cc:75:27:a8:cb:0c:bb:44:85:3a:4b:55:91:11: db:36:83:61:05:37:a4:5f:ef:56:44:e7:36:d0:db:cd:3a:08: 95:95:7b:9d:ae:6b:9f:8c:98:42:43:d0:14:77:4b:1c:44:9c: bc:e2:38:2e:1f:36:0e:b1:03:7a:55:f6:c7:0d:0b:64:2b:fa: b6:70:a7:d2:83:b9:67:ad:74:2d:e8:17:f8:ed:28:9e:f0:fa: ab:78:97:8a:57:4e:dd:7c:ea:1f:ee:43:0c:8c:32:5d:c8:3c: 09:8e:59:78:9d:f5:03:a3:95:b0:ff:99:67:31:07:48:a0:4e: 10:09:5f:7c:69:a7:45:a1:c6:6c:74:e7:06:7c:f6:3c:72:01: 51:b0:e1:0c:3e:ed:4b:82:66:9d:aa:54:cb:3b:24:2a:44:8a: 7b:d3:4c:5b -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEg6DPpWkTkomQfWiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIxNjE1MDk1NVoXDTI3MDMyMTE0MDk1NVowLzEtMCsGA1UEAxMk ZDlmNzUyYmYtNTYxMS00MGQ4LTkwZjItN2M3YzU5YzAwNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntiLWZe5esuxgdAs61Ij6ov38eLExDlcGew9 9/NUYgEv4uswInI+kGfB36MQWIDP5GlqziV38uAWP9fr8ur62+PrBcuAkpWhop1m MIix/SlirPZk9qiPUVUwHi9w0XgkCb+V+4elDShERsHG4apwpsUdS5lN8jVyxgZW gEzoZNDaObF+loh4hs6FEK1MDVG4HgIVU1m0w2cWmXd6AXSuX14FVTAm+HDN17zn Ye/EicAm3BchEtOaBrMoLyrlMZyzJVUCsB1JuAl1pXHZ/SB4WXEnHRJn4ZPRynQf jysoVQN9wrzqz7tbrG0/xzM/GESTusVMiIuG3syeS1wMxOVjiQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFOT2RBSF9PO/yQV1r8rD0H1AZ++1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OWY3NTJiZi01NjExLTQwZDgtOTBmMi03YzdjNTljMDA1ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q5Zjc1MmJmLTU2MTEtNDBkOC05 MGYyLTdjN2M1OWMwMDVmOS9kOWY3NTJiZi01NjExLTQwZDgtOTBmMi03YzdjNTlj MDA1ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAQYJoADBARrtQADBAKi2NwDBAOi2qADBAOi+lAD BALGFxwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANAXMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI/5PPHU us5H2Jcx7pTC+bfR111ByFKRrpnrFc/b1rew6PwonnGb5d8PBXxFnqy7pz366AZv LLY9foxs9Bey8FBbHsefmY6cpqQXf7h8kR6FrZU9u27aAOc3P7LQaGzMdSeoywy7 RIU6S1WREds2g2EFN6Rf71ZE5zbQ2806CJWVe52ua5+MmEJD0BR3SxxEnLziOC4f Ng6xA3pV9scNC2Qr+rZwp9KDuWetdC3oF/jtKJ7w+qt4l4pXTt186h/uQwyMMl3I PAmOWXid9QOjlbD/mWcxB0igThAJX3xpp0Whxmx05wZ89jxyAVGw4Qw+7UuCZp2q VMs7JCpEinvTTFs= -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:08 2024 by rpki-client on console-ams.rpki-client.org