$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer File: fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer (raw, json) Hash identifier: 1wh9Z7jBKTzfcYiH2ZWQ0TYD6XEPX9PNQCmhh+AtdpI= Subject key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584821C0C0DB1CA86711ADCBE0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Dec 2024 22:16:56 +0000 Certificate not after: Fri 12 Mar 2027 22:16:56 +0000 Subordinate resources: AS: 54381 IP: 66.180.72.0/21 IP: 199.122.112.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:21:c0:c0:db:1c:a8:67:11:ad:cb:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 7 22:16:56 2024 GMT Not After : Mar 12 22:16:56 2027 GMT Subject: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:6e:6f:68:f7:0e:5b:0f:b3:f9:2c:20:cc: a5:42:03:a6:ae:b0:5d:d6:1b:9e:bf:30:e4:d1:1e: 0c:c9:9f:9b:c3:59:a4:ba:c6:ef:ae:a2:77:b8:0d: 27:32:c9:5e:0d:ae:03:01:95:b9:d7:c7:ef:b8:c9: 06:f6:08:64:7f:6b:84:4f:89:b5:6b:97:ca:dd:a5: f4:11:5e:46:47:4e:39:e6:76:4a:6c:bc:90:37:3a: e8:32:ff:57:c3:ed:7b:08:30:d4:70:22:bd:64:bd: 4d:28:ef:1d:39:bb:c0:c7:9c:14:82:49:f9:16:e0: fb:27:49:e8:96:5e:0e:ca:3a:4b:1b:fd:3d:0f:f9: 69:dd:28:01:f7:58:ad:9e:76:ac:f0:2f:a7:8f:23: 5a:c1:f7:50:22:a4:a7:c1:95:a9:52:3f:98:b8:00: aa:2f:d7:9d:84:31:9a:22:c5:f2:4b:78:9e:f2:44: 16:00:67:cc:47:40:c5:31:a6:9f:d0:e0:92:f3:b1: 66:1e:e1:6c:9b:43:f3:06:80:73:ab:9e:8e:8f:66: 44:45:9b:16:13:f8:a7:d7:3d:22:6e:2f:bd:6e:7b: 8b:09:7b:82:ae:84:4d:2e:50:d1:52:12:0f:25:d1: 9e:49:11:6d:51:da:eb:5f:d0:1a:22:c7:ca:d6:63: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.180.72.0/21 199.122.112.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54381 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:41:8d:6b:ad:71:bc:5f:67:ef:27:15:b8:72:50:1e:d8:c7: 53:95:25:b9:83:75:8f:fd:74:a3:f9:40:45:c0:c4:8a:a4:ef: 31:2e:14:13:fc:e2:35:11:80:20:89:64:6b:b1:55:ee:b7:3c: b1:e0:30:76:be:75:cb:83:09:b1:58:d0:1a:e3:66:60:df:f7: 3a:05:f6:da:54:1c:51:3a:bb:e5:51:06:c1:06:6b:ac:9a:73: f7:e0:d4:59:63:8e:20:f5:18:63:da:f9:b3:da:b2:6f:15:b8: 47:21:fc:01:c5:22:95:3b:85:1b:e4:f5:96:c8:f5:ce:08:74: 4b:a4:5f:56:06:8c:86:6a:ef:0d:28:61:8b:d2:6f:39:6a:4a: aa:e7:bf:aa:e3:8c:1d:42:fb:ee:30:58:b6:47:8b:ad:3c:0b: 4f:f3:b6:49:bb:55:52:9f:61:28:69:0c:ac:2a:16:b6:7c:2e: da:d2:90:79:af:1f:fa:2f:8e:d1:86:bb:77:21:00:50:be:0f: 44:fa:6a:c5:b8:15:93:eb:f2:42:d4:fc:1b:fa:7f:61:26:59: 1b:47:55:1d:57:ae:27:41:8f:6c:67:62:b1:8d:6e:2a:a6:fe: f9:5f:a6:7a:36:5d:ca:40:94:00:f4:9d:ef:a7:a1:24:73:fd: c3:63:df:ea -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEghwMDbHKhnEa3L4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwNzIyMTY1NloXDTI3MDMxMjIyMTY1NlowLzEtMCsGA1UEAxMk ZmU0ZTRhNWEtYzhlNC00NDQ0LTk4M2QtYWJmZTZjNWU5ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTRub2j3DlsPs/ksIMylQgOmrrBd1huevzDk 0R4MyZ+bw1mkusbvrqJ3uA0nMsleDa4DAZW518fvuMkG9ghkf2uET4m1a5fK3aX0 EV5GR0455nZKbLyQNzroMv9Xw+17CDDUcCK9ZL1NKO8dObvAx5wUgkn5FuD7J0no ll4OyjpLG/09D/lp3SgB91itnnas8C+njyNawfdQIqSnwZWpUj+YuACqL9edhDGa IsXyS3ie8kQWAGfMR0DFMaaf0OCS87FmHuFsm0PzBoBzq56Oj2ZERZsWE/in1z0i bi+9bnuLCXuCroRNLlDRUhIPJdGeSRFtUdrrX9AaIsfK1mML3wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDVlsmle/6aXFR9Ye7OlCt4EvH8CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m ZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1ZTllZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ZlNGU0YTVhLWM4ZTQtNDQ0NC05 ODNkLWFiZmU2YzVlOWVmZi9mZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1 ZTllZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANCtEgDBALHenAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANRtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACJBjWutcbxfZ+8nFbhyUB7Yx1OVJbmDdY/9dKP5 QEXAxIqk7zEuFBP84jURgCCJZGuxVe63PLHgMHa+dcuDCbFY0BrjZmDf9zoF9tpU HFE6u+VRBsEGa6yac/fg1FljjiD1GGPa+bPasm8VuEch/AHFIpU7hRvk9ZbI9c4I dEukX1YGjIZq7w0oYYvSbzlqSqrnv6rjjB1C++4wWLZHi608C0/ztkm7VVKfYShp DKwqFrZ8LtrSkHmvH/ovjtGGu3chAFC+D0T6asW4FZPr8kLU/Bv6f2EmWRtHVR1X ridBj2xnYrGNbiqm/vlfpno2XcpAlAD0ne+noSRz/cNj3+o= -----END CERTIFICATE-----Generated at Fri Dec 27 14:25:27 2024 by rpki-client on console-fra.rpki-client.org