$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2426c67c-d8f7-4d54-93a2-555fe45bc144.cer File: 2426c67c-d8f7-4d54-93a2-555fe45bc144.cer (raw, json) Hash identifier: YwvOV/lZ4/EEV1lRzZZnyJXGGQxhRpCJxRprPwXNsgA= Subject key identifier: 1D:AE:2F:71:E2:5A:D4:B9:09:9C:F0:0A:4A:40:26:50:07:C4:5D:D6 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844676232DA33C656CD3F3C2F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2426c67c-d8f7-4d54-93a2-555fe45bc144/2426c67c-d8f7-4d54-93a2-555fe45bc144.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2426c67c-d8f7-4d54-93a2-555fe45bc144/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jan 2024 01:45:15 +0000 Certificate not after: Sun 05 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 18818 IP: 206.176.160.0/19 IP: 2620:0:1ad0::/45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:67:62:32:da:33:c6:56:cd:3f:3c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 1 01:45:15 2024 GMT Not After : Apr 5 00:45:15 2026 GMT Subject: CN=2426c67c-d8f7-4d54-93a2-555fe45bc144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:08:00:84:c7:12:6b:68:cc:61:ed:e3:99: a0:2f:6d:a4:08:04:47:13:43:73:f1:b3:d5:eb:97: 13:9d:ce:a8:22:f4:40:7f:91:4e:cf:ab:1a:78:d4: 6e:e1:47:6a:65:27:d8:24:b4:8d:67:9e:15:2a:59: b7:34:0d:29:28:76:ea:f7:00:39:ec:81:29:49:fa: e7:20:b6:88:d5:a0:46:14:3a:08:ca:e8:59:cf:e8: 46:c6:9a:61:b8:88:93:e8:82:b3:20:94:b7:38:24: 23:a3:ce:40:0c:4b:18:d4:30:65:fc:1d:5c:09:87: 23:d4:30:c9:b0:19:30:d7:d4:48:e1:30:7b:88:bf: d8:84:a8:89:c3:ab:1e:cd:86:e1:69:50:23:0c:92: c8:3e:56:ff:a1:5c:4f:cd:94:df:55:e7:2a:be:67: 3a:5c:86:ae:d2:fa:2b:bb:0d:54:a8:a5:c3:16:0e: 87:d1:c9:0b:8b:c7:5d:ba:23:be:41:5d:42:2e:a6: 55:f1:e2:6d:77:92:98:09:50:17:5c:0b:51:9a:3d: aa:d1:9c:0a:5e:69:92:fe:1c:9a:3f:d7:8a:a4:ad: 6a:55:4c:37:97:4c:88:d5:fa:2a:e7:29:98:7f:d0: 71:01:a6:9e:b0:17:99:9a:ea:dc:1a:e7:d3:07:d8: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AE:2F:71:E2:5A:D4:B9:09:9C:F0:0A:4A:40:26:50:07:C4:5D:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2426c67c-d8f7-4d54-93a2-555fe45bc144/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2426c67c-d8f7-4d54-93a2-555fe45bc144/2426c67c-d8f7-4d54-93a2-555fe45bc144.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 206.176.160.0/19 IPv6: 2620:0:1ad0::/45 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18818 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c1:86:b2:72:3a:eb:8e:ec:b0:c1:8e:2c:b9:2a:4a:af:d9: 23:74:d4:f3:d7:90:5d:05:57:79:c8:0c:82:29:61:b0:66:b2: 8c:00:5a:33:6d:9d:43:7a:cc:72:32:68:d9:57:e8:36:f0:82: 38:bc:55:68:29:b3:0a:25:3f:c5:74:be:6c:86:6e:45:dc:97: 8e:b4:fe:0c:c3:35:f4:c9:a2:9c:25:42:40:bb:a9:df:4c:3c: eb:c8:6b:fd:9d:d4:a7:be:5b:50:7d:90:96:e7:92:28:2b:2b: e7:89:46:1d:77:3a:51:c0:b2:8b:56:97:23:b4:f2:30:2f:ad: 41:6c:dd:23:f5:37:e0:e7:4f:06:52:44:af:57:14:d1:cf:f7: d4:27:d2:6a:f2:42:42:55:88:f5:cf:55:64:a3:0d:e9:1e:96: 8c:1a:24:9e:51:2a:f2:ae:78:ea:2e:23:ea:62:07:03:15:42: df:a5:a5:97:a1:a0:63:dc:69:ce:ac:dd:dd:00:47:10:f2:7f: 93:fe:dd:36:df:57:f3:3f:60:c2:1a:02:96:f3:1a:21:76:6f: d3:26:7d:b9:bc:c9:71:c6:92:13:3e:f8:36:ef:6b:80:e6:a9: cb:23:c1:18:ee:d2:47:de:e6:b2:02:1d:3d:23:53:28:cd:c5: 0e:16:99:78 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWERnYjLaM8ZWzT88LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDEwMTAxNDUxNVoXDTI2MDQwNTAwNDUxNVowLzEtMCsGA1UEAxMk MjQyNmM2N2MtZDhmNy00ZDU0LTkzYTItNTU1ZmU0NWJjMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBYIAITHEmtozGHt45mgL22kCARHE0Nz8bPV 65cTnc6oIvRAf5FOz6saeNRu4UdqZSfYJLSNZ54VKlm3NA0pKHbq9wA57IEpSfrn ILaI1aBGFDoIyuhZz+hGxpphuIiT6IKzIJS3OCQjo85ADEsY1DBl/B1cCYcj1DDJ sBkw19RI4TB7iL/YhKiJw6sezYbhaVAjDJLIPlb/oVxPzZTfVecqvmc6XIau0vor uw1UqKXDFg6H0ckLi8dduiO+QV1CLqZV8eJtd5KYCVAXXAtRmj2q0ZwKXmmS/hya P9eKpK1qVUw3l0yI1foq5ymYf9BxAaaesBeZmurcGufTB9j8SwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB2uL3HiWtS5CZzwCkpAJlAHxF3WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y NDI2YzY3Yy1kOGY3LTRkNTQtOTNhMi01NTVmZTQ1YmMxNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI0MjZjNjdjLWQ4ZjctNGQ1NC05 M2EyLTU1NWZlNDViYzE0NC8yNDI2YzY3Yy1kOGY3LTRkNTQtOTNhMi01NTVmZTQ1 YmMxNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAXOsKAwDwQCAAIwCQMHAyYgAAAa0DAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJJgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpwYaycjrrjuywwY4suSpKr9kj dNTz15BdBVd5yAyCKWGwZrKMAFozbZ1DesxyMmjZV+g28II4vFVoKbMKJT/FdL5s hm5F3JeOtP4MwzX0yaKcJUJAu6nfTDzryGv9ndSnvltQfZCW55IoKyvniUYddzpR wLKLVpcjtPIwL61BbN0j9Tfg508GUkSvVxTRz/fUJ9Jq8kJCVYj1z1Vkow3pHpaM GiSeUSryrnjqLiPqYgcDFULfpaWXoaBj3GnOrN3dAEcQ8n+T/t0231fzP2DCGgKW 8xohdm/TJn25vMlxxpITPvg272uA5qnLI8EY7tJH3uayAh09I1MozcUOFpl4 -----END CERTIFICATE-----Generated at Thu Nov 21 15:39:29 2024 by rpki-client on console-fra.rpki-client.org