$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer File: 70b47ad9-010b-4764-8cef-4d3e66669003.cer (raw, json) Hash identifier: Jlv5QTCMTEqW8Dj35pvAZ6N5ARxuJEKEDKwbMnEhc1Q= Subject key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846E693265B313CE86A611B0580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 Aug 2024 00:45:25 +0000 Certificate not after: Fri 20 Nov 2026 01:45:25 +0000 Subordinate resources: IP: 168.151.30.0/24 IP: 2620:8:4300::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:e6:93:26:5b:31:3c:e8:6a:61:1b:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 17 00:45:25 2024 GMT Not After : Nov 20 01:45:25 2026 GMT Subject: CN=70b47ad9-010b-4764-8cef-4d3e66669003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:1a:c1:bf:e8:a3:e4:66:9e:fb:ad:91:98: b1:b6:fe:88:97:01:73:27:74:41:40:0d:dc:7b:5d: 46:0c:95:97:2e:19:2c:7f:ad:19:f5:46:3a:ec:d3: 0f:e5:39:a4:b7:45:3a:00:59:33:94:bd:1d:ad:c7: bc:00:1a:da:d8:b8:df:9a:42:98:83:37:e1:59:66: be:77:cf:ea:2e:45:7f:e6:2d:23:00:ac:95:b0:53: 65:cb:cc:76:b5:77:b0:d2:9e:71:9d:fc:0c:fb:76: 25:91:e8:15:b7:6e:eb:59:72:05:ff:69:48:02:2e: a3:7c:5f:b3:a3:0d:f5:d9:c3:5c:b2:19:6b:6f:7b: cc:9d:0b:b0:5c:5f:14:6d:81:9d:08:e2:7d:ef:7a: ef:56:0a:98:62:e8:44:7a:b5:0e:3c:5a:f9:f6:ea: c3:03:6a:9e:eb:6b:38:51:dd:35:b4:14:a1:b5:7f: 18:b1:09:c4:3d:3c:2c:5e:95:79:b5:ca:04:77:bf: ab:b0:05:4d:3d:af:4c:c8:33:26:a0:f6:6a:99:58: 79:22:24:1c:9e:a8:04:00:6c:3a:36:bb:f5:29:42: c6:81:df:13:8c:9c:66:90:26:7f:f2:9d:bc:bc:9c: 0b:6f:4c:10:5a:30:0c:cf:27:7e:98:12:66:6d:ed: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 168.151.30.0/24 IPv6: 2620:8:4300::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6b:12:27:f5:a1:90:c8:bc:ac:dc:d0:35:97:0b:1f:bd:7e: 0f:04:36:2c:86:91:5a:49:2d:64:76:72:ce:a8:77:40:c9:8e: 88:db:55:1e:78:27:55:b8:ca:69:fa:1c:1d:df:f9:20:2c:80: c8:93:a0:4e:06:93:a1:ee:a2:06:01:2c:64:0d:db:f9:8e:34: ed:91:01:e2:6a:01:c9:56:de:e5:46:29:ae:bf:de:71:fc:a6: 78:f8:a9:3c:41:4d:d2:5d:e6:f2:79:bf:45:4a:1a:5b:ea:be: 65:32:78:8c:0c:fb:9c:5b:74:08:12:d9:64:99:a8:bf:cc:05: 2d:2c:94:e5:78:46:c7:21:56:3d:f9:cb:76:5e:c1:67:9a:0a: c0:df:0e:12:c3:7d:87:e8:a1:c7:b0:a4:82:8e:7d:08:ef:21: 05:f5:48:e7:00:2b:9b:14:71:b3:ab:aa:f0:cc:32:44:f4:8f: 7c:3c:74:dd:10:33:37:65:6d:df:32:f7:7d:79:22:88:21:ae: d3:aa:8b:ad:73:5e:de:c3:7a:7b:93:ea:b1:35:13:00:fc:94: 12:74:54:49:40:35:74:7a:48:bc:77:5d:0e:19:60:4f:fb:fd: 2d:72:8a:c3:8f:0e:1c:77:a8:26:61:74:a3:1a:91:5f:56:e6: 73:6a:62:97 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEbmkyZbMTzoamEbBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgxNzAwNDUyNVoXDTI2MTEyMDAxNDUyNVowLzEtMCsGA1UEAxMk NzBiNDdhZDktMDEwYi00NzY0LThjZWYtNGQzZTY2NjY5MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0awb/oo+RmnvutkZixtv6IlwFzJ3RBQA3c e11GDJWXLhksf60Z9UY67NMP5Tmkt0U6AFkzlL0drce8ABra2LjfmkKYgzfhWWa+ d8/qLkV/5i0jAKyVsFNly8x2tXew0p5xnfwM+3YlkegVt27rWXIF/2lIAi6jfF+z ow312cNcshlrb3vMnQuwXF8UbYGdCOJ973rvVgqYYuhEerUOPFr59urDA2qe62s4 Ud01tBShtX8YsQnEPTwsXpV5tcoEd7+rsAVNPa9MyDMmoPZqmVh5IiQcnqgEAGw6 Nrv1KULGgd8TjJxmkCZ/8p28vJwLb0wQWjAMzyd+mBJmbe0yRwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFDdWNQjcCZO4iWv/8iufoEQAeAaxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 MGI0N2FkOS0wMTBiLTQ3NjQtOGNlZi00ZDNlNjY2NjkwMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzcwYjQ3YWQ5LTAxMGItNDc2NC04 Y2VmLTRkM2U2NjY2OTAwMy83MGI0N2FkOS0wMTBiLTQ3NjQtOGNlZi00ZDNlNjY2 NjkwMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAColx4wDwQCAAIwCQMHACYgAAhDADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCMaxIn9aGQyLys3NA1lwsfvX4PBDYshpFaSS1kdnLOqHdAyY6I21UeeCdVuMpp +hwd3/kgLIDIk6BOBpOh7qIGASxkDdv5jjTtkQHiagHJVt7lRimuv95x/KZ4+Kk8 QU3SXebyeb9FShpb6r5lMniMDPucW3QIEtlkmai/zAUtLJTleEbHIVY9+ct2XsFn mgrA3w4Sw32H6KHHsKSCjn0I7yEF9UjnACubFHGzq6rwzDJE9I98PHTdEDM3ZW3f Mvd9eSKIIa7Tqoutc17ew3p7k+qxNRMA/JQSdFRJQDV0eki8d10OGWBP+/0tcorD jw4cd6gmYXSjGpFfVuZzamKX -----END CERTIFICATE-----Generated at Thu Nov 21 15:41:34 2024 by rpki-client on console-fra.rpki-client.org