$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer File: 74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer (raw, json) Hash identifier: FvxjJ/8a4SggJBVTgDi+YEfSAJ2m8vbiSX4Ye8go+Js= Subject key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846BCB2E124F6A40A90E73474C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Aug 2024 00:45:24 +0000 Certificate not after: Thu 05 Nov 2026 01:45:24 +0000 Subordinate resources: AS: 40703 IP: 157.166.0.0/16 IP: 2620:100:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:bc:b2:e1:24:f6:a4:0a:90:e7:34:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 2 00:45:24 2024 GMT Not After : Nov 5 01:45:24 2026 GMT Subject: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:16:93:78:83:5b:6e:f5:ce:09:1a:7f:2e: 81:17:01:16:70:86:cd:78:c2:84:17:71:66:f7:f4: de:ca:a7:62:8e:ae:8f:2c:f7:c9:8e:52:9b:73:6c: 47:a7:ff:9f:af:e8:a5:76:5b:cc:aa:95:42:f9:cf: e1:93:72:80:82:24:84:b6:a3:04:e8:a3:83:3c:31: 86:a2:d0:12:d2:d7:08:95:ab:c1:28:89:4c:bc:d0: b7:20:87:f6:de:69:a8:67:48:3b:56:7a:fe:fb:99: a9:2a:ec:12:4a:60:9f:fb:a2:13:c2:51:51:2e:32: d4:2c:ca:2e:a9:0a:de:c0:03:54:a1:21:d0:b9:c0: 99:22:df:70:d2:fa:79:0b:ee:52:fa:25:a6:69:c9: ed:89:19:4e:74:16:ed:36:f2:cd:c8:91:34:c1:a2: d4:f4:a9:cc:4e:af:92:e4:50:fa:1f:38:9a:8e:ec: d8:c2:3f:8e:c9:e3:7c:da:a5:fb:5b:e7:79:de:8e: 3c:b2:dc:85:32:5c:15:92:6d:38:ce:43:89:e5:a3: b7:e5:0c:27:fd:a7:87:1b:0b:2d:fa:ca:40:f7:f4: 48:33:e0:b6:fb:93:0c:16:c8:1c:f7:9d:d7:ae:ab: 5b:a2:6e:28:bb:70:f6:8d:76:aa:31:df:ed:c9:b1: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 157.166.0.0/16 IPv6: 2620:100:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40703 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:df:0a:fc:0e:1c:32:a9:e5:1c:33:03:b3:89:97:cc:7e:a1: 4b:60:5c:75:c4:b0:40:98:dd:f2:07:cb:81:c6:98:a5:84:fb: 79:37:6f:fb:87:7e:9c:ff:53:a5:f0:28:7c:44:77:29:7c:34: a1:f0:cb:38:e3:f4:51:b4:52:06:47:6a:70:6c:18:dc:ec:d1: 1c:dc:df:ee:fb:14:35:5f:8c:c5:74:69:bc:c6:07:6b:e6:bc: 7d:25:26:12:f7:29:10:9a:78:37:c2:6c:1a:4a:17:b9:2a:a4: e1:dc:c5:f8:20:97:87:3d:ef:ec:70:8a:6f:72:2c:04:a1:39: fb:5f:c8:ff:c1:c3:a3:cb:17:66:0a:c5:d3:e4:72:2e:b9:3c: 01:aa:df:e9:3a:73:99:3d:17:d7:97:97:96:dd:e2:0b:e9:b0: e2:b1:85:c3:1e:d6:21:c1:95:ac:e9:04:8e:1e:be:90:ef:06: 65:b9:0a:e8:4f:28:42:c6:fe:24:aa:0e:9e:7b:12:11:c1:7a: e2:02:c5:92:38:57:1c:ef:f4:a9:96:9f:cd:1a:13:c6:7c:8c: 22:20:ad:d0:3f:49:59:84:e9:7e:a0:41:52:92:d1:3d:7b:b4: e8:87:97:38:2d:92:ec:78:55:ee:ca:62:69:da:5e:84:47:3d: e0:bf:23:21 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEa8suEk9qQKkOc0dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgwMjAwNDUyNFoXDTI2MTEwNTAxNDUyNFowLzEtMCsGA1UEAxMk NzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZiOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspUWk3iDW271zgkafy6BFwEWcIbNeMKEF3Fm 9/Teyqdijq6PLPfJjlKbc2xHp/+fr+ildlvMqpVC+c/hk3KAgiSEtqME6KODPDGG otAS0tcIlavBKIlMvNC3IIf23mmoZ0g7Vnr++5mpKuwSSmCf+6ITwlFRLjLULMou qQrewANUoSHQucCZIt9w0vp5C+5S+iWmacntiRlOdBbtNvLNyJE0waLU9KnMTq+S 5FD6HziajuzYwj+OyeN82qX7W+d53o48styFMlwVkm04zkOJ5aO35Qwn/aeHGwst +spA9/RIM+C2+5MMFsgc953Xrqtbom4ou3D2jXaqMd/tybGgWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHPHI2eKHlEf3GTm9IgYtgjRHuUxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc0MzM1ZmEwLTZjM2YtNDg3OC05 ZjNmLTk1YzVjZTBmYjk1NS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2Uw ZmI5NTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCdpjAPBAIAAjAJAwcEJiABAOAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCe/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF3wr8DhwyqeUcMwOziZfMfqFL YFx1xLBAmN3yB8uBxpilhPt5N2/7h36c/1Ol8Ch8RHcpfDSh8Ms44/RRtFIGR2pw bBjc7NEc3N/u+xQ1X4zFdGm8xgdr5rx9JSYS9ykQmng3wmwaShe5KqTh3MX4IJeH Pe/scIpvciwEoTn7X8j/wcOjyxdmCsXT5HIuuTwBqt/pOnOZPRfXl5eW3eIL6bDi sYXDHtYhwZWs6QSOHr6Q7wZluQroTyhCxv4kqg6eexIRwXriAsWSOFcc7/Splp/N GhPGfIwiIK3QP0lZhOl+oEFSktE9e7Toh5c4LZLseFXuymJp2l6ERz3gvyMh -----END CERTIFICATE-----Generated at Thu Nov 21 15:42:28 2024 by rpki-client on console-fra.rpki-client.org