$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer File: 8b860252-78e2-47ac-a6f1-f1dc5a900776.cer (raw, json) Hash identifier: NBi31s9x0hWI3Ms0DpVBvV8Ro8WUiuNGDtR0HjJ4iJY= Subject key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584777BEBC6EC36E16B9A322F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Oct 2024 00:45:27 +0000 Certificate not after: Mon 11 Jan 2027 01:45:27 +0000 Subordinate resources: AS: 20099 IP: 192.44.70.0/24 IP: 2620:89:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:be:bc:6e:c3:6e:16:b9:a3:22:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 8 00:45:27 2024 GMT Not After : Jan 11 01:45:27 2027 GMT Subject: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:70:fa:70:25:3a:b9:7c:c8:36:ff:be:45: f1:38:0b:b8:7c:f5:3b:9a:67:d6:dd:68:aa:01:32: 36:85:ee:d4:2c:e4:b3:99:9b:85:c5:f6:1f:d5:e7: 4c:38:f6:ac:65:68:76:96:fb:e1:37:3b:19:e4:77: 43:05:08:40:82:52:c9:70:7f:36:b2:a9:a9:ca:5b: 4b:f5:34:c8:6b:45:c2:60:b8:7e:bc:fa:e1:df:72: c0:af:b4:b6:e9:64:17:12:20:28:b7:7c:df:ce:44: 6b:fa:93:89:0a:b5:9a:d3:97:e4:5d:b4:21:7b:c8: 61:5f:e6:50:99:e1:1b:9a:7e:3c:c7:22:58:cb:31: 48:5e:0b:7a:37:7b:c0:4b:4b:fa:c4:18:55:0b:69: f4:3d:9e:fc:dc:ab:fe:8c:33:d1:ee:f8:77:b7:c3: 5c:6b:b0:f0:36:7e:aa:72:c4:fd:6a:a4:97:2e:23: 40:16:76:f0:bd:87:00:90:41:51:5a:aa:a8:32:89: 62:f0:58:64:6f:73:8a:1c:b6:c3:02:e1:78:e4:1c: f1:01:bd:5a:91:fc:12:e2:31:c6:f3:11:1e:3d:ec: 87:c0:76:cb:52:98:0d:4f:74:f9:09:ae:b0:ab:2c: cc:21:4b:bb:3b:03:df:79:cb:f8:db:05:c2:9c:21: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.44.70.0/24 IPv6: 2620:89:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20099 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ca:b1:9d:b8:d1:ea:00:eb:f0:e6:6e:55:6d:8c:c9:e0:85: 29:39:bd:36:c6:4a:ee:b2:60:0c:3d:81:10:a4:0b:be:25:e5: d9:f7:a3:18:64:38:c2:9e:67:13:e3:8d:1a:1a:22:20:3a:c5: 4b:3f:32:72:27:71:d6:5d:09:42:fb:ca:fa:40:b6:bd:c1:59: ad:cd:57:50:1d:02:79:d1:41:fe:72:71:43:69:8d:65:87:1b: 0d:bd:93:61:ad:4c:ec:b1:f7:6a:0f:a6:cc:22:a3:fe:1b:32: 87:92:46:8f:e8:19:97:db:cf:28:a6:72:e6:c8:27:39:8e:47: ea:54:e2:81:f6:05:54:1a:7b:f4:e0:ba:34:cc:be:90:2d:95: 14:c3:d0:c9:4b:40:00:6a:59:13:dd:6b:ac:50:88:3e:76:05: 8f:41:a0:43:6a:f0:a4:51:f7:67:30:9d:f6:3f:d3:b8:ca:e7: 31:6b:8e:01:50:d3:7a:7a:59:9c:47:f3:29:6c:c7:e8:4e:49: bc:5d:86:d6:31:94:bc:0e:50:96:71:eb:70:00:7d:99:a4:5a: 02:6f:88:62:de:79:bd:b2:e8:c0:60:e2:fb:e3:ae:ab:a8:49: 43:c7:9d:cb:e5:71:0f:ff:e6:eb:70:e4:bc:35:ff:11:e9:f2: 47:a8:65:92 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEd3vrxuw24WuaMi+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAwODAwNDUyN1oXDTI3MDExMTAxNDUyN1owLzEtMCsGA1UEAxMk OGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAwNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqxw+nAlOrl8yDb/vkXxOAu4fPU7mmfW3Wiq ATI2he7ULOSzmZuFxfYf1edMOPasZWh2lvvhNzsZ5HdDBQhAglLJcH82sqmpyltL 9TTIa0XCYLh+vPrh33LAr7S26WQXEiAot3zfzkRr+pOJCrWa05fkXbQhe8hhX+ZQ meEbmn48xyJYyzFIXgt6N3vAS0v6xBhVC2n0PZ783Kv+jDPR7vh3t8Nca7DwNn6q csT9aqSXLiNAFnbwvYcAkEFRWqqoMoli8Fhkb3OKHLbDAuF45BzxAb1akfwS4jHG 8xEePeyHwHbLUpgNT3T5Ca6wqyzMIUu7OwPfecv42wXCnCEaewIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFH+B0pAqIkE9t2diSuJHUTvXD3t3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhiODYwMjUyLTc4ZTItNDdhYy1h NmYxLWYxZGM1YTkwMDc3Ni84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5 MDA3NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADALEYwDwQCAAIwCQMHACYgAInAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJOgzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/yrGduNHqAOvw5m5VbYzJ4IUp Ob02xkrusmAMPYEQpAu+JeXZ96MYZDjCnmcT440aGiIgOsVLPzJyJ3HWXQlC+8r6 QLa9wVmtzVdQHQJ50UH+cnFDaY1lhxsNvZNhrUzssfdqD6bMIqP+GzKHkkaP6BmX 288opnLmyCc5jkfqVOKB9gVUGnv04Lo0zL6QLZUUw9DJS0AAalkT3WusUIg+dgWP QaBDavCkUfdnMJ32P9O4yucxa44BUNN6elmcR/MpbMfoTkm8XYbWMZS8DlCWcetw AH2ZpFoCb4hi3nm9sujAYOL7466rqElDx53L5XEP/+brcOS8Nf8R6fJHqGWS -----END CERTIFICATE-----Generated at Thu Nov 21 16:33:37 2024 by rpki-client on console-ams.rpki-client.org