$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer File: 551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer (raw, json) Hash identifier: PMW9vOL9KWEmm39srIMRQiKJrTJfBJKH2F2sBXO5Hm8= Subject key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority key identifier: 27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5 Certificate issuer: /CN=99f8fed2-292b-4722-b928-fee7bf0a5910 Certificate serial: 010D0C9F43285846DA77268E34A548DD43D44E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml Certificate not before: Mon 12 Aug 2024 16:39:18 +0000 Certificate not after: Sun 15 Nov 2026 17:39:18 +0000 Subordinate resources: AS: 7224 AS: 10291 AS: 16509 AS: 19047 AS: 63088 IP: 72.21.192.0/19 IP: 204.246.160.0/19 IP: 205.251.192.0/18 IP: 207.171.160.0/19 IP: 216.137.32.0/19 IP: 2600:9000::/28 IP: 2605:b940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:da:77:26:8e:34:a5:48:dd:43:d4:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f8fed2-292b-4722-b928-fee7bf0a5910 Validity Not Before: Aug 12 16:39:18 2024 GMT Not After : Nov 15 17:39:18 2026 GMT Subject: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:7d:88:97:9a:55:9b:78:09:20:d8:2e:46: 14:2b:de:1e:7d:99:47:85:19:9f:0e:07:12:80:98: 7e:cc:6f:8a:70:ac:4e:af:f6:92:39:5a:24:cd:48: af:98:1d:7b:a8:9e:cb:a8:c5:a6:17:e2:4e:01:12: 55:19:0c:26:dc:e4:0d:51:a8:bc:3f:43:03:bb:3a: 99:f8:77:d8:c7:d0:dd:06:de:f3:bd:48:98:85:a7: 10:e1:65:29:4f:c8:da:17:bc:9d:3c:b6:10:dd:f0: ec:c8:e7:5f:08:76:54:a5:41:8d:c8:f3:21:e6:8a: 3e:39:2f:ee:e4:4f:84:5d:ca:64:71:10:45:3d:83: e8:d4:db:94:40:82:b8:c3:85:fd:01:20:95:b9:68: b1:18:f0:9b:c7:7a:0f:5c:5e:a5:9f:43:39:e4:46: b0:f9:f8:7e:60:b3:a8:c6:e1:8c:21:37:72:0f:40: f1:f6:a7:78:27:4b:b1:99:e1:fa:ee:b1:09:05:56: 1e:1c:fa:9f:f5:34:d9:58:76:60:62:a2:c7:8a:43: 73:f4:bc:af:f5:41:2b:3e:34:ec:4c:c8:45:ff:0b: 26:6c:9e:d9:1d:83:0f:be:85:5d:c1:83:33:eb:a2: a7:aa:f3:f6:be:6f:87:c2:12:ee:87:3f:d0:1e:28: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl X509v3 Authority Key Identifier: keyid:27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer sbgp-ipAddrBlock: critical IPv4: 72.21.192.0/19 204.246.160.0/19 205.251.192.0/18 207.171.160.0/19 216.137.32.0/19 IPv6: 2600:9000::/28 2605:b940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7224 10291 16509 19047 63088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d4:2c:4d:00:c1:5f:52:06:5b:8e:6e:13:e0:9d:20:8b:cb: 66:6b:4f:6f:a9:60:b9:c1:ab:4a:4f:75:b1:01:48:a7:d9:ad: 8c:94:27:86:27:18:9c:c8:30:56:5a:5d:13:a4:69:d5:f7:3a: b0:f9:bb:c9:8b:16:a0:04:5c:82:50:4a:15:2f:9c:8f:32:d5: aa:7d:4a:1a:7b:a7:a0:a6:12:39:50:ba:e6:99:7c:f0:90:27: 99:e6:24:a3:97:ff:7b:dd:67:00:05:1f:4c:7e:6b:77:2b:0c: c7:f9:04:8e:c2:02:f0:33:9a:ed:6f:da:d9:28:0c:f5:ab:08: f6:8e:54:36:fe:62:9d:8d:7f:ed:87:83:23:c5:56:13:0f:04: 6d:fa:f6:78:fb:1c:64:93:8d:cd:01:3f:cf:7a:79:51:b3:db: be:23:ff:45:e3:8c:e6:c5:69:95:1c:a8:2f:39:57:d9:32:9e: 8f:fa:06:b8:0a:b2:81:f9:fb:b4:2f:aa:9e:f1:57:66:9b:9d: 8c:33:6e:05:63:f9:bd:e1:fb:e0:52:3a:98:f6:66:54:d6:77: e8:39:57:42:8e:d7:34:54:6f:28:3e:ab:81:c0:cb:fb:b4:5d: 6b:c6:83:54:cd:2b:ec:52:1c:39:2f:89:1e:11:29:de:c7:fd: ec:6e:bf:20 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEbadyaONKVI3UPUToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmOGZlZDItMjkyYi00NzIyLWI5MjgtZmVlN2JmMGE1 OTEwMB4XDTI0MDgxMjE2MzkxOFoXDTI2MTExNTE3MzkxOFowPTE7MDkGA1UEAxMy NTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQy Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmn2Il5pVm3gJINgu RhQr3h59mUeFGZ8OBxKAmH7Mb4pwrE6v9pI5WiTNSK+YHXuonsuoxaYX4k4BElUZ DCbc5A1RqLw/QwO7Opn4d9jH0N0G3vO9SJiFpxDhZSlPyNoXvJ08thDd8OzI518I dlSlQY3I8yHmij45L+7kT4RdymRxEEU9g+jU25RAgrjDhf0BIJW5aLEY8JvHeg9c XqWfQznkRrD5+H5gs6jG4YwhN3IPQPH2p3gnS7GZ4frusQkFVh4c+p/1NNlYdmBi oseKQ3P0vK/1QSs+NOxMyEX/CyZsntkdgw++hV3BgzProqeq8/a+b4fCEu6HP9Ae KPKPAgMBAAGjggRKMIIERjAdBgNVHQ4EFgQU6PPFIOIO8l06t6IWuxQEMWo3OPEw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEz NDMtNDI4ZC1iZjc4LWY5ODJiNmU2MDUwNS8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4 YWY1LWEzNDMtNDI4ZC1iZjc4LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVs eFc1VngzUjQwczQubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2U3NTE4YWY1LWEzNDMtNDI4ZC1i Zjc4LWY5ODJiNmU2MDUwNS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5Lzk5ZjhmZWQyLTI5MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC85OWY4ZmVk Mi0yOTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAuY3JsMB8GA1UdIwQYMBaAFCez ySj/JZNoxbJofjkPLyzpOMn1MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTlm OGZlZDItMjkyYi00NzIyLWI5MjgtZmVlN2JmMGE1OTEwLmNlcjBNBggrBgEFBQcB BwEB/wQ+MDwwJAQCAAEwHgMEBUgVwAMEBcz2oAMEBs37wAMEBc+roAMEBdiJIDAU BAIAAjAOAwUEJgCQAAMFACYFuUAwKgYIKwYBBQUHAQgBAf8EGzAZoBcwFQICHDgC AigzAgJAfQICSmcCAwD2cDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN1CxNAMFfUgZbjm4T4J0gi8tma09v qWC5watKT3WxAUin2a2MlCeGJxicyDBWWl0TpGnV9zqw+bvJixagBFyCUEoVL5yP MtWqfUoae6egphI5ULrmmXzwkCeZ5iSjl/973WcABR9Mfmt3KwzH+QSOwgLwM5rt b9rZKAz1qwj2jlQ2/mKdjX/th4MjxVYTDwRt+vZ4+xxkk43NAT/PenlRs9u+I/9F 44zmxWmVHKgvOVfZMp6P+ga4CrKB+fu0L6qe8Vdmm52MM24FY/m94fvgUjqY9mZU 1nfoOVdCjtc0VG8oPquBwMv7tF1rxoNUzSvsUhw5L4keESnex/3sbr8g -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:19 2024 by rpki-client on console-fra.rpki-client.org