$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer File: b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer (raw, json) Hash identifier: ID4ZiBw8hd3nY7G5Adi7szAiD5I6U8NnoOot9KooJRc= Subject key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584742B3BBA18D9AC8BC92844400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Sep 2024 00:45:26 +0000 Certificate not after: Wed 23 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 6491 IP: 204.89.198.0/24 IP: 206.197.69.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:b3:bb:a1:8d:9a:c8:bc:92:84:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 19 00:45:26 2024 GMT Not After : Dec 23 01:45:26 2026 GMT Subject: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:c2:41:10:ad:af:80:66:10:d9:86:3f:08: 4b:e0:c8:4b:24:5a:21:9e:e0:59:db:32:cc:c8:dd: df:ce:56:76:c0:bd:8d:62:8c:4e:91:8d:07:79:a9: 12:f8:be:70:f9:fd:62:11:20:17:a9:f2:2e:54:c3: 15:5f:88:11:89:a4:36:4c:46:21:68:78:4e:c7:e3: 7e:83:ff:0c:f0:b3:a6:d2:14:ae:d4:1e:7c:01:71: d9:35:11:b8:26:32:89:9e:02:45:13:4f:f1:66:09: 5f:a4:86:27:b1:96:b0:c8:22:d6:4d:e7:4f:92:33: cb:a2:da:e6:7c:68:0f:86:58:ec:ce:df:ed:42:db: 6c:27:c0:43:be:34:ee:da:b7:e9:cb:f7:6c:18:23: c1:fe:ca:5e:50:25:3a:ec:1a:7b:a0:f1:f2:8b:02: 0c:8c:54:7b:f4:f4:2d:c1:fc:c4:f5:e2:89:9b:c5: 62:e1:8d:70:6d:0a:08:9d:1a:04:82:40:1d:73:64: e9:9a:61:2f:f6:a9:2a:33:7b:3e:c5:be:c1:21:0a: 01:05:44:29:20:2d:ee:3f:58:4f:89:aa:93:4a:00: bf:54:a1:d3:02:48:cc:82:ba:e9:89:58:ed:51:2a: 2d:c6:a1:c1:ed:56:aa:69:a1:42:1e:14:dd:f2:a7: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.89.198.0/24 206.197.69.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6491 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:59:95:ce:5e:a6:74:6e:60:67:42:63:19:62:27:20:de:ed: f8:97:e8:fd:a6:0b:63:fb:61:ff:3b:55:50:14:aa:ac:a5:73: 5c:2b:35:10:49:c4:53:a9:84:07:bf:21:5d:b1:77:40:3d:3a: dc:20:18:fa:85:6e:b6:bf:30:dd:5c:50:f9:52:a5:a2:67:80: de:d9:69:17:19:c5:03:ae:cd:90:6f:5f:f9:66:92:fc:11:49: da:80:2a:63:25:c6:f0:9e:0b:5d:ce:2e:dd:8f:13:b2:63:2d: f7:f6:55:80:79:0e:dd:46:16:a5:77:50:2a:db:dd:bb:ac:5a: 92:27:2a:49:a7:7f:1c:e9:e8:d1:84:34:c6:8c:45:a8:4e:14: 7a:e0:8a:38:28:01:ee:88:73:42:58:28:3e:0a:e5:c3:4f:d8: 6a:17:5e:08:08:b8:6c:20:ed:76:3b:7a:10:70:14:28:7c:9c: be:6e:f9:54:b1:3f:82:80:4d:2c:cc:19:10:da:6a:66:65:3f: 09:f8:5d:c2:b6:e2:8b:a2:47:ac:78:85:3d:48:6a:49:5f:c6: e6:63:0b:f7:44:8a:c8:74:9e:52:cc:a6:70:0d:69:41:d6:1a: 9f:0a:a3:53:1b:66:80:87:c0:2a:38:d7:9a:7e:90:6e:d2:85: 8f:13:8c:07 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEdCs7uhjZrIvJKERAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDkxOTAwNDUyNloXDTI2MTIyMzAxNDUyNlowLzEtMCsGA1UEAxMk YjJjZDBkNTEtOGI5OS00MmM4LTkxYWYtMmZmMzRhNDRhZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ajCQRCtr4BmENmGPwhL4MhLJFohnuBZ2zLM yN3fzlZ2wL2NYoxOkY0HeakS+L5w+f1iESAXqfIuVMMVX4gRiaQ2TEYhaHhOx+N+ g/8M8LOm0hSu1B58AXHZNRG4JjKJngJFE0/xZglfpIYnsZawyCLWTedPkjPLotrm fGgPhljszt/tQttsJ8BDvjTu2rfpy/dsGCPB/speUCU67Bp7oPHyiwIMjFR79PQt wfzE9eKJm8Vi4Y1wbQoInRoEgkAdc2TpmmEv9qkqM3s+xb7BIQoBBUQpIC3uP1hP iaqTSgC/VKHTAkjMgrrpiVjtUSotxqHB7VaqaaFCHhTd8qeiMwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBscQ/2AajCo40MRRsLWeOJLv/AUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0NGFlOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IyY2QwZDUxLThiOTktNDJjOC05 MWFmLTJmZjM0YTQ0YWU5My9iMmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0 NGFlOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADMWcYDBADOxUUwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICGVswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAeVmVzl6mdG5gZ0JjGWInIN7t+Jfo/aYLY/th/ztV UBSqrKVzXCs1EEnEU6mEB78hXbF3QD063CAY+oVutr8w3VxQ+VKlomeA3tlpFxnF A67NkG9f+WaS/BFJ2oAqYyXG8J4LXc4u3Y8TsmMt9/ZVgHkO3UYWpXdQKtvdu6xa kicqSad/HOno0YQ0xoxFqE4UeuCKOCgB7ohzQlgoPgrlw0/YahdeCAi4bCDtdjt6 EHAUKHycvm75VLE/goBNLMwZENpqZmU/Cfhdwrbii6JHrHiFPUhqSV/G5mML90SK yHSeUsymcA1pQdYanwqjUxtmgIfAKjjXmn6QbtKFjxOMBw== -----END CERTIFICATE-----Generated at Thu Nov 21 15:43:01 2024 by rpki-client on console-fra.rpki-client.org