$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer File: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer (raw, json) Hash identifier: 9LqMmbmshwdGzF4S67OkAug1R5tMI2wZfWKvrJ4lFgI= Subject key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584647721FE11D3C3C09DA53E280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Jun 2024 00:45:21 +0000 Certificate not after: Thu 24 Sep 2026 00:45:21 +0000 Subordinate resources: AS: 22966 IP: 198.51.243.0 -- 198.51.244.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:47:72:1f:e1:1d:3c:3c:09:da:53:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 21 00:45:21 2024 GMT Not After : Sep 24 00:45:21 2026 GMT Subject: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:2e:6e:03:69:5e:cf:9a:e1:d6:92:c9:8a: 70:7f:0b:eb:77:e0:22:38:f9:66:2d:3f:2a:6e:c8: ad:ca:e4:22:04:f6:9f:5f:83:b6:48:11:31:a5:3a: c7:65:e9:5c:10:17:32:45:0b:dd:12:2f:d7:ea:11: 40:69:94:6f:ba:18:7a:2b:97:0c:22:54:19:fe:e9: eb:b1:0b:3d:58:73:20:9a:0c:b7:00:b3:76:2e:4a: 79:1e:28:d8:34:36:f4:ce:c5:f3:50:8f:82:aa:2c: 4b:d1:fd:63:d3:4a:f5:18:cf:50:e8:17:fe:08:15: b6:d2:05:e2:33:ec:bd:b8:71:ea:89:0d:91:65:9c: f3:a3:57:95:97:2d:9c:f5:92:1f:ac:43:66:f6:a9: 03:fb:e5:4d:5c:30:f4:e4:7b:64:1e:76:36:21:54: c4:90:21:d6:1c:5e:8a:fc:73:86:ee:60:6c:30:be: 79:71:3f:63:1b:ef:74:5e:be:eb:66:6b:02:9d:c1: e2:33:6a:3b:6a:b9:b7:57:bb:98:3e:8c:a9:fe:d8: 5c:b9:83:9a:d1:85:8b:b7:6a:a0:b6:03:19:de:ee: ff:95:2f:ae:28:d4:78:79:3e:64:f2:65:19:f8:4b: 24:c6:3b:cf:5e:9f:96:74:32:9c:a1:80:7e:3f:5a: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22966 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b8:56:c4:19:81:0c:eb:69:95:3e:f0:3c:71:1d:7e:00:6a: 57:22:97:77:3b:0a:75:6e:e2:b4:84:18:49:bf:28:38:ef:ca: 40:9b:3e:65:7c:09:28:b5:98:49:cc:9a:93:e9:72:a0:9b:35: a9:48:5c:5f:c1:1f:c1:ff:24:c8:7f:1d:64:e6:6b:f7:db:25: 43:5a:90:6f:62:f4:e1:ec:b8:9b:50:64:7e:1b:c5:03:ef:66: cd:45:de:e8:25:17:f0:35:30:9b:1f:0a:bb:02:ef:28:24:08: 36:69:f6:3e:73:fe:bc:15:5c:7e:62:6b:22:7d:ba:de:1d:a7: 09:18:03:1f:1c:84:74:1f:16:61:54:47:4c:b3:1b:3c:3a:28: 61:a2:6e:26:93:60:15:4b:63:b6:11:70:e9:81:53:a0:b2:1e: e4:c5:8f:dc:bf:d0:63:1c:51:31:79:c7:e5:da:f3:05:e2:ca: e9:e7:31:56:7a:b0:f5:8f:4e:39:96:27:f6:40:42:8a:b8:9f: db:b0:9f:e6:92:14:0a:0a:a6:06:c9:e0:90:36:db:5b:a9:1d: bc:a7:0d:85:13:19:fe:df:80:af:03:55:26:2e:be:f2:42:a3: 32:c5:9e:3c:7b:c7:d5:f9:1b:2b:96:dc:e7:1c:90:07:e6:ae: 18:66:cc:19 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEZHch/hHTw8CdpT4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDYyMTAwNDUyMVoXDTI2MDkyNDAwNDUyMVowLzEtMCsGA1UEAxMk Y2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIwYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3YubgNpXs+a4daSyYpwfwvrd+AiOPlmLT8q bsityuQiBPafX4O2SBExpTrHZelcEBcyRQvdEi/X6hFAaZRvuhh6K5cMIlQZ/unr sQs9WHMgmgy3ALN2Lkp5HijYNDb0zsXzUI+CqixL0f1j00r1GM9Q6Bf+CBW20gXi M+y9uHHqiQ2RZZzzo1eVly2c9ZIfrENm9qkD++VNXDD05HtkHnY2IVTEkCHWHF6K /HOG7mBsML55cT9jG+90Xr7rZmsCncHiM2o7arm3V7uYPoyp/thcuYOa0YWLt2qg tgMZ3u7/lS+uKNR4eT5k8mUZ+EskxjvPXp+WdDKcoYB+P1rRZQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFNYm4YqPtA+12xxwH4b7SrrV4hkKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NkMmQ3ZDg1LTYxZDAtNGJhNi1i NGQyLWFmZGE5YjgyMGE3OC9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4 MjBhNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMYz8wMEAMYz9DAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJZtjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCYuFbEGYEM62mVPvA8cR1+AGpXIpd3Owp1buK0 hBhJvyg478pAmz5lfAkotZhJzJqT6XKgmzWpSFxfwR/B/yTIfx1k5mv32yVDWpBv YvTh7LibUGR+G8UD72bNRd7oJRfwNTCbHwq7Au8oJAg2afY+c/68FVx+Ymsifbre HacJGAMfHIR0HxZhVEdMsxs8Oihhom4mk2AVS2O2EXDpgVOgsh7kxY/cv9BjHFEx ecfl2vMF4srp5zFWerD1j045lif2QEKKuJ/bsJ/mkhQKCqYGyeCQNttbqR28pw2F Exn+34CvA1UmLr7yQqMyxZ48e8fV+RsrltznHJAH5q4YZswZ -----END CERTIFICATE-----Generated at Thu Nov 21 16:34:00 2024 by rpki-client on console-ams.rpki-client.org