$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68.cer File: 47af085d-4107-4581-aabf-ee9ca34b1b68.cer (raw, json) Hash identifier: hIyrOZLL0mSrtYZ7VTMporskrR0frdxSPFznvGpeHQ4= Subject key identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584554909D07662DF1127E283700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Mar 2024 00:45:21 +0000 Certificate not after: Mon 29 Jun 2026 00:45:21 +0000 Subordinate resources: IP: 192.34.70.0/24 IP: 198.163.144.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:54:90:9d:07:66:2d:f1:12:7e:28:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 26 00:45:21 2024 GMT Not After : Jun 29 00:45:21 2026 GMT Subject: CN=47af085d-4107-4581-aabf-ee9ca34b1b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:f0:8c:6a:bf:08:67:ff:c2:38:3a:f0:79: 28:ff:36:2e:a8:2f:ca:b3:81:80:6c:f2:1d:dd:f2: 92:f2:2b:ae:ad:d8:8c:f6:68:b6:b5:52:c9:69:d7: d6:d5:08:a0:f3:65:0b:9b:43:45:98:82:c4:25:ef: 8d:10:d9:a0:90:4d:b6:80:22:1b:98:bb:1d:ff:b0: 75:e1:77:d1:b0:04:6d:eb:7a:f7:3d:8f:a7:d7:e5: d6:7b:8a:3b:d1:28:78:dc:45:64:eb:6b:4b:a0:af: de:cb:4c:d6:0c:a4:c2:90:09:f8:8b:04:14:43:be: 1c:e5:11:76:f3:eb:36:16:d8:b2:3f:aa:e3:2e:b9: 76:a9:16:16:cb:2f:e2:74:90:98:cd:87:e6:50:2f: 7e:0e:0e:d8:76:0a:a8:e0:6c:ce:71:33:e4:b6:fd: 84:e1:2b:cc:6b:98:ec:79:9b:c5:29:08:59:8f:ca: a7:e8:be:68:db:79:57:41:ce:36:63:58:3a:5a:a6: 39:0c:6f:33:87:74:f1:49:8f:83:38:10:c3:09:ea: f3:e6:a6:92:a8:50:41:87:95:05:1a:ff:80:f7:53: 99:14:ff:7d:98:c0:80:7a:d7:66:8e:75:32:66:d8: 25:cd:34:85:77:1d:af:6e:76:7b:cb:cd:b8:08:0d: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.34.70.0/24 198.163.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:07:eb:4a:45:05:93:62:f2:83:fa:5a:c3:80:2c:5b:ae:b1: 93:1c:a9:24:54:b9:e0:99:0c:fe:ef:45:c1:58:86:22:b0:8f: bf:48:62:30:5f:18:06:91:7c:c4:1d:57:e7:a7:87:6f:4f:10: 18:e9:4f:50:c0:f2:5e:af:c2:ae:a9:86:62:f9:80:13:3c:1c: f5:0e:87:5b:ea:6a:4d:8d:32:e2:fd:e6:86:2c:6e:71:16:82: 02:62:08:b0:9f:9f:bd:23:61:c4:16:ad:2a:06:db:eb:6d:f4: 7a:90:f0:0d:86:9d:e5:dc:61:62:8f:3a:7e:9e:54:b7:f8:41: 31:e4:7c:5b:36:86:63:26:2a:57:2f:36:9a:f2:e9:44:4d:d8: b9:31:b1:a9:fc:5c:27:7c:1d:1a:b5:f9:57:b8:bb:5e:38:60: 47:c4:6f:1c:38:a2:b4:34:3f:49:1e:b0:a8:ec:ed:99:d4:77: ec:10:7b:50:db:4a:0d:e5:0f:f1:f6:3e:02:23:5e:ac:9f:a3: 5b:3b:1e:bd:9c:eb:11:ed:24:7a:0a:2c:e8:55:c0:5d:fe:3c: 2c:22:ab:64:57:53:e9:b3:0a:3a:2e:4a:04:81:f8:dd:f8:13: 6c:a9:e6:4b:ba:43:f1:c1:ef:ff:14:8b:fa:f3:8c:66:7e:19: 5d:4c:b0:f4 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEVUkJ0HZi3xEn4oNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDMyNjAwNDUyMVoXDTI2MDYyOTAwNDUyMVowLzEtMCsGA1UEAxMk NDdhZjA4NWQtNDEwNy00NTgxLWFhYmYtZWU5Y2EzNGIxYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnwjGq/CGf/wjg68Hko/zYuqC/Ks4GAbPId 3fKS8iuurdiM9mi2tVLJadfW1Qig82ULm0NFmILEJe+NENmgkE22gCIbmLsd/7B1 4XfRsARt63r3PY+n1+XWe4o70Sh43EVk62tLoK/ey0zWDKTCkAn4iwQUQ74c5RF2 8+s2FtiyP6rjLrl2qRYWyy/idJCYzYfmUC9+Dg7Ydgqo4GzOcTPktv2E4SvMa5js eZvFKQhZj8qn6L5o23lXQc42Y1g6WqY5DG8zh3TxSY+DOBDDCerz5qaSqFBBh5UF Gv+A91OZFP99mMCAetdmjnUyZtglzTSFdx2vbnZ7y824CA1B1wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAAcoBfWPHoRkRdPNzmMl8OFSLilMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0YjFiNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ3YWYwODVkLTQxMDctNDU4MS1h YWJmLWVlOWNhMzRiMWI2OC80N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0 YjFiNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAIkYDBAPGo5AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgAfrSkUFk2Ly g/paw4AsW66xkxypJFS54JkM/u9FwViGIrCPv0hiMF8YBpF8xB1X56eHb08QGOlP UMDyXq/CrqmGYvmAEzwc9Q6HW+pqTY0y4v3mhixucRaCAmIIsJ+fvSNhxBatKgbb 6230epDwDYad5dxhYo86fp5Ut/hBMeR8WzaGYyYqVy82mvLpRE3YuTGxqfxcJ3wd GrX5V7i7XjhgR8RvHDiitDQ/SR6wqOztmdR37BB7UNtKDeUP8fY+AiNerJ+jWzse vZzrEe0kegos6FXAXf48LCKrZFdT6bMKOi5KBIH43fgTbKnmS7pD8cHv/xSL+vOM Zn4ZXUyw9A== -----END CERTIFICATE-----Generated at Fri May 3 15:36:41 2024 by rpki-client on console-ams.rpki-client.org