$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer File: 7ede7b70-d745-425d-975b-bb0eb6368430.cer (raw, json) Hash identifier: 8REnl/UGGjUdrGftBa18sshxK10tZ0DtHtag5P9FB1U= Subject key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858446A2CE23D68EC038A8B2B7950 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Jan 2024 01:45:15 +0000 Certificate not after: Mon 06 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 11281 AS: 22697 IP: 23.173.192.0/24 IP: 128.116.0.0/17 IP: 141.193.3.0/24 IP: 205.201.62.0/24 IP: 209.206.40.0/21 IP: 2620:2b:e000::/48 IP: 2620:135:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:6a:2c:e2:3d:68:ec:03:8a:8b:2b:79:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 2 01:45:15 2024 GMT Not After : Apr 6 00:45:15 2026 GMT Subject: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:53:a6:37:ac:c8:02:78:74:af:34:22:ba: 14:c7:35:e3:20:b6:c1:17:b8:5b:95:e0:f9:bc:fe: bc:42:b5:2c:f7:f8:76:46:79:42:5b:7f:e1:5a:76: 0d:9f:4f:cc:e9:2a:8d:3e:13:2f:1c:e4:86:f7:24: fc:21:b7:ec:13:4c:16:99:ae:ed:6d:d2:a9:89:bc: 05:82:74:46:78:65:f7:fe:98:6c:ee:01:97:fa:a1: e8:b2:9e:46:2c:93:50:4c:1f:f0:dd:3d:1c:38:00: 21:d0:91:52:5a:73:08:43:0d:f7:ac:35:6f:9e:4a: 10:e5:14:33:7a:2b:d9:44:9c:9c:9d:5a:2d:a3:c7: 40:48:27:40:d4:d4:6a:c2:86:34:09:3c:e3:1b:15: c3:7a:aa:c3:6f:1d:a7:bf:4e:e9:44:38:a7:d1:b3: bb:d6:8c:b6:9e:33:76:31:d8:0b:19:d5:2f:9c:b0: 6e:9b:56:87:0b:cd:24:ca:fd:f5:c1:88:0a:ba:7a: 59:c1:70:05:8a:eb:46:dd:f7:74:d6:73:ca:79:d9: 95:e6:d9:85:e2:f3:13:1b:0d:75:f8:33:59:0e:7c: b8:34:6b:bb:90:cd:bf:3b:06:03:08:88:99:ec:cd: cf:fb:43:12:0f:b3:c1:72:5f:1f:2c:87:28:88:01: 59:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.173.192.0/24 128.116.0.0/17 141.193.3.0/24 205.201.62.0/24 209.206.40.0/21 IPv6: 2620:2b:e000::/48 2620:135:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11281 22697 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cd:13:70:01:dc:ab:39:9b:c6:0b:23:43:58:fc:c6:05:27: 71:e9:48:f1:fa:23:c5:4d:db:01:b9:fa:83:3f:39:10:c5:5e: 86:23:72:32:90:37:45:b4:aa:50:7c:ee:68:fa:ae:a3:2f:ed: d1:6f:60:d3:df:35:3c:bc:75:bc:45:ee:bf:ba:63:e2:11:08: b1:7b:ab:c7:84:c8:c0:91:39:e3:e8:e8:ac:50:3f:9d:b5:b1: 03:b5:b4:fb:37:ba:96:be:4d:5c:46:e5:32:4b:cb:b0:de:27: c1:67:c9:ba:22:a1:9b:9a:d5:b0:3d:d9:51:33:21:06:1d:52: b5:29:e1:de:0a:c7:11:d1:61:73:83:ed:5e:10:0a:c2:9e:0a: 9c:34:47:1b:60:e2:4a:b9:43:73:46:a5:92:48:1c:87:7c:d2: b6:10:27:32:da:81:60:22:9a:c9:d9:33:52:28:70:0d:39:62: f0:dc:ad:9f:6f:c2:45:dc:77:82:79:24:06:59:3e:d9:96:f4: 9a:9d:76:38:d0:2f:f2:72:6d:1c:94:c1:49:10:25:bc:7a:23: 3b:77:a3:28:a6:a2:c8:4a:18:ef:cc:0b:d7:7c:79:77:f2:dc: 70:43:c0:3b:0e:b3:5d:40:2d:2c:44:b7:99:19:ce:cc:85:0c: 95:15:8d:8f -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWERqLOI9aOwDiosreVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEwMjAxNDUxNVoXDTI2MDQwNjAwNDUxNVowLzEtMCsGA1UEAxMk N2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdVTpjesyAJ4dK80IroUxzXjILbBF7hbleD5 vP68QrUs9/h2RnlCW3/hWnYNn0/M6SqNPhMvHOSG9yT8IbfsE0wWma7tbdKpibwF gnRGeGX3/phs7gGX+qHosp5GLJNQTB/w3T0cOAAh0JFSWnMIQw33rDVvnkoQ5RQz eivZRJycnVoto8dASCdA1NRqwoY0CTzjGxXDeqrDbx2nv07pRDin0bO71oy2njN2 MdgLGdUvnLBum1aHC80kyv31wYgKunpZwXAFiutG3fd01nPKedmV5tmF4vMTGw11 +DNZDny4NGu7kM2/OwYDCIiZ7M3P+0MSD7PBcl8fLIcoiAFZOwIDAQABo4IETzCC BEswHQYDVR0OBBYEFEJv+SYd14N2x5mWCHRIRIkRl8oIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzdlZGU3YjcwLWQ3NDUtNDI1ZC05 NzViLWJiMGViNjM2ODQzMC83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYz Njg0MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MCQEAgABMB4DBAAXrcADBAeAdAADBACNwQMDBADNyT4DBAPRzigw FwQCAAIwEQMHACYgACvgAAMGACYgATVgMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgC AiwRAgJYqTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCBzRNwAdyrOZvGCyNDWPzGBSdx6Ujx+iPFTdsBufqD PzkQxV6GI3IykDdFtKpQfO5o+q6jL+3Rb2DT3zU8vHW8Re6/umPiEQixe6vHhMjA kTnj6OisUD+dtbEDtbT7N7qWvk1cRuUyS8uw3ifBZ8m6IqGbmtWwPdlRMyEGHVK1 KeHeCscR0WFzg+1eEArCngqcNEcbYOJKuUNzRqWSSByHfNK2ECcy2oFgIprJ2TNS KHANOWLw3K2fb8JF3HeCeSQGWT7ZlvSanXY40C/ycm0clMFJECW8eiM7d6MopqLI ShjvzAvXfHl38txwQ8A7DrNdQC0sRLeZGc7MhQyVFY2P -----END CERTIFICATE-----Generated at Fri May 3 15:15:37 2024 by rpki-client on console-fra.rpki-client.org