$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer File: e8abcb36-7d75-4654-a098-d032ddf03d8a.cer (raw, json) Hash identifier: BXlSWEyUmdmf79DWVuyd7s5oV3Up8Bu5BOurvYjNc/o= Subject key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285843D0A1416FF9B415B519447680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Nov 2023 01:45:14 +0000 Certificate not after: Tue 10 Feb 2026 01:45:14 +0000 Subordinate resources: IP: 161.199.250.0/23 IP: 174.34.225.0/24 IP: 192.84.231.0/24 IP: 216.120.142.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:d0:a1:41:6f:f9:b4:15:b5:19:44:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 8 01:45:14 2023 GMT Not After : Feb 10 01:45:14 2026 GMT Subject: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:24:36:a7:61:c7:3d:a6:6c:fd:ed:13:f5: 72:85:76:ac:e4:15:4b:d6:0d:d3:24:ac:b0:e7:ca: 53:38:b7:3a:bf:c2:50:09:00:41:fa:94:cb:e0:f7: a9:b3:ae:8f:68:da:54:55:fc:34:af:28:29:2e:4f: a9:e7:e7:4e:c4:7c:ae:47:6a:de:ae:3e:41:02:22: 89:5a:ff:cd:8a:d6:79:50:a4:d4:36:c0:4c:91:de: eb:1e:0a:5d:11:3c:d2:b3:71:da:76:58:49:5b:e2: 5a:14:96:18:bd:f9:76:2f:ee:c3:97:f2:20:1d:cc: c0:93:3c:83:ca:bf:f5:c6:4d:e5:9e:f8:8a:43:54: eb:e1:08:b5:b1:65:a4:1d:7d:01:c0:d2:f0:45:7d: f8:ed:17:fb:0f:79:24:e2:24:1a:a2:c8:c0:9b:c3: c7:d5:10:49:4a:98:c9:0f:dc:b9:af:9e:f0:e9:18: 40:f7:9f:f5:09:eb:32:cc:bb:a2:99:5b:b3:ce:d7: 1f:ba:53:9b:9c:1f:1a:90:db:67:98:07:a0:db:24: 37:a1:be:81:d4:a1:1e:c7:fc:52:1d:ff:05:2a:7a: 4e:d1:1b:47:22:a2:9c:c2:fb:f1:3d:83:17:7a:7e: d6:48:ca:37:c2:92:e1:82:d4:47:29:e6:a6:62:d4: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 174.34.225.0/24 192.84.231.0/24 216.120.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e6:fd:db:92:20:88:26:cd:2b:e3:a5:27:b3:e0:c8:f6:6d: 52:29:bd:65:63:6e:c8:8c:8b:bb:dd:b0:d5:98:ab:22:7e:ce: 02:05:b6:11:98:f5:e7:1f:f7:31:80:95:f8:d2:a5:76:14:e1: 32:8c:56:16:ee:0a:f7:8e:4f:09:d6:9b:11:46:71:05:38:c5: f1:ca:e2:71:c0:49:ba:77:a0:4d:73:d7:8f:b2:f1:1d:1f:9b: 49:34:54:e4:eb:bc:ab:63:19:7b:9d:7e:b4:b8:b3:88:f7:5a: 74:7b:4f:7c:5e:f8:0f:93:fd:d2:ef:3f:4e:30:2e:1a:f3:5e: e3:3b:3e:21:b0:db:cf:5a:b4:1b:4c:ea:03:7e:92:d7:08:21: ff:f8:80:d8:60:3c:38:c3:05:38:71:30:ec:b8:19:a1:bf:cd: 0e:f9:74:b6:c3:46:67:62:37:7e:e3:df:75:cf:5a:13:4d:e2: cd:34:e7:78:d4:85:6b:23:ed:8d:1b:18:20:1c:c5:b4:b6:cd: 75:bb:15:2d:91:42:2b:42:58:4d:48:ba:bc:9c:c5:f5:db:c3: bd:d1:84:06:33:9f:e5:8f:ad:e5:ee:7f:db:bf:6a:35:e7:9b: 06:41:46:4f:9b:77:14:b2:f8:bb:d3:66:85:06:57:79:fc:a2: 30:e9:f9:85 -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEPQoUFv+bQVtRlEdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTEwODAxNDUxNFoXDTI2MDIxMDAxNDUxNFowLzEtMCsGA1UEAxMk ZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAzZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwUkNqdhxz2mbP3tE/VyhXas5BVL1g3TJKyw 58pTOLc6v8JQCQBB+pTL4Peps66PaNpUVfw0rygpLk+p5+dOxHyuR2rerj5BAiKJ Wv/NitZ5UKTUNsBMkd7rHgpdETzSs3HadlhJW+JaFJYYvfl2L+7Dl/IgHczAkzyD yr/1xk3lnviKQ1Tr4Qi1sWWkHX0BwNLwRX347Rf7D3kk4iQaosjAm8PH1RBJSpjJ D9y5r57w6RhA95/1CesyzLuimVuzztcfulObnB8akNtnmAeg2yQ3ob6B1KEex/xS Hf8FKnpO0RtHIqKcwvvxPYMXen7WSMo3wpLhgtRHKeamYtT7XQIDAQABo4IEETCC BA0wHQYDVR0OBBYEFOUimw7u9OaoaNUTBrKZneONWBwfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l OGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U4YWJjYjM2LTdkNzUtNDY1NC1h MDk4LWQwMzJkZGYwM2Q4YS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRm MDNkOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAGhx/oDBACuIuEDBADAVOcDBADYeI4wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAMub925IgiCbNK+OlJ7PgyPZtUim9ZWNuyIyLu92w1ZirIn7OAgW2EZj15x/3 MYCV+NKldhThMoxWFu4K945PCdabEUZxBTjF8criccBJunegTXPXj7LxHR+bSTRU 5Ou8q2MZe51+tLiziPdadHtPfF74D5P90u8/TjAuGvNe4zs+IbDbz1q0G0zqA36S 1wgh//iA2GA8OMMFOHEw7LgZob/NDvl0tsNGZ2I3fuPfdc9aE03izTTneNSFayPt jRsYIBzFtLbNdbsVLZFCK0JYTUi6vJzF9dvDvdGEBjOf5Y+t5e5/279qNeebBkFG T5t3FLL4u9NmhQZXefyiMOn5hQ== -----END CERTIFICATE-----Generated at Sat May 4 03:01:03 2024 by rpki-client on console-fra.rpki-client.org