$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer File: 06951899-7f4f-486b-bb86-0aee5ea26079.cer (raw, json) Hash identifier: pvwzH2xC2iT1aNBKlAXbtlsDEGbi/fAdQvbVv0kLWM0= Subject key identifier: 99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858428716C67BAB51E8F71F7A5780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Jul 2023 00:45:16 +0000 Certificate not after: Wed 15 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 21909 IP: 52.119.11.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:87:16:c6:7b:ab:51:e8:f7:1f:7a:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 13 00:45:16 2023 GMT Not After : Oct 15 00:45:16 2025 GMT Subject: CN=06951899-7f4f-486b-bb86-0aee5ea26079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:38:22:47:d5:07:96:f1:7b:02:a5:ef:55: 66:c6:31:6e:87:eb:d7:5b:8c:7b:15:0e:91:b3:a3: 7a:8d:44:ba:f1:5d:6c:be:a0:63:8f:f4:d8:4f:dd: 65:cf:f4:30:b6:40:ae:5f:7d:30:bc:d2:e0:22:a5: 2d:b1:78:d6:2b:c5:20:06:81:25:3e:a5:63:49:9f: 61:3b:ea:c0:18:3b:b5:f3:57:3b:51:d8:2a:64:f0: 88:de:c1:17:c5:53:c8:89:97:78:73:b1:9e:82:3a: 07:52:2b:32:9f:e1:58:4d:48:c1:0e:1b:f3:1b:57: d9:41:19:87:90:f8:09:b5:39:a8:4d:c2:a1:6d:7b: c6:c3:13:e4:f4:6c:b6:0d:b1:a3:8c:1c:e1:c9:74: 77:b3:77:39:1f:49:5b:fb:46:18:39:0d:ea:82:6a: 7e:a3:fe:c1:65:0a:ab:84:bd:4d:07:e4:3f:d9:13: 6f:ec:4f:69:b0:66:95:15:fb:b6:5d:1a:d5:27:af: 31:f2:2a:76:a3:d6:7f:23:12:46:b7:eb:e2:e0:38: db:1c:b0:f8:d6:6d:fd:5c:f9:4c:06:da:eb:af:2c: 05:70:35:35:05:59:dd:37:28:fe:10:75:6a:fb:14: d5:73:87:4b:dc:7c:f1:5b:38:35:7a:66:e0:d7:0b: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 52.119.11.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:29:ba:b3:1b:45:60:5c:a3:93:67:3a:c1:b0:fe:39:5f:88: 1c:42:a3:5e:5c:49:11:b0:0e:d0:36:a3:f6:c5:a2:f4:79:41: a9:61:24:76:a5:58:75:d7:f8:81:f1:1e:aa:c9:57:1d:97:ed: 36:10:14:87:2e:15:bc:d5:2d:39:de:22:ca:f4:9c:ab:6b:65: ec:51:cb:6b:94:91:c3:16:2b:ba:7c:62:6a:e4:44:1e:52:7c: 95:4b:84:62:c5:08:23:30:0d:41:de:82:89:ec:c6:31:38:18: 7e:2b:e8:ac:39:ae:d6:b8:da:bc:41:ea:a4:ea:d0:81:bd:12: 67:07:fa:c2:d6:0f:bd:69:9f:d1:92:fe:51:9b:79:f7:66:d2: 55:a4:b9:4a:9c:13:f3:54:f7:c5:00:0a:84:9b:15:69:a7:17: da:d8:12:99:59:76:db:80:a4:aa:ec:d2:95:69:a0:fc:e6:b1: b2:fa:f2:7a:6f:be:0c:2c:2d:9d:c1:15:c1:40:c3:99:52:9b: e6:24:75:61:32:cf:19:2a:81:8c:17:88:b6:95:63:c8:6d:31: bc:26:e0:8d:70:b3:4b:aa:80:b4:cd:c1:7f:09:85:3d:e4:32: 73:81:fb:a5:23:e4:ad:13:41:e5:0b:be:96:69:a4:3f:f6:f1: 38:f6:7b:cd -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEKHFsZ7q1Ho9x96V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDcxMzAwNDUxNloXDTI1MTAxNTAwNDUxNlowLzEtMCsGA1UEAxMk MDY5NTE4OTktN2Y0Zi00ODZiLWJiODYtMGFlZTVlYTI2MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm44IkfVB5bxewKl71VmxjFuh+vXW4x7FQ6R s6N6jUS68V1svqBjj/TYT91lz/QwtkCuX30wvNLgIqUtsXjWK8UgBoElPqVjSZ9h O+rAGDu181c7UdgqZPCI3sEXxVPIiZd4c7GegjoHUisyn+FYTUjBDhvzG1fZQRmH kPgJtTmoTcKhbXvGwxPk9Gy2DbGjjBzhyXR3s3c5H0lb+0YYOQ3qgmp+o/7BZQqr hL1NB+Q/2RNv7E9psGaVFfu2XRrVJ68x8ip2o9Z/IxJGt+vi4DjbHLD41m39XPlM BtrrrywFcDU1BVndNyj+EHVq+xTVc4dL3HzxWzg1embg1wuWWwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJmeExCUkG4HRoExnPlZO7Y13ukwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w Njk1MTg5OS03ZjRmLTQ4NmItYmI4Ni0wYWVlNWVhMjYwNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA2OTUxODk5LTdmNGYtNDg2Yi1i Yjg2LTBhZWU1ZWEyNjA3OS8wNjk1MTg5OS03ZjRmLTQ4NmItYmI4Ni0wYWVlNWVh MjYwNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAA0dwswGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VZUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAim6sxtFYFyjk2c6wbD+OV+IHEKjXlxJEbAO0Daj9sWi9HlB qWEkdqVYddf4gfEeqslXHZftNhAUhy4VvNUtOd4iyvScq2tl7FHLa5SRwxYrunxi auREHlJ8lUuEYsUIIzANQd6CiezGMTgYfivorDmu1rjavEHqpOrQgb0SZwf6wtYP vWmf0ZL+UZt592bSVaS5SpwT81T3xQAKhJsVaacX2tgSmVl224CkquzSlWmg/Oax svryem++DCwtncEVwUDDmVKb5iR1YTLPGSqBjBeItpVjyG0xvCbgjXCzS6qAtM3B fwmFPeQyc4H7pSPkrRNB5Qu+lmmkP/bxOPZ7zQ== -----END CERTIFICATE-----Generated at Fri Mar 29 02:32:48 2024 by rpki-client on console-ams.rpki-client.org