$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer File: 0c27bc55-b041-47cd-84eb-f3e9707acff1.cer (raw, json) Hash identifier: Mlo0XE7MQKdERJQJQMpa+kVOzy/qARlmMxB5Vg6BjcA= Subject key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584772295F85DE032E914FCD1780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Oct 2024 00:45:27 +0000 Certificate not after: Sat 09 Jan 2027 01:45:27 +0000 Subordinate resources: AS: 53828 IP: 45.43.240.0/20 IP: 45.61.16.0/20 IP: 64.63.128.0/18 IP: 64.191.64.0/18 IP: 64.237.112.0/20 IP: 74.85.96.0/19 IP: 96.8.96.0/20 IP: 104.218.104.0/22 IP: 104.245.24.0/21 IP: 142.44.64.0/18 IP: 144.91.176.0 -- 144.91.255.255 IP: 172.98.96.0/19 IP: 207.5.64.0/19 IP: 207.200.192.0/19 IP: 216.40.0.0/19 IP: 2605:a380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:29:5f:85:de:03:2e:91:4f:cd:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 6 00:45:27 2024 GMT Not After : Jan 9 01:45:27 2027 GMT Subject: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:b1:63:6f:52:b0:ce:41:4f:1e:56:bb:03: 27:df:65:fb:25:6e:3f:3f:9f:f6:07:c9:95:55:9c: 7a:57:be:1c:c5:ca:fb:df:11:f6:6f:05:4d:1f:0c: 5c:ac:22:fc:2d:41:c2:fd:85:99:71:af:b3:c5:6d: 80:22:d4:73:f8:a6:1c:2c:09:73:59:29:1f:e8:b2: 0f:01:35:60:8e:71:3e:5f:13:d9:a5:f6:b5:ac:35: ad:3b:78:a7:7f:8c:ff:ca:d0:c5:63:3e:6c:32:0a: 5d:17:f5:e6:96:1e:f1:06:6d:ee:77:44:b1:11:d2: 99:58:5e:53:a5:2a:14:a8:49:85:35:14:fd:90:95: 43:9e:a0:10:d4:34:44:cd:9a:cc:52:4d:0d:83:1e: ed:da:4c:45:50:6f:f5:4f:44:72:90:f7:04:80:30: ce:41:b0:5f:71:d3:38:93:c8:2d:77:ab:78:a9:f4: 3b:04:e3:db:17:ea:8d:c0:3e:60:cc:28:f4:70:ba: 03:88:69:0b:05:57:f2:76:f1:40:56:5f:1a:5b:db: 3f:cf:12:37:32:77:2f:86:1d:cc:2c:d2:f3:24:ce: c2:7b:03:eb:16:00:26:e5:29:91:c9:c4:83:b6:17: c1:fd:04:9a:ff:35:33:0d:01:36:e6:e1:f1:e8:89: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.43.240.0/20 45.61.16.0/20 64.63.128.0/18 64.191.64.0/18 64.237.112.0/20 74.85.96.0/19 96.8.96.0/20 104.218.104.0/22 104.245.24.0/21 142.44.64.0/18 144.91.176.0-144.91.255.255 172.98.96.0/19 207.5.64.0/19 207.200.192.0/19 216.40.0.0/19 IPv6: 2605:a380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53828 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:cf:d3:a7:d1:6d:7f:a0:a9:18:f0:3a:66:70:3a:ea:d3:22: dd:e1:a8:2a:ee:a6:f6:f4:88:06:ba:7d:d2:28:fe:66:30:c7: 6a:31:bb:23:8f:dd:3f:c6:d5:cd:0b:aa:e7:2c:19:da:7c:ca: b7:19:cc:f6:18:c2:18:35:59:7e:c5:57:42:26:9f:cb:39:89: 93:b7:0a:a6:d6:f8:43:f9:a2:71:5c:39:db:bb:97:33:e7:68: 24:b3:d0:99:49:3b:46:48:2c:f3:df:01:29:0c:b8:00:60:d6: 8f:00:4c:04:1a:52:f5:b5:fd:57:36:83:f8:c6:ea:ed:ea:0e: 1d:ce:66:2d:19:dc:55:c4:32:83:03:5f:e1:eb:6e:ef:7d:76: 6b:f3:65:98:51:21:2e:13:06:fe:e3:8d:69:85:5c:6b:f0:89: ac:e2:57:8f:09:0a:e7:0f:af:00:c9:29:52:9c:ef:df:ef:d2: 6d:8b:3a:32:7a:1c:df:fe:b1:03:cd:cb:7c:c8:18:bc:eb:5d: bd:d1:c2:e1:7c:b9:c8:4a:f7:b7:f6:1c:f1:cd:da:50:36:9e: a9:ad:68:8c:9c:7a:24:c7:9d:84:b9:f6:60:b7:0f:5a:46:21: a8:5a:5f:21:00:e1:21:7d:01:e6:4b:72:67:91:bd:49:4d:aa: d9:59:16:3d -----BEGIN CERTIFICATE----- MIIHdDCCBlygAwIBAgIUAQ0Mn0MoWEdyKV+F3gMukU/NF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAwNjAwNDUyN1oXDTI3MDEwOTAxNDUyN1owLzEtMCsGA1UEAxMk MGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2FjZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJixY29SsM5BTx5WuwMn32X7JW4/P5/2B8mV VZx6V74cxcr73xH2bwVNHwxcrCL8LUHC/YWZca+zxW2AItRz+KYcLAlzWSkf6LIP ATVgjnE+XxPZpfa1rDWtO3inf4z/ytDFYz5sMgpdF/Xmlh7xBm3ud0SxEdKZWF5T pSoUqEmFNRT9kJVDnqAQ1DREzZrMUk0Ngx7t2kxFUG/1T0RykPcEgDDOQbBfcdM4 k8gtd6t4qfQ7BOPbF+qNwD5gzCj0cLoDiGkLBVfydvFAVl8aW9s/zxI3Mncvhh3M LNLzJM7CewPrFgAm5SmRycSDthfB/QSa/zUzDQE25uHx6ImB0QIDAQABo4IEhjCC BIIwHQYDVR0OBBYEFMRmDfnzxt94i1dEv39cnszZNgafMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w YzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBjMjdiYzU1LWIwNDEtNDdjZC04 NGViLWYzZTk3MDdhY2ZmMS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3 YWNmZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgYkGCCsGAQUF BwEHAQH/BHoweDBnBAIAATBhAwQELSvwAwQELT0QAwQGQD+AAwQGQL9AAwQEQO1w AwQFSlVgAwQEYAhgAwQCaNpoAwQDaPUYAwQGjixAMAsDBASQW7ADAwKQWAMEBaxi YAMEBc8FQAMEBc/IwAMEBdgoADANBAIAAjAHAwUAJgWjgDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMA0kQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmc/Tp9Ftf6CpGPA6ZnA66tMi3eGoKu6m 9vSIBrp90ij+ZjDHajG7I4/dP8bVzQuq5ywZ2nzKtxnM9hjCGDVZfsVXQiafyzmJ k7cKptb4Q/micVw527uXM+doJLPQmUk7Rkgs898BKQy4AGDWjwBMBBpS9bX9VzaD +Mbq7eoOHc5mLRncVcQygwNf4etu7312a/NlmFEhLhMG/uONaYVca/CJrOJXjwkK 5w+vAMkpUpzv3+/SbYs6Mnoc3/6xA83LfMgYvOtdvdHC4Xy5yEr3t/Yc8c3aUDae qa1ojJx6JMedhLn2YLcPWkYhqFpfIQDhIX0B5ktyZ5G9SU2q2VkWPQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:11 2024 by rpki-client on console-fra.rpki-client.org