$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611.cer File: 0eb31bae-2f99-4bdc-a1e9-1c67a842f611.cer (raw, json) Hash identifier: WvUbXYfTd8vLFYAAp38sadpJ5DpxuhsJ5WjTnkZJt48= Subject key identifier: 38:E7:19:58:27:E2:93:A3:5D:77:94:10:56:28:4B:7A:C8:2E:BB:3C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846D30857EFB528EACB85A70D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/0eb31bae-2f99-4bdc-a1e9-1c67a842f611.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Aug 2024 00:45:23 +0000 Certificate not after: Fri 13 Nov 2026 01:45:23 +0000 Subordinate resources: AS: 14338 IP: 74.113.20.0/22 IP: 162.244.248.0/22 IP: 199.167.140.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d3:08:57:ef:b5:28:ea:cb:85:a7:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 10 00:45:23 2024 GMT Not After : Nov 13 01:45:23 2026 GMT Subject: CN=0eb31bae-2f99-4bdc-a1e9-1c67a842f611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ae:f4:a9:45:90:a0:b6:3c:8d:24:60:5e:de: 2f:d1:35:50:69:fa:4b:4b:55:f3:20:54:ad:58:a7: 1e:7e:1e:ad:8b:90:00:58:c9:5a:dc:2d:23:74:06: 68:f3:65:f0:33:d9:61:c6:db:f3:85:ed:71:1f:19: 14:f2:1f:43:e1:e5:f6:35:45:21:88:0a:bf:6c:00: 70:67:20:7b:93:ad:e8:94:14:f9:5b:79:d9:8f:97: f3:c8:f7:8d:43:96:9b:e0:47:18:5c:e7:c7:b2:79: 94:b2:ac:65:79:8d:e5:76:30:42:ab:50:4a:01:3f: c6:c2:d8:89:15:7f:65:7d:dd:28:8e:8f:a7:0f:8a: 12:c2:7f:ae:63:f6:17:f9:24:af:84:b3:af:38:f3: 66:66:65:2c:85:09:74:e5:f3:d6:64:58:12:5a:0f: a8:78:21:79:e4:2b:6e:54:e2:99:38:c8:78:12:dc: 44:4c:95:2b:bf:f8:2d:f6:fa:cc:fb:eb:ba:4b:64: bc:25:c3:58:51:c8:c2:a5:ac:4b:98:e5:a1:11:82: 56:be:6f:74:bb:c4:8e:75:15:b3:27:8e:b8:8e:4a: 9c:4b:b3:f9:49:7c:45:e3:df:39:9d:50:60:1b:eb: b4:ea:9b:02:7c:8f:ae:da:ed:35:16:2c:c7:83:6c: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:19:58:27:E2:93:A3:5D:77:94:10:56:28:4B:7A:C8:2E:BB:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/0eb31bae-2f99-4bdc-a1e9-1c67a842f611.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.113.20.0/22 162.244.248.0/22 199.167.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14338 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:52:ac:31:44:5d:c3:8e:1c:10:dc:d8:67:2e:9d:1d:c1:27: 0c:4c:48:15:fa:bd:41:98:9d:af:f9:f4:e0:7d:5a:3e:dc:ce: b0:75:a6:3c:0d:fc:1c:f5:fb:84:95:24:d7:00:60:fc:b7:2e: 63:0e:86:68:b5:33:af:c0:b8:da:ef:22:d0:be:b6:c3:64:f6: 06:d4:33:52:a6:43:68:40:a8:1d:be:20:32:9a:cc:48:8e:68: 2e:66:9a:7f:2c:39:e7:87:f6:80:ce:dd:33:a8:db:ed:36:27: b7:64:48:41:24:e3:f8:04:fe:3a:9f:fd:5a:ca:5b:0c:43:4c: 00:07:6d:8a:02:73:b9:40:9b:38:6a:c2:e1:83:44:78:a0:2b: 56:6e:b9:f3:e4:f2:22:fc:48:9c:7f:21:1f:68:08:32:14:2d: c1:96:23:fe:03:02:10:47:18:9e:65:2e:47:7f:b5:0e:04:63: 6c:38:61:b7:47:aa:ea:37:a4:30:13:8c:51:f8:f1:e2:6e:1c: b6:31:78:9b:0d:f1:bb:45:e9:2a:94:95:31:da:a0:46:6b:fd: 8c:7f:37:0c:fe:84:4b:5e:91:ca:bb:fa:48:92:63:92:b8:7a: 38:6f:44:5a:ac:3c:49:9c:18:52:7b:6e:65:f2:45:d0:a5:a7: 6f:ba:bc:d8 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEbTCFfvtSjqy4WnDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgxMDAwNDUyM1oXDTI2MTExMzAxNDUyM1owLzEtMCsGA1UEAxMk MGViMzFiYWUtMmY5OS00YmRjLWExZTktMWM2N2E4NDJmNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk670qUWQoLY8jSRgXt4v0TVQafpLS1XzIFSt WKcefh6ti5AAWMla3C0jdAZo82XwM9lhxtvzhe1xHxkU8h9D4eX2NUUhiAq/bABw ZyB7k63olBT5W3nZj5fzyPeNQ5ab4EcYXOfHsnmUsqxleY3ldjBCq1BKAT/GwtiJ FX9lfd0ojo+nD4oSwn+uY/YX+SSvhLOvOPNmZmUshQl05fPWZFgSWg+oeCF55Ctu VOKZOMh4EtxETJUrv/gt9vrM++u6S2S8JcNYUcjCpaxLmOWhEYJWvm90u8SOdRWz J464jkqcS7P5SXxF4985nVBgG+u06psCfI+u2u01FizHg2xrPQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFDjnGVgn4pOjXXeUEFYoS3rILrs8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZWIzMWJhZS0yZjk5LTRiZGMtYTFlOS0xYzY3YTg0MmY2MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBlYjMxYmFlLTJmOTktNGJkYy1h MWU5LTFjNjdhODQyZjYxMS8wZWIzMWJhZS0yZjk5LTRiZGMtYTFlOS0xYzY3YTg0 MmY2MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJKcRQDBAKi9PgDBALHp4wwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICOAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI1KsMURdw44cENzYZy6dHcEnDExIFfq9 QZidr/n04H1aPtzOsHWmPA38HPX7hJUk1wBg/LcuYw6GaLUzr8C42u8i0L62w2T2 BtQzUqZDaECoHb4gMprMSI5oLmaafyw554f2gM7dM6jb7TYnt2RIQSTj+AT+Op/9 WspbDENMAAdtigJzuUCbOGrC4YNEeKArVm658+TyIvxInH8hH2gIMhQtwZYj/gMC EEcYnmUuR3+1DgRjbDhht0eq6jekMBOMUfjx4m4ctjF4mw3xu0XpKpSVMdqgRmv9 jH83DP6ES16Ryrv6SJJjkrh6OG9EWqw8SZwYUntuZfJF0KWnb7q82A== -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:26 2024 by rpki-client on console-ams.rpki-client.org