$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e.cer File: 1644c04f-894c-44d1-90ce-41d05dc9483e.cer (raw, json) Hash identifier: qQ/kfAbjTZndGzYXIhB5sULL1v2l7qLPV5RRBX8VHtE= Subject key identifier: 5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285844FB5880B552B996D3BF4EB900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/1644c04f-894c-44d1-90ce-41d05dc9483e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Feb 2024 01:45:21 +0000 Certificate not after: Thu 28 May 2026 00:45:21 +0000 Subordinate resources: AS: 25885 AS: 46981 IP: 74.123.200.0/21 IP: 208.85.64.0/21 IP: 2607:f8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fb:58:80:b5:52:b9:96:d3:bf:4e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 23 01:45:21 2024 GMT Not After : May 28 00:45:21 2026 GMT Subject: CN=1644c04f-894c-44d1-90ce-41d05dc9483e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:d1:b7:3b:c7:f7:4e:30:37:29:b2:71:36: ac:ff:58:e9:c1:d4:30:b6:41:0f:22:4b:0c:ad:65: 64:e6:ac:49:ec:59:41:f1:9b:79:2d:ab:d9:cd:92: 05:48:ed:aa:05:50:0e:de:72:66:20:bd:94:1b:91: 3b:62:d0:ec:d5:48:38:7a:98:65:81:0f:b3:bd:81: 04:d5:6b:1f:99:bc:81:97:6e:da:57:df:96:8c:42: 5f:2e:c0:5c:18:58:0b:48:12:a2:09:47:e5:18:45: d0:cf:ed:ad:84:0f:a1:97:98:d2:69:75:a8:95:e4: f4:27:2e:00:38:69:a8:51:53:6a:11:8d:55:ac:9c: bf:ea:ab:46:79:d1:10:c6:4e:0c:10:3a:c3:43:48: 83:e2:bf:39:c7:12:08:b4:9d:a2:6d:c6:bd:6f:64: 9c:75:0e:38:43:c5:b9:fb:40:4a:48:f9:82:c3:a9: fb:a8:97:bd:9e:5c:ec:5b:fe:08:6d:4b:6a:dc:e5: 4c:4a:23:70:38:32:eb:40:bb:ee:f5:65:42:e8:99: 65:8d:f3:8f:44:cd:35:5f:1d:66:e1:6a:c8:87:32: 07:b9:5b:18:fb:35:ca:ef:fd:bf:36:3c:88:a3:f2: 57:83:72:b4:b5:b2:dd:00:23:6e:02:ca:87:f8:a6: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/1644c04f-894c-44d1-90ce-41d05dc9483e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.123.200.0/21 208.85.64.0/21 IPv6: 2607:f8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25885 46981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f0:5b:5a:a4:b6:dc:9d:1b:57:14:9f:b7:df:e6:d7:af:2c: 70:8b:45:b2:41:70:a9:54:2c:b8:8a:49:6a:93:fe:97:f6:74: b3:52:4b:8c:a8:84:17:70:a0:2c:76:65:e2:c7:ee:e2:47:e2: 3e:0c:0d:6e:1a:0f:6f:e0:f3:76:77:ae:96:b2:30:07:0f:7e: 2e:a8:bf:e4:60:14:80:ec:8f:92:bf:c5:ae:95:d4:a6:7f:ff: 2f:58:d8:31:64:25:64:af:39:07:37:9d:c5:b8:b2:1e:01:f1: a7:af:2c:42:40:e5:be:4e:aa:18:88:34:73:ad:0e:28:c4:b8: 03:3a:c7:64:49:0a:6c:33:3f:06:a2:55:c9:d8:0b:f8:0f:6a: c8:a5:d0:44:0f:eb:fd:93:fd:b8:dd:b0:91:07:fc:5a:7d:08: ff:76:8b:59:35:64:3e:7a:53:c2:43:1c:b2:d8:06:24:82:b2: c1:19:3e:4b:7d:40:45:7a:9e:5a:e0:90:86:c5:72:c7:00:8c: 0b:ac:1e:02:6a:39:f0:7d:e8:38:0c:ac:f7:f2:70:17:ad:b9: 81:83:55:5b:de:e6:0f:73:e5:a3:c5:aa:d5:f6:7c:4d:68:ec: d1:ab:6d:b4:e0:3f:5c:f6:a1:97:b0:79:c9:83:cf:45:99:50: 46:db:ab:5f -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWET7WIC1UrmW079OuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDIyMzAxNDUyMVoXDTI2MDUyODAwNDUyMVowLzEtMCsGA1UEAxMk MTY0NGMwNGYtODk0Yy00NGQxLTkwY2UtNDFkMDVkYzk0ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvvRtzvH904wNymycTas/1jpwdQwtkEPIksM rWVk5qxJ7FlB8Zt5LavZzZIFSO2qBVAO3nJmIL2UG5E7YtDs1Ug4ephlgQ+zvYEE 1WsfmbyBl27aV9+WjEJfLsBcGFgLSBKiCUflGEXQz+2thA+hl5jSaXWoleT0Jy4A OGmoUVNqEY1VrJy/6qtGedEQxk4MEDrDQ0iD4r85xxIItJ2ibca9b2ScdQ44Q8W5 +0BKSPmCw6n7qJe9nlzsW/4IbUtq3OVMSiNwODLrQLvu9WVC6JlljfOPRM01Xx1m 4WrIhzIHuVsY+zXK7/2/NjyIo/JXg3K0tbLdACNuAsqH+KZSvwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFF2lWuqpHeSLdUeViSOiygQb23RtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x NjQ0YzA0Zi04OTRjLTQ0ZDEtOTBjZS00MWQwNWRjOTQ4M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE2NDRjMDRmLTg5NGMtNDRkMS05 MGNlLTQxZDA1ZGM5NDgzZS8xNjQ0YzA0Zi04OTRjLTQ0ZDEtOTBjZS00MWQwNWRj OTQ4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANKe8gDBAPQVUAwDQQCAAIwBwMFACYH+MAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICZR0CAwC3hTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAP8FtapLbcnRtX FJ+33+bXryxwi0WyQXCpVCy4iklqk/6X9nSzUkuMqIQXcKAsdmXix+7iR+I+DA1u Gg9v4PN2d66WsjAHD34uqL/kYBSA7I+Sv8WuldSmf/8vWNgxZCVkrzkHN53FuLIe AfGnryxCQOW+TqoYiDRzrQ4oxLgDOsdkSQpsMz8GolXJ2Av4D2rIpdBED+v9k/24 3bCRB/xafQj/dotZNWQ+elPCQxyy2AYkgrLBGT5LfUBFep5a4JCGxXLHAIwLrB4C ajnwfeg4DKz38nAXrbmBg1Vb3uYPc+WjxarV9nxNaOzRq2204D9c9qGXsHnJg89F mVBG26tf -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:12 2024 by rpki-client on console-fra.rpki-client.org