$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer File: 1b14096a-f8aa-4856-9b09-db3034f885a7.cer (raw, json) Hash identifier: Zh9E2u5JZKWpKaE3PnNW94+L+f9muaIM9v9aaAW6Eck= Subject key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847DF27E090FF8A3AE43144E0F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Nov 2024 01:45:33 +0000 Certificate not after: Wed 17 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 399446 IP: 209.151.104.0/22 IP: 209.209.100.0/22 IP: 2606:30c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:27:e0:90:ff:8a:3a:e4:31:44:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 14 01:45:33 2024 GMT Not After : Feb 17 01:45:33 2027 GMT Subject: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:9e:03:f1:87:9f:8c:c5:17:e7:1a:4a:b3: 18:3d:99:4c:6c:5b:d9:9a:6a:38:0d:0d:0a:e0:7a: 59:e4:60:f5:44:6b:10:78:1a:7f:de:db:ed:53:35: 51:af:c9:47:c8:c8:d4:27:00:b4:ca:a0:8a:f0:74: d9:c6:d0:16:a8:b2:e3:71:00:7e:f5:03:df:c6:4a: ad:04:b0:ea:51:93:66:27:66:be:f2:cf:91:60:4f: 6c:c3:6a:73:73:5a:3a:31:a5:6e:98:b0:36:0a:b3: 93:dc:77:61:04:33:d7:62:ee:02:70:ff:d7:6a:8a: 22:9a:1d:24:11:3c:44:f9:02:b3:63:5b:1b:27:f0: a2:6c:4a:91:15:d6:30:83:5d:c4:4f:dc:a1:e3:10: 3b:47:83:dc:4c:94:ee:a8:55:d2:04:31:c7:71:be: 72:35:46:86:e1:36:6b:1b:97:6a:e6:b5:27:09:1b: 48:c2:2e:56:57:19:48:1e:f2:de:84:f6:de:a3:e7: 9b:78:b0:3c:7a:b1:10:e7:0b:79:85:6e:b4:70:34: 2f:f6:59:38:a8:29:38:17:f3:96:f9:78:61:1f:f3: 4d:6b:63:ed:f2:32:ab:53:e8:35:55:f1:0e:b4:6e: 07:c5:15:d5:b4:4e:5f:b1:fe:8c:88:f3:86:32:02: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 209.151.104.0/22 209.209.100.0/22 IPv6: 2606:30c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:29:9a:bf:3b:6b:0d:6e:c6:36:16:f0:d6:83:28:b8:93:13: ad:d8:a4:9d:90:cd:72:a9:d2:be:f1:9e:0a:86:df:b8:4d:98: e3:3c:42:ff:2c:6b:e5:f4:3a:d4:d0:2d:e3:6d:a7:0f:d3:75: d3:4a:c0:96:bc:7f:29:1f:3f:b3:78:42:df:56:79:ce:eb:b5: f8:c3:ac:9e:13:96:13:36:7a:09:41:53:20:15:79:2a:78:1e: cc:be:0f:0b:fd:cd:42:48:5b:ff:b1:58:47:ba:57:3b:75:6c: df:87:61:ec:c5:57:ec:a6:0a:7f:0e:d7:e0:4f:0c:a5:f3:5c: 15:19:0d:6b:87:85:87:c0:cf:c4:d2:c2:bf:3f:15:29:a8:69: 9b:70:78:b3:4a:67:df:13:d6:9f:da:96:08:92:d3:bb:63:35: 24:63:dc:9e:52:4f:4b:9e:61:7f:9f:e0:cf:89:aa:51:5d:a8: 68:e1:dc:12:96:49:aa:3b:16:14:ed:cb:11:5b:02:d5:b2:95: 57:72:b8:9a:99:77:08:ed:68:69:7d:1a:32:3d:6e:96:71:2f: 13:f7:94:9c:fe:7d:23:81:3e:44:4b:c2:0d:05:d7:e7:42:ea: 2b:84:f3:c5:5a:4d:72:40:db:bf:aa:99:7b:8f:30:42:ae:cf: 94:2f:bd:12 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEffJ+CQ/4o65DFE4PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTExNDAxNDUzM1oXDTI3MDIxNzAxNDUzM1owLzEtMCsGA1UEAxMk MWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4NWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLWeA/GHn4zFF+caSrMYPZlMbFvZmmo4DQ0K 4HpZ5GD1RGsQeBp/3tvtUzVRr8lHyMjUJwC0yqCK8HTZxtAWqLLjcQB+9QPfxkqt BLDqUZNmJ2a+8s+RYE9sw2pzc1o6MaVumLA2CrOT3HdhBDPXYu4CcP/Xaooimh0k ETxE+QKzY1sbJ/CibEqRFdYwg13ET9yh4xA7R4PcTJTuqFXSBDHHcb5yNUaG4TZr G5dq5rUnCRtIwi5WVxlIHvLehPbeo+ebeLA8erEQ5wt5hW60cDQv9lk4qCk4F/OW +XhhH/NNa2Pt8jKrU+g1VfEOtG4HxRXVtE5fsf6MiPOGMgIerQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFKjMF02Hzpchxm8a2YZnt8pBgu8fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x YjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFiMTQwOTZhLWY4YWEtNDg1Ni05 YjA5LWRiMzAzNGY4ODVhNy8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRm ODg1YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALRl2gDBALR0WQwDQQCAAIwBwMFACYGMMAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhhWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHEpmr87aw1uxjYW8NaD KLiTE63YpJ2QzXKp0r7xngqG37hNmOM8Qv8sa+X0OtTQLeNtpw/TddNKwJa8fykf P7N4Qt9Wec7rtfjDrJ4TlhM2eglBUyAVeSp4Hsy+Dwv9zUJIW/+xWEe6Vzt1bN+H YezFV+ymCn8O1+BPDKXzXBUZDWuHhYfAz8TSwr8/FSmoaZtweLNKZ98T1p/algiS 07tjNSRj3J5ST0ueYX+f4M+JqlFdqGjh3BKWSao7FhTtyxFbAtWylVdyuJqZdwjt aGl9GjI9bpZxLxP3lJz+fSOBPkRLwg0F1+dC6iuE88VaTXJA27+qmXuPMEKuz5Qv vRI= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:12 2024 by rpki-client on console-fra.rpki-client.org