$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a.cer File: 1df40300-8848-4804-b649-542a9282fc5a.cer (raw, json) Hash identifier: yALa5DtC5AAmkMIikcZvb4rE7HG9MfCASq0Zck5+kcc= Subject key identifier: 57:1F:F8:FA:73:44:CF:A1:D9:BC:8A:97:81:47:9D:B3:D5:4D:F9:8B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842738BFCF58A5F5F012E2DAA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/1df40300-8848-4804-b649-542a9282fc5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Jul 2023 00:45:16 +0000 Certificate not after: Wed 08 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 12266 IP: 216.229.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:73:8b:fc:f5:8a:5f:5f:01:2e:2d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 6 00:45:16 2023 GMT Not After : Oct 8 00:45:16 2025 GMT Subject: CN=1df40300-8848-4804-b649-542a9282fc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:b3:87:64:49:60:12:5a:45:b0:61:81:b7: 49:41:e7:da:fe:d5:cf:b6:fa:48:42:3a:30:cb:ff: 36:d9:2b:ab:95:31:38:f2:52:5c:3b:8c:be:87:38: 85:5e:b3:de:c5:01:f1:71:43:0a:1a:98:c3:91:67: e1:d3:4f:e1:f3:7c:60:cf:cd:51:9c:27:f6:d0:71: 07:f3:b0:5c:d9:eb:66:d3:60:09:71:e7:5f:75:71: 2a:5d:05:ae:3d:e4:26:2d:1e:81:ba:99:18:6a:73: 77:e5:0c:76:6c:2e:0b:77:6d:94:90:48:99:ab:4c: 93:e7:89:c1:3d:84:33:ce:dc:0c:15:df:37:a3:ee: 51:33:5c:be:ba:b3:9b:e0:b5:db:00:58:37:f6:6b: 78:9c:ca:7c:68:d8:81:5f:40:d0:51:7b:cf:0e:ca: 9d:10:73:ec:61:e5:44:50:88:53:58:e5:f9:2e:71: b9:f0:59:d6:d4:ba:9b:40:3d:21:fe:47:dc:f8:86: 25:4e:ad:94:f4:d1:ce:98:a7:89:50:43:97:69:66: cf:da:52:b9:ac:6e:84:26:de:f9:73:a0:e3:1e:be: 6a:95:8a:66:7a:39:3f:71:fc:a3:bf:72:5d:04:ff: 5b:a0:2e:57:45:83:15:75:56:d1:34:42:18:e8:98: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1F:F8:FA:73:44:CF:A1:D9:BC:8A:97:81:47:9D:B3:D5:4D:F9:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df40300-8848-4804-b649-542a9282fc5a/1df40300-8848-4804-b649-542a9282fc5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.229.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12266 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:74:3d:87:89:4c:79:42:e1:b3:ee:d6:b2:1d:ed:c1:4f:cf: b8:25:8c:7c:53:a9:05:0d:d9:69:6a:d2:b7:81:2f:80:a6:78: 10:1e:a8:23:57:7f:dd:81:3d:97:26:ae:fa:b1:25:8e:60:ec: dd:f7:d9:2f:32:ae:ff:63:19:51:3b:bd:f5:64:eb:5e:b6:ac: 87:53:08:fc:fc:3c:ef:a7:28:51:4e:be:b7:06:9a:ea:f7:4b: ad:fc:5b:10:41:ee:29:41:1b:c1:46:0d:41:68:90:4f:d2:e8: 13:e2:d7:51:02:f5:72:81:22:f1:43:06:14:2f:09:26:d9:90: 48:2e:28:92:ee:1e:ea:d5:d1:53:e1:12:37:15:a9:41:38:5d: f6:4b:d6:0a:d7:5c:43:84:b0:58:f4:3d:52:01:a9:64:40:85: 2f:66:36:0c:26:c0:24:54:d7:95:3d:42:ff:78:7e:02:93:dc: c8:60:e2:f2:ad:89:af:bd:c7:88:97:f4:dd:22:09:9e:d1:c2: 41:8d:c2:54:fd:8b:e2:f2:f6:18:d0:a8:e1:c2:19:bb:7b:f8: 72:b3:38:80:a6:b4:38:91:42:51:37:75:39:3c:11:f5:ab:1f: 00:73:70:20:7f:bc:2b:81:45:23:50:c7:a5:c5:c2:a0:24:38: 03:cd:6b:df -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEJzi/z1il9fAS4tqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDcwNjAwNDUxNloXDTI1MTAwODAwNDUxNlowLzEtMCsGA1UEAxMk MWRmNDAzMDAtODg0OC00ODA0LWI2NDktNTQyYTkyODJmYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghuzh2RJYBJaRbBhgbdJQefa/tXPtvpIQjow y/822SurlTE48lJcO4y+hziFXrPexQHxcUMKGpjDkWfh00/h83xgz81RnCf20HEH 87Bc2etm02AJcedfdXEqXQWuPeQmLR6BupkYanN35Qx2bC4Ld22UkEiZq0yT54nB PYQzztwMFd83o+5RM1y+urOb4LXbAFg39mt4nMp8aNiBX0DQUXvPDsqdEHPsYeVE UIhTWOX5LnG58FnW1LqbQD0h/kfc+IYlTq2U9NHOmKeJUEOXaWbP2lK5rG6EJt75 c6DjHr5qlYpmejk/cfyjv3JdBP9boC5XRYMVdVbRNEIY6JjcTwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFcf+PpzRM+h2byKl4FHnbPVTfmLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x ZGY0MDMwMC04ODQ4LTQ4MDQtYjY0OS01NDJhOTI4MmZjNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFkZjQwMzAwLTg4NDgtNDgwNC1i NjQ5LTU0MmE5MjgyZmM1YS8xZGY0MDMwMC04ODQ4LTQ4MDQtYjY0OS01NDJhOTI4 MmZjNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATY5fAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC L+owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjnQ9h4lMeULhs+7Wsh3twU/PuCWMfFOpBQ3ZaWrSt4EvgKZ4 EB6oI1d/3YE9lyau+rEljmDs3ffZLzKu/2MZUTu99WTrXrash1MI/Pw876coUU6+ twaa6vdLrfxbEEHuKUEbwUYNQWiQT9LoE+LXUQL1coEi8UMGFC8JJtmQSC4oku4e 6tXRU+ESNxWpQThd9kvWCtdcQ4SwWPQ9UgGpZECFL2Y2DCbAJFTXlT1C/3h+ApPc yGDi8q2Jr73HiJf03SIJntHCQY3CVP2L4vL2GNCo4cIZu3v4crM4gKa0OJFCUTd1 OTwR9asfAHNwIH+8K4FFI1DHpcXCoCQ4A81r3w== -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:08 2024 by rpki-client on console-fra.rpki-client.org