$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer File: 1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer (raw, json) Hash identifier: MwASVsBe3r+XYtkdI62ZnUl3EYsNUOWN2tfQZ+B7egs= Subject key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847027E00996798CD6E829E0B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Aug 2024 00:45:26 +0000 Certificate not after: Mon 30 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 23295 IP: 199.68.208.0/22 IP: 208.82.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:02:7e:00:99:67:98:cd:6e:82:9e:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 27 00:45:26 2024 GMT Not After : Nov 30 01:45:26 2026 GMT Subject: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:1c:4d:13:3e:0c:36:e8:60:94:48:a6:1d: a2:e5:5d:58:4e:fc:c5:2b:13:1e:1e:47:80:05:22: d1:a6:93:dd:eb:4d:8f:fc:7a:56:4a:c5:13:30:1d: 41:e1:84:dc:6a:47:2b:ec:3f:7d:97:43:42:c6:d6: f8:73:05:a6:a8:e6:66:b9:48:69:39:69:35:c5:00: 43:ff:00:55:a8:9f:e1:45:cc:db:a2:6e:a9:d8:bf: 46:1d:3f:1e:c8:bf:e1:c6:bf:11:13:3c:fe:c0:54: 80:c8:d3:4b:aa:64:54:ed:d7:b7:26:31:77:5e:26: 4c:29:37:76:9f:1d:34:9b:c1:e2:40:3e:da:fc:27: ef:a2:7b:34:34:e1:df:58:04:56:48:d6:7d:21:0d: d2:de:cb:e4:22:40:eb:e3:74:7c:e3:c0:eb:67:b1: d6:2b:55:8b:b5:1e:0a:03:53:d7:3d:b0:fe:ec:96: d6:4e:2b:d6:6e:24:45:7d:3f:dd:f5:19:e6:4d:26: d5:77:45:24:c7:31:d9:f3:c2:f6:09:82:bd:f3:82: dc:3a:6e:f1:4e:3c:1d:30:e9:2c:93:80:87:86:00: b8:1b:63:5c:de:69:7d:a6:ed:e8:62:77:44:62:8c: 93:d5:8d:a5:19:da:04:ad:13:fd:06:dc:7a:dc:d4: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.68.208.0/22 208.82.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23295 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8a:f6:35:90:65:98:dc:3f:89:e1:3a:94:ba:0d:1a:b6:ce: c3:51:35:19:e3:03:be:d2:72:a7:a7:1d:4f:05:27:67:5a:9f: da:0a:a9:4e:7d:d4:b3:9e:ee:81:6c:b8:8b:bf:ac:d5:e0:42: a3:0f:21:56:ce:db:03:fb:a5:ea:47:06:d7:e1:e8:d6:63:f9: 46:b9:13:be:02:68:7f:60:d4:f6:91:a3:d0:2c:17:1a:04:24: 7e:a0:d5:b8:54:07:b5:76:54:6d:ca:23:99:45:00:0a:0c:ba: 85:a6:6d:23:a5:05:99:5f:da:18:0e:a6:bb:a3:b0:ba:a2:32: 27:b5:fe:5e:e7:47:81:eb:30:8a:b8:02:56:1b:af:39:cf:8d: db:16:35:69:1a:8c:53:b7:98:a1:c7:50:eb:ae:bd:18:d1:ed: 0b:f5:a2:08:90:7d:91:ff:0a:1a:a0:18:84:a1:59:d0:b6:72: 5f:f0:a1:4f:57:d5:a4:f1:81:f7:3d:f6:2f:c4:91:de:0d:a3: 05:0b:f9:ae:35:80:b2:4d:af:9b:cc:98:56:f9:d1:6f:74:0b: 4c:b0:de:ac:ec:1c:65:2f:98:b1:09:60:ca:36:71:e4:fd:21: eb:d4:52:de:3a:8e:8a:0c:72:a7:e7:42:4f:40:12:9a:60:5f: 05:cb:38:37 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEcCfgCZZ5jNboKeC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgyNzAwNDUyNloXDTI2MTEzMDAxNDUyNlowLzEtMCsGA1UEAxMk MWYwOGFlNTAtNzU2Ni00ZjUyLTljMzYtM2EzZjg0YTM3YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfIcTRM+DDboYJRIph2i5V1YTvzFKxMeHkeA BSLRppPd602P/HpWSsUTMB1B4YTcakcr7D99l0NCxtb4cwWmqOZmuUhpOWk1xQBD /wBVqJ/hRczbom6p2L9GHT8eyL/hxr8REzz+wFSAyNNLqmRU7de3JjF3XiZMKTd2 nx00m8HiQD7a/Cfvons0NOHfWARWSNZ9IQ3S3svkIkDr43R848DrZ7HWK1WLtR4K A1PXPbD+7JbWTivWbiRFfT/d9RnmTSbVd0UkxzHZ88L2CYK984LcOm7xTjwdMOks k4CHhgC4G2Nc3ml9pu3oYndEYoyT1Y2lGdoErRP9Btx63NTwmwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNhfqiFykX68S7spyAenjN0aK61rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x ZjA4YWU1MC03NTY2LTRmNTItOWMzNi0zYTNmODRhMzdjNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFmMDhhZTUwLTc1NjYtNGY1Mi05 YzM2LTNhM2Y4NGEzN2M1OS8xZjA4YWU1MC03NTY2LTRmNTItOWMzNi0zYTNmODRh MzdjNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHRNADBALQUlAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICWv8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEArIr2NZBlmNw/ieE6lLoNGrbOw1E1GeMDvtJyp6cd TwUnZ1qf2gqpTn3Us57ugWy4i7+s1eBCow8hVs7bA/ul6kcG1+Ho1mP5RrkTvgJo f2DU9pGj0CwXGgQkfqDVuFQHtXZUbcojmUUACgy6haZtI6UFmV/aGA6mu6OwuqIy J7X+XudHgeswirgCVhuvOc+N2xY1aRqMU7eYocdQ6669GNHtC/WiCJB9kf8KGqAY hKFZ0LZyX/ChT1fVpPGB9z32L8SR3g2jBQv5rjWAsk2vm8yYVvnRb3QLTLDerOwc ZS+YsQlgyjZx5P0h69RS3jqOigxyp+dCT0ASmmBfBcs4Nw== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:12 2024 by rpki-client on console-fra.rpki-client.org