$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer File: 221fa56a-4e00-462c-9583-3f6493cb4c92.cer (raw, json) Hash identifier: LCqZdT/yelZuBw1b2UBMlAx+378JoT1JNA7PRUit5Ho= Subject key identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48353B0B7FBF8700284A6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 01 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 15020 IP: 216.73.160.0/22 IP: 2602:fc2a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:b0:b7:fb:f8:70:02:84:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 1 19:06:39 2025 GMT Subject: CN=221fa56a-4e00-462c-9583-3f6493cb4c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:36:e1:55:93:f4:33:c2:f6:39:45:5b:f9: cd:12:c9:6e:1e:96:7f:65:3a:c8:0a:30:b8:75:bd: 6b:a3:eb:97:e8:a6:2d:5c:e8:5f:f5:5b:9c:18:f3: bf:a8:4f:55:2f:9c:8f:bb:c0:82:8b:22:b9:cf:25: d0:b0:e7:4c:c8:21:78:88:2f:3b:6f:f9:46:cc:01: f9:cc:b2:bd:b3:3e:c5:bb:9d:af:0a:de:bd:9f:a7: 6f:c2:3a:bd:7f:f0:64:e4:63:a4:40:5d:ea:e3:4d: 3f:c8:cc:0f:b6:8c:70:0d:7a:60:9f:8d:7f:63:26: 67:c4:f5:c0:9d:7b:4a:26:47:9d:c9:68:7e:3f:03: 56:d8:00:1d:e8:3b:9d:fb:34:2e:6e:bc:ce:d1:8a: 3a:70:1b:4b:8b:13:45:17:70:86:c8:01:4d:85:cd: 75:a0:8e:57:3e:fc:f5:23:a0:bb:8b:72:da:9d:d1: 4e:56:cb:83:d5:5c:5d:a5:fe:92:ec:f9:41:99:4c: 6f:79:11:27:72:fc:7e:15:67:cd:f3:b5:10:bf:47: 42:4f:91:90:4c:fc:33:7d:2f:61:f6:bc:70:bc:ba: 75:ce:d9:8b:b5:13:cb:02:63:62:a3:5c:74:b6:c4: 14:f8:1a:55:43:18:f5:83:79:88:62:f4:66:fe:c2: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.73.160.0/22 IPv6: 2602:fc2a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8f:de:62:e5:03:72:97:d0:d2:3d:c2:06:03:e9:28:64:15: cc:b4:81:05:09:0d:a4:d6:0a:e9:c9:91:aa:3b:54:61:9e:68: d2:b5:51:ac:e8:77:d8:21:42:f0:13:6e:e6:1e:d5:74:65:4f: f8:8c:1d:71:e3:38:49:af:33:fc:a3:fd:14:79:b7:f7:49:95: 02:4f:d8:a6:a4:f1:dd:27:73:40:70:78:04:bc:dc:3a:0f:8b: 59:69:95:46:45:66:f6:ca:bb:87:4a:22:52:fc:94:17:a6:ae: 3b:34:8a:20:ce:1c:b3:c6:e2:78:05:e4:f9:e5:dd:42:fb:d2: 66:54:57:0f:22:d4:c1:0d:73:fd:33:7e:fe:ac:ee:c4:8c:21: fa:ba:4e:75:a9:ed:f8:ce:05:04:63:d0:69:fa:b5:87:a8:95: 79:d6:cb:01:78:87:de:25:72:ba:c8:ec:ad:fd:70:af:46:04: f5:23:42:80:8a:e0:81:54:1b:63:3b:c5:d3:82:ed:45:f2:9e: f5:cc:12:f4:7e:c0:e8:6c:39:4f:06:0c:af:85:d1:74:06:b7: 37:38:c1:8e:27:7e:d9:e5:92:61:9e:22:28:f0:7f:c2:f3:fc: 14:c6:a5:64:19:10:0d:85:0b:bb:35:05:45:99:b5:c8:69:f7: 45:1b:d4:19 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEHkg1Owt/v4cAKEpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwMTE5MDYzOVowLzEtMCsGA1UEAxMk MjIxZmE1NmEtNGUwMC00NjJjLTk1ODMtM2Y2NDkzY2I0YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqow24VWT9DPC9jlFW/nNEsluHpZ/ZTrICjC4 db1ro+uX6KYtXOhf9VucGPO/qE9VL5yPu8CCiyK5zyXQsOdMyCF4iC87b/lGzAH5 zLK9sz7Fu52vCt69n6dvwjq9f/Bk5GOkQF3q400/yMwPtoxwDXpgn41/YyZnxPXA nXtKJkedyWh+PwNW2AAd6Dud+zQubrzO0Yo6cBtLixNFF3CGyAFNhc11oI5XPvz1 I6C7i3LandFOVsuD1Vxdpf6S7PlBmUxveREncvx+FWfN87UQv0dCT5GQTPwzfS9h 9rxwvLp1ztmLtRPLAmNio1x0tsQU+BpVQxj1g3mIYvRm/sKyYwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFnMtQ0FVzbSpcxE8VrIIP0Sj7drMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNjYjRjOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyMWZhNTZhLTRlMDAtNDYyYy05 NTgzLTNmNjQ5M2NiNGM5Mi8yMjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNj YjRjOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALYSaAwDgQCAAIwCAMGBCYC/CoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjqsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADKP3mLlA3KX0NI9wgYD6ShkFcy0 gQUJDaTWCunJkao7VGGeaNK1Uazod9ghQvATbuYe1XRlT/iMHXHjOEmvM/yj/RR5 t/dJlQJP2Kak8d0nc0BweAS83DoPi1lplUZFZvbKu4dKIlL8lBemrjs0iiDOHLPG 4ngF5Pnl3UL70mZUVw8i1MENc/0zfv6s7sSMIfq6TnWp7fjOBQRj0Gn6tYeolXnW ywF4h94lcrrI7K39cK9GBPUjQoCK4IFUG2M7xdOC7UXynvXMEvR+wOhsOU8GDK+F 0XQGtzc4wY4nftnlkmGeIijwf8Lz/BTGpWQZEA2FC7s1BUWZtchp90Ub1Bk= -----END CERTIFICATE-----Generated at Fri Mar 29 02:54:14 2024 by rpki-client on console-fra.rpki-client.org