$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer File: 221fa56a-4e00-462c-9583-3f6493cb4c92.cer (raw, json) Hash identifier: ca5XFkuN67c/3LggPvPLvvA+sKFMxJxNgnOlwco6jMo= Subject key identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846BCB2E0EC10DD3E940EB0DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Aug 2024 00:45:24 +0000 Certificate not after: Thu 05 Nov 2026 01:45:24 +0000 Subordinate resources: AS: 15020 IP: 216.73.160.0/22 IP: 2602:fc2a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:bc:b2:e0:ec:10:dd:3e:94:0e:b0:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 2 00:45:24 2024 GMT Not After : Nov 5 01:45:24 2026 GMT Subject: CN=221fa56a-4e00-462c-9583-3f6493cb4c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:36:e1:55:93:f4:33:c2:f6:39:45:5b:f9: cd:12:c9:6e:1e:96:7f:65:3a:c8:0a:30:b8:75:bd: 6b:a3:eb:97:e8:a6:2d:5c:e8:5f:f5:5b:9c:18:f3: bf:a8:4f:55:2f:9c:8f:bb:c0:82:8b:22:b9:cf:25: d0:b0:e7:4c:c8:21:78:88:2f:3b:6f:f9:46:cc:01: f9:cc:b2:bd:b3:3e:c5:bb:9d:af:0a:de:bd:9f:a7: 6f:c2:3a:bd:7f:f0:64:e4:63:a4:40:5d:ea:e3:4d: 3f:c8:cc:0f:b6:8c:70:0d:7a:60:9f:8d:7f:63:26: 67:c4:f5:c0:9d:7b:4a:26:47:9d:c9:68:7e:3f:03: 56:d8:00:1d:e8:3b:9d:fb:34:2e:6e:bc:ce:d1:8a: 3a:70:1b:4b:8b:13:45:17:70:86:c8:01:4d:85:cd: 75:a0:8e:57:3e:fc:f5:23:a0:bb:8b:72:da:9d:d1: 4e:56:cb:83:d5:5c:5d:a5:fe:92:ec:f9:41:99:4c: 6f:79:11:27:72:fc:7e:15:67:cd:f3:b5:10:bf:47: 42:4f:91:90:4c:fc:33:7d:2f:61:f6:bc:70:bc:ba: 75:ce:d9:8b:b5:13:cb:02:63:62:a3:5c:74:b6:c4: 14:f8:1a:55:43:18:f5:83:79:88:62:f4:66:fe:c2: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.73.160.0/22 IPv6: 2602:fc2a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:aa:e6:41:f9:83:1f:8f:87:43:c7:9a:a7:2e:a5:e5:2e:b9: ed:ed:dd:27:fa:9d:71:db:89:1c:41:47:4a:e4:59:5c:f1:10: 83:de:28:1f:8c:1a:6e:e0:4c:50:7f:47:0f:81:8d:b7:18:31: a3:78:d3:01:9a:2c:c7:e8:66:d4:19:d7:ca:19:84:ef:f6:78: 88:5a:30:b7:f1:d7:8f:15:05:79:9b:bf:db:64:76:84:75:6a: 58:d3:58:21:94:49:b1:2c:f2:22:1a:e0:e9:f5:0c:b1:1c:3b: 2d:39:eb:8f:35:4c:40:3e:94:25:2b:45:ba:85:87:93:18:c4: 97:79:e4:a4:15:5f:1d:cc:a1:12:db:ad:a0:47:cd:1b:16:54: 96:2c:bd:31:eb:d9:a8:a6:a5:55:e8:bd:ff:02:c8:74:35:73: fa:22:e4:57:c6:9e:fb:39:02:e9:9f:8c:46:86:34:20:f2:d9: 6d:fd:5b:0f:98:e6:41:2c:b0:2a:d0:d5:bf:89:ef:17:ef:47: 6b:1b:bc:5d:09:17:49:5a:a5:ef:73:8b:09:7b:3b:83:b0:24: ba:70:e7:36:8c:3f:66:8f:c5:af:07:79:ea:f4:f8:e7:c2:47: fd:74:4d:57:a8:1e:73:0b:3b:35:17:85:d5:ef:d3:50:93:95: 51:c6:c8:05 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEa8suDsEN0+lA6w3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgwMjAwNDUyNFoXDTI2MTEwNTAxNDUyNFowLzEtMCsGA1UEAxMk MjIxZmE1NmEtNGUwMC00NjJjLTk1ODMtM2Y2NDkzY2I0YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqow24VWT9DPC9jlFW/nNEsluHpZ/ZTrICjC4 db1ro+uX6KYtXOhf9VucGPO/qE9VL5yPu8CCiyK5zyXQsOdMyCF4iC87b/lGzAH5 zLK9sz7Fu52vCt69n6dvwjq9f/Bk5GOkQF3q400/yMwPtoxwDXpgn41/YyZnxPXA nXtKJkedyWh+PwNW2AAd6Dud+zQubrzO0Yo6cBtLixNFF3CGyAFNhc11oI5XPvz1 I6C7i3LandFOVsuD1Vxdpf6S7PlBmUxveREncvx+FWfN87UQv0dCT5GQTPwzfS9h 9rxwvLp1ztmLtRPLAmNio1x0tsQU+BpVQxj1g3mIYvRm/sKyYwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFnMtQ0FVzbSpcxE8VrIIP0Sj7drMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNjYjRjOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyMWZhNTZhLTRlMDAtNDYyYy05 NTgzLTNmNjQ5M2NiNGM5Mi8yMjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNj YjRjOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALYSaAwDgQCAAIwCAMGBCYC/CoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjqsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHKq5kH5gx+Ph0PHmqcupeUuue3t 3Sf6nXHbiRxBR0rkWVzxEIPeKB+MGm7gTFB/Rw+BjbcYMaN40wGaLMfoZtQZ18oZ hO/2eIhaMLfx148VBXmbv9tkdoR1aljTWCGUSbEs8iIa4On1DLEcOy056481TEA+ lCUrRbqFh5MYxJd55KQVXx3MoRLbraBHzRsWVJYsvTHr2aimpVXovf8CyHQ1c/oi 5FfGnvs5AumfjEaGNCDy2W39Ww+Y5kEssCrQ1b+J7xfvR2sbvF0JF0lape9ziwl7 O4OwJLpw5zaMP2aPxa8Heer0+OfCR/10TVeoHnMLOzUXhdXv01CTlVHGyAU= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:13 2024 by rpki-client on console-fra.rpki-client.org