$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer File: 28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer (raw, json) Hash identifier: irpBYNkb4JC+sytjjyB10s4LJjpzqjuocKKCFqfqEBs= Subject key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858442461C860B118741CC42F0DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Dec 2023 01:45:15 +0000 Certificate not after: Thu 12 Mar 2026 00:45:15 +0000 Subordinate resources: IP: 216.150.64.0/19 IP: 216.169.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:24:61:c8:60:b1:18:74:1c:c4:2f:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 8 01:45:15 2023 GMT Not After : Mar 12 00:45:15 2026 GMT Subject: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:1a:c8:29:64:04:c9:55:34:2d:4b:82:22: 06:25:8d:67:1e:87:8a:e9:9d:fb:af:06:a9:69:d6: 91:ce:74:10:67:10:82:91:66:b5:02:b3:5b:db:77: 59:98:6a:c7:df:07:cd:9f:52:5b:fa:e0:07:13:de: 98:e0:84:94:73:7e:ec:66:7e:d6:45:09:22:a0:29: 71:fb:bd:4e:ca:d2:dc:da:61:60:d4:02:97:d7:c5: c0:c5:df:8c:aa:7c:12:1b:85:ff:5e:a9:a5:61:1a: af:55:00:fd:65:1b:6f:5c:bb:a1:32:3b:f6:0c:d2: b1:ef:39:88:dd:25:7c:cb:5d:4f:b6:2b:ec:20:31: 9e:c5:75:db:60:8b:69:bd:6c:ef:04:20:eb:20:6c: 63:67:6c:7c:58:87:f3:c1:48:7f:43:58:1b:ab:b3: 34:5d:e7:bf:c7:99:1a:a1:1a:f4:17:61:ad:cd:6d: 47:dc:6d:3e:4f:aa:97:cc:15:eb:2b:39:13:96:24: d1:95:2b:02:1f:6f:7f:53:cf:29:db:9a:61:7e:9d: 23:f1:82:e0:25:56:32:70:4a:b5:f7:19:36:cb:85: a3:08:28:bd:00:89:c5:b6:e5:88:2e:d3:66:45:0f: 5c:fe:33:10:d8:ac:29:ba:b5:64:00:c6:fc:7b:80: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.150.64.0/19 216.169.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:28:ca:5f:85:31:19:ae:ef:8e:48:c1:1e:d9:3a:f8:d4:bf: 02:a6:bb:a2:cd:fd:63:13:99:4b:b1:27:9b:b9:e9:79:97:a3: 3a:e9:25:2d:95:ee:f8:f9:b9:4c:60:10:99:58:e4:a1:b4:24: 06:47:08:47:48:34:a8:47:9c:be:bb:3c:06:4c:02:83:5a:ca: 70:bb:b0:e1:ba:b9:7a:27:df:d7:ad:b6:e8:66:0c:39:fc:dd: 77:5b:8c:98:cd:d2:a2:ab:af:b3:54:0a:e1:57:61:db:ff:6a: e7:30:7c:d8:66:71:70:67:65:d9:94:54:44:6e:80:3e:bc:47: 22:c7:3c:7d:c4:d7:33:8b:2c:b0:a6:96:b7:70:38:6e:20:2e: 5e:64:b0:2e:b0:30:92:ef:ab:5c:a4:d6:74:62:44:6b:30:14: 9c:ce:2f:4e:dc:ff:58:80:f3:14:d3:3d:1a:2b:ac:46:95:a2: 31:69:0d:29:14:96:9e:2f:7b:78:7e:d4:4d:94:42:22:ca:46: 62:0e:30:6c:87:9e:7b:7b:fe:79:63:b2:c0:90:7b:2a:39:56: b4:05:6a:c0:c9:bf:c8:52:d0:d4:0e:e2:0f:52:ef:54:41:4e: 5d:f0:de:e1:47:99:7d:8b:5f:8d:df:76:11:7c:6e:6a:2b:94: d2:be:fd:cd -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEQkYchgsRh0HMQvDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIwODAxNDUxNVoXDTI2MDMxMjAwNDUxNVowLzEtMCsGA1UEAxMk MjhkMGMyNjItOGVhMi00NDRhLWFiMWUtNmQwN2MzNDgzZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkYayClkBMlVNC1LgiIGJY1nHoeK6Z37rwap adaRznQQZxCCkWa1ArNb23dZmGrH3wfNn1Jb+uAHE96Y4ISUc37sZn7WRQkioClx +71OytLc2mFg1AKX18XAxd+MqnwSG4X/XqmlYRqvVQD9ZRtvXLuhMjv2DNKx7zmI 3SV8y11PtivsIDGexXXbYItpvWzvBCDrIGxjZ2x8WIfzwUh/Q1gbq7M0Xee/x5ka oRr0F2GtzW1H3G0+T6qXzBXrKzkTliTRlSsCH29/U88p25phfp0j8YLgJVYycEq1 9xk2y4WjCCi9AInFtuWILtNmRQ9c/jMQ2KwpurVkAMb8e4CdHQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFHv9IcPzoF/8dMvepo/ZNATsiwjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y OGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0ODNlNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzI4ZDBjMjYyLThlYTItNDQ0YS1h YjFlLTZkMDdjMzQ4M2U0NS8yOGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0 ODNlNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAXYlkADBAXYqWAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXyjKX4UxGa7v jkjBHtk6+NS/Aqa7os39YxOZS7Enm7npeZejOuklLZXu+Pm5TGAQmVjkobQkBkcI R0g0qEecvrs8BkwCg1rKcLuw4bq5eiff16226GYMOfzdd1uMmM3Soquvs1QK4Vdh 2/9q5zB82GZxcGdl2ZRURG6APrxHIsc8fcTXM4sssKaWt3A4biAuXmSwLrAwku+r XKTWdGJEazAUnM4vTtz/WIDzFNM9GiusRpWiMWkNKRSWni97eH7UTZRCIspGYg4w bIeee3v+eWOywJB7KjlWtAVqwMm/yFLQ1A7iD1LvVEFOXfDe4UeZfYtfjd92EXxu aiuU0r79zQ== -----END CERTIFICATE-----Generated at Wed Apr 24 02:00:04 2024 by rpki-client on console-fra.rpki-client.org