$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer File: 30d537f2-f871-4f81-b20b-ae04610c521d.cer (raw, json) Hash identifier: KjFGn6/H6iquv1G57ynTIx9NvhdGIQfFjeTOPewt9eE= Subject key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858460CD1C15B5DF77A010FAF7C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 May 2024 00:45:20 +0000 Certificate not after: Thu 03 Sep 2026 00:45:20 +0000 Subordinate resources: IP: 45.41.240.0/22 IP: 216.146.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:0c:d1:c1:5b:5d:f7:7a:01:0f:af:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 31 00:45:20 2024 GMT Not After : Sep 3 00:45:20 2026 GMT Subject: CN=30d537f2-f871-4f81-b20b-ae04610c521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:da:e2:41:92:07:f6:3e:c5:d1:3a:78:cb: df:dd:32:ab:cf:36:4c:79:00:2b:e5:24:d8:71:83: 81:e8:7d:b0:16:28:ce:5b:cc:4c:ab:25:57:eb:3a: 74:83:3e:89:5e:35:16:16:11:25:8e:a0:c8:9e:7e: fc:d0:33:98:ec:08:1e:b2:f2:78:7b:53:3f:a4:43: d6:44:73:65:12:ab:af:6d:e0:65:3d:50:31:d5:4a: d6:41:cb:fd:fb:b3:95:6d:bd:d4:17:4f:2e:ee:b3: e8:b2:90:cd:40:54:26:bb:dc:21:a7:6b:f5:b8:0f: df:df:e3:57:0f:b0:c6:88:8d:7a:d2:88:68:5c:4f: 14:70:b2:d7:d3:00:76:97:47:6d:6e:e9:e3:02:93: e0:b7:8e:d3:b3:e3:d9:6b:19:93:0d:f6:bd:5e:d8: c3:bc:2a:52:84:b1:a0:b5:cb:e2:ce:71:24:b6:61: 94:b4:dd:48:02:fe:a2:1e:56:8f:d5:ca:ca:d0:64: 83:8e:97:17:8d:6c:ac:d6:9b:83:03:4f:cb:33:11: ae:fe:cd:bd:6a:a6:fa:84:da:4d:84:d3:6c:8d:1c: dc:97:c8:d7:39:85:39:30:9f:4d:cc:3b:56:04:ea: 76:f5:5a:35:53:c1:e3:12:e8:c3:3b:78:a8:93:13: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.41.240.0/22 216.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ce:c8:78:d4:35:9c:32:34:6b:fc:38:ac:52:14:d0:67:b4: 99:55:8d:b5:1c:f7:a5:ae:4a:9d:e9:39:0a:b3:84:a7:f3:90: cb:92:d6:49:6e:47:04:52:f4:ec:55:a3:6a:aa:53:7d:51:db: 95:a0:65:84:44:1a:0e:86:d8:9f:59:5e:b4:d5:0c:33:fe:38: f3:aa:8b:9e:a8:1b:8c:a3:90:8a:ed:9c:11:b2:ba:b4:19:70: 47:ed:55:71:a4:b1:e0:b3:35:4a:a2:86:6e:65:c4:52:fd:be: 40:80:46:0c:80:a6:95:86:b2:cb:a5:03:21:82:0e:61:73:ed: c8:d1:f3:49:6b:b7:98:22:ef:51:03:83:28:47:31:6b:35:25: 41:22:53:0d:45:fe:a6:53:8a:b5:0d:c3:f1:80:76:85:83:f9: a9:8e:5d:0f:a8:ad:0e:71:1a:cf:45:25:7a:ec:99:40:c3:28: db:d8:ce:b4:13:aa:84:77:c8:ca:c9:a5:c2:2f:c2:01:d9:5d: 80:05:b6:cf:ef:85:19:c9:ea:83:d6:14:cd:0b:cf:5b:68:a7: 10:26:9e:74:88:4e:55:4b:22:00:c2:ab:f6:b8:7a:d0:18:20: 34:18:22:0e:28:db:49:8e:d3:ab:28:ca:b0:fc:a0:ab:eb:31: ee:e0:3b:6a -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEYM0cFbXfd6AQ+vfGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDUzMTAwNDUyMFoXDTI2MDkwMzAwNDUyMFowLzEtMCsGA1UEAxMk MzBkNTM3ZjItZjg3MS00ZjgxLWIyMGItYWUwNDYxMGM1MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZna4kGSB/Y+xdE6eMvf3TKrzzZMeQAr5STY cYOB6H2wFijOW8xMqyVX6zp0gz6JXjUWFhEljqDInn780DOY7AgesvJ4e1M/pEPW RHNlEquvbeBlPVAx1UrWQcv9+7OVbb3UF08u7rPospDNQFQmu9whp2v1uA/f3+NX D7DGiI160ohoXE8UcLLX0wB2l0dtbunjApPgt47Ts+PZaxmTDfa9XtjDvCpShLGg tcviznEktmGUtN1IAv6iHlaP1crK0GSDjpcXjWys1puDA0/LMxGu/s29aqb6hNpN hNNsjRzcl8jXOYU5MJ9NzDtWBOp29Vo1U8HjEujDO3iokxMlfQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFA7QxKI5lfblYgoGyivJhKIF5OSEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEwYzUyMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMwZDUzN2YyLWY4NzEtNGY4MS1i MjBiLWFlMDQ2MTBjNTIxZC8zMGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEw YzUyMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItKfADBALYkhQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOc7IeNQ1nDI0 a/w4rFIU0Ge0mVWNtRz3pa5Knek5CrOEp/OQy5LWSW5HBFL07FWjaqpTfVHblaBl hEQaDobYn1letNUMM/4486qLnqgbjKOQiu2cEbK6tBlwR+1VcaSx4LM1SqKGbmXE Uv2+QIBGDICmlYayy6UDIYIOYXPtyNHzSWu3mCLvUQODKEcxazUlQSJTDUX+plOK tQ3D8YB2hYP5qY5dD6itDnEaz0UleuyZQMMo29jOtBOqhHfIysmlwi/CAdldgAW2 z++FGcnqg9YUzQvPW2inECaedIhOVUsiAMKr9rh60BggNBgiDijbSY7TqyjKsPyg q+sx7uA7ag== -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:36 2024 by rpki-client on console-ams.rpki-client.org