$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer File: 30d537f2-f871-4f81-b20b-ae04610c521d.cer (raw, json) Hash identifier: n8TtT1lZN0eeeC8DZNHSPCvGhvy7VVJMC7QkAeaQH8U= Subject key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E4834A8088674A51BE434480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 30 May 2025 19:06:39 +0000 Subordinate resources: IP: 45.41.240.0/22 IP: 216.146.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4a:80:88:67:4a:51:be:43:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 30 19:06:39 2025 GMT Subject: CN=30d537f2-f871-4f81-b20b-ae04610c521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:da:e2:41:92:07:f6:3e:c5:d1:3a:78:cb: df:dd:32:ab:cf:36:4c:79:00:2b:e5:24:d8:71:83: 81:e8:7d:b0:16:28:ce:5b:cc:4c:ab:25:57:eb:3a: 74:83:3e:89:5e:35:16:16:11:25:8e:a0:c8:9e:7e: fc:d0:33:98:ec:08:1e:b2:f2:78:7b:53:3f:a4:43: d6:44:73:65:12:ab:af:6d:e0:65:3d:50:31:d5:4a: d6:41:cb:fd:fb:b3:95:6d:bd:d4:17:4f:2e:ee:b3: e8:b2:90:cd:40:54:26:bb:dc:21:a7:6b:f5:b8:0f: df:df:e3:57:0f:b0:c6:88:8d:7a:d2:88:68:5c:4f: 14:70:b2:d7:d3:00:76:97:47:6d:6e:e9:e3:02:93: e0:b7:8e:d3:b3:e3:d9:6b:19:93:0d:f6:bd:5e:d8: c3:bc:2a:52:84:b1:a0:b5:cb:e2:ce:71:24:b6:61: 94:b4:dd:48:02:fe:a2:1e:56:8f:d5:ca:ca:d0:64: 83:8e:97:17:8d:6c:ac:d6:9b:83:03:4f:cb:33:11: ae:fe:cd:bd:6a:a6:fa:84:da:4d:84:d3:6c:8d:1c: dc:97:c8:d7:39:85:39:30:9f:4d:cc:3b:56:04:ea: 76:f5:5a:35:53:c1:e3:12:e8:c3:3b:78:a8:93:13: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.41.240.0/22 216.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ad:35:16:b2:9a:fb:bb:8c:b1:f4:d5:69:fc:f7:f6:96:94: 06:02:ec:56:f4:91:2b:80:7a:dd:af:26:ed:f8:5e:10:2e:fc: b6:33:1f:ed:b3:d7:83:e2:74:98:e5:86:5e:38:f1:cd:f7:d3: fc:6a:95:75:1f:7b:73:41:ea:4e:7c:3c:80:66:1e:a6:d4:73: 0e:c3:58:c6:42:5d:a1:e0:b8:99:74:1a:da:69:4e:0b:0d:31: ac:c4:b6:78:f6:98:c1:78:73:2d:84:47:ad:5f:19:01:f7:2b: fe:ac:f6:13:4a:80:da:ce:71:36:2d:4c:07:13:35:be:e0:18: 72:aa:c6:31:99:9e:a5:bf:f4:ab:94:34:52:98:7e:7e:44:45: 7e:75:05:b7:54:74:67:41:35:ed:79:6b:11:28:91:53:8f:61: 7e:8f:98:ac:24:fc:bb:41:68:f2:85:02:54:0b:26:52:39:4f: 66:5a:6e:2c:a6:bb:bf:4f:8e:4b:59:7a:48:c4:8f:b9:dd:39: ce:e0:ec:db:92:85:83:d7:6b:d1:5f:9a:12:58:6b:d6:77:ed: 0e:90:bf:9b:dd:51:e1:bb:be:89:04:56:30:7c:cb:20:07:93: 6b:12:6f:08:68:26:18:8a:eb:41:70:82:06:f0:bd:d9:33:bd: 87:41:02:bc -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEHkg0qAiGdKUb5DRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUzMDE5MDYzOVowLzEtMCsGA1UEAxMk MzBkNTM3ZjItZjg3MS00ZjgxLWIyMGItYWUwNDYxMGM1MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZna4kGSB/Y+xdE6eMvf3TKrzzZMeQAr5STY cYOB6H2wFijOW8xMqyVX6zp0gz6JXjUWFhEljqDInn780DOY7AgesvJ4e1M/pEPW RHNlEquvbeBlPVAx1UrWQcv9+7OVbb3UF08u7rPospDNQFQmu9whp2v1uA/f3+NX D7DGiI160ohoXE8UcLLX0wB2l0dtbunjApPgt47Ts+PZaxmTDfa9XtjDvCpShLGg tcviznEktmGUtN1IAv6iHlaP1crK0GSDjpcXjWys1puDA0/LMxGu/s29aqb6hNpN hNNsjRzcl8jXOYU5MJ9NzDtWBOp29Vo1U8HjEujDO3iokxMlfQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFA7QxKI5lfblYgoGyivJhKIF5OSEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEwYzUyMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMwZDUzN2YyLWY4NzEtNGY4MS1i MjBiLWFlMDQ2MTBjNTIxZC8zMGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEw YzUyMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItKfADBALYkhQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAha01FrKa+7uM sfTVafz39paUBgLsVvSRK4B63a8m7fheEC78tjMf7bPXg+J0mOWGXjjxzffT/GqV dR97c0HqTnw8gGYeptRzDsNYxkJdoeC4mXQa2mlOCw0xrMS2ePaYwXhzLYRHrV8Z Afcr/qz2E0qA2s5xNi1MBxM1vuAYcqrGMZmepb/0q5Q0Uph+fkRFfnUFt1R0Z0E1 7XlrESiRU49hfo+YrCT8u0Fo8oUCVAsmUjlPZlpuLKa7v0+OS1l6SMSPud05zuDs 25KFg9dr0V+aElhr1nftDpC/m91R4bu+iQRWMHzLIAeTaxJvCGgmGIrrQXCCBvC9 2TO9h0ECvA== -----END CERTIFICATE-----Generated at Fri Apr 19 01:57:11 2024 by rpki-client on console-ams.rpki-client.org