$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer File: 32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer (raw, json) Hash identifier: vLtmuOtlMnHpRkxLmF1gVSyrn2smBFyusz1yJN5T7d0= Subject key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584429F725C5C04C04E9BA1E0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Dec 2023 01:45:15 +0000 Certificate not after: Sat 14 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 54105 IP: 52.144.58.0/24 IP: 168.245.151.0/24 IP: 192.139.134.0/24 IP: 199.19.88.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:29:f7:25:c5:c0:4c:04:e9:ba:1e:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 10 01:45:15 2023 GMT Not After : Mar 14 00:45:15 2026 GMT Subject: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:57:b0:df:4c:66:f6:9c:b3:80:fe:35:10: d1:4c:06:ba:97:cb:92:8b:01:0b:1d:0e:8c:34:4f: fe:42:19:a0:c8:f3:fc:1d:77:6d:23:96:9b:c2:0d: ee:b4:29:2b:f3:f4:1e:fa:98:81:05:86:fa:5e:9d: 9a:af:8f:fb:8b:a6:f3:97:2b:62:a4:d6:f6:d6:15: 81:38:3b:18:99:8e:f5:5c:99:5a:ae:eb:74:b5:eb: 46:61:f9:d9:52:81:95:09:c4:24:31:38:55:e7:b6: e9:f3:95:69:a2:0c:8d:b5:71:7f:ed:4d:bc:5b:a9: 37:3c:b6:cb:1e:aa:05:66:de:e6:f8:b9:cd:32:b9: af:40:1c:dd:95:05:14:7a:9c:08:61:d7:ce:07:38: 31:e7:b1:d0:1c:46:27:04:4a:e5:ef:44:f6:d8:72: 3f:e3:d7:a1:99:50:21:a5:00:27:a2:03:f2:be:c3: 5a:d1:48:9a:9c:78:bb:82:97:46:71:a6:1a:7c:56: 47:df:f4:cc:a9:90:15:4c:59:bc:a5:0c:a3:bd:f1: ad:b4:5b:74:e0:4f:3e:75:8f:69:c5:87:96:d6:11: 9e:9c:ad:d6:e9:0c:3a:d1:45:fb:25:b3:6d:5c:d5: 73:e6:b6:b3:2a:f1:42:06:61:11:b5:cc:54:82:30: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.88.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54105 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ea:28:d9:74:58:45:ca:28:f3:d2:72:23:3b:10:cb:ff:bd: 4c:21:2b:60:ef:c1:72:e6:17:68:69:98:f3:22:2e:66:81:4c: 25:8d:31:b2:c3:f1:37:09:1e:f0:41:9f:f0:38:8f:02:f1:01: ff:da:c8:d4:cf:33:e4:3e:27:d9:18:89:37:df:49:fa:3f:19: b9:e1:d0:93:cb:af:88:bb:55:80:ab:b7:2f:ce:4d:3e:ce:e7: a5:4e:2b:e0:cd:bd:54:a8:1a:36:98:12:a7:4f:81:51:e7:86: b4:1e:63:ae:2e:13:51:83:4a:50:c0:1a:26:16:61:bd:e6:da: 64:8f:91:7c:5c:b8:4b:a4:75:d9:0d:f6:aa:73:7f:dd:10:6e: 55:b0:83:14:af:ac:9b:d0:28:19:9f:4f:80:28:91:16:24:48: 24:2f:b6:c4:51:74:82:b3:89:eb:b8:0a:57:b7:9d:d7:74:59: 6f:10:82:98:b7:37:3e:a2:aa:81:3c:2c:e5:ac:1e:ea:e4:56: c4:e5:0c:6c:1d:6b:0d:2c:6d:1c:b3:10:81:79:0e:12:2f:67: 94:2c:f6:f0:db:cc:cc:2e:79:d4:48:51:f5:18:97:7d:c6:f8: 59:df:43:65:f4:e4:80:d4:6e:50:58:6a:dc:08:17:8c:09:9c: 74:38:60:d0 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEQp9yXFwEwE6boeCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIxMDAxNDUxNVoXDTI2MDMxNDAwNDUxNVowLzEtMCsGA1UEAxMk MzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZjYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyVXsN9MZvacs4D+NRDRTAa6l8uSiwELHQ6M NE/+QhmgyPP8HXdtI5abwg3utCkr8/Qe+piBBYb6Xp2ar4/7i6bzlytipNb21hWB ODsYmY71XJlarut0tetGYfnZUoGVCcQkMThV57bp85VpogyNtXF/7U28W6k3PLbL HqoFZt7m+LnNMrmvQBzdlQUUepwIYdfOBzgx57HQHEYnBErl70T22HI/49ehmVAh pQAnogPyvsNa0UianHi7gpdGcaYafFZH3/TMqZAVTFm8pQyjvfGttFt04E8+dY9p xYeW1hGenK3W6Qw60UX7JbNtXNVz5razKvFCBmERtcxUgjCOawIDAQABo4IELTCC BCkwHQYDVR0OBBYEFMmVVHs59XftC+OKcHv2d0P6rMl9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMyZTNhM2FkLWIxYWMtNDEzZC04 Zjk4LWE2OTQyOWE2Y2E5OC8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0Mjlh NmNhOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAA0kDoDBACo9ZcDBADAi4YDBALHE1gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDANNZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKrqKNl0WEXKKPPSciM7EMv/ vUwhK2DvwXLmF2hpmPMiLmaBTCWNMbLD8TcJHvBBn/A4jwLxAf/ayNTPM+Q+J9kY iTffSfo/Gbnh0JPLr4i7VYCrty/OTT7O56VOK+DNvVSoGjaYEqdPgVHnhrQeY64u E1GDSlDAGiYWYb3m2mSPkXxcuEukddkN9qpzf90QblWwgxSvrJvQKBmfT4AokRYk SCQvtsRRdIKzieu4Cle3ndd0WW8Qgpi3Nz6iqoE8LOWsHurkVsTlDGwdaw0sbRyz EIF5DhIvZ5Qs9vDbzMwuedRIUfUYl33G+FnfQ2X05IDUblBYatwIF4wJnHQ4YNA= -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:35 2024 by rpki-client on console-fra.rpki-client.org