$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer File: 37cfb708-8bc0-4a74-971e-28d677315695.cer (raw, json) Hash identifier: aSC37KuTdA0ubBMO8b9WaD0UHo4+TUKmu7zXg0cTBQg= Subject key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846CAA8499BB85437ACCBCB1480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Aug 2024 00:45:22 +0000 Certificate not after: Tue 10 Nov 2026 01:45:22 +0000 Subordinate resources: AS: 395439 IP: 209.204.0.0/18 IP: 2605:7bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:ca:a8:49:9b:b8:54:37:ac:cb:cb:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 7 00:45:22 2024 GMT Not After : Nov 10 01:45:22 2026 GMT Subject: CN=37cfb708-8bc0-4a74-971e-28d677315695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:46:fa:d4:a2:8c:d3:f1:8d:2f:e4:0f:ce: 45:bb:c7:93:92:12:73:c6:0b:46:86:93:a0:50:5a: 89:94:dc:0d:b5:a8:32:72:e1:f0:4b:c8:66:01:b5: 55:50:f3:ed:a5:94:59:d3:c6:f0:59:80:88:d2:ab: 27:f0:b6:1f:2d:6d:22:81:a4:61:d8:2a:70:b6:4d: 0c:2f:8d:6a:d4:0b:22:01:2a:84:59:9e:bc:a3:14: be:16:91:74:7c:62:10:95:87:8f:11:ee:53:07:61: c8:2d:e1:26:03:aa:e1:fb:b9:c8:2a:f3:ac:2c:c1: bf:3e:c9:2a:83:7d:d9:b8:4f:67:4f:57:cd:aa:2f: eb:64:aa:92:90:ba:bd:73:15:47:d0:76:c8:39:57: 98:89:e5:2f:e5:45:f9:79:4b:59:32:67:3f:23:db: f2:19:78:6d:aa:91:2d:fa:6c:5c:ee:12:70:4c:3f: 10:3d:02:3a:70:47:74:af:dc:08:0c:78:7e:5c:0b: b5:09:4e:c7:df:38:ac:c4:ca:48:12:bd:ad:cc:8c: 20:27:e3:da:b4:c3:a0:f0:e9:c5:ce:02:d3:34:e1: a9:03:5f:56:9a:1c:86:48:f8:76:50:d8:5b:76:dd: de:fb:87:46:b3:a4:6b:32:3c:d2:39:78:68:42:d2: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 209.204.0.0/18 IPv6: 2605:7bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:10:09:bc:ee:02:ef:75:41:0c:7b:18:2e:d9:a0:73:94:83: 43:ff:e9:2f:f9:e4:51:66:4c:f6:c8:55:fd:07:3e:dd:34:b0: 82:7a:56:8b:ec:35:4c:e4:36:0a:04:54:05:58:6f:55:47:96: 64:3d:fb:d9:0e:2f:16:51:80:3b:bc:d4:2c:c7:af:7e:2a:16: ab:10:12:8f:c2:b2:26:22:2a:dd:9d:27:6f:9a:64:1f:6f:01: 3f:a8:47:cf:1c:c4:3c:11:20:da:1d:f0:d9:90:c7:cd:a0:bf: 16:fb:bd:2b:34:bc:96:25:ad:cc:f5:cb:1d:2c:75:8c:4a:b2: 35:90:4b:ff:ef:56:d7:ff:a4:8a:78:95:b9:c8:fa:d1:9f:2d: bd:0d:be:2c:2d:9b:90:7c:85:54:60:1d:b2:39:d0:1f:eb:86: 14:6b:f2:d4:1e:20:d3:61:b7:2f:fe:79:11:de:8c:2d:5d:34: a2:24:5f:36:8e:48:29:c7:1b:48:9a:7e:5d:99:50:31:ce:21: 10:88:05:91:9e:bb:a4:95:48:ca:25:fd:3b:4f:e8:b4:3d:27: aa:81:5c:a8:df:cd:ce:db:db:82:0d:9e:70:4d:eb:e5:a7:c4: c7:23:27:81:7b:80:d6:6a:21:5a:bb:b3:97:0f:17:a8:17:56: f0:b0:ad:04 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEbKqEmbuFQ3rMvLFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgwNzAwNDUyMloXDTI2MTExMDAxNDUyMlowLzEtMCsGA1UEAxMk MzdjZmI3MDgtOGJjMC00YTc0LTk3MWUtMjhkNjc3MzE1Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVNG+tSijNPxjS/kD85Fu8eTkhJzxgtGhpOg UFqJlNwNtagycuHwS8hmAbVVUPPtpZRZ08bwWYCI0qsn8LYfLW0igaRh2Cpwtk0M L41q1AsiASqEWZ68oxS+FpF0fGIQlYePEe5TB2HILeEmA6rh+7nIKvOsLMG/Pskq g33ZuE9nT1fNqi/rZKqSkLq9cxVH0HbIOVeYieUv5UX5eUtZMmc/I9vyGXhtqpEt +mxc7hJwTD8QPQI6cEd0r9wIDHh+XAu1CU7H3zisxMpIEr2tzIwgJ+PatMOg8OnF zgLTNOGpA19WmhyGSPh2UNhbdt3e+4dGs6RrMjzSOXhoQtIvdQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK1WgiHon147YJQviXlYoOYSCOg8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z N2NmYjcwOC04YmMwLTRhNzQtOTcxZS0yOGQ2NzczMTU2OTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM3Y2ZiNzA4LThiYzAtNGE3NC05 NzFlLTI4ZDY3NzMxNTY5NS8zN2NmYjcwOC04YmMwLTRhNzQtOTcxZS0yOGQ2Nzcz MTU2OTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAbRzAAwDQQCAAIwBwMFACYFe8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgivMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADIQCbzuAu91QQx7GC7ZoHOUg0P/ 6S/55FFmTPbIVf0HPt00sIJ6VovsNUzkNgoEVAVYb1VHlmQ9+9kOLxZRgDu81CzH r34qFqsQEo/CsiYiKt2dJ2+aZB9vAT+oR88cxDwRINod8NmQx82gvxb7vSs0vJYl rcz1yx0sdYxKsjWQS//vVtf/pIp4lbnI+tGfLb0Nviwtm5B8hVRgHbI50B/rhhRr 8tQeINNhty/+eRHejC1dNKIkXzaOSCnHG0iafl2ZUDHOIRCIBZGeu6SVSMol/TtP 6LQ9J6qBXKjfzc7b24INnnBN6+WnxMcjJ4F7gNZqIVq7s5cPF6gXVvCwrQQ= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:37 2024 by rpki-client on console-ams.rpki-client.org