$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer File: 3965685f-104b-41c9-9fe3-53d7fe4d141e.cer (raw, json) Hash identifier: MRc8sYBU5l7rwiuX/+LtPIi38CwiqEYVIW3EDd303BI= Subject key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858475BD3E408B5FB9CCB5F265B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Sep 2024 00:45:26 +0000 Certificate not after: Fri 01 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 398796 IP: 45.45.200.0/22 IP: 172.99.240.0/22 IP: 208.94.140.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5b:d3:e4:08:b5:fb:9c:cb:5f:26:5b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 28 00:45:26 2024 GMT Not After : Jan 1 01:45:26 2027 GMT Subject: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:c6:d5:54:0d:9f:64:7e:7c:cf:fb:45:5d: 72:34:18:da:64:00:c6:f4:29:3c:14:98:fe:15:67: a8:cc:d5:ef:dd:7b:3e:93:a6:1a:35:83:1e:cb:0b: 69:28:65:9e:e5:00:d6:2f:74:29:ba:21:14:8e:61: 44:b4:da:ad:69:6b:aa:71:e6:f2:10:72:08:34:6a: 41:4b:54:6b:d7:3c:7b:80:68:f9:07:81:4d:9a:30: 0b:93:4d:07:5d:30:b9:95:df:6c:b2:a5:bf:bb:b5: 36:0a:e5:bf:d7:35:e4:18:3b:f5:8c:4d:63:a4:65: 7e:d8:6e:66:ad:34:8c:29:15:47:d8:58:d5:f3:59: fd:21:b7:e5:15:3c:9f:27:40:f4:08:93:e1:56:b0: a4:8e:7d:71:9a:e7:02:f8:82:8b:31:fe:cb:83:30: a1:c1:f5:0f:ec:93:1b:86:4b:45:81:20:49:ba:31: 5e:a1:36:1a:da:7b:04:2f:07:a7:d4:2d:76:32:4e: b3:ad:2f:4f:d7:93:81:83:91:2f:b2:5f:aa:38:f1: 18:a9:e3:7d:ec:fd:98:07:92:40:18:99:d1:2a:11: b4:f2:af:f0:4e:d7:76:e8:55:c8:e0:fa:ee:c8:ef: f0:d6:8f:68:d8:00:13:93:4b:bf:88:be:ad:4d:32: 3c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.45.200.0/22 172.99.240.0/22 208.94.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398796 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e2:b9:40:c8:7f:51:84:b1:ad:94:79:50:e2:cf:29:63:6c: 53:11:a6:56:9a:5f:c9:a7:4e:5d:cc:50:2d:77:4b:cf:30:8d: 21:0e:9d:c5:59:ad:00:8c:1f:6c:84:9b:14:b2:64:68:13:6c: 2f:77:a9:31:37:58:59:aa:c5:f7:ac:25:e8:02:a3:bc:b9:a3: a5:77:17:9e:5a:0f:ac:fa:a8:66:ff:0f:90:53:f5:9f:60:3a: 2c:9a:9c:f3:1d:9c:1a:8b:9e:9d:94:97:5d:13:15:78:1a:a7: 6c:ca:68:8f:87:3b:f5:2b:e7:54:06:7f:5b:78:45:d2:76:b0: 78:53:a5:37:77:f3:f2:9e:cb:8a:6a:05:d8:0e:80:83:44:a6: 8c:c7:f2:47:83:3f:2f:97:94:ed:c9:93:4e:68:f0:69:a3:99: 36:de:84:1f:91:f9:0a:49:74:1b:2b:c9:32:2e:f5:c1:4f:57: 0e:a1:ce:f4:c1:c8:d7:94:93:59:f2:b6:c2:4d:93:03:55:46: bb:2d:cd:ec:9a:90:c7:b4:0d:77:a4:e3:eb:0f:9f:e5:83:09: df:35:d0:76:98:cd:91:b2:58:bf:4e:2c:70:57:94:b3:1f:7c: 84:90:a0:6e:fa:7d:ad:4b:4b:c4:cc:0e:7b:74:67:d8:9d:be: 02:c2:57:f6 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEdb0+QItfucy18mWyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkyODAwNDUyNloXDTI3MDEwMTAxNDUyNlowLzEtMCsGA1UEAxMk Mzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQxNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzfG1VQNn2R+fM/7RV1yNBjaZADG9Ck8FJj+ FWeozNXv3Xs+k6YaNYMeywtpKGWe5QDWL3QpuiEUjmFEtNqtaWuqcebyEHIINGpB S1Rr1zx7gGj5B4FNmjALk00HXTC5ld9ssqW/u7U2CuW/1zXkGDv1jE1jpGV+2G5m rTSMKRVH2FjV81n9IbflFTyfJ0D0CJPhVrCkjn1xmucC+IKLMf7LgzChwfUP7JMb hktFgSBJujFeoTYa2nsELwen1C12Mk6zrS9P15OBg5Evsl+qOPEYqeN97P2YB5JA GJnRKhG08q/wTtd26FXI4PruyO/w1o9o2AATk0u/iL6tTTI8PQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFC1O7Ad9BXT2jpONR93jglfUC9/fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z OTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM5NjU2ODVmLTEwNGItNDFjOS05 ZmUzLTUzZDdmZTRkMTQxZS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0 ZDE0MWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAItLcgDBAKsY/ADBALQXowwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhXMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA3iuUDIf1GEsa2UeVDizyljbFMRplaa X8mnTl3MUC13S88wjSEOncVZrQCMH2yEmxSyZGgTbC93qTE3WFmqxfesJegCo7y5 o6V3F55aD6z6qGb/D5BT9Z9gOiyanPMdnBqLnp2Ul10TFXgap2zKaI+HO/Ur51QG f1t4RdJ2sHhTpTd38/Key4pqBdgOgINEpozH8keDPy+XlO3Jk05o8GmjmTbehB+R +QpJdBsryTIu9cFPVw6hzvTByNeUk1nytsJNkwNVRrstzeyakMe0DXek4+sPn+WD Cd810HaYzZGyWL9OLHBXlLMffISQoG76fa1LS8TMDnt0Z9idvgLCV/Y= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:37 2024 by rpki-client on console-ams.rpki-client.org