$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer File: 3d21f741-fd91-4158-8853-7388dab3b3e3.cer (raw, json) Hash identifier: iYws6USjOOYSaBm1YxUERsTgesldNpLGkdMCMeNntpw= Subject key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846BF7D8DE65FFA325EC7F4A100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Aug 2024 00:45:23 +0000 Certificate not after: Fri 06 Nov 2026 01:45:23 +0000 Subordinate resources: AS: 53274 IP: 162.255.168.0/22 IP: 199.168.200.0/21 IP: 204.48.56.0/22 IP: 2602:ff8f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:bf:7d:8d:e6:5f:fa:32:5e:c7:f4:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 3 00:45:23 2024 GMT Not After : Nov 6 01:45:23 2026 GMT Subject: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:7e:99:cb:90:d9:b3:57:98:e8:84:70:49: aa:eb:2a:a9:aa:fe:3b:fc:85:09:40:ac:2e:3e:3c: 3a:17:34:53:33:bd:5c:19:95:9c:e0:85:f4:19:3a: fb:56:be:ef:d2:8b:5b:72:02:fd:0a:19:79:12:dd: 9a:28:41:2d:ff:cc:bb:f6:c0:b0:63:38:11:dc:3a: 1b:89:fa:33:7f:35:33:c4:76:6b:60:89:e3:ca:7b: 4e:2d:fb:0d:f3:fb:93:dd:06:49:51:e4:7b:5b:8f: 5e:1a:3b:ea:db:85:9c:7c:cf:72:b7:9a:65:15:16: 29:a9:99:3b:72:bf:20:d8:4f:ec:94:8c:1c:bf:5a: 17:91:e8:38:48:79:54:46:9d:c5:7c:7c:34:0a:33: 24:4d:bc:58:dd:21:31:a3:86:41:e9:bd:a5:08:94: 00:ac:87:0f:d0:b5:c4:fe:ea:e9:73:6a:4a:16:a8: 0c:d6:7e:02:00:6b:f3:54:17:6f:77:1a:f9:26:08: 93:bd:d3:8e:0c:72:f8:9c:ed:bd:3e:d7:85:f8:3e: fe:22:26:34:85:05:5d:64:fb:31:ce:d1:b2:9a:97: 05:d5:bf:08:ab:28:89:66:18:ae:b0:30:71:cd:53: 9a:2c:b4:98:6f:ef:57:b8:4a:ff:ae:46:29:e1:e1: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.255.168.0/22 199.168.200.0/21 204.48.56.0/22 IPv6: 2602:ff8f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7a:92:eb:f1:ed:00:4b:22:01:4e:ae:c3:95:4e:87:ea:61: 34:51:7b:bb:26:41:53:2b:a5:cf:07:4f:98:17:b0:28:b5:77: 97:55:5c:88:6a:b2:5a:15:98:f3:96:84:c6:05:f2:de:ad:87: a0:39:ff:21:6b:e3:76:60:f0:b6:92:e5:75:fb:55:50:b9:c5: 7e:27:c7:55:59:b4:9e:fe:66:dd:4f:f8:8e:2a:68:39:20:db: ca:ec:29:cf:23:03:f2:fd:59:7f:a8:3a:7d:b3:d5:bf:3d:b8: 8f:70:5d:78:2f:8b:6c:f6:71:bb:92:6f:b3:e6:5b:36:24:fe: 74:e5:d5:51:c1:53:f7:4b:ff:02:6c:f3:a8:6b:6b:65:4a:c6: 32:e8:86:ee:d0:26:75:b2:f2:89:d5:78:24:f3:49:1b:bf:56: 4f:f1:2d:3b:89:cf:02:45:fd:4d:f5:24:c3:f3:ae:5d:9f:17: 3b:b5:5c:e6:9a:12:da:2c:b2:78:a5:6e:73:27:b1:73:58:1c: 53:b7:d9:1e:ca:a0:c4:72:d4:7b:fd:ba:d8:34:31:97:e9:13: d8:cd:24:f2:20:8a:b9:24:17:74:76:12:be:78:c8:40:15:31: b1:54:6f:c7:5f:a5:c5:b5:86:f5:b9:5e:c6:be:8c:69:21:18: a7:c0:e3:fb -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEa/fY3mX/oyXsf0oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgwMzAwNDUyM1oXDTI2MTEwNjAxNDUyM1owLzEtMCsGA1UEAxMk M2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNiM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5x+mcuQ2bNXmOiEcEmq6yqpqv47/IUJQKwu Pjw6FzRTM71cGZWc4IX0GTr7Vr7v0otbcgL9Chl5Et2aKEEt/8y79sCwYzgR3Dob ifozfzUzxHZrYInjyntOLfsN8/uT3QZJUeR7W49eGjvq24WcfM9yt5plFRYpqZk7 cr8g2E/slIwcv1oXkeg4SHlURp3FfHw0CjMkTbxY3SExo4ZB6b2lCJQArIcP0LXE /urpc2pKFqgM1n4CAGvzVBdvdxr5JgiTvdOODHL4nO29PteF+D7+IiY0hQVdZPsx ztGympcF1b8IqyiJZhiusDBxzVOaLLSYb+9XuEr/rkYp4eFb9wIDAQABo4IENzCC BDMwHQYDVR0OBBYEFKevv+FiOa+Xm1alB744CTB/874UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNkMjFmNzQxLWZkOTEtNDE1OC04 ODUzLTczODhkYWIzYjNlMy8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFi M2IzZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKi/6gDBAPHqMgDBALMMDgwDgQCAAIwCAMGBCYC /48AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDQGjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVepLr8e0A SyIBTq7DlU6H6mE0UXu7JkFTK6XPB0+YF7AotXeXVVyIarJaFZjzloTGBfLerYeg Of8ha+N2YPC2kuV1+1VQucV+J8dVWbSe/mbdT/iOKmg5INvK7CnPIwPy/Vl/qDp9 s9W/PbiPcF14L4ts9nG7km+z5ls2JP505dVRwVP3S/8CbPOoa2tlSsYy6Ibu0CZ1 svKJ1Xgk80kbv1ZP8S07ic8CRf1N9STD865dnxc7tVzmmhLaLLJ4pW5zJ7FzWBxT t9keyqDEctR7/brYNDGX6RPYzSTyIIq5JBd0dhK+eMhAFTGxVG/HX6XFtYb1uV7G voxpIRinwOP7 -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:37 2024 by rpki-client on console-ams.rpki-client.org