$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer File: 3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer (raw, json) Hash identifier: hf3+sh4vGLtQ+gqFMHPI+9nlF2MgjhEOG20HD9e6MTs= Subject key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846ABF2C40BA95A5EB55D833B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jul 2024 00:45:23 +0000 Certificate not after: Fri 30 Oct 2026 00:45:23 +0000 Subordinate resources: AS: 6977 IP: 23.188.16.0/21 IP: 172.98.32.0/22 IP: 2602:fc4b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:ab:f2:c4:0b:a9:5a:5e:b5:5d:83:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 27 00:45:23 2024 GMT Not After : Oct 30 00:45:23 2026 GMT Subject: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:10:0a:45:94:64:fb:cf:1f:47:9c:c4:fb: 77:72:fc:60:0d:6e:3d:97:a9:09:57:9c:ae:f3:af: 3f:71:95:a9:8b:c1:23:2d:4b:b4:43:3f:47:ed:2d: f1:45:89:68:6c:5b:3d:01:e6:93:43:50:e7:37:1f: df:2f:3d:8d:c0:6b:69:c4:6c:99:0d:3f:9f:4f:50: ac:de:06:c8:55:88:0e:e8:1f:95:53:03:26:10:a7: 05:8e:5d:5b:f4:15:c5:b7:70:3b:79:ea:06:a2:fb: 8a:2e:32:76:62:85:20:82:51:69:e8:57:f6:09:98: d7:79:d1:0d:cd:5b:6c:12:ad:bc:5f:0e:04:2e:59: 6e:6b:a6:d9:20:c5:3a:d5:39:65:c0:b1:ff:bc:19: 3e:95:19:a9:c0:7f:f0:c4:26:00:9e:3b:7b:b6:6a: 07:82:2e:f9:78:9e:ab:ac:46:90:f1:0f:bb:69:4b: df:18:84:cf:3e:20:11:a6:3c:9b:f6:69:0e:d1:7f: 17:eb:6e:eb:07:f9:71:40:a9:37:68:e7:1b:18:d0: ad:a6:9f:d3:23:05:74:85:ac:53:1e:d0:22:e1:e0: 8a:27:55:4d:14:a7:01:af:55:9c:3d:c5:71:8d:14: 6f:c8:11:84:57:18:94:e6:43:26:d5:c8:21:55:79: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/21 172.98.32.0/22 IPv6: 2602:fc4b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6977 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6e:ee:6d:41:18:5a:f7:b5:f5:c4:a2:1e:82:cc:db:e7:e0: 38:d5:ec:16:2c:08:8b:4e:5e:d3:1f:50:5a:7b:17:d3:84:b7: 1d:ee:24:3d:a7:aa:ef:d8:1c:70:ec:76:95:51:fb:92:61:3f: fa:ae:9a:74:08:ef:db:09:73:e4:4a:ba:a6:58:67:f4:89:eb: 00:50:71:43:3b:fa:9d:f1:e2:4b:e4:e5:a6:16:67:70:6b:de: 0c:2d:98:65:6f:96:5f:ed:61:90:0f:a7:38:b7:b9:25:28:19: 5c:2e:05:e6:83:e3:0d:18:69:ea:96:e5:8e:ab:96:68:7c:20: c7:9b:a7:47:e8:af:e8:9b:16:e4:85:a9:cc:db:8d:27:83:5e: d8:c8:96:25:df:cb:67:0b:1b:65:e1:d2:3a:dc:39:89:7c:fa: 26:50:43:ba:ce:ad:9d:17:00:37:0f:5a:54:d6:9c:f2:bc:09: 24:c2:8f:87:d2:92:e8:8b:8a:5e:e0:d6:58:70:e9:64:77:f0: a2:d2:6f:a6:b4:e5:08:79:21:a6:bb:da:51:dc:65:6c:c8:0e: 89:05:3e:37:ef:42:80:ef:4f:4e:e0:ce:62:d5:21:e1:0a:f3: 26:c3:ca:a6:88:ad:51:2c:55:5d:41:af:f8:c9:5d:e9:8f:67: 8b:c3:a9:ec -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEar8sQLqVpetV2DOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDcyNzAwNDUyM1oXDTI2MTAzMDAwNDUyM1owLzEtMCsGA1UEAxMk M2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFwQCkWUZPvPH0ecxPt3cvxgDW49l6kJV5yu 868/cZWpi8EjLUu0Qz9H7S3xRYlobFs9AeaTQ1DnNx/fLz2NwGtpxGyZDT+fT1Cs 3gbIVYgO6B+VUwMmEKcFjl1b9BXFt3A7eeoGovuKLjJ2YoUgglFp6Ff2CZjXedEN zVtsEq28Xw4ELllua6bZIMU61TllwLH/vBk+lRmpwH/wxCYAnjt7tmoHgi75eJ6r rEaQ8Q+7aUvfGITPPiARpjyb9mkO0X8X627rB/lxQKk3aOcbGNCtpp/TIwV0haxT HtAi4eCKJ1VNFKcBr1WcPcVxjRRvyBGEVxiU5kMm1cghVXnmxwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPYpvfjWUMpDhTEFJ4EgY0g6SlhbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNlYjYwMjUzLWYwMmQtNDcyMy05 OTlmLWUyZTNlMGZkOWIxMi8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBm ZDliMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAMXvBADBAKsYiAwDgQCAAIwCAMGBCYC/EsAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhtBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA9u7m1BGFr3tfXEoh6C zNvn4DjV7BYsCItOXtMfUFp7F9OEtx3uJD2nqu/YHHDsdpVR+5JhP/qumnQI79sJ c+RKuqZYZ/SJ6wBQcUM7+p3x4kvk5aYWZ3Br3gwtmGVvll/tYZAPpzi3uSUoGVwu BeaD4w0YaeqW5Y6rlmh8IMebp0for+ibFuSFqczbjSeDXtjIliXfy2cLG2Xh0jrc OYl8+iZQQ7rOrZ0XADcPWlTWnPK8CSTCj4fSkuiLil7g1lhw6WR38KLSb6a05Qh5 Iaa72lHcZWzIDokFPjfvQoDvT07gzmLVIeEK8ybDyqaIrVEsVV1Br/jJXemPZ4vD qew= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:37 2024 by rpki-client on console-ams.rpki-client.org