$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer File: 3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer (raw, json) Hash identifier: 8RM2PuSqs6vyB0waQFvsxc8WoY1EbzhxxOlRV7jrvIM= Subject key identifier: 1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285843FD4C35DC73642F122B4613A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Nov 2023 01:45:16 +0000 Certificate not after: Thu 26 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 30407 IP: 98.142.240.0/20 IP: 104.234.0.0/16 IP: 206.53.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:fd:4c:35:dc:73:64:2f:12:2b:46:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 24 01:45:16 2023 GMT Not After : Feb 26 01:45:16 2026 GMT Subject: CN=3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:4a:d5:1c:64:df:ee:63:a5:23:9a:e0:7f: 43:84:6b:27:82:4c:53:e5:20:99:a3:78:59:f9:9c: ef:d0:ce:b2:7d:c7:07:ab:bd:19:59:5c:d7:cc:04: ad:27:9b:d1:20:46:5c:89:2c:a3:2a:0d:e5:dd:ae: a4:20:3b:a1:ab:80:c1:f6:c2:29:c1:33:ec:a5:2d: b9:fd:55:b7:62:71:af:74:71:25:5d:f6:ca:b1:49: e5:f4:a1:e7:15:2b:65:a5:4e:9d:e5:9e:c7:d8:53: 88:e7:b7:0a:7e:c7:90:72:39:a5:52:99:53:1a:a5: a7:66:69:e3:17:b8:0b:e3:a9:17:c4:7a:2f:c1:5e: d3:6c:4f:fa:22:59:de:05:1c:91:de:f6:9a:dc:65: 88:81:94:8b:44:1e:c1:40:18:25:d9:70:b9:00:ae: 35:fb:e5:d0:9c:f5:05:09:74:86:0d:77:1e:c0:a6: 19:d3:c5:57:34:ab:6c:ee:66:c4:16:6e:46:7e:d0: 49:35:ed:4d:19:e7:b1:57:c2:9d:0e:33:3a:6a:f9: 12:af:92:a2:5a:62:6e:52:4f:6a:7b:e1:59:bb:26: a0:bf:ee:d1:dc:bd:cc:72:5d:03:38:38:47:6d:24: 47:a2:83:f3:2b:7a:98:af:6b:7d:36:f3:cf:bb:bc: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 98.142.240.0/20 104.234.0.0/16 206.53.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30407 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:13:b5:d8:f6:8f:3c:cb:36:62:98:8a:f4:c3:b1:e6:ac:e1: 51:4e:96:47:c9:d8:1b:59:b4:f7:0f:ca:e7:b5:82:34:6e:20: 06:83:57:15:d4:45:de:29:a5:e6:54:ec:6a:b1:ef:ed:9c:1e: e9:10:70:a0:a5:6f:38:9a:9e:db:a9:76:d5:57:19:f5:64:f7: 13:20:cb:a7:4a:cc:7e:3a:c7:d0:19:c3:0a:ab:46:19:bd:e4: 7a:d5:80:f3:69:8a:c2:5b:47:76:a8:40:f9:ca:3d:07:a2:fa: 55:d0:ce:bc:a5:3b:d4:db:b4:61:9a:b5:07:3f:96:1d:4e:2d: 77:92:a1:f2:76:af:a9:53:1b:f5:84:64:05:ca:97:fc:8d:e9: d3:29:e3:a0:3d:bd:09:cc:e3:94:54:a7:5a:29:ef:f4:34:0d: d1:37:6d:d2:c5:df:a2:7e:f3:5b:e8:47:4e:ad:4f:d4:81:aa: 92:70:7d:cb:6d:bb:dc:41:0a:d1:51:55:4f:60:e3:cb:70:d6: ca:d1:6c:9b:60:0b:19:64:32:f6:9e:8d:2a:9a:17:93:4c:3f: 76:42:82:77:22:19:7c:02:33:21:12:4a:94:13:5a:99:37:b3: ac:8c:96:58:40:57:db:27:61:ac:2d:de:a4:70:fc:4d:b0:34: 79:5c:14:7c -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEP9TDXcc2QvEitGE6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTEyNDAxNDUxNloXDTI2MDIyNjAxNDUxNlowLzEtMCsGA1UEAxMk M2Y1ZTJlNWItYzczMS00ZGI4LTliODctYWY5ZjhlNThhMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hK1Rxk3+5jpSOa4H9DhGsngkxT5SCZo3hZ +Zzv0M6yfccHq70ZWVzXzAStJ5vRIEZciSyjKg3l3a6kIDuhq4DB9sIpwTPspS25 /VW3YnGvdHElXfbKsUnl9KHnFStlpU6d5Z7H2FOI57cKfseQcjmlUplTGqWnZmnj F7gL46kXxHovwV7TbE/6IlneBRyR3vaa3GWIgZSLRB7BQBgl2XC5AK41++XQnPUF CXSGDXcewKYZ08VXNKts7mbEFm5GftBJNe1NGeexV8KdDjM6avkSr5KiWmJuUk9q e+FZuyagv+7R3L3Mcl0DODhHbSRHooPzK3qYr2t9NvPPu7wwRwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFB4f+QSH23ZIOj3Q78E2bSCwPEJLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZjVlMmU1Yi1jNzMxLTRkYjgtOWI4Ny1hZjlmOGU1OGExYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05 Yjg3LWFmOWY4ZTU4YTFjNi8zZjVlMmU1Yi1jNzMxLTRkYjgtOWI4Ny1hZjlmOGU1 OGExYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDBARijvADAwBo6gMEBM41MDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgJ2xzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIE7XY9o88yzZimIr0w7HmrOFRTpZHydgb WbT3D8rntYI0biAGg1cV1EXeKaXmVOxqse/tnB7pEHCgpW84mp7bqXbVVxn1ZPcT IMunSsx+OsfQGcMKq0YZveR61YDzaYrCW0d2qED5yj0HovpV0M68pTvU27RhmrUH P5YdTi13kqHydq+pUxv1hGQFypf8jenTKeOgPb0JzOOUVKdaKe/0NA3RN23Sxd+i fvNb6EdOrU/UgaqScH3LbbvcQQrRUVVPYOPLcNbK0WybYAsZZDL2no0qmheTTD92 QoJ3Ihl8AjMhEkqUE1qZN7OsjJZYQFfbJ2GsLd6kcPxNsDR5XBR8 -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:14 2024 by rpki-client on console-fra.rpki-client.org