$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer File: 414a8094-a4a0-4822-9bac-5c5a83afca3d.cer (raw, json) Hash identifier: I3UoYnCxvsdWpna6nZkmZE3rLutpTMzGKSDxNfBW1Qc= Subject key identifier: 4A:E3:61:EF:B1:F3:D9:E5:56:24:25:30:EB:80:12:56:38:98:7E:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858473A53B02AFBE3DDAE05369880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Sep 2024 00:45:27 +0000 Certificate not after: Sun 20 Dec 2026 01:45:27 +0000 Subordinate resources: IP: 23.140.248.0/23 IP: 147.160.138.0/23 IP: 2602:fafd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:53:b0:2a:fb:e3:dd:ae:05:36:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 16 00:45:27 2024 GMT Not After : Dec 20 01:45:27 2026 GMT Subject: CN=414a8094-a4a0-4822-9bac-5c5a83afca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:62:5d:57:3c:bd:82:d7:58:70:06:1e:4d:4e: 6a:69:23:68:c7:d0:b4:51:d3:25:3d:2c:f7:1a:f7: 80:7e:a1:1c:5d:10:ac:3a:0a:59:42:5b:96:41:dc: 83:b5:a6:a7:d9:f3:36:90:71:9c:66:8f:cd:85:ca: 01:2c:17:af:d8:50:a4:ca:22:42:8c:ed:c4:09:01: 9b:90:01:77:f0:cc:0a:55:c9:d9:07:53:b0:b8:71: 82:38:68:54:bd:a0:42:af:23:dc:1f:42:8e:76:d0: e9:69:e6:db:08:76:40:fd:38:53:f2:6d:79:fa:72: 57:81:05:94:46:2b:b1:db:53:34:48:bf:e7:e3:1c: d5:24:fb:f0:25:3a:f1:7e:2d:98:8d:89:a4:e7:46: 27:ef:0a:eb:7d:04:c6:5b:07:5d:94:c9:5f:a9:89: 01:a3:ce:c1:6e:36:dc:57:de:76:4e:1b:f0:64:22: db:e4:1a:65:f7:ac:b1:47:11:91:b8:91:5a:ea:b9: 70:36:03:0f:1f:30:12:45:41:7e:57:68:df:fc:50: a5:93:3c:4f:d5:64:22:c9:fa:b5:65:13:e4:3f:fe: 7a:5f:a5:a8:12:12:32:d3:dd:3d:fc:d1:b4:c8:20: 8e:b7:91:d2:97:8b:87:b2:07:8b:de:95:0b:e2:cf: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E3:61:EF:B1:F3:D9:E5:56:24:25:30:EB:80:12:56:38:98:7E:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.140.248.0/23 147.160.138.0/23 IPv6: 2602:fafd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b9:c3:02:f4:05:09:46:18:77:5d:31:43:32:d7:6e:9e:44: 2f:8a:59:33:11:e3:f4:05:dd:29:f9:94:91:13:57:bf:12:41: c9:60:26:79:7c:36:67:43:79:3a:a8:4a:8f:63:67:37:c6:17: 10:40:7b:61:87:6e:77:ad:c8:13:8a:ab:14:df:45:bb:dd:70: 49:bd:eb:ec:bd:e2:01:97:2c:51:9e:4f:86:49:52:e2:f4:bc: 0c:39:88:98:04:67:28:b9:81:45:42:51:91:02:ae:f6:e2:7d: fd:c0:3a:be:3d:b2:6e:ee:be:0f:73:a6:fa:99:1f:75:f6:62: 84:6c:d3:ba:23:f6:65:4f:a9:37:3e:63:99:75:6d:82:79:ea: a1:e4:53:08:5c:6a:71:7f:ab:5c:7d:98:14:42:95:26:76:16: 69:7f:60:e2:9c:5e:04:cb:0e:aa:b1:a7:54:dc:70:94:63:e8: 1e:0d:97:2d:63:06:5f:91:f9:82:d1:2c:47:74:46:6d:b1:ad: 42:a2:0c:fb:45:47:b9:8e:4d:6a:2e:eb:42:09:1d:b9:ba:e0: 21:12:91:51:db:14:af:ac:58:e8:88:d0:24:4f:48:f8:f1:7b: 84:ac:02:3b:59:be:d8:76:8b:60:00:22:b3:e8:e2:a4:a7:a0: 94:de:3c:10 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEc6U7Aq++PdrgU2mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkxNjAwNDUyN1oXDTI2MTIyMDAxNDUyN1owLzEtMCsGA1UEAxMk NDE0YTgwOTQtYTRhMC00ODIyLTliYWMtNWM1YTgzYWZjYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WJdVzy9gtdYcAYeTU5qaSNox9C0UdMlPSz3 GveAfqEcXRCsOgpZQluWQdyDtaan2fM2kHGcZo/NhcoBLBev2FCkyiJCjO3ECQGb kAF38MwKVcnZB1OwuHGCOGhUvaBCryPcH0KOdtDpaebbCHZA/ThT8m15+nJXgQWU Riux21M0SL/n4xzVJPvwJTrxfi2YjYmk50Yn7wrrfQTGWwddlMlfqYkBo87Bbjbc V952ThvwZCLb5Bpl96yxRxGRuJFa6rlwNgMPHzASRUF+V2jf/FClkzxP1WQiyfq1 ZRPkP/56X6WoEhIy0909/NG0yCCOt5HSl4uHsgeL3pUL4s+GjQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFErjYe+x89nlViQlMOuAElY4mH57MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 MTRhODA5NC1hNGEwLTQ4MjItOWJhYy01YzVhODNhZmNhM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQxNGE4MDk0LWE0YTAtNDgyMi05 YmFjLTVjNWE4M2FmY2EzZC80MTRhODA5NC1hNGEwLTQ4MjItOWJhYy01YzVhODNh ZmNhM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXjPgDBAGToIowDgQCAAIwCAMGBCYC+v0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG5wwL0BQlGGHddMUMy126eRC+KWTMR4/QF3Sn5lJETV78SQclgJnl8 NmdDeTqoSo9jZzfGFxBAe2GHbnetyBOKqxTfRbvdcEm96+y94gGXLFGeT4ZJUuL0 vAw5iJgEZyi5gUVCUZECrvbiff3AOr49sm7uvg9zpvqZH3X2YoRs07oj9mVPqTc+ Y5l1bYJ56qHkUwhcanF/q1x9mBRClSZ2Fml/YOKcXgTLDqqxp1TccJRj6B4Nly1j Bl+R+YLRLEd0Rm2xrUKiDPtFR7mOTWou60IJHbm64CESkVHbFK+sWOiI0CRPSPjx e4SsAjtZvth2i2AAIrPo4qSnoJTePBA= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:37 2024 by rpki-client on console-ams.rpki-client.org