$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer File: 44b5f84d-3917-4ce9-99a1-9bded53bb862.cer (raw, json) Hash identifier: OkLy4/BSA3bT1kCOd1tdrqKlTjdoVVnC+mowM5cyBeQ= Subject key identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845C0329747EC71EA36B32B38C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 May 2024 14:03:13 +0000 Certificate not after: Thu 27 Nov 2025 01:45:21 +0000 Subordinate resources: AS: 398841 IP: 64.190.206.0/24 IP: 66.179.103.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c0:32:97:47:ec:71:ea:36:b3:2b:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 3 14:03:13 2024 GMT Not After : Nov 27 01:45:21 2025 GMT Subject: CN=44b5f84d-3917-4ce9-99a1-9bded53bb862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:bf:ac:34:ee:e9:c7:84:40:3e:01:06:cc: d3:d4:73:a4:cc:c9:ac:cc:ae:87:4f:c9:7e:8c:38: 12:69:b6:17:57:6a:3b:07:34:fb:b8:a2:60:ff:ef: 43:1e:fb:26:ba:17:89:66:a1:bf:84:70:9b:b2:ff: 63:1d:bc:e2:f8:b1:b0:76:d0:0d:db:04:52:47:29: 8c:b5:02:25:b5:68:c8:1e:40:1b:0e:c6:e4:e0:4d: 21:68:ca:93:b0:46:6c:7a:2b:76:79:fd:f5:bf:26: 16:7f:e5:0d:9a:02:9f:c5:fd:05:45:ba:96:43:90: b6:54:52:12:1e:d8:37:0e:73:1b:49:45:26:13:7d: 94:1d:3b:cf:5c:63:78:fc:cb:54:d0:a5:6f:47:c5: db:88:c2:e9:84:fc:53:a8:96:97:bd:8f:78:ca:6d: e8:00:d0:44:b2:ca:aa:64:e2:76:af:24:d5:4c:62: a8:d6:d2:05:0a:b2:40:05:d2:b0:26:08:46:ce:0f: ab:83:00:4b:53:9b:d3:5d:98:e7:cd:c1:6d:72:55: ff:ea:6e:2b:f9:51:a9:25:9f:da:21:03:81:cd:1d: 86:c5:1d:5f:52:ac:59:f2:0e:7f:b9:bb:9b:d0:38: eb:dd:5e:2a:67:84:3f:50:1d:ff:92:f0:c2:fa:ca: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.190.206.0/24 66.179.103.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:04:37:f3:f3:02:bd:77:d5:cc:ee:5c:46:a1:fc:46:f2:84: 2e:66:7d:2f:5b:78:4d:43:55:3c:1e:e1:64:c7:83:67:37:66: 9f:79:55:11:53:8d:84:6a:c8:b4:bb:4a:5b:7d:c8:14:2c:c9: 85:86:b3:e8:3c:2c:a3:34:8c:0b:d1:a5:f5:54:55:b8:58:bb: ef:4a:d3:74:08:89:82:d5:3f:e9:7d:95:11:56:53:2d:5b:1f: 1a:3b:45:44:f3:55:50:fa:3e:dd:ed:71:3e:d4:5a:46:2f:39: 9c:ec:f9:bd:8c:c3:5a:24:92:c0:3c:dd:26:ff:bd:14:92:b1: a6:4a:13:c4:ca:2b:88:bc:15:42:46:1e:ca:af:e4:6f:f2:45: ae:d8:45:3b:5e:5e:3d:36:b8:22:ab:b7:f9:40:81:a2:0c:6e: 47:1d:fe:a5:db:ba:77:d8:24:3f:29:6e:56:25:88:c1:90:35: e3:ce:33:0f:52:c3:fc:2f:d6:29:43:4b:e1:d4:e6:35:15:60: b1:dd:4e:92:74:67:41:75:7b:b1:d1:9c:2e:40:14:18:f4:88: f5:1a:49:98:20:05:0b:13:95:93:50:6c:82:63:53:d9:81:79: cd:e3:d3:9f:74:d7:f6:cf:73:51:85:da:ca:6e:88:07:86:39: 41:09:fc:49 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEXAMpdH7HHqNrMrOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDUwMzE0MDMxM1oXDTI1MTEyNzAxNDUyMVowLzEtMCsGA1UEAxMk NDRiNWY4NGQtMzkxNy00Y2U5LTk5YTEtOWJkZWQ1M2JiODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eu/rDTu6ceEQD4BBszT1HOkzMmszK6HT8l+ jDgSabYXV2o7BzT7uKJg/+9DHvsmuheJZqG/hHCbsv9jHbzi+LGwdtAN2wRSRymM tQIltWjIHkAbDsbk4E0haMqTsEZseit2ef31vyYWf+UNmgKfxf0FRbqWQ5C2VFIS Htg3DnMbSUUmE32UHTvPXGN4/MtU0KVvR8XbiMLphPxTqJaXvY94ym3oANBEssqq ZOJ2ryTVTGKo1tIFCrJABdKwJghGzg+rgwBLU5vTXZjnzcFtclX/6m4r+VGpJZ/a IQOBzR2GxR1fUqxZ8g5/ubub0Djr3V4qZ4Q/UB3/kvDC+spRnQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPY0jiGevTI0CJ/22tPTiZBbhK6BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NGI1Zjg0ZC0zOTE3LTRjZTktOTlhMS05YmRlZDUzYmI4NjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ0YjVmODRkLTM5MTctNGNlOS05 OWExLTliZGVkNTNiYjg2Mi80NGI1Zjg0ZC0zOTE3LTRjZTktOTlhMS05YmRlZDUz YmI4NjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAvs4DBABCs2cwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhX5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKcEN/PzAr131czuXEah/EbyhC5mfS9beE1DVTwe 4WTHg2c3Zp95VRFTjYRqyLS7Slt9yBQsyYWGs+g8LKM0jAvRpfVUVbhYu+9K03QI iYLVP+l9lRFWUy1bHxo7RUTzVVD6Pt3tcT7UWkYvOZzs+b2Mw1okksA83Sb/vRSS saZKE8TKK4i8FUJGHsqv5G/yRa7YRTteXj02uCKrt/lAgaIMbkcd/qXbunfYJD8p blYliMGQNePOMw9Sw/wv1ilDS+HU5jUVYLHdTpJ0Z0F1e7HRnC5AFBj0iPUaSZgg BQsTlZNQbIJjU9mBec3j05901/bPc1GF2spuiAeGOUEJ/Ek= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:14 2024 by rpki-client on console-fra.rpki-client.org