$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer File: 451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer (raw, json) Hash identifier: muJbE/iRrbwM5833bicoGfl9g5xj6kwuDK4ZB7RJH50= Subject key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846B188226DDA4FA0B9D91C7800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jul 2024 00:45:23 +0000 Certificate not after: Sun 01 Nov 2026 00:45:23 +0000 Subordinate resources: AS: 63173 AS: 63339 IP: 45.88.216.0/22 IP: 45.89.48.0/22 IP: 45.91.108.0/22 IP: 45.92.16.0/22 IP: 45.126.36.0/22 IP: 107.178.48.0/21 IP: 2602:fc48::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:b1:88:22:6d:da:4f:a0:b9:d9:1c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 29 00:45:23 2024 GMT Not After : Nov 1 00:45:23 2026 GMT Subject: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:52:9d:70:d6:b5:5f:41:eb:9f:38:cc:9f: b8:62:ce:77:46:48:21:c7:fa:f0:3d:6f:c1:7a:a5: 77:3e:1d:38:60:13:e9:b4:8a:c4:1b:ad:47:50:1b: 86:c3:08:b4:7c:f9:a8:2d:07:48:7f:de:20:a3:87: c8:dc:22:22:4e:fe:64:63:5b:15:e4:30:f8:20:91: dd:5c:7b:4f:00:80:af:09:af:a0:60:56:1e:9d:35: 99:6a:2b:74:dc:23:e0:fc:2d:70:7e:cd:bd:35:ff: e0:a3:0d:70:3b:d7:22:6a:7f:62:88:23:1d:cc:62: d4:8d:41:fa:36:e9:e3:a4:f3:e5:49:11:e4:d2:35: dd:e5:55:5d:9a:a9:9f:a6:75:08:9c:6c:94:48:b2: fc:2b:47:13:ee:c8:ad:cb:2d:4b:b7:83:83:d2:7f: 52:11:af:1b:33:ad:d3:4d:0e:09:24:a9:2b:44:0e: fd:fc:23:6d:d4:87:c1:41:ee:34:74:9d:de:ac:9d: dc:f5:43:cb:a6:9d:af:e0:b2:bf:0c:cc:b9:fd:e4: 72:1a:92:79:94:4a:ff:16:f7:b8:ba:00:81:f8:d3: f5:8b:89:ab:92:b9:d9:f0:22:d8:da:34:71:9f:5c: 6c:7f:25:5b:69:0e:99:37:48:d8:b9:70:74:e2:66: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.88.216.0/22 45.89.48.0/22 45.91.108.0/22 45.92.16.0/22 45.126.36.0/22 107.178.48.0/21 IPv6: 2602:fc48::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63173 63339 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ae:05:d0:86:63:7f:92:14:5d:85:84:24:e2:f7:60:15:81: 61:45:9c:61:2f:40:04:92:54:29:43:9c:a4:7f:ab:04:7e:fe: a0:17:6f:0b:c3:72:6c:96:1a:b8:4f:f0:3c:7f:1b:5a:d6:6c: ce:92:7f:6d:9d:29:c8:93:74:1b:16:8f:d0:4d:b6:61:b6:1e: c2:5d:ed:b4:dd:e5:61:0c:c3:eb:1f:4b:80:9f:c2:1a:6b:91: 80:23:68:1e:26:c5:29:2b:57:21:ed:fd:96:70:3c:f4:db:d8: 11:0a:1e:0f:ae:35:72:37:02:2f:64:20:56:3f:7a:fc:87:36: c9:bd:b8:b5:04:17:08:dd:90:00:bc:80:de:0c:94:96:6e:56: 40:5b:8c:f6:77:16:6d:c1:57:c2:e2:9a:08:78:81:0f:3a:f9: 8e:0b:b1:05:c9:5e:4c:a9:e2:34:04:e0:0b:49:87:4c:92:52: 0d:fd:cf:70:57:a1:22:cf:94:05:d9:d4:1c:4c:23:92:a8:8d: cb:6c:45:5d:e1:1e:59:7c:c0:75:c0:51:ec:8e:f1:2a:55:63: a1:a1:99:98:d8:f8:85:0a:36:62:6f:9c:c5:15:79:ba:62:f5: f6:0f:d7:8c:27:5a:74:82:12:25:46:84:a9:11:05:10:7e:02: be:fe:6b:82 -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEaxiCJt2k+gudkceAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDcyOTAwNDUyM1oXDTI2MTEwMTAwNDUyM1owLzEtMCsGA1UEAxMk NDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgppSnXDWtV9B6584zJ+4Ys53Rkghx/rwPW/B eqV3Ph04YBPptIrEG61HUBuGwwi0fPmoLQdIf94go4fI3CIiTv5kY1sV5DD4IJHd XHtPAICvCa+gYFYenTWZait03CPg/C1wfs29Nf/gow1wO9cian9iiCMdzGLUjUH6 NunjpPPlSRHk0jXd5VVdmqmfpnUInGyUSLL8K0cT7sityy1Lt4OD0n9SEa8bM63T TQ4JJKkrRA79/CNt1IfBQe40dJ3erJ3c9UPLpp2v4LK/DMy5/eRyGpJ5lEr/Fve4 ugCB+NP1i4mrkrnZ8CLY2jRxn1xsfyVbaQ6ZN0jYuXB04mbb4QIDAQABo4IETjCC BEowHQYDVR0OBBYEFPKzKJwRpGoYmQHPm40kPpfQBBfEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04 ZmI5LTI4MTFlODZiODFiMi80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2 YjgxYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAItWNgDBAItWTADBAItW2wDBAItXBADBAItfiQD BANrsjAwDgQCAAIwCAMGBCYC/EgAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwD2 xQIDAPdrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAI2uBdCGY3+SFF2FhCTi92AVgWFFnGEvQASSVClDnKR/ qwR+/qAXbwvDcmyWGrhP8Dx/G1rWbM6Sf22dKciTdBsWj9BNtmG2HsJd7bTd5WEM w+sfS4CfwhprkYAjaB4mxSkrVyHt/ZZwPPTb2BEKHg+uNXI3Ai9kIFY/evyHNsm9 uLUEFwjdkAC8gN4MlJZuVkBbjPZ3Fm3BV8Limgh4gQ86+Y4LsQXJXkyp4jQE4AtJ h0ySUg39z3BXoSLPlAXZ1BxMI5KojctsRV3hHll8wHXAUeyO8SpVY6GhmZjY+IUK NmJvnMUVebpi9fYP14wnWnSCEiVGhKkRBRB+Ar7+a4I= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:37 2024 by rpki-client on console-ams.rpki-client.org