$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4c6b01a3-ba90-4cf1-9060-0dd9914516ae.cer File: 4c6b01a3-ba90-4cf1-9060-0dd9914516ae.cer (raw, json) Hash identifier: fVAkmMAyhh02c92jfyLw+19WEsGZH3c9/JbyT5CrzTA= Subject key identifier: E3:51:41:BF:DE:5E:60:48:5C:A1:33:D1:13:91:95:3D:2E:15:A9:AF Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847887ED6DBE76A065091AC3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4c6b01a3-ba90-4cf1-9060-0dd9914516ae/4c6b01a3-ba90-4cf1-9060-0dd9914516ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4c6b01a3-ba90-4cf1-9060-0dd9914516ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Oct 2024 00:45:26 +0000 Certificate not after: Sun 17 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 395066 IP: 23.176.208.0/24 IP: 172.82.68.0/24 IP: 2606:3940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:88:7e:d6:db:e7:6a:06:50:91:ac:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 14 00:45:26 2024 GMT Not After : Jan 17 01:45:26 2027 GMT Subject: CN=4c6b01a3-ba90-4cf1-9060-0dd9914516ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:c1:75:96:c2:78:b4:be:d2:0e:fb:6c:f3: 67:73:09:6c:86:10:c6:ba:35:a9:9d:02:f6:64:7d: b6:a8:a1:1d:b1:32:e7:69:b7:fd:d3:49:74:c0:29: 64:13:43:71:62:8f:e5:99:85:94:c8:62:9f:f2:23: a7:ed:81:d9:4c:59:9f:7f:fe:5f:5f:e4:8f:3f:6d: 13:b6:d0:68:91:dd:0a:b2:90:f9:ed:e0:1e:9a:7d: b3:4b:2d:3e:82:5f:35:61:b4:8c:81:6c:6f:68:17: c1:12:6f:79:b2:14:1d:95:32:f5:78:f1:68:40:95: 6f:cf:af:30:19:c3:ba:a3:82:da:69:18:c8:ee:c0: a4:5d:fe:2c:0a:8a:b4:4c:09:e6:58:c4:dc:7d:7d: fd:02:a5:ed:7e:fd:dd:6e:6d:ed:ab:91:26:5b:a0: a5:1e:7a:00:a4:f6:ce:54:76:3f:4b:72:35:a8:be: 07:00:bd:59:23:76:d4:cc:c4:18:ca:5c:33:e2:86: c0:40:4c:79:d4:9d:f9:ba:8b:81:c0:33:ac:22:48: 51:c7:e2:5b:8b:e3:62:db:c5:53:ac:73:f0:00:7a: c9:c4:5a:6b:8c:3c:93:55:93:81:45:c0:a6:e2:34: 58:3e:02:62:09:e6:a5:ea:6d:a6:e9:14:fd:05:cb: ff:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:41:BF:DE:5E:60:48:5C:A1:33:D1:13:91:95:3D:2E:15:A9:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4c6b01a3-ba90-4cf1-9060-0dd9914516ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4c6b01a3-ba90-4cf1-9060-0dd9914516ae/4c6b01a3-ba90-4cf1-9060-0dd9914516ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.176.208.0/24 172.82.68.0/24 IPv6: 2606:3940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395066 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e7:4b:72:80:8e:07:fa:5d:eb:45:72:bc:08:4a:9c:77:7f: 79:45:a0:63:ca:90:2f:ab:00:1a:3f:a6:d2:e5:53:43:db:46: d8:53:5d:16:61:82:57:3b:2e:e1:cc:58:16:26:12:ff:9a:1b: a7:4f:02:50:1c:04:51:32:b6:a4:72:48:c3:e2:7b:0c:5f:fa: 79:54:42:b3:17:51:b6:5c:2e:cc:2b:fe:b1:30:db:d2:7d:7f: 27:0a:3b:f8:48:0f:50:a1:c4:58:36:6f:3a:5d:02:15:ec:1b: 85:7c:14:00:a1:c5:1b:aa:8d:25:29:99:c2:8c:c2:ff:e1:4d: b7:ef:6d:00:91:bd:e2:a2:3a:bc:e7:f6:29:fe:31:15:b9:d0: f3:f0:d0:df:5f:83:bc:09:51:5f:5e:e9:8e:76:35:41:38:b4: 66:aa:b2:44:7f:57:dc:2e:4e:61:8a:1a:32:b1:57:8d:f9:bc: 66:1a:fe:61:42:7d:0e:14:52:29:f9:0c:63:e7:fe:d9:4e:6a: 81:95:19:a4:1a:4e:2b:ba:19:4b:60:68:6d:96:df:a3:1b:b1: da:d3:0a:e7:62:30:8e:af:50:bb:84:4a:4d:f0:73:8e:a5:ff: 41:fd:80:cc:b3:03:16:a5:84:9c:07:b2:75:94:ae:f1:0a:55: 65:17:ab:a8 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEeIftbb52oGUJGsPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAxNDAwNDUyNloXDTI3MDExNzAxNDUyNlowLzEtMCsGA1UEAxMk NGM2YjAxYTMtYmE5MC00Y2YxLTkwNjAtMGRkOTkxNDUxNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyvBdZbCeLS+0g77bPNncwlshhDGujWpnQL2 ZH22qKEdsTLnabf900l0wClkE0NxYo/lmYWUyGKf8iOn7YHZTFmff/5fX+SPP20T ttBokd0KspD57eAemn2zSy0+gl81YbSMgWxvaBfBEm95shQdlTL1ePFoQJVvz68w GcO6o4LaaRjI7sCkXf4sCoq0TAnmWMTcfX39AqXtfv3dbm3tq5EmW6ClHnoApPbO VHY/S3I1qL4HAL1ZI3bUzMQYylwz4obAQEx51J35uouBwDOsIkhRx+Jbi+Ni28VT rHPwAHrJxFprjDyTVZOBRcCm4jRYPgJiCeal6m2m6RT9Bcv/bQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFONRQb/eXmBIXKEz0RORlT0uFamvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 YzZiMDFhMy1iYTkwLTRjZjEtOTA2MC0wZGQ5OTE0NTE2YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRjNmIwMWEzLWJhOTAtNGNmMS05 MDYwLTBkZDk5MTQ1MTZhZS80YzZiMDFhMy1iYTkwLTRjZjEtOTA2MC0wZGQ5OTE0 NTE2YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXsNADBACsUkQwDQQCAAIwBwMFACYGOUAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgc6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABPnS3KAjgf6XetFcrwI Spx3f3lFoGPKkC+rABo/ptLlU0PbRthTXRZhglc7LuHMWBYmEv+aG6dPAlAcBFEy tqRySMPiewxf+nlUQrMXUbZcLswr/rEw29J9fycKO/hID1ChxFg2bzpdAhXsG4V8 FAChxRuqjSUpmcKMwv/hTbfvbQCRveKiOrzn9in+MRW50PPw0N9fg7wJUV9e6Y52 NUE4tGaqskR/V9wuTmGKGjKxV435vGYa/mFCfQ4UUin5DGPn/tlOaoGVGaQaTiu6 GUtgaG2W36MbsdrTCudiMI6vULuESk3wc46l/0H9gMyzAxalhJwHsnWUrvEKVWUX q6g= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:15 2024 by rpki-client on console-fra.rpki-client.org