$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer File: 4dfb879f-7966-496a-b35e-d766981846ee.cer (raw, json) Hash identifier: ImIzLtbUN0qY7hb7oNzfFbA0HWRjKfxEQtP1tah3OyA= Subject key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858443189B3835531AA235050F4E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Dec 2023 18:51:12 +0000 Certificate not after: Mon 16 Mar 2026 17:51:12 +0000 Subordinate resources: IP: 199.60.119.0 -- 199.60.120.255 IP: 199.60.226.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:31:89:b3:83:55:31:aa:23:50:50:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 12 18:51:12 2023 GMT Not After : Mar 16 17:51:12 2026 GMT Subject: CN=4dfb879f-7966-496a-b35e-d766981846ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:b6:b3:27:c9:ab:9b:54:1d:15:7c:c7:08: 69:a0:ce:f9:be:9d:4b:28:be:55:f9:ac:f9:30:d7: 95:14:40:01:47:a4:11:79:9b:7a:a3:6b:62:f9:11: a7:72:f8:ae:20:85:24:85:74:f5:a9:0f:df:9e:6e: 90:64:7c:86:ed:c1:04:b2:09:c1:3e:85:b4:11:07: b6:19:f8:2c:da:a6:0c:c9:b3:b6:27:4a:29:24:11: c4:a7:72:fd:fc:2c:3c:aa:f8:37:f6:7c:00:ec:41: d9:1e:b0:93:8c:be:dc:52:05:19:c0:97:ef:83:73: 3b:8a:91:d6:f2:39:0f:7f:80:22:40:b8:16:f0:63: da:4a:23:84:16:de:59:e6:f8:ef:a1:75:6a:35:60: be:df:3b:63:ec:06:6a:22:96:ca:cc:6e:c5:aa:e9: a5:a2:c3:f9:51:1c:7f:5a:5c:5b:79:57:cc:dc:e1: 06:6e:c0:b7:f2:c1:9b:b7:e1:a3:6b:f4:b7:45:b8: 86:9e:b0:3c:f6:01:59:57:f2:ad:2a:c3:5a:e1:1b: 10:d3:f0:67:cc:92:4b:61:5d:93:0a:03:e6:c4:59: 09:4b:4a:52:f8:af:f5:c4:4e:07:19:9f:e6:4e:3d: ed:ca:e4:20:23:e5:b2:8c:4e:6c:c3:91:31:14:d9: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.60.119.0-199.60.120.255 199.60.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9d:0b:03:98:85:41:69:57:92:d8:a0:62:47:e5:99:ee:32: e3:03:86:fd:e0:a0:e1:71:0f:09:60:4f:f0:c7:8e:8e:3a:15: 33:a1:a0:29:1e:38:df:d6:d9:ff:09:64:7b:79:72:ef:48:ff: c5:13:92:60:32:95:bf:99:28:f6:da:96:2c:8e:7d:9d:69:d0: a6:07:fc:a1:e8:66:af:a6:fc:d3:6f:10:d7:3d:aa:0f:94:24: 00:46:35:b3:ae:09:66:d5:a3:1d:4f:fd:25:d4:2b:8e:e4:c9: b2:a8:16:b3:ad:01:9c:ae:a2:29:f3:97:01:f3:cf:4e:3c:75: 8e:78:92:66:cb:c6:d3:b8:44:4b:79:86:d9:7f:8f:5e:60:25: 4b:26:69:c8:6c:01:1e:e2:4c:ee:0e:c1:09:37:74:61:d5:58: b0:cc:10:65:f9:64:22:62:fc:a8:c8:11:27:62:d0:2f:c1:58: 0b:85:44:fe:63:f3:b6:d8:b6:3e:a8:65:f2:24:41:36:9c:be: cf:80:33:44:d5:8b:e5:f8:73:99:31:b7:4e:c3:1b:1c:12:19: cf:9a:90:f1:8a:e1:e8:35:3f:65:4f:6b:4a:3a:4a:b9:28:f5: 36:7c:60:80:35:55:59:45:af:ee:0c:85:b5:fa:30:6c:dd:6f: 44:9f:26:a7 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEQxibODVTGqI1BQ9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIxMjE4NTExMloXDTI2MDMxNjE3NTExMlowLzEtMCsGA1UEAxMk NGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RC2syfJq5tUHRV8xwhpoM75vp1LKL5V+az5 MNeVFEABR6QReZt6o2ti+RGncviuIIUkhXT1qQ/fnm6QZHyG7cEEsgnBPoW0EQe2 Gfgs2qYMybO2J0opJBHEp3L9/Cw8qvg39nwA7EHZHrCTjL7cUgUZwJfvg3M7ipHW 8jkPf4AiQLgW8GPaSiOEFt5Z5vjvoXVqNWC+3ztj7AZqIpbKzG7FqumlosP5URx/ WlxbeVfM3OEGbsC38sGbt+Gja/S3RbiGnrA89gFZV/KtKsNa4RsQ0/BnzJJLYV2T CgPmxFkJS0pS+K/1xE4HGZ/mTj3tyuQgI+WyjE5sw5ExFNnrBQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFEegiZFsf0dT+7go/0NNlsUPAqUdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRkZmI4NzlmLTc5NjYtNDk2YS1i MzVlLWQ3NjY5ODE4NDZlZS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgx ODQ2ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMc8dwMEAMc8eAMEAcc84jBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk nQsDmIVBaVeS2KBiR+WZ7jLjA4b94KDhcQ8JYE/wx46OOhUzoaApHjjf1tn/CWR7 eXLvSP/FE5JgMpW/mSj22pYsjn2dadCmB/yh6GavpvzTbxDXPaoPlCQARjWzrglm 1aMdT/0l1CuO5MmyqBazrQGcrqIp85cB889OPHWOeJJmy8bTuERLeYbZf49eYCVL JmnIbAEe4kzuDsEJN3Rh1ViwzBBl+WQiYvyoyBEnYtAvwVgLhUT+Y/O22LY+qGXy JEE2nL7PgDNE1Yvl+HOZMbdOwxscEhnPmpDxiuHoNT9lT2tKOkq5KPU2fGCANVVZ Ra/uDIW1+jBs3W9Enyan -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:38 2024 by rpki-client on console-ams.rpki-client.org