$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer File: 529d57aa-cd56-41d8-b3ad-b413b968b610.cer (raw, json) Hash identifier: pgZnC3hcixBFXCathoI1ezuIRJEgcClWjpUylXYElqw= Subject key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858467C7D1EC442626F0A2FA6BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jul 2024 00:45:21 +0000 Certificate not after: Tue 13 Oct 2026 00:45:21 +0000 Subordinate resources: AS: 22878 IP: 68.171.208.0/20 IP: 162.247.76.0/22 IP: 173.230.240.0/20 IP: 192.64.32.0/22 IP: 192.197.207.0/24 IP: 207.45.176.0/20 IP: 2607:f548::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7c:7d:1e:c4:42:62:6f:0a:2f:a6:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 10 00:45:21 2024 GMT Not After : Oct 13 00:45:21 2026 GMT Subject: CN=529d57aa-cd56-41d8-b3ad-b413b968b610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:7b:ed:38:2e:85:97:08:0b:bc:22:60:5f: 45:32:e6:09:9e:15:03:c6:ca:78:30:20:98:b3:b5: af:69:36:c7:3d:7a:bf:e2:fc:10:df:98:80:28:ea: 87:dd:a4:ae:d3:57:39:05:f0:a3:65:9e:8d:d0:75: a5:74:49:15:ce:07:fe:96:26:12:e9:1a:e0:b3:13: 0a:6a:2a:be:91:97:d3:2f:92:36:b9:46:0c:11:80: 93:13:11:22:9f:ab:26:86:02:47:56:6c:a1:93:e7: 12:58:63:89:20:75:02:ea:a1:65:d2:d7:80:32:33: 03:ba:b4:75:71:b3:85:ac:d3:1c:a3:4c:24:1d:1f: d4:ca:1d:7f:b8:d4:24:b0:ea:e4:b5:2d:ea:90:5c: f4:e1:24:ca:6a:b9:fa:6a:b4:91:ac:85:7f:c9:a6: 8c:d4:43:71:9f:63:68:c8:7a:ee:d3:fc:2e:70:17: 7e:ac:63:d6:b0:60:3f:91:f0:b7:4d:c6:f7:af:31: fa:8b:cb:c1:78:9a:fe:6a:4f:94:72:46:f0:0a:06: e8:07:9a:46:8c:13:0c:9d:92:db:b5:6a:f3:ec:67: da:43:41:36:7a:27:ff:be:96:18:ac:e0:ea:b8:fe: 65:b9:c2:59:4d:b4:26:d6:5c:0f:8c:c3:ae:4b:f6: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 68.171.208.0/20 162.247.76.0/22 173.230.240.0/20 192.64.32.0/22 192.197.207.0/24 207.45.176.0/20 IPv6: 2607:f548::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22878 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:96:12:3d:05:75:e0:f6:7d:1f:70:b7:4a:c8:65:1d:55:40: c7:dd:4d:8a:3e:2e:0b:a2:00:f6:aa:67:1e:29:60:71:ed:31: 39:e6:32:48:06:05:9e:38:bb:5c:45:dc:84:9e:3a:84:c8:57: 74:a2:64:ea:e0:dc:c0:88:73:ed:e7:49:2a:fc:fb:76:85:4f: 52:11:10:15:0a:f4:9f:de:a5:f6:d3:d8:5a:52:66:c0:55:c2: 0f:58:00:0c:38:90:e5:18:aa:2f:ed:8a:d0:74:a7:b7:b6:7d: 03:e5:79:3c:3f:6a:60:e5:d8:d1:48:25:bf:ab:65:88:f7:d6: 2a:85:c4:c2:40:71:e3:62:08:55:c4:22:7d:4a:e5:3e:d0:e0: 2a:35:4a:48:e2:70:c3:a3:7a:86:b9:d3:ee:89:ba:a7:ed:d5: 73:82:be:6a:fa:84:30:d1:7f:51:24:cf:bd:fe:07:ee:2e:45: 43:3d:d6:11:4b:80:66:6c:b0:90:02:15:b6:8b:70:29:96:8f: 08:b1:36:35:cc:4e:99:86:58:fd:74:d6:5c:90:fd:1f:32:a8: 3a:b5:8a:6a:f7:39:58:5c:9c:f4:69:b4:e0:47:26:68:85:26: 41:b6:9c:e0:5e:e8:5e:8e:0e:18:60:79:87:29:55:47:1c:0d: c1:0b:23:56 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEZ8fR7EQmJvCi+mvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDcxMDAwNDUyMVoXDTI2MTAxMzAwNDUyMVowLzEtMCsGA1UEAxMk NTI5ZDU3YWEtY2Q1Ni00MWQ4LWIzYWQtYjQxM2I5NjhiNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE177TguhZcIC7wiYF9FMuYJnhUDxsp4MCCY s7WvaTbHPXq/4vwQ35iAKOqH3aSu01c5BfCjZZ6N0HWldEkVzgf+liYS6RrgsxMK aiq+kZfTL5I2uUYMEYCTExEin6smhgJHVmyhk+cSWGOJIHUC6qFl0teAMjMDurR1 cbOFrNMco0wkHR/Uyh1/uNQksOrktS3qkFz04STKarn6arSRrIV/yaaM1ENxn2No yHru0/wucBd+rGPWsGA/kfC3Tcb3rzH6i8vBeJr+ak+UckbwCgboB5pGjBMMnZLb tWrz7GfaQ0E2eif/vpYYrODquP5lucJZTbQm1lwPjMOuS/YSbQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFComSDwhra5TajK8ILOhZEYsXIRUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2OGI2MTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzUyOWQ1N2FhLWNkNTYtNDFkOC1i M2FkLWI0MTNiOTY4YjYxMC81MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2 OGI2MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAREq9ADBAKi90wDBASt5vADBALAQCADBADAxc8D BATPLbAwDQQCAAIwBwMFACYH9UgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICWV4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhZYSPQV14PZ9H3C3SshlHVVAx91Nij4uC6IA9qpnHilgce0xOeYy SAYFnji7XEXchJ46hMhXdKJk6uDcwIhz7edJKvz7doVPUhEQFQr0n96l9tPYWlJm wFXCD1gADDiQ5RiqL+2K0HSnt7Z9A+V5PD9qYOXY0Uglv6tliPfWKoXEwkBx42II VcQifUrlPtDgKjVKSOJww6N6hrnT7om6p+3Vc4K+avqEMNF/USTPvf4H7i5FQz3W EUuAZmywkAIVtotwKZaPCLE2NcxOmYZY/XTWXJD9HzKoOrWKavc5WFyc9Gm04Ecm aIUmQbac4F7oXo4OGGB5hylVRxwNwQsjVg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:15 2024 by rpki-client on console-fra.rpki-client.org