$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer File: 5b959ce4-3ae9-4721-8444-22b2e7161104.cer (raw, json) Hash identifier: /HPuEoI2fe9fNqPqVI6MHz59ZhnEOKMrlSrl7+WT0Fg= Subject key identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858461AC72B5CC981A5B1D0004480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jun 2024 00:45:20 +0000 Certificate not after: Tue 08 Sep 2026 00:45:20 +0000 Subordinate resources: AS: 32109 IP: 23.137.128.0/23 IP: 2602:ff0e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:1a:c7:2b:5c:c9:81:a5:b1:d0:00:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 5 00:45:20 2024 GMT Not After : Sep 8 00:45:20 2026 GMT Subject: CN=5b959ce4-3ae9-4721-8444-22b2e7161104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:70:54:11:c6:1d:8f:69:e9:d5:c7:bc:c2: ca:7e:c9:c2:0c:cd:dc:93:05:2d:b0:ad:cd:fb:f6: 0c:94:57:c3:27:72:30:b2:8b:32:83:c6:29:05:18: 36:05:14:7d:28:c0:1f:05:50:a5:8a:c6:8a:50:1c: a7:b1:73:8d:38:8f:72:1f:54:c8:46:40:ee:1d:21: 5d:29:f6:5b:08:07:64:00:5a:f8:3e:04:b7:a1:9e: 2e:3f:30:79:7e:d6:42:fc:a0:17:88:ee:23:be:9e: cd:6f:09:cd:c8:7c:58:6a:03:25:1a:87:0f:89:79: 6a:fc:82:ba:40:b9:aa:11:2b:88:a7:84:9e:20:dc: 2f:3a:59:c5:1a:1a:34:e2:9c:4e:b8:86:d5:5c:1c: 84:83:76:93:bd:b2:d8:fc:a9:e3:ca:a2:ea:51:9c: ad:a2:2f:58:44:d1:63:a2:0b:2e:eb:e4:aa:1d:49: 54:03:1e:c1:52:84:e1:46:d2:81:67:ad:18:71:05: 74:3d:7b:3a:69:94:59:22:93:e9:98:a6:0a:c0:8f: 2f:d7:f2:a3:60:64:4e:73:16:6b:ec:0f:15:72:17: c6:1a:11:5c:b7:41:6c:83:e5:d7:4c:bc:2d:72:fe: b2:ea:04:81:bd:4f:b8:8b:6a:f5:8a:b9:dc:5d:d6: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.137.128.0/23 IPv6: 2602:ff0e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32109 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6c:ea:ce:2b:0a:32:cd:10:1a:84:03:7b:8d:02:96:9e:6b: 1a:51:47:2a:35:4b:e1:dc:8b:7f:9a:7f:b1:76:9a:26:88:c8: 96:2f:c1:14:c0:fd:76:20:e3:c5:98:41:a9:20:65:ac:7e:b0: 25:20:21:c8:92:3c:8e:da:ca:ca:c0:ca:10:19:70:5b:ab:d5: 28:c7:cf:13:9f:ac:22:a3:5e:55:14:60:07:0a:7f:3d:33:93: 24:ee:89:da:fa:80:26:06:c1:95:77:54:e6:54:c6:02:cb:1c: c3:78:f9:b7:7c:cb:97:15:8b:e6:d9:1b:0e:f7:d0:3f:f6:a0: 67:ef:32:0c:15:38:44:07:59:24:a8:7d:e2:56:fa:dd:49:c9: 90:e1:94:a2:61:5d:29:ef:56:ca:67:ab:09:71:e6:08:48:6c: ff:b8:ae:c3:95:ae:ec:96:97:58:5c:01:3f:9b:b6:7e:0c:cf: 5c:3c:56:c4:b1:04:c6:a2:5a:a2:21:4b:4f:e3:39:db:88:d8: 00:12:76:76:94:70:21:c8:83:f1:d2:79:23:35:6b:04:21:1c: be:31:5b:5e:93:68:ab:9e:9c:a8:84:40:60:bc:e8:c5:fb:1d: 04:ce:02:85:fb:f4:4b:f2:1e:5e:94:12:53:48:37:54:00:14: fe:1c:22:bc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEYaxytcyYGlsdAARIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDYwNTAwNDUyMFoXDTI2MDkwODAwNDUyMFowLzEtMCsGA1UEAxMk NWI5NTljZTQtM2FlOS00NzIxLTg0NDQtMjJiMmU3MTYxMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBVwVBHGHY9p6dXHvMLKfsnCDM3ckwUtsK3N +/YMlFfDJ3Iwsosyg8YpBRg2BRR9KMAfBVClisaKUBynsXONOI9yH1TIRkDuHSFd KfZbCAdkAFr4PgS3oZ4uPzB5ftZC/KAXiO4jvp7NbwnNyHxYagMlGocPiXlq/IK6 QLmqESuIp4SeINwvOlnFGho04pxOuIbVXByEg3aTvbLY/KnjyqLqUZytoi9YRNFj ogsu6+SqHUlUAx7BUoThRtKBZ60YcQV0PXs6aZRZIpPpmKYKwI8v1/KjYGROcxZr 7A8VchfGGhFct0Fsg+XXTLwtcv6y6gSBvU+4i2r1irncXdaXDwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPcEC+mb8lZxf+1F/tUefgr8j9WjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 Yjk1OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIyZTcxNjExMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzViOTU5Y2U0LTNhZTktNDcyMS04 NDQ0LTIyYjJlNzE2MTEwNC81Yjk1OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIyZTcx NjExMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXiYAwDgQCAAIwCAMGBCYC/w4AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn1tMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhs6s4rCjLNEBqEA3uNApaeaxpR Ryo1S+Hci3+af7F2miaIyJYvwRTA/XYg48WYQakgZax+sCUgIciSPI7aysrAyhAZ cFur1SjHzxOfrCKjXlUUYAcKfz0zkyTuidr6gCYGwZV3VOZUxgLLHMN4+bd8y5cV i+bZGw730D/2oGfvMgwVOEQHWSSofeJW+t1JyZDhlKJhXSnvVspnqwlx5ghIbP+4 rsOVruyWl1hcAT+btn4Mz1w8VsSxBMaiWqIhS0/jOduI2AASdnaUcCHIg/HSeSM1 awQhHL4xW16TaKuenKiEQGC86MX7HQTOAoX79EvyHl6UElNIN1QAFP4cIrw= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:38 2024 by rpki-client on console-ams.rpki-client.org