$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer File: 5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer (raw, json) Hash identifier: IEVAuTE38pfd6YBA3E5grr9DBAd/9SH8xeO/+4iZltE= Subject key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858473A53B034C170A822CA5ADC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Sep 2024 00:45:27 +0000 Certificate not after: Sun 20 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 33083 IP: 69.166.8.0/23 IP: 192.34.80.0/21 IP: 199.217.104.0/22 IP: 208.89.60.0/22 IP: 2602:ff65::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:53:b0:34:c1:70:a8:22:ca:5a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 16 00:45:27 2024 GMT Not After : Dec 20 01:45:27 2026 GMT Subject: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:69:e6:f4:7b:57:5d:1e:81:29:8a:99:80: df:40:6b:fe:23:47:c6:fb:fb:b5:31:52:67:30:34: 3b:f4:09:71:39:d8:68:df:44:84:83:25:c0:94:72: 4f:6f:43:c0:88:0d:cc:a6:8f:5c:c6:5f:f8:0d:32: f9:0f:52:30:5f:11:93:57:2d:05:94:cb:b3:e0:61: e5:39:54:6b:1d:0b:bb:be:02:ce:fd:4c:67:8d:8f: ad:e6:2b:f1:b2:0b:4d:bb:bf:b4:d7:56:e4:39:11: 48:4d:56:c9:62:33:d3:26:93:95:82:08:1f:bd:e2: 63:1e:f3:f2:07:42:d1:99:fb:5f:ae:7d:2f:33:1f: c0:f4:14:36:75:ea:11:bf:5f:d3:ba:7e:6a:1f:6a: dd:9e:4c:ca:6d:89:bf:04:ab:04:8a:1e:38:41:5c: 81:06:4d:e2:16:18:4e:fa:b0:4d:6a:b6:e4:88:1f: 5f:d1:cc:00:0b:c5:ef:72:44:6e:26:13:b5:3d:3b: 19:3e:43:03:4d:50:f3:b0:c3:a7:a8:93:4a:af:fc: f8:f3:a3:f3:42:aa:b4:3e:0f:11:a9:5b:ef:81:bc: bd:95:25:89:f6:52:78:e4:40:de:e0:40:cf:a0:8a: 04:14:5f:80:5f:1b:64:5e:49:f2:93:1a:70:cb:04: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.166.8.0/23 192.34.80.0/21 199.217.104.0/22 208.89.60.0/22 IPv6: 2602:ff65::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33083 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2c:84:95:e4:5d:15:10:21:26:97:a0:cc:c3:3b:c4:5d:0a: c5:32:f6:5b:f2:1c:34:4e:ef:ab:c0:4a:bf:f8:e3:4f:f3:f3: a0:8f:34:8f:82:73:db:ef:dc:10:7d:36:8a:e4:ab:5c:3b:c3: 07:25:8f:d4:bd:36:d8:65:16:10:35:4c:f1:47:b8:26:0d:38: fc:88:f6:04:38:c0:f9:68:de:2c:65:a2:5c:3f:6c:0f:00:63: 77:e8:bf:47:a0:a6:02:db:dc:82:4c:05:17:7e:46:84:37:9d: 3f:9d:2d:80:5a:75:23:50:7a:17:dd:45:55:14:c9:58:f5:7b: 68:2c:8d:ef:1a:dd:bb:1b:6e:d1:a7:28:6e:4f:17:6c:21:a8: a6:75:b7:b2:a7:af:a1:fd:ae:d3:3a:7a:0b:dc:19:08:a6:ea: c3:00:17:5e:28:81:3f:9a:5e:e7:6e:17:9f:2c:e8:d4:0c:97: 7f:4e:5f:16:83:c0:df:fe:31:4a:b9:df:11:74:e4:22:c7:ac: 9f:b7:cf:dc:4c:ac:98:5c:46:fd:b3:ce:6e:cf:57:b9:47:e4: 11:ee:7d:cd:cd:ed:da:97:11:42:65:fc:f9:60:19:4e:eb:c7: c1:ce:ce:d3:39:a8:43:4d:9f:77:7f:c4:e0:da:99:78:00:b3: 07:cd:90:8c -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEc6U7A0wXCoIspa3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkxNjAwNDUyN1oXDTI2MTIyMDAxNDUyN1owLzEtMCsGA1UEAxMk NWM0OTQ0YzQtMDQ1Ni00YzNjLTliYTctOTBlM2JjYmU0N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZNp5vR7V10egSmKmYDfQGv+I0fG+/u1MVJn MDQ79AlxOdho30SEgyXAlHJPb0PAiA3Mpo9cxl/4DTL5D1IwXxGTVy0FlMuz4GHl OVRrHQu7vgLO/UxnjY+t5ivxsgtNu7+011bkORFITVbJYjPTJpOVgggfveJjHvPy B0LRmftfrn0vMx/A9BQ2deoRv1/Tun5qH2rdnkzKbYm/BKsEih44QVyBBk3iFhhO +rBNarbkiB9f0cwAC8XvckRuJhO1PTsZPkMDTVDzsMOnqJNKr/z486PzQqq0Pg8R qVvvgby9lSWJ9lJ45EDe4EDPoIoEFF+AXxtkXknykxpwywT9vwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFLNyBL1XwkH5O426W2Gyy4anPyk1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 YzQ5NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUzYmNiZTQ3YjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVjNDk0NGM0LTA0NTYtNGMzYy05 YmE3LTkwZTNiY2JlNDdiOC81YzQ5NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUzYmNi ZTQ3YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAFFpggDBAPAIlADBALH2WgDBALQWTwwDgQCAAIw CAMGBCYC/2UAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCBOzBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQ LISV5F0VECEml6DMwzvEXQrFMvZb8hw0Tu+rwEq/+ONP8/OgjzSPgnPb79wQfTaK 5KtcO8MHJY/UvTbYZRYQNUzxR7gmDTj8iPYEOMD5aN4sZaJcP2wPAGN36L9HoKYC 29yCTAUXfkaEN50/nS2AWnUjUHoX3UVVFMlY9XtoLI3vGt27G27RpyhuTxdsIaim dbeyp6+h/a7TOnoL3BkIpurDABdeKIE/ml7nbhefLOjUDJd/Tl8Wg8Df/jFKud8R dOQix6yft8/cTKyYXEb9s85uz1e5R+QR7n3Nze3alxFCZfz5YBlO68fBzs7TOahD TZ93f8Tg2pl4ALMHzZCM -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:38 2024 by rpki-client on console-ams.rpki-client.org