$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer File: 63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer (raw, json) Hash identifier: LQAbgRmPtut8ZaMASN5XDVpuZug1fSjZ1ICzFad+ySY= Subject key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584656B2071F68810EEEDB440CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Jun 2024 11:51:14 +0000 Certificate not after: Fri 19 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 401038 IP: 23.130.136.0/22 IP: 149.112.74.0/24 IP: 172.99.232.0/23 IP: 192.67.32.0/22 IP: 204.10.192.0/22 IP: 2001:504:132::/48 IP: 2602:fcd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Sep 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:56:b2:07:1f:68:81:0e:ee:db:44:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 26 11:51:14 2024 GMT Not After : Sep 19 00:45:16 2025 GMT Subject: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:36:0a:38:5b:cc:00:34:eb:a3:ed:59:27: b4:e8:c2:c3:89:e3:e0:fb:ad:c7:50:b9:84:48:3b: f9:59:a3:74:57:b5:d6:ba:cf:64:87:9c:a1:f3:91: 6a:67:1d:47:92:5e:c6:90:b0:6f:43:70:85:20:f8: fa:d3:bc:63:6d:16:02:b1:32:2a:6e:6e:73:2d:c5: 15:70:81:23:b5:ee:56:92:11:7c:54:e4:3b:2f:2f: 10:85:4a:a2:32:c2:9a:40:fa:56:34:01:73:b2:39: 51:bc:11:90:6e:a0:c3:ba:ab:ad:25:2a:fa:90:d2: 22:86:3e:25:3d:18:ef:9c:6c:11:f5:2a:7b:39:89: 20:86:6e:67:9c:1c:1e:56:e9:16:8e:bf:20:33:b1: 5c:c8:af:c3:4d:f0:30:43:8f:1a:af:a2:b7:e7:42: 09:00:a3:8d:68:b7:37:b9:5a:60:40:0c:7d:2c:c2: a3:ff:17:f2:44:43:03:72:be:d2:36:f8:05:38:b1: 91:f4:b4:ae:cd:c3:78:9e:fd:9d:e8:78:4b:ca:79: e3:52:9b:70:8f:c9:c7:ff:4f:b5:97:68:25:a4:e7: 25:e0:0a:8e:5c:2a:e0:cc:43:74:78:cf:01:48:ee: ae:d9:b0:67:32:33:d7:a7:92:f4:6f:20:34:17:3b: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.130.136.0/22 149.112.74.0/24 172.99.232.0/23 192.67.32.0/22 204.10.192.0/22 IPv6: 2001:504:132::/48 2602:fcd3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fa:14:d8:33:72:36:b4:b5:fb:09:52:38:91:81:8e:81:55: 43:bc:e2:60:6c:05:d1:c6:c2:e6:b7:92:26:ec:1a:fa:93:ca: cc:03:34:36:67:72:36:d8:e2:d0:e8:ac:4e:41:26:91:b9:56: 13:ae:d8:4d:60:4a:04:71:4b:1c:8c:11:fe:d5:10:12:43:f1: 96:2b:68:54:3d:5c:9a:cb:69:f7:5c:c7:37:9c:1b:cc:89:88: 95:08:0c:7e:a1:e2:c8:16:1e:0a:97:e5:0d:69:18:b3:14:56: 68:f2:49:db:59:78:99:25:fd:5a:23:01:3a:ff:78:3a:da:07: 18:92:da:29:50:ad:63:f4:6b:fa:ef:ce:75:44:f1:3f:31:56: 19:5e:af:e3:51:e3:e3:f7:b7:6f:06:3a:c5:f1:2e:ec:56:3e: 5f:6b:5a:a5:17:4b:05:2f:e9:ef:a7:18:b0:16:19:2c:4b:e6: d1:0a:0e:b4:e8:46:b7:06:e8:6b:8a:b6:1a:3b:7c:b2:56:ec: c7:54:44:40:ca:09:ab:66:cc:69:b5:58:f7:d2:cb:ec:4c:41: 57:bf:98:ea:57:89:39:14:f6:82:b7:a7:2c:b5:e8:e8:09:fa: c9:18:1a:3b:f3:7c:92:51:54:76:d6:27:8b:cc:11:07:2c:ff: 13:a9:3a:6e -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIUAQ0Mn0MoWEZWsgcfaIEO7ttEDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDYyNjExNTExNFoXDTI1MDkxOTAwNDUxNlowLzEtMCsGA1UEAxMk NjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLw2CjhbzAA066PtWSe06MLDiePg+63HULmE SDv5WaN0V7XWus9kh5yh85FqZx1Hkl7GkLBvQ3CFIPj607xjbRYCsTIqbm5zLcUV cIEjte5WkhF8VOQ7Ly8QhUqiMsKaQPpWNAFzsjlRvBGQbqDDuqutJSr6kNIihj4l PRjvnGwR9Sp7OYkghm5nnBweVukWjr8gM7FcyK/DTfAwQ48ar6K350IJAKONaLc3 uVpgQAx9LMKj/xfyREMDcr7SNvgFOLGR9LSuzcN4nv2d6HhLynnjUptwj8nH/0+1 l2glpOcl4AqOXCrgzEN0eM8BSO6u2bBnMjPXp5L0byA0FztyAwIDAQABo4IETDCC BEgwHQYDVR0OBBYEFDKWuBloAAskortzDiHkKGxHdkvwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1h MWNkLTEyMjZlYTNjNDc5Ny82M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEz YzQ3OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MCQEAgABMB4DBAIXgogDBACVcEoDBAGsY+gDBALAQyADBALMCsAw FwQCAAIwEQMHACABBQQBMgMGBCYC/NMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYejjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAO+hTYM3I2tLX7CVI4kYGOgVVDvOJgbAXRxsLmt5Im7Br6 k8rMAzQ2Z3I22OLQ6KxOQSaRuVYTrthNYEoEcUscjBH+1RASQ/GWK2hUPVyay2n3 XMc3nBvMiYiVCAx+oeLIFh4Kl+UNaRizFFZo8knbWXiZJf1aIwE6/3g62gcYktop UK1j9Gv67851RPE/MVYZXq/jUePj97dvBjrF8S7sVj5fa1qlF0sFL+nvpxiwFhks S+bRCg606Ea3BuhrirYaO3yyVuzHVERAygmrZsxptVj30svsTEFXv5jqV4k5FPaC t6cstejoCfrJGBo783ySUVR21ieLzBEHLP8TqTpu -----END CERTIFICATE-----Generated at Wed Sep 18 05:32:21 2024 by rpki-client on console-fra.rpki-client.org