$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer File: 7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer (raw, json) Hash identifier: Ss3gAQydo37yp/dOJYHeQE8Vge1bxskTiLrMTsLBF9Q= Subject key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0 Authority key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Certificate issuer: /CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Certificate serial: 010D0C9F432858465730DD610A047A74FA664200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer Manifest: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft caRepository: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/ Notify URL: https://krill.accuristechnologies.ca/rrdp/notification.xml Certificate not before: Wed 26 Jun 2024 16:06:48 +0000 Certificate not after: Tue 29 Sep 2026 16:06:48 +0000 Subordinate resources: AS: 401038 IP: 23.130.136.0/22 IP: 149.112.74.0/24 IP: 172.99.232.0/23 IP: 192.67.32.0/22 IP: 204.10.192.0/22 IP: 2001:504:132::/48 IP: 2602:fcd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:57:30:dd:61:0a:04:7a:74:fa:66:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Validity Not Before: Jun 26 16:06:48 2024 GMT Not After : Sep 29 16:06:48 2026 GMT Subject: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:a2:c8:ab:c7:64:6a:c9:05:e5:26:d3:22: d0:24:f4:39:90:4b:5d:83:94:5d:8e:f6:5d:a5:02: e9:ae:b5:5f:b6:45:0e:64:cc:cd:1d:44:37:e3:8f: 94:e0:55:c8:d3:fb:10:10:86:d6:ba:eb:bf:f1:53: e4:8a:24:40:14:48:4e:93:b3:f2:43:80:4e:69:b2: 85:06:90:32:05:3b:a9:c4:48:d0:7a:bf:38:36:09: cb:ab:cc:3d:88:19:18:90:c7:e4:44:27:8f:a9:ef: 2a:bf:cf:7e:f4:b4:36:97:a1:95:26:19:5a:33:90: 63:38:49:98:16:75:1f:2a:3d:2a:c4:2c:a1:e9:93: ac:62:51:8b:84:61:18:23:cb:be:f2:c0:d5:49:28: 1a:a2:d2:b1:28:15:95:83:ca:ff:54:62:e9:e8:22: 95:41:4b:8c:6c:ea:69:66:80:50:54:a8:39:d1:ed: b6:aa:ea:aa:d5:67:4c:c1:6d:3e:c9:20:a2:8b:bd: 58:3c:8f:ca:d9:12:cf:b8:c3:4e:35:4e:62:c4:db: 63:5b:83:0a:36:2e:c0:24:59:72:7d:a0:85:83:06: 15:8d:95:c3:ee:63:16:dd:01:10:32:80:96:91:7c: 2b:fa:41:b4:1a:49:97:be:f0:5a:0c:35:b1:92:0b: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0 Subject Information Access: CA Repository - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/ RPKI Manifest - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft RPKI Notify - URI:https://krill.accuristechnologies.ca/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl X509v3 Authority Key Identifier: keyid:32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer sbgp-ipAddrBlock: critical IPv4: 23.130.136.0/22 149.112.74.0/24 172.99.232.0/23 192.67.32.0/22 204.10.192.0/22 IPv6: 2001:504:132::/48 2602:fcd3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:47:81:49:cd:29:f1:c3:9e:be:64:87:ae:77:3c:db:e3:ea: 92:56:96:1a:af:34:43:08:1a:a2:6d:13:d4:72:ac:74:cf:ee: 64:31:e0:ba:91:03:1a:66:2e:6b:28:65:07:11:d4:a3:29:db: 0a:df:aa:2d:96:37:ae:f4:c1:37:ef:4c:f6:3f:c9:5d:59:6e: f4:de:44:46:64:44:c1:2a:f7:d0:b8:b4:88:f4:8e:e9:88:a6: e7:1c:89:aa:96:30:9c:2d:71:23:fa:b0:8e:44:41:af:49:4c: ef:11:e6:51:5c:9e:06:ad:55:3f:73:3a:22:f5:08:4e:04:70: 0a:a3:7c:d1:ff:ed:22:5e:4c:0a:a8:6f:d6:56:8f:33:9e:9b: 25:73:30:0d:07:d3:de:9d:02:1c:d8:fa:e8:55:03:a4:30:00: 70:35:ce:a8:1b:01:25:2f:6a:b0:c9:97:1e:4e:b5:09:18:3f: 74:2e:30:be:55:75:b2:21:41:63:79:c1:39:95:d6:42:cb:a5: 61:5d:02:b6:ac:7c:ce:3a:04:84:6e:12:8c:8c:12:c3:ec:8d: a6:4b:4e:aa:ff:48:9f:f9:06:e3:b0:a6:d8:95:3b:60:a7:26: b4:6c:a1:4d:15:b1:9c:c4:b4:87:2c:a5:97:8e:da:a1:0e:88: 0a:a4:4e:b8 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEZXMN1hCgR6dPpmQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0 Nzk3MB4XDTI0MDYyNjE2MDY0OFoXDTI2MDkyOTE2MDY0OFowPTE7MDkGA1UEAxMy N2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNj ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbqLIq8dkaskF5SbT ItAk9DmQS12DlF2O9l2lAumutV+2RQ5kzM0dRDfjj5TgVcjT+xAQhta667/xU+SK JEAUSE6Ts/JDgE5psoUGkDIFO6nESNB6vzg2CcurzD2IGRiQx+REJ4+p7yq/z370 tDaXoZUmGVozkGM4SZgWdR8qPSrELKHpk6xiUYuEYRgjy77ywNVJKBqi0rEoFZWD yv9UYunoIpVBS4xs6mlmgFBUqDnR7baq6qrVZ0zBbT7JIKKLvVg8j8rZEs+4w041 TmLE22Nbgwo2LsAkWXJ9oIWDBhWNlcPuYxbdARAygJaRfCv6QbQaSZe+8FoMNbGS C37fAgMBAAGjggPzMIID7zAdBgNVHQ4EFgQUi4PF2gOzzAKdlSFaATIFl4FLOPAw ggEkBggrBgEFBQcBCwSCARYwggESME0GCCsGAQUFBzAFhkFyc3luYzovL2tyaWxs LmFjY3VyaXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2ll cy8wLzB5BggrBgEFBQcwCoZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9n aWVzLmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMC84QjgzQzVEQTAzQjND QzAyOUQ5NTIxNUEwMTMyMDU5NzgxNEIzOEYwLm1mdDBGBggrBgEFBQcwDYY6aHR0 cHM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVzLmNhL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciG gcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQz NTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFj ZC0xMjI2ZWEzYzQ3OTcvNjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0 Nzk3LmNybDAfBgNVHSMEGDAWgBQylrgZaAALJKK7cw4h5ChsR3ZL8DAOBgNVHQ8B Af8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5j Oi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNl YS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0 LThmNmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZl YTNjNDc5Ny5jZXIwUAYIKwYBBQUHAQcBAf8EQTA/MCQEAgABMB4DBAIXgogDBACV cEoDBAGsY+gDBALAQyADBALMCsAwFwQCAAIwEQMHACABBQQBMgMGBCYC/NMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYejjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+R4FJzSnxw56+ZIeu dzzb4+qSVpYarzRDCBqibRPUcqx0z+5kMeC6kQMaZi5rKGUHEdSjKdsK36otljeu 9ME370z2P8ldWW703kRGZETBKvfQuLSI9I7piKbnHImqljCcLXEj+rCOREGvSUzv EeZRXJ4GrVU/czoi9QhOBHAKo3zR/+0iXkwKqG/WVo8znpslczANB9PenQIc2Pro VQOkMABwNc6oGwElL2qwyZceTrUJGD90LjC+VXWyIUFjecE5ldZCy6VhXQK2rHzO OgSEbhKMjBLD7I2mS06q/0if+QbjsKbYlTtgpya0bKFNFbGcxLSHLKWXjtqhDogK pE64 -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:16 2024 by rpki-client on console-fra.rpki-client.org