$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer File: 6d91ccc1-4217-4cde-9687-260a5f00361b.cer (raw, json) Hash identifier: Ov6OehYKTe4VA3JDk5Yt3FPIvzcOVtsW5ggujYKoRxk= Subject key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858449F37EAB2E60DF0CAEA7CD000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jan 2024 01:45:20 +0000 Certificate not after: Sat 25 Apr 2026 00:45:20 +0000 Subordinate resources: IP: 64.255.224.0/22 IP: 66.43.4.0 -- 66.43.11.255 IP: 69.30.64.0/20 IP: 69.30.84.0/22 IP: 72.46.136.0/22 IP: 104.238.248.0/22 IP: 198.145.48.0/20 IP: 198.145.66.0 -- 198.145.111.255 IP: 198.145.128.0 -- 198.145.175.255 IP: 198.145.224.0/20 IP: 207.32.128.0/19 IP: 208.66.72.0/21 IP: 209.20.132.0/22 IP: 209.20.192.0/18 IP: 216.65.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:9f:37:ea:b2:e6:0d:f0:ca:ea:7c:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 21 01:45:20 2024 GMT Not After : Apr 25 00:45:20 2026 GMT Subject: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:26:08:a2:ee:ce:d5:3b:8c:4e:2b:8d:df: 7a:7f:29:02:f1:12:04:fb:f9:cb:72:95:f9:40:fc: 23:88:9d:a1:e5:b2:3a:6c:60:c2:31:29:7b:e2:4c: 5e:b2:17:e9:ab:65:a5:ba:a1:09:55:b0:b7:94:8b: 45:7d:da:2a:c2:58:15:75:aa:ad:5e:31:7b:bf:12: 23:c4:95:92:b6:ca:6d:ee:f4:59:8b:65:c4:9a:44: 65:f1:63:ce:f8:3c:79:e2:91:d7:b0:2f:60:36:62: ef:17:7f:16:06:dd:02:c8:46:dd:45:4d:e7:1b:b1: eb:54:bf:b0:32:b2:39:45:68:d2:15:6d:8d:21:c3: f7:10:b7:5e:9a:aa:86:19:81:b9:e7:35:cc:1d:08: d5:64:1f:88:21:c8:6f:53:62:9b:45:11:e0:d2:f4: 4b:b6:48:6d:7e:e4:0a:60:20:0c:9b:39:1e:0c:e2: 66:80:03:16:54:26:55:b7:e3:89:c9:71:6b:91:64: 1f:89:2f:c4:b2:b8:0d:fa:45:54:05:06:5a:52:dc: 9f:96:fe:c7:0b:8d:f5:e2:95:cc:bd:85:d4:0b:d6: f1:52:ec:b5:de:39:81:cd:58:ed:e8:2b:fe:23:87: 40:0a:fe:50:25:87:af:98:9e:f6:3e:81:31:8e:25: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.255.224.0/22 66.43.4.0-66.43.11.255 69.30.64.0/20 69.30.84.0/22 72.46.136.0/22 104.238.248.0/22 198.145.48.0/20 198.145.66.0-198.145.111.255 198.145.128.0-198.145.175.255 198.145.224.0/20 207.32.128.0/19 208.66.72.0/21 209.20.132.0/22 209.20.192.0/18 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:16:9c:c8:3b:73:95:b1:09:ef:54:8c:1e:57:58:91:72:ab: cd:4b:c3:c0:7c:ce:74:a3:e9:51:c6:b0:68:ee:bd:c4:1a:59: 23:1c:cc:61:ad:bc:69:68:ba:f7:93:d2:2f:57:23:54:a2:41: 52:c9:fc:15:7a:34:e0:ba:fc:36:3c:92:9a:9d:c4:a0:44:2a: 54:ab:06:75:ae:6d:7a:49:7a:d6:b1:11:63:9d:98:9d:15:60: 1e:35:7d:68:aa:0f:66:77:7f:77:28:af:59:eb:31:2c:70:f1: de:11:1e:2f:9e:be:4b:88:51:ea:75:cf:b0:13:c7:10:b2:6f: 60:80:9b:8f:f8:72:92:81:e5:6f:8f:34:c7:e5:04:f1:9d:32: c6:1d:a2:db:e1:b2:e6:84:35:4b:06:22:fb:42:00:e6:c4:1f: 87:07:5f:47:84:60:ba:0e:d3:0b:80:28:88:1e:e3:f1:e8:d2: 4d:5f:55:61:07:c9:da:29:bd:cd:45:da:c4:c3:d9:b9:53:f8: 48:47:4c:ff:b7:68:7c:5c:2a:2a:32:86:b1:4e:7f:80:50:12: 28:2c:2b:b6:2f:c1:94:cb:db:fd:9f:72:3d:65:69:26:d0:cc: 6c:49:a3:66:f0:c8:b7:13:5d:8b:e6:ca:ba:64:9a:2c:93:4e: 0f:5b:58:85 -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWESfN+qy5g3wyup80AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEyMTAxNDUyMFoXDTI2MDQyNTAwNDUyMFowLzEtMCsGA1UEAxMk NmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAzNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5msmCKLuztU7jE4rjd96fykC8RIE+/nLcpX5 QPwjiJ2h5bI6bGDCMSl74kxeshfpq2WluqEJVbC3lItFfdoqwlgVdaqtXjF7vxIj xJWStspt7vRZi2XEmkRl8WPO+Dx54pHXsC9gNmLvF38WBt0CyEbdRU3nG7HrVL+w MrI5RWjSFW2NIcP3ELdemqqGGYG55zXMHQjVZB+IIchvU2KbRRHg0vRLtkhtfuQK YCAMmzkeDOJmgAMWVCZVt+OJyXFrkWQfiS/EsrgN+kVUBQZaUtyflv7HC4314pXM vYXUC9bxUuy13jmBzVjt6Cv+I4dACv5QJYevmJ72PoExjiVLZwIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFHZsb3wo7DYmlFG/0np+mVYpIpr8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZkOTFjY2MxLTQyMTctNGNkZS05 Njg3LTI2MGE1ZjAwMzYxYi82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYw MDM2MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejB4BAIAATByAwQCQP/gMAwDBAJCKwQDBAJCKwgDBARFHkADBAJF HlQDBAJILogDBAJo7vgDBATGkTAwDAMEAcaRQgMEBMaRYDAMAwQHxpGAAwQExpGg AwQExpHgAwQFzyCAAwQD0EJIAwQC0RSEAwQG0RTAAwQF2EGAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJgW nMg7c5WxCe9UjB5XWJFyq81Lw8B8znSj6VHGsGjuvcQaWSMczGGtvGlouveT0i9X I1SiQVLJ/BV6NOC6/DY8kpqdxKBEKlSrBnWubXpJetaxEWOdmJ0VYB41fWiqD2Z3 f3cor1nrMSxw8d4RHi+evkuIUep1z7ATxxCyb2CAm4/4cpKB5W+PNMflBPGdMsYd otvhsuaENUsGIvtCAObEH4cHX0eEYLoO0wuAKIge4/Ho0k1fVWEHydopvc1F2sTD 2blT+EhHTP+3aHxcKioyhrFOf4BQEigsK7YvwZTL2/2fcj1laSbQzGxJo2bwyLcT XYvmyrpkmiyTTg9bWIU= -----END CERTIFICATE-----Generated at Fri Apr 26 11:15:52 2024 by rpki-client on console-ams.rpki-client.org