$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer File: 6d91ccc1-4217-4cde-9687-260a5f00361b.cer (raw, json) Hash identifier: S1EJEmM00amhcBsFgNSAK7Vww6HCQ6CTXIfz00koKQs= Subject key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584235860DAEB54B73E236733680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jun 2023 19:33:12 +0000 Certificate not after: Mon 20 Jan 2025 20:06:39 +0000 Subordinate resources: IP: 64.255.224.0/22 IP: 66.43.4.0 -- 66.43.11.255 IP: 69.30.64.0/20 IP: 69.30.84.0/22 IP: 72.46.136.0/22 IP: 104.238.248.0/22 IP: 198.145.48.0/20 IP: 198.145.66.0 -- 198.145.111.255 IP: 198.145.128.0 -- 198.145.175.255 IP: 198.145.224.0/20 IP: 207.32.128.0/19 IP: 208.66.72.0/21 IP: 209.20.132.0/22 IP: 209.20.192.0/18 IP: 216.65.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Jul 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:35:86:0d:ae:b5:4b:73:e2:36:73:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 13 19:33:12 2023 GMT Not After : Jan 20 20:06:39 2025 GMT Subject: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:26:08:a2:ee:ce:d5:3b:8c:4e:2b:8d:df: 7a:7f:29:02:f1:12:04:fb:f9:cb:72:95:f9:40:fc: 23:88:9d:a1:e5:b2:3a:6c:60:c2:31:29:7b:e2:4c: 5e:b2:17:e9:ab:65:a5:ba:a1:09:55:b0:b7:94:8b: 45:7d:da:2a:c2:58:15:75:aa:ad:5e:31:7b:bf:12: 23:c4:95:92:b6:ca:6d:ee:f4:59:8b:65:c4:9a:44: 65:f1:63:ce:f8:3c:79:e2:91:d7:b0:2f:60:36:62: ef:17:7f:16:06:dd:02:c8:46:dd:45:4d:e7:1b:b1: eb:54:bf:b0:32:b2:39:45:68:d2:15:6d:8d:21:c3: f7:10:b7:5e:9a:aa:86:19:81:b9:e7:35:cc:1d:08: d5:64:1f:88:21:c8:6f:53:62:9b:45:11:e0:d2:f4: 4b:b6:48:6d:7e:e4:0a:60:20:0c:9b:39:1e:0c:e2: 66:80:03:16:54:26:55:b7:e3:89:c9:71:6b:91:64: 1f:89:2f:c4:b2:b8:0d:fa:45:54:05:06:5a:52:dc: 9f:96:fe:c7:0b:8d:f5:e2:95:cc:bd:85:d4:0b:d6: f1:52:ec:b5:de:39:81:cd:58:ed:e8:2b:fe:23:87: 40:0a:fe:50:25:87:af:98:9e:f6:3e:81:31:8e:25: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.255.224.0/22 66.43.4.0-66.43.11.255 69.30.64.0/20 69.30.84.0/22 72.46.136.0/22 104.238.248.0/22 198.145.48.0/20 198.145.66.0-198.145.111.255 198.145.128.0-198.145.175.255 198.145.224.0/20 207.32.128.0/19 208.66.72.0/21 209.20.132.0/22 209.20.192.0/18 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:62:64:87:5a:70:89:0f:6a:a7:3c:14:f1:6e:ac:74:90:91: e6:f7:1b:2a:6e:30:a3:5f:43:a4:bb:10:a8:25:d4:2d:43:e4: 40:d9:cf:13:d8:ee:46:9f:20:2f:3c:2e:63:81:dd:42:b1:3f: b3:35:0a:df:49:ef:e0:91:16:7a:e4:08:e7:b1:eb:a0:ef:75: e4:47:1b:71:72:30:e6:58:e1:6e:bf:4b:a0:77:ba:13:50:f9: e8:de:03:6c:93:2a:8e:68:e6:45:a8:c4:a0:cf:bc:61:1f:23: 43:4c:5c:98:e1:93:35:2d:e0:e8:24:46:d9:58:ef:0f:ae:40: 05:36:5c:6c:5a:58:6a:cb:a4:34:56:09:64:8d:22:76:ab:dd: 27:3d:44:90:0e:5b:e5:53:4d:34:d0:e9:70:96:02:ad:7e:eb: ca:8e:d7:f0:92:7d:91:a0:30:d5:23:0a:db:6d:ce:c4:30:59: 5f:40:c2:4d:5e:83:fe:69:18:53:76:a9:5f:79:ff:35:1f:6f: fb:d7:b3:bb:d6:ab:b4:ab:f9:15:90:5b:c2:39:15:a3:c2:5d: 24:41:9a:54:dd:ce:5c:69:8f:93:bf:c8:bb:15:64:45:98:c5: c7:95:f9:fa:e1:2c:81:04:29:50:67:c9:7e:ba:ff:d9:5e:3e: 28:25:fd:81 -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEI1hg2utUtz4jZzNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDYxMzE5MzMxMloXDTI1MDEyMDIwMDYzOVowLzEtMCsGA1UEAxMk NmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAzNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5msmCKLuztU7jE4rjd96fykC8RIE+/nLcpX5 QPwjiJ2h5bI6bGDCMSl74kxeshfpq2WluqEJVbC3lItFfdoqwlgVdaqtXjF7vxIj xJWStspt7vRZi2XEmkRl8WPO+Dx54pHXsC9gNmLvF38WBt0CyEbdRU3nG7HrVL+w MrI5RWjSFW2NIcP3ELdemqqGGYG55zXMHQjVZB+IIchvU2KbRRHg0vRLtkhtfuQK YCAMmzkeDOJmgAMWVCZVt+OJyXFrkWQfiS/EsrgN+kVUBQZaUtyflv7HC4314pXM vYXUC9bxUuy13jmBzVjt6Cv+I4dACv5QJYevmJ72PoExjiVLZwIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFHZsb3wo7DYmlFG/0np+mVYpIpr8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZkOTFjY2MxLTQyMTctNGNkZS05 Njg3LTI2MGE1ZjAwMzYxYi82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYw MDM2MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejB4BAIAATByAwQCQP/gMAwDBAJCKwQDBAJCKwgDBARFHkADBAJF HlQDBAJILogDBAJo7vgDBATGkTAwDAMEAcaRQgMEBMaRYDAMAwQHxpGAAwQExpGg AwQExpHgAwQFzyCAAwQD0EJIAwQC0RSEAwQG0RTAAwQF2EGAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJpi ZIdacIkPaqc8FPFurHSQkeb3GypuMKNfQ6S7EKgl1C1D5EDZzxPY7kafIC88LmOB 3UKxP7M1Ct9J7+CRFnrkCOex66DvdeRHG3FyMOZY4W6/S6B3uhNQ+ejeA2yTKo5o 5kWoxKDPvGEfI0NMXJjhkzUt4OgkRtlY7w+uQAU2XGxaWGrLpDRWCWSNInar3Sc9 RJAOW+VTTTTQ6XCWAq1+68qO1/CSfZGgMNUjCtttzsQwWV9Awk1eg/5pGFN2qV95 /zUfb/vXs7vWq7Sr+RWQW8I5FaPCXSRBmlTdzlxpj5O/yLsVZEWYxceV+frhLIEE KVBnyX66/9lePigl/YE= -----END CERTIFICATE-----Generated at Wed Jul 19 22:42:06 2023 by rpki-client on console-fra.rpki-client.org