$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer File: 7afae497-a3f6-4f52-abeb-632cca8db94a.cer (raw, json) Hash identifier: INf1vHHJ5H5RQwvTDHQnRHPHIJwgZIBDkd1L0hhtU/M= Subject key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48345636462B9EC09D0B900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 24 Apr 2025 19:06:39 +0000 Subordinate resources: IP: 23.148.56.0/24 IP: 23.177.176.0/24 IP: 45.41.224.0/22 IP: 2606:40c0::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:45:63:64:62:b9:ec:09:d0:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Apr 24 19:06:39 2025 GMT Subject: CN=7afae497-a3f6-4f52-abeb-632cca8db94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:fa:0a:24:2a:08:4c:d6:28:dc:2e:a1:d8: 41:b0:19:c1:f4:38:52:d1:d7:50:1f:87:0b:d3:c5: 4d:ec:0f:86:29:00:a1:12:ad:8b:14:cb:de:02:54: 37:ea:d3:62:57:2e:a3:aa:0e:ef:15:3b:86:40:9e: ba:15:a0:73:5c:45:b5:b0:54:59:cd:16:bc:eb:e5: 1e:32:d5:e5:1c:37:68:0b:9b:d9:55:eb:67:f6:03: 8e:c3:cd:1b:4e:35:57:58:ba:d4:64:7c:11:e3:a9: 2b:54:fc:cd:32:7a:6a:ef:63:99:2d:17:19:53:c9: 5c:ae:87:e9:1c:cb:ca:8e:ee:e1:de:76:71:56:60: 59:d6:63:8d:74:f0:01:40:8d:5a:16:2e:b6:d8:70: fe:84:6f:a6:41:b8:b1:55:6b:5f:ff:50:ba:e2:5e: b8:f7:90:f0:09:78:f4:37:3c:5f:bf:02:ca:59:e8: a8:fc:17:01:10:d4:4d:7c:e1:5d:50:8d:74:78:12: 7c:dc:f6:dd:07:a9:4d:b5:e5:a0:e0:60:3c:7b:0f: 05:f8:df:4f:c8:a9:5d:5a:32:5f:d8:de:0d:c4:cc: 68:2f:e8:a1:19:a6:ff:76:67:2a:59:c5:4c:d2:9d: 96:cd:3c:f9:a1:1f:0a:e7:fb:0a:e4:8f:45:72:e5: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.148.56.0/24 23.177.176.0/24 45.41.224.0/22 IPv6: 2606:40c0::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:11:c1:c8:42:4e:4e:8c:c5:b0:1b:fe:8b:5c:f7:0c:2c: 88:5f:db:ab:ed:52:f0:5a:19:dd:60:61:6a:75:4e:5d:a4:c7: 59:16:56:f7:d6:04:d9:fc:4e:04:29:21:38:be:18:12:56:38: 01:b6:d9:11:89:1e:cd:8f:ed:0f:38:d0:64:2a:db:d0:e3:de: 55:3d:34:cb:37:01:c5:32:68:cc:63:88:b2:49:24:cd:71:22: f6:a4:a3:54:3e:36:63:c7:1f:ab:f3:64:8b:4f:2a:c8:d5:b6: 4a:9a:4d:d1:17:73:07:6b:b2:62:0b:c9:45:d6:6d:da:6f:19: 77:0f:75:3c:1a:50:07:ea:9e:f7:55:66:b6:3f:f7:41:89:65: eb:d7:29:1b:1c:55:9b:01:88:2f:21:ab:b5:62:ca:54:8c:47: 9a:79:a2:18:3d:22:7e:2d:5e:c2:1f:57:cf:ae:4b:39:82:37: 12:05:68:6c:5b:e3:92:5a:93:7b:34:9a:d1:53:3d:0b:ca:0e: d5:e6:8b:f5:78:25:8b:1a:ea:4d:dd:8c:7e:6b:67:1a:68:66: e2:19:ea:23:b8:a8:c0:bd:23:c9:65:e5:6a:3f:62:f7:59:9d: 87:4f:2b:ab:a1:93:17:96:cc:ca:dd:bd:0b:70:02:22:2a:0f: 56:d5:66:f1 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEHkg0VjZGK57AnQuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDQyNDE5MDYzOVowLzEtMCsGA1UEAxMk N2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRiOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8v6CiQqCEzWKNwuodhBsBnB9DhS0ddQH4cL 08VN7A+GKQChEq2LFMveAlQ36tNiVy6jqg7vFTuGQJ66FaBzXEW1sFRZzRa86+Ue MtXlHDdoC5vZVetn9gOOw80bTjVXWLrUZHwR46krVPzNMnpq72OZLRcZU8lcrofp HMvKju7h3nZxVmBZ1mONdPABQI1aFi622HD+hG+mQbixVWtf/1C64l6495DwCXj0 NzxfvwLKWeio/BcBENRNfOFdUI10eBJ83PbdB6lNteWg4GA8ew8F+N9PyKldWjJf 2N4NxMxoL+ihGab/dmcqWcVM0p2WzTz5oR8K5/sK5I9FcuWMJQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEyCvSs/lCCD/+RoTmO3ZFXCy3mkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzdhZmFlNDk3LWEzZjYtNGY1Mi1h YmViLTYzMmNjYThkYjk0YS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4 ZGI5NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXlDgDBAAXsbADBAItKeAwDQQCAAIwBwMFBCYG QMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAffMRwchCTk6MxbAb/otc9wwsiF/bq+1S8FoZ3WBhanVOXaTH WRZW99YE2fxOBCkhOL4YElY4AbbZEYkezY/tDzjQZCrb0OPeVT00yzcBxTJozGOI skkkzXEi9qSjVD42Y8cfq/Nki08qyNW2SppN0RdzB2uyYgvJRdZt2m8Zdw91PBpQ B+qe91Vmtj/3QYll69cpGxxVmwGILyGrtWLKVIxHmnmiGD0ifi1ewh9Xz65LOYI3 EgVobFvjklqTezSa0VM9C8oO1eaL9XglixrqTd2MfmtnGmhm4hnqI7iowL0jyWXl aj9i91mdh08rq6GTF5bMyt29C3ACIioPVtVm8Q== -----END CERTIFICATE-----Generated at Thu Apr 18 02:54:48 2024 by rpki-client on console-fra.rpki-client.org