$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer File: 7ede7b70-d745-425d-975b-bb0eb6368430.cer (raw, json) Hash identifier: +RtJdqLYNQ1mAL2LlxoI7IpT1u3mhfBlDl8CB7bqPbU= Subject key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845FAF0BF6C46466D544BCA0800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 May 2024 15:03:14 +0000 Certificate not after: Mon 06 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 11281 AS: 22697 IP: 23.173.192.0/24 IP: 107.180.192.0/20 IP: 128.116.0.0/17 IP: 141.193.3.0/24 IP: 205.201.62.0/24 IP: 209.206.40.0/21 IP: 2620:2b:e000::/48 IP: 2620:135:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:fa:f0:bf:6c:46:46:6d:54:4b:ca:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 24 15:03:14 2024 GMT Not After : Apr 6 00:45:15 2026 GMT Subject: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:53:a6:37:ac:c8:02:78:74:af:34:22:ba: 14:c7:35:e3:20:b6:c1:17:b8:5b:95:e0:f9:bc:fe: bc:42:b5:2c:f7:f8:76:46:79:42:5b:7f:e1:5a:76: 0d:9f:4f:cc:e9:2a:8d:3e:13:2f:1c:e4:86:f7:24: fc:21:b7:ec:13:4c:16:99:ae:ed:6d:d2:a9:89:bc: 05:82:74:46:78:65:f7:fe:98:6c:ee:01:97:fa:a1: e8:b2:9e:46:2c:93:50:4c:1f:f0:dd:3d:1c:38:00: 21:d0:91:52:5a:73:08:43:0d:f7:ac:35:6f:9e:4a: 10:e5:14:33:7a:2b:d9:44:9c:9c:9d:5a:2d:a3:c7: 40:48:27:40:d4:d4:6a:c2:86:34:09:3c:e3:1b:15: c3:7a:aa:c3:6f:1d:a7:bf:4e:e9:44:38:a7:d1:b3: bb:d6:8c:b6:9e:33:76:31:d8:0b:19:d5:2f:9c:b0: 6e:9b:56:87:0b:cd:24:ca:fd:f5:c1:88:0a:ba:7a: 59:c1:70:05:8a:eb:46:dd:f7:74:d6:73:ca:79:d9: 95:e6:d9:85:e2:f3:13:1b:0d:75:f8:33:59:0e:7c: b8:34:6b:bb:90:cd:bf:3b:06:03:08:88:99:ec:cd: cf:fb:43:12:0f:b3:c1:72:5f:1f:2c:87:28:88:01: 59:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.173.192.0/24 107.180.192.0/20 128.116.0.0/17 141.193.3.0/24 205.201.62.0/24 209.206.40.0/21 IPv6: 2620:2b:e000::/48 2620:135:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11281 22697 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6b:a4:56:0f:45:96:51:6b:aa:f9:82:72:6e:15:cb:80:16: 79:f1:a4:f1:16:f3:d5:e8:3d:d3:54:eb:74:9b:75:27:5a:5b: ce:a0:52:dd:90:7c:a7:02:5d:84:01:64:18:1b:95:51:e9:51: f8:ea:f1:fc:a7:67:3d:9c:ce:43:bc:65:93:8f:86:32:6d:c0: 81:a9:c5:bf:7d:29:a1:4f:a2:af:ff:ca:83:7e:56:5d:3e:79: df:99:aa:33:dd:b0:e1:b6:e1:db:6d:94:95:f6:03:aa:70:01: 8f:99:5e:21:f5:0d:d9:57:b4:9d:84:81:35:81:da:d7:79:0c: 3a:d1:1b:4e:cb:8e:40:73:05:a2:90:1f:48:b9:02:c4:ae:6d: 67:b4:de:6a:27:2a:a4:f9:d4:21:30:7e:b7:22:0c:e4:fb:99: bc:16:16:5c:21:fe:a9:9d:50:24:fd:e2:28:7f:a7:ed:98:21: cb:1e:5d:bb:c0:e8:bb:f3:6c:4c:94:6d:c3:63:1c:ef:78:1c: 53:7a:69:ef:ba:bb:83:5e:93:0c:11:d7:f9:3c:a6:c3:82:06: 16:cf:b4:a3:2c:78:1e:42:88:1a:df:b3:6f:04:73:7c:49:5d: 96:6a:73:d1:12:fe:75:39:b1:46:b3:f2:8e:c3:1d:4c:04:8c: cd:af:da:28 -----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIUAQ0Mn0MoWEX68L9sRkZtVEvKCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDUyNDE1MDMxNFoXDTI2MDQwNjAwNDUxNVowLzEtMCsGA1UEAxMk N2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdVTpjesyAJ4dK80IroUxzXjILbBF7hbleD5 vP68QrUs9/h2RnlCW3/hWnYNn0/M6SqNPhMvHOSG9yT8IbfsE0wWma7tbdKpibwF gnRGeGX3/phs7gGX+qHosp5GLJNQTB/w3T0cOAAh0JFSWnMIQw33rDVvnkoQ5RQz eivZRJycnVoto8dASCdA1NRqwoY0CTzjGxXDeqrDbx2nv07pRDin0bO71oy2njN2 MdgLGdUvnLBum1aHC80kyv31wYgKunpZwXAFiutG3fd01nPKedmV5tmF4vMTGw11 +DNZDny4NGu7kM2/OwYDCIiZ7M3P+0MSD7PBcl8fLIcoiAFZOwIDAQABo4IEVTCC BFEwHQYDVR0OBBYEFEJv+SYd14N2x5mWCHRIRIkRl8oIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzdlZGU3YjcwLWQ3NDUtNDI1ZC05 NzViLWJiMGViNjM2ODQzMC83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYz Njg0MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVgYIKwYBBQUH AQcBAf8ERzBFMCoEAgABMCQDBAAXrcADBARrtMADBAeAdAADBACNwQMDBADNyT4D BAPRzigwFwQCAAIwEQMHACYgACvgAAMGACYgATVgMB0GCCsGAQUFBwEIAQH/BA4w DKAKMAgCAiwRAgJYqTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABa6RWD0WWUWuq+YJybhXLgBZ58aTxFvPV 6D3TVOt0m3UnWlvOoFLdkHynAl2EAWQYG5VR6VH46vH8p2c9nM5DvGWTj4YybcCB qcW/fSmhT6Kv/8qDflZdPnnfmaoz3bDhtuHbbZSV9gOqcAGPmV4h9Q3ZV7SdhIE1 gdrXeQw60RtOy45AcwWikB9IuQLErm1ntN5qJyqk+dQhMH63Igzk+5m8FhZcIf6p nVAk/eIof6ftmCHLHl27wOi782xMlG3DYxzveBxTemnvuruDXpMMEdf5PKbDggYW z7SjLHgeQoga37NvBHN8SV2WanPREv51ObFGs/KOwx1MBIzNr9oo -----END CERTIFICATE-----Generated at Sun Nov 24 03:55:43 2024 by rpki-client on console-ams.rpki-client.org