$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer File: 85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer (raw, json) Hash identifier: DlCaqtU+onN4IUpMuG4slKJBLdO4jIKoX+MhsjJZvzA= Subject key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846B452D27D7DF2CBDD3F920080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jul 2024 00:45:23 +0000 Certificate not after: Mon 02 Nov 2026 01:45:23 +0000 Subordinate resources: AS: 13903 AS: 23342 IP: 64.29.128.0/20 IP: 67.221.160.0/20 IP: 207.7.128.0/19 IP: 209.237.224.0/19 IP: 2607:f3a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:b4:52:d2:7d:7d:f2:cb:dd:3f:92:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 30 00:45:23 2024 GMT Not After : Nov 2 01:45:23 2026 GMT Subject: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:81:5c:7d:8c:f0:71:ca:4a:79:00:81:f2: e9:b6:bd:1d:c2:44:2e:5f:72:4a:d0:e0:85:0e:1c: 49:d9:9e:01:4e:b3:95:22:be:a2:22:b1:06:c9:c0: 74:1d:a3:b8:ed:63:5b:81:36:30:a0:e2:1a:de:d3: 48:91:60:a9:e2:be:3a:15:4d:00:4d:77:7d:54:6a: f6:5b:7c:20:2d:7e:98:c7:4c:0c:35:50:86:f7:7e: 2e:2b:56:a0:3e:e6:0f:33:34:24:b1:f8:7b:67:e1: ec:7d:58:87:7f:94:26:3a:85:37:aa:52:6e:28:0c: c5:31:80:44:67:56:be:89:a0:ae:e6:ae:58:60:40: 3f:bf:79:d1:0e:78:1d:5b:51:fe:94:86:e9:16:1a: 4f:f9:e9:4c:88:99:2f:bf:e0:bd:11:18:e7:f8:d7: 6f:b5:27:4c:c8:3b:7a:d8:2a:5e:80:92:cf:fb:58: 68:5d:5e:7c:92:a6:64:00:77:ab:46:e0:d9:e8:b2: 75:f9:8c:ee:bd:53:a6:9d:af:8f:80:09:2c:4b:86: 1c:9e:fc:26:37:4a:97:8c:02:f8:10:b8:26:63:89: 4c:83:a0:4d:73:e5:90:c8:4e:08:fa:bf:1f:fc:70: ad:90:2f:6f:54:23:f0:91:5e:dd:05:5b:0d:1b:6e: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.29.128.0/20 67.221.160.0/20 207.7.128.0/19 209.237.224.0/19 IPv6: 2607:f3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13903 23342 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:95:4c:82:93:68:82:6c:61:18:89:52:30:71:a7:99:43:34: e9:25:d6:98:bf:92:3a:df:7b:8d:a1:86:9e:d0:93:55:c1:7b: a7:b6:cf:f4:f9:0a:46:77:b8:23:99:4d:24:5f:0f:f1:58:f8: 00:03:3a:c9:c6:2f:f6:a4:b8:c0:16:a9:a4:72:d4:c3:52:3e: 28:9f:df:44:30:86:a9:22:70:3a:ec:5f:77:a4:c1:b3:2f:d0: ea:35:1a:f7:d0:9b:5f:f9:ac:fe:42:59:11:f6:be:ae:da:1a: ee:b0:2e:9e:78:7b:1e:d0:4c:69:d3:e2:81:36:00:23:c7:47: 57:c5:a7:9d:1a:a8:92:0a:66:7f:2b:6e:62:2c:f7:b8:da:7d: 90:ae:d8:a1:04:8a:ca:00:1c:95:a5:a2:72:c3:f0:5e:79:f6: 84:b2:c0:44:04:45:60:91:1f:8a:93:c5:f9:72:e3:9a:ba:60: 3f:6e:46:a6:ef:61:2f:61:dc:5e:d4:d6:58:7c:9a:65:ef:3d: ca:81:f4:30:b9:90:60:91:96:bf:5f:9f:9c:99:15:d4:23:b5: 1a:2f:dd:ff:ac:0d:0b:12:8a:76:db:06:ed:45:e7:a6:b6:14: 0e:85:94:cb:2c:72:2d:f4:f7:1c:39:da:1f:8f:ea:44:3a:03: a8:ba:28:8f -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEa0UtJ9ffLL3T+SAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDczMDAwNDUyM1oXDTI2MTEwMjAxNDUyM1owLzEtMCsGA1UEAxMk ODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDKBXH2M8HHKSnkAgfLptr0dwkQuX3JK0OCF DhxJ2Z4BTrOVIr6iIrEGycB0HaO47WNbgTYwoOIa3tNIkWCp4r46FU0ATXd9VGr2 W3wgLX6Yx0wMNVCG934uK1agPuYPMzQksfh7Z+HsfViHf5QmOoU3qlJuKAzFMYBE Z1a+iaCu5q5YYEA/v3nRDngdW1H+lIbpFhpP+elMiJkvv+C9ERjn+NdvtSdMyDt6 2CpegJLP+1hoXV58kqZkAHerRuDZ6LJ1+YzuvVOmna+PgAksS4YcnvwmN0qXjAL4 ELgmY4lMg6BNc+WQyE4I+r8f/HCtkC9vVCPwkV7dBVsNG24w5wIDAQABo4IEPzCC BDswHQYDVR0OBBYEFIOaHQH7yQZDkXi+pNPUF6R8lJvUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg1ZjczNWI2LTBhZTItNGMyYS04 MjZiLTdlOGIxMjZhNGI3My84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2 YTRiNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARAHYADBARD3aADBAXPB4ADBAXR7eAwDQQCAAIw BwMFACYH86AwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICNk8CAlsuMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJCVTIKTaIJsYRiJUjBxp5lDNOkl1pi/kjrfe42hhp7Qk1XBe6e2z/T5CkZ3uCOZ TSRfD/FY+AADOsnGL/akuMAWqaRy1MNSPiif30QwhqkicDrsX3ekwbMv0Oo1GvfQ m1/5rP5CWRH2vq7aGu6wLp54ex7QTGnT4oE2ACPHR1fFp50aqJIKZn8rbmIs97ja fZCu2KEEisoAHJWlonLD8F559oSywEQERWCRH4qTxfly45q6YD9uRqbvYS9h3F7U 1lh8mmXvPcqB9DC5kGCRlr9fn5yZFdQjtRov3f+sDQsSinbbBu1F56a2FA6FlMss ci309xw52h+P6kQ6A6i6KI8= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:56 2024 by rpki-client on console-ams.rpki-client.org