$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer File: 871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer (raw, json) Hash identifier: pbRN9BeuPoA+U/cF/Su8naM6mLPO55jWdpyPLChmjuo= Subject key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858469B32A5D4AB48A006F18A3B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jul 2024 00:45:21 +0000 Certificate not after: Sat 24 Oct 2026 00:45:21 +0000 Subordinate resources: AS: 399833 IP: 104.250.248.0/22 IP: 204.144.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:9b:32:a5:d4:ab:48:a0:06:f1:8a:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 21 00:45:21 2024 GMT Not After : Oct 24 00:45:21 2026 GMT Subject: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:68:2a:ec:09:69:63:7e:17:46:f5:39:b5: 3e:36:c4:00:d5:54:64:3e:61:45:4b:6d:71:88:22: bc:2c:8d:51:98:72:a5:52:3a:3a:90:df:9a:63:5c: f4:d5:cf:fa:24:3c:9e:35:1d:b4:26:f2:19:b0:1b: 56:ea:db:e4:b2:41:da:30:fa:e5:8e:67:bf:02:86: af:3e:f0:2d:ef:17:7d:a4:f1:9c:21:18:30:04:6c: 52:42:8a:94:b1:b2:f1:ff:76:ba:2e:09:e4:5b:ea: 1b:f2:e4:41:fc:8f:6d:fa:7a:68:79:76:12:63:89: 8c:8a:10:ee:d5:ce:5b:4c:24:77:e5:2d:6a:8d:34: ae:d6:22:6c:e0:77:6e:5e:60:ea:a9:8a:57:d2:f6: 09:8e:58:5d:f9:43:88:d2:e5:fe:6c:c6:49:9c:91: c1:8d:66:45:45:f1:9a:54:c4:a5:d4:b9:78:e1:73: 86:ae:0f:49:1e:92:d0:bc:04:f5:1a:81:07:3a:7b: d4:24:81:13:ea:ad:b1:71:36:f6:ca:1a:e5:6e:08: 3f:d5:e9:7a:98:da:40:45:db:f4:2a:ee:4c:f6:b5: c1:8b:84:91:ce:5c:a7:52:5e:74:d2:76:a0:86:01: e0:7d:80:5e:d4:74:43:39:1c:98:3b:55:68:c6:18: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.250.248.0/22 204.144.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:56:62:a2:ca:f9:a4:4c:4a:53:fd:15:b5:9b:c7:7b:d5:d8: e6:1b:02:81:d6:fd:96:e4:12:46:49:c8:c4:e9:46:40:58:50: f1:42:ac:8b:e9:d9:72:be:90:ee:dd:26:c8:9f:72:63:a3:d3: 61:aa:4b:b9:1b:b3:fb:0e:5f:79:5a:b6:53:c2:e2:c9:58:a5: 69:5d:3e:b2:bb:cf:2f:b2:3c:f3:b1:15:d4:ac:12:f5:63:87: d1:49:6d:61:cd:d4:72:7a:13:ea:22:18:50:bf:c9:de:70:1a: a9:ec:be:f5:8f:15:d0:82:48:0a:b6:bf:cd:ea:15:9f:4b:94: 04:bc:1a:8e:5b:93:a4:79:ed:b1:fb:10:6a:0d:5d:a9:00:f4: f0:32:59:4a:db:0c:fa:d8:1e:3c:3a:31:fa:ea:3c:d3:a3:10: 3c:d6:12:db:8d:de:b4:7b:6a:a5:34:bb:3f:ba:92:a1:d2:5f: 28:56:0a:7d:7e:7e:98:4a:e9:12:93:90:ee:4b:88:7f:14:73: 21:d3:83:96:b8:47:10:b0:6d:c0:52:f3:0f:47:53:99:f4:a8: 37:11:88:8f:45:c8:84:30:a2:6a:68:37:fa:40:ba:b6:4e:96: b5:2a:95:a8:df:a3:5b:2d:6b:8b:21:4b:67:cd:c9:a2:f1:b4: 07:d0:0d:11 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEabMqXUq0igBvGKOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDcyMTAwNDUyMVoXDTI2MTAyNDAwNDUyMVowLzEtMCsGA1UEAxMk ODcxY2U2YjAtMTc5MS00NGRkLWI3ZjctZjBiMzhiYjMwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgBoKuwJaWN+F0b1ObU+NsQA1VRkPmFFS21x iCK8LI1RmHKlUjo6kN+aY1z01c/6JDyeNR20JvIZsBtW6tvkskHaMPrljme/Aoav PvAt7xd9pPGcIRgwBGxSQoqUsbLx/3a6LgnkW+ob8uRB/I9t+npoeXYSY4mMihDu 1c5bTCR35S1qjTSu1iJs4HduXmDqqYpX0vYJjlhd+UOI0uX+bMZJnJHBjWZFRfGa VMSl1Ll44XOGrg9JHpLQvAT1GoEHOnvUJIET6q2xcTb2yhrlbgg/1el6mNpARdv0 Ku5M9rXBi4SRzlynUl500naghgHgfYBe1HRDORyYO1Voxhh2cwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFN8/x9dSBCCceyblD37AGNs6jHZ7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJiMzBjMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg3MWNlNmIwLTE3OTEtNDRkZC1i N2Y3LWYwYjM4YmIzMGMwOS84NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJi MzBjMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJo+vgDBALMkHwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhnZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAK9WYqLK+aRMSlP9FbWbx3vV2OYbAoHW/ZbkEkZJ yMTpRkBYUPFCrIvp2XK+kO7dJsifcmOj02GqS7kbs/sOX3latlPC4slYpWldPrK7 zy+yPPOxFdSsEvVjh9FJbWHN1HJ6E+oiGFC/yd5wGqnsvvWPFdCCSAq2v83qFZ9L lAS8Go5bk6R57bH7EGoNXakA9PAyWUrbDPrYHjw6MfrqPNOjEDzWEtuN3rR7aqU0 uz+6kqHSXyhWCn1+fphK6RKTkO5LiH8UcyHTg5a4RxCwbcBS8w9HU5n0qDcRiI9F yIQwompoN/pAurZOlrUqlajfo1sta4shS2fNyaLxtAfQDRE= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:25 2024 by rpki-client on console-fra.rpki-client.org