$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer File: 8bb7e416-db1b-4221-a6c0-947074a20f8f.cer (raw, json) Hash identifier: pPcVasJPy5bSjGvdecD5COvjryuM9ua29G7pBPq7o64= Subject key identifier: 47:F8:B0:3B:2C:54:46:06:91:E3:A5:0F:B1:31:3E:C2:76:85:9F:C4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584329027E4CD2BA8B9D94B51880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 09 Sep 2023 00:45:22 +0000 Certificate not after: Fri 12 Dec 2025 01:45:22 +0000 Subordinate resources: IP: 23.169.224.0/23 IP: 206.83.8.0/24 IP: 2602:fe13::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:29:02:7e:4c:d2:ba:8b:9d:94:b5:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 9 00:45:22 2023 GMT Not After : Dec 12 01:45:22 2025 GMT Subject: CN=8bb7e416-db1b-4221-a6c0-947074a20f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:83:76:77:af:4f:98:70:d5:a2:85:b3:8d: 9b:73:57:4c:1f:09:1b:1a:8b:87:e2:25:72:6d:32: 6e:ef:49:d7:7c:aa:d1:05:71:2b:5c:4b:d3:21:99: 0a:39:91:ac:49:8f:39:e4:a5:31:01:56:22:b3:6e: 7c:47:f2:c1:72:0b:47:70:9e:4e:fc:52:2d:89:d4: 31:48:b8:83:85:6d:71:f5:95:84:d7:34:33:40:c8: c9:57:fc:3c:4f:46:ab:c9:90:0b:d9:3e:8d:a6:76: 37:d4:de:3e:fe:a8:a6:6f:a5:c2:46:e1:e5:3d:2a: 2e:bc:41:a7:8d:4a:bd:ad:ca:c6:db:a9:d4:58:eb: 85:87:22:66:2e:2d:11:1a:b8:0f:4a:c4:5e:55:c2: 8e:c4:98:ff:c9:d9:87:a7:06:47:bf:d6:2d:c3:f4: ab:55:c5:a0:a8:f7:be:d5:c7:f2:a5:66:a2:33:8f: 18:41:fd:c8:97:38:48:d6:c8:b8:0e:ad:83:b2:d0: f4:8b:76:11:f7:04:49:5e:02:4f:cc:82:73:db:b0: 52:5d:28:aa:d4:d4:2d:69:3e:7c:fc:67:5b:bd:9c: a7:1d:7a:fa:f3:10:03:cf:39:e1:de:ed:75:ee:eb: 05:6c:c0:2b:1f:c0:42:e8:5c:d3:ac:3e:c0:31:11: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:B0:3B:2C:54:46:06:91:E3:A5:0F:B1:31:3E:C2:76:85:9F:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.169.224.0/23 206.83.8.0/24 IPv6: 2602:fe13::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ea:d7:3e:eb:66:af:3e:5d:5c:b6:9e:7e:64:35:b8:c2:b9: 5b:94:96:99:47:85:a1:d1:30:41:cf:d0:1e:3f:40:25:c5:51: 0b:12:a8:47:c2:f1:e2:c3:64:9c:fa:a4:7a:d1:5b:ab:33:52: 17:9c:34:96:44:a8:94:67:71:20:c1:a2:57:58:a5:c1:d0:0f: 77:0a:55:cd:20:f9:2a:6c:f1:1d:f6:f6:14:1a:4d:43:d9:5d: a4:4d:f0:80:22:7d:a4:36:32:13:b2:91:a2:31:10:35:61:d2: 7e:9a:5a:d3:5b:8f:5d:ca:1b:46:31:62:99:c7:f1:4a:15:0e: c3:b0:12:23:d1:5f:f7:61:77:5c:0a:9f:a7:34:ca:3e:7d:46: d6:20:04:d1:17:1a:d3:ff:7f:57:57:f5:09:5f:af:50:50:eb: 87:2e:8f:a0:fa:55:b0:d8:3d:b2:8d:3f:cb:b3:97:48:5b:6b: 4d:c9:3a:c9:ca:ed:38:b5:95:08:e2:47:91:0c:70:1b:fb:81: 33:41:f4:87:26:98:f8:e8:d2:86:e5:cb:ca:17:f4:53:f3:56: 30:66:b4:db:5e:37:e2:12:11:fe:76:c6:b7:81:0d:00:e7:c0: 11:64:11:b4:7c:77:4b:cd:21:f7:57:08:07:a3:7b:92:a6:dd: 16:42:b2:e8 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEMpAn5M0rqLnZS1GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkwOTAwNDUyMloXDTI1MTIxMjAxNDUyMlowLzEtMCsGA1UEAxMk OGJiN2U0MTYtZGIxYi00MjIxLWE2YzAtOTQ3MDc0YTIwZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH2DdnevT5hw1aKFs42bc1dMHwkbGouH4iVy bTJu70nXfKrRBXErXEvTIZkKOZGsSY855KUxAVYis258R/LBcgtHcJ5O/FItidQx SLiDhW1x9ZWE1zQzQMjJV/w8T0aryZAL2T6NpnY31N4+/qimb6XCRuHlPSouvEGn jUq9rcrG26nUWOuFhyJmLi0RGrgPSsReVcKOxJj/ydmHpwZHv9Ytw/SrVcWgqPe+ 1cfypWaiM48YQf3IlzhI1si4Dq2DstD0i3YR9wRJXgJPzIJz27BSXSiq1NQtaT58 /GdbvZynHXr68xADzznh3u117usFbMArH8BC6FzTrD7AMRHRRQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFEf4sDssVEYGkeOlD7ExPsJ2hZ/EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 YmI3ZTQxNi1kYjFiLTQyMjEtYTZjMC05NDcwNzRhMjBmOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWItNDIyMS1h NmMwLTk0NzA3NGEyMGY4Zi84YmI3ZTQxNi1kYjFiLTQyMjEtYTZjMC05NDcwNzRh MjBmOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXqeADBADOUwgwDgQCAAIwCAMGBCYC/hMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDq1z7rZq8+XVy2nn5kNbjCuVuUlplHhaHRMEHP0B4/QCXFUQsSqEfC 8eLDZJz6pHrRW6szUhecNJZEqJRncSDBoldYpcHQD3cKVc0g+Sps8R329hQaTUPZ XaRN8IAifaQ2MhOykaIxEDVh0n6aWtNbj13KG0YxYpnH8UoVDsOwEiPRX/dhd1wK n6c0yj59RtYgBNEXGtP/f1dX9Qlfr1BQ64cuj6D6VbDYPbKNP8uzl0hba03JOsnK 7Ti1lQjiR5EMcBv7gTNB9IcmmPjo0obly8oX9FPzVjBmtNteN+ISEf52xreBDQDn wBFkEbR8d0vNIfdXCAeje5Km3RZCsug= -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:17 2024 by rpki-client on console-fra.rpki-client.org