$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer File: 951e7581-98f6-4e09-8091-345244dd8d9d.cer (raw, json) Hash identifier: tRaITwjD87cwGEP/TGQzF4MIcvVibzYtG4mEd02ZT+4= Subject key identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842520BC645B03435F060608E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 24 Jun 2023 00:45:16 +0000 Certificate not after: Fri 26 Sep 2025 00:45:16 +0000 Subordinate resources: IP: 209.124.176.0/20 IP: 2001:1860::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:52:0b:c6:45:b0:34:35:f0:60:60:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 24 00:45:16 2023 GMT Not After : Sep 26 00:45:16 2025 GMT Subject: CN=951e7581-98f6-4e09-8091-345244dd8d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:10:b2:91:b8:11:d4:1f:b4:c9:e0:f2:9e: ce:61:07:62:f6:a0:41:9d:3c:1b:8e:c5:26:57:a4: bb:ee:98:00:65:58:e6:ac:11:5f:14:34:c0:2b:ac: 5a:ce:91:4f:9c:fa:91:e0:5a:54:88:22:84:42:5f: 8c:8c:9e:4c:52:e9:a4:4e:e0:b0:af:90:b2:97:45: 70:a9:86:f4:26:c3:1f:b7:b8:b6:07:53:9a:e1:d2: 52:76:2b:58:38:30:de:68:a4:76:4e:b0:17:06:e3: f8:da:35:05:b9:b5:0f:40:34:ad:36:48:1e:64:58: 39:26:7a:6e:7a:f2:73:3e:1b:15:76:aa:6c:c6:9a: 8d:62:b6:11:3b:f6:75:4a:63:42:9d:91:05:8b:9e: 68:7b:5c:4e:04:9b:bb:04:70:73:27:3e:2c:7d:49: 5d:59:93:41:80:51:54:eb:76:05:41:28:44:86:0d: bf:be:e4:58:1d:af:38:c2:11:b2:f4:72:6c:7c:bf: e5:32:bf:f3:38:16:ad:a8:a2:cf:29:41:ac:f4:4a: 1f:71:c9:7b:eb:19:c8:42:40:3c:8b:f1:f7:f0:dc: ac:04:f2:13:87:6e:08:9a:93:8e:bd:04:71:86:f5: 2b:13:05:c4:9e:a8:4e:2d:ee:09:be:0f:d8:22:76: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 209.124.176.0/20 IPv6: 2001:1860::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:dc:57:bf:c4:c7:2c:03:1c:49:00:5d:4d:ca:e4:85:a1:17: 37:89:2d:d1:8a:10:36:7b:8e:45:d2:6a:07:c6:75:07:33:af: 07:92:e3:64:2c:0f:97:b0:2e:3d:ac:60:80:97:e5:ad:07:fe: f1:2e:8c:44:17:a9:4d:de:7b:0b:6a:c6:a3:bd:d8:32:ab:23: 1d:a8:de:b8:41:92:d7:ee:df:ea:59:a4:a8:e7:98:ca:aa:e4: fc:9a:6d:6e:2c:ce:8d:d1:46:eb:4e:6e:83:45:07:71:e6:60: 66:23:08:07:a5:83:be:2a:bb:89:59:c4:12:46:3f:c2:ce:39: 5c:ae:9b:97:ce:2a:64:a7:3c:2d:40:d4:7c:a4:a8:4f:c5:8c: 48:e5:02:8a:ef:df:40:43:ad:3c:4e:91:40:03:79:7a:84:18: 3d:af:72:dd:1f:bf:1e:78:80:77:d6:f8:8d:97:4c:5d:2a:94: f6:53:28:ab:85:00:f6:6e:61:21:d9:c5:54:92:87:ed:c5:14: 40:70:cc:ec:91:66:e4:13:56:f3:4d:a7:1b:e9:b5:23:2e:ba: fc:af:71:08:27:4b:81:86:ab:dc:bb:6f:66:d3:58:36:fc:de: 63:36:bb:6e:06:05:0d:48:60:1b:c9:77:fe:cc:fc:c7:24:32: 0e:b0:f7:81 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEJSC8ZFsDQ18GBgjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDYyNDAwNDUxNloXDTI1MDkyNjAwNDUxNlowLzEtMCsGA1UEAxMk OTUxZTc1ODEtOThmNi00ZTA5LTgwOTEtMzQ1MjQ0ZGQ4ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNcQspG4EdQftMng8p7OYQdi9qBBnTwbjsUm V6S77pgAZVjmrBFfFDTAK6xazpFPnPqR4FpUiCKEQl+MjJ5MUumkTuCwr5Cyl0Vw qYb0JsMft7i2B1Oa4dJSditYODDeaKR2TrAXBuP42jUFubUPQDStNkgeZFg5Jnpu evJzPhsVdqpsxpqNYrYRO/Z1SmNCnZEFi55oe1xOBJu7BHBzJz4sfUldWZNBgFFU 63YFQShEhg2/vuRYHa84whGy9HJsfL/lMr/zOBatqKLPKUGs9Eofccl76xnIQkA8 i/H38NysBPITh24ImpOOvQRxhvUrEwXEnqhOLe4Jvg/YInY61QIDAQABo4IEDjCC BAowHQYDVR0OBBYEFJpUbwHAFfOhMCFkkDWGeUPtBxF7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NTFlNzU4MS05OGY2LTRlMDktODA5MS0zNDUyNDRkZDhkOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1MWU3NTgxLTk4ZjYtNGUwOS04 MDkxLTM0NTI0NGRkOGQ5ZC85NTFlNzU4MS05OGY2LTRlMDktODA5MS0zNDUyNDRk ZDhkOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATRfLAwDQQCAAIwBwMFACABGGAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA ptxXv8THLAMcSQBdTcrkhaEXN4kt0YoQNnuORdJqB8Z1BzOvB5LjZCwPl7AuPaxg gJflrQf+8S6MRBepTd57C2rGo73YMqsjHajeuEGS1+7f6lmkqOeYyqrk/JptbizO jdFG605ug0UHceZgZiMIB6WDviq7iVnEEkY/ws45XK6bl84qZKc8LUDUfKSoT8WM SOUCiu/fQEOtPE6RQAN5eoQYPa9y3R+/HniAd9b4jZdMXSqU9lMoq4UA9m5hIdnF VJKH7cUUQHDM7JFm5BNW802nG+m1Iy66/K9xCCdLgYar3LtvZtNYNvzeYza7bgYF DUhgG8l3/sz8xyQyDrD3gQ== -----END CERTIFICATE-----Generated at Tue Apr 16 01:34:29 2024 by rpki-client on console-ams.rpki-client.org