$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer File: 951e7581-98f6-4e09-8091-345244dd8d9d.cer (raw, json) Hash identifier: lLckBtzKFGA2FT0uoPYuetpLaDtLrA23sM52+QMh1xA= Subject key identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847563E888D34FE0FB08BECAFE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Sep 2024 00:45:28 +0000 Certificate not after: Wed 30 Dec 2026 01:45:28 +0000 Subordinate resources: IP: 209.124.176.0/20 IP: 2001:1860::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:56:3e:88:8d:34:fe:0f:b0:8b:ec:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 26 00:45:28 2024 GMT Not After : Dec 30 01:45:28 2026 GMT Subject: CN=951e7581-98f6-4e09-8091-345244dd8d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:10:b2:91:b8:11:d4:1f:b4:c9:e0:f2:9e: ce:61:07:62:f6:a0:41:9d:3c:1b:8e:c5:26:57:a4: bb:ee:98:00:65:58:e6:ac:11:5f:14:34:c0:2b:ac: 5a:ce:91:4f:9c:fa:91:e0:5a:54:88:22:84:42:5f: 8c:8c:9e:4c:52:e9:a4:4e:e0:b0:af:90:b2:97:45: 70:a9:86:f4:26:c3:1f:b7:b8:b6:07:53:9a:e1:d2: 52:76:2b:58:38:30:de:68:a4:76:4e:b0:17:06:e3: f8:da:35:05:b9:b5:0f:40:34:ad:36:48:1e:64:58: 39:26:7a:6e:7a:f2:73:3e:1b:15:76:aa:6c:c6:9a: 8d:62:b6:11:3b:f6:75:4a:63:42:9d:91:05:8b:9e: 68:7b:5c:4e:04:9b:bb:04:70:73:27:3e:2c:7d:49: 5d:59:93:41:80:51:54:eb:76:05:41:28:44:86:0d: bf:be:e4:58:1d:af:38:c2:11:b2:f4:72:6c:7c:bf: e5:32:bf:f3:38:16:ad:a8:a2:cf:29:41:ac:f4:4a: 1f:71:c9:7b:eb:19:c8:42:40:3c:8b:f1:f7:f0:dc: ac:04:f2:13:87:6e:08:9a:93:8e:bd:04:71:86:f5: 2b:13:05:c4:9e:a8:4e:2d:ee:09:be:0f:d8:22:76: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 209.124.176.0/20 IPv6: 2001:1860::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:46:c3:8a:0a:bd:19:47:b6:52:19:ef:fc:73:b9:c6:f7:04: 01:e9:f5:cd:ec:6d:1b:5e:8c:76:bb:4f:40:5b:b2:e7:78:be: 34:11:bf:52:58:a8:cd:85:18:62:88:07:fb:54:7a:59:0a:a4: 63:42:98:be:5b:d1:29:b2:70:14:e8:7e:8c:ee:6c:a2:be:96: ad:ac:e6:06:65:49:93:91:9a:2f:05:ac:39:77:6d:b3:3a:a7: 0e:7a:f9:cd:3d:6e:05:ea:b6:e1:35:fa:fd:02:ba:15:00:0b: 74:a7:81:78:6f:83:db:ef:2f:71:bd:dc:24:d0:35:60:ef:b6: 73:3c:1c:cc:8d:21:29:88:bf:a0:91:54:31:91:d7:61:2f:dd: 8b:86:01:89:55:95:2f:f7:55:30:b0:4b:b4:38:bd:38:36:0b: 1d:1c:5a:9f:fd:08:5c:cc:ee:c4:ab:66:f3:7a:79:bd:fa:c9: 9c:eb:dd:26:e4:03:1d:15:71:4f:06:0c:b3:39:23:e7:da:ca: b0:c0:54:3d:46:7d:37:7b:66:82:b7:d4:0b:a5:db:ca:2d:b1: a4:d3:73:16:e9:3d:06:43:00:d5:d9:76:e0:f2:f3:d2:0a:cb: f6:14:5b:19:51:f2:94:6d:44:3f:4d:8f:55:cf:1a:47:e1:ff: 82:0a:6f:e6 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEdWPoiNNP4PsIvsr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkyNjAwNDUyOFoXDTI2MTIzMDAxNDUyOFowLzEtMCsGA1UEAxMk OTUxZTc1ODEtOThmNi00ZTA5LTgwOTEtMzQ1MjQ0ZGQ4ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNcQspG4EdQftMng8p7OYQdi9qBBnTwbjsUm V6S77pgAZVjmrBFfFDTAK6xazpFPnPqR4FpUiCKEQl+MjJ5MUumkTuCwr5Cyl0Vw qYb0JsMft7i2B1Oa4dJSditYODDeaKR2TrAXBuP42jUFubUPQDStNkgeZFg5Jnpu evJzPhsVdqpsxpqNYrYRO/Z1SmNCnZEFi55oe1xOBJu7BHBzJz4sfUldWZNBgFFU 63YFQShEhg2/vuRYHa84whGy9HJsfL/lMr/zOBatqKLPKUGs9Eofccl76xnIQkA8 i/H38NysBPITh24ImpOOvQRxhvUrEwXEnqhOLe4Jvg/YInY61QIDAQABo4IEDjCC BAowHQYDVR0OBBYEFJpUbwHAFfOhMCFkkDWGeUPtBxF7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NTFlNzU4MS05OGY2LTRlMDktODA5MS0zNDUyNDRkZDhkOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1MWU3NTgxLTk4ZjYtNGUwOS04 MDkxLTM0NTI0NGRkOGQ5ZC85NTFlNzU4MS05OGY2LTRlMDktODA5MS0zNDUyNDRk ZDhkOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATRfLAwDQQCAAIwBwMFACABGGAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA K0bDigq9GUe2Uhnv/HO5xvcEAen1zextG16MdrtPQFuy53i+NBG/UliozYUYYogH +1R6WQqkY0KYvlvRKbJwFOh+jO5sor6WrazmBmVJk5GaLwWsOXdtszqnDnr5zT1u Beq24TX6/QK6FQALdKeBeG+D2+8vcb3cJNA1YO+2czwczI0hKYi/oJFUMZHXYS/d i4YBiVWVL/dVMLBLtDi9ODYLHRxan/0IXMzuxKtm83p5vfrJnOvdJuQDHRVxTwYM szkj59rKsMBUPUZ9N3tmgrfUC6Xbyi2xpNNzFuk9BkMA1dl24PLz0grL9hRbGVHy lG1EP02PVc8aR+H/ggpv5g== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:26 2024 by rpki-client on console-fra.rpki-client.org