$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer File: 9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer (raw, json) Hash identifier: Mf8s4EAdy7UZe+quTuVApBUUZDARTn8VXsl3cUtWEtA= Subject key identifier: 32:78:9B:CC:41:A0:8F:2A:23:FC:EB:EC:5B:AD:AE:FC:9A:56:C2:67 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858464D077C98A807C9EFACCCFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Jun 2024 00:45:20 +0000 Certificate not after: Sat 26 Sep 2026 00:45:20 +0000 Subordinate resources: IP: 23.152.224.0 -- 23.152.226.255 IP: 2620:13a:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:4d:07:7c:98:a8:07:c9:ef:ac:cc:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 23 00:45:20 2024 GMT Not After : Sep 26 00:45:20 2026 GMT Subject: CN=9aeaefa1-9009-4d41-9090-b27ec04ef7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:0a:39:28:65:e7:56:b4:eb:10:6f:2f:97: 25:04:72:35:14:60:84:7a:12:21:f8:68:77:00:52: 13:b5:96:76:8b:0d:1d:d7:f5:78:ef:b9:a0:e5:c9: 30:5d:15:38:74:76:ca:4d:d7:7a:0f:bd:75:b3:21: d6:85:62:c0:6f:68:42:b9:37:29:9c:96:1f:37:77: 9f:b3:24:b3:3f:15:e1:41:bc:ad:9c:c7:69:78:06: 32:6c:3c:2a:7b:28:b1:51:aa:57:f5:31:ec:33:86: 08:0f:e4:44:f6:1c:bc:58:eb:db:71:eb:74:96:ad: 96:c1:a2:02:29:93:a7:b3:81:24:fc:3f:94:f8:35: 21:ca:1e:58:80:3e:47:0d:28:d3:89:15:3e:57:a8: 38:a9:f4:b2:3d:76:ea:3c:17:52:ee:a5:7b:cc:31: 2b:b4:c2:ba:61:e6:3d:ea:b6:dd:38:c3:8e:4c:7d: e3:45:af:01:92:ca:72:37:43:7e:f5:d3:d1:56:d1: 24:86:08:f9:29:94:2b:64:d8:b9:cc:40:3c:70:82: 72:65:55:76:c6:9a:33:e4:c4:89:aa:a6:8a:43:85: 66:ff:b9:ac:ea:e4:a3:52:3f:c7:d9:9b:92:e0:97: ea:1b:67:f6:6f:2f:bc:a2:60:18:96:67:c0:cc:b8: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:9B:CC:41:A0:8F:2A:23:FC:EB:EC:5B:AD:AE:FC:9A:56:C2:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.152.224.0-23.152.226.255 IPv6: 2620:13a:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fa:8f:c9:28:b6:15:54:00:8d:d4:4e:62:7a:2d:f4:2f:b5: e9:1e:7c:6d:92:d4:60:21:ff:1c:99:f1:b3:6a:61:c7:48:da: 3f:9e:d5:d5:b2:98:8f:8d:5d:6b:f2:d7:72:31:ec:f2:a9:ed: ed:43:fa:8b:00:4e:7e:87:78:37:bc:75:09:ca:2e:b2:8e:2c: 4a:57:2b:9b:cb:f9:af:28:ed:e8:79:09:77:8d:8d:a2:40:2c: 0e:64:96:9b:a8:e0:1f:a0:7e:2b:6e:e8:93:fb:df:f5:1e:68: 18:21:85:b8:16:03:85:b8:4e:45:50:dd:68:36:1b:0d:d0:c0: 72:60:ad:4f:77:18:f1:9f:c7:32:1c:67:93:9c:56:85:3e:0c: 53:36:8d:67:a1:8b:49:e3:67:4b:f5:e5:03:48:c5:43:57:35: 80:16:ab:f3:4c:af:b1:21:45:d5:0c:77:e4:bd:99:10:42:cf: be:94:06:12:83:d2:ec:10:62:d5:32:07:82:9b:bd:35:85:60: e9:d3:5e:d5:44:20:fc:f7:54:62:77:5a:ff:60:0b:39:42:fa: 7c:ff:43:5c:33:0b:67:f1:68:bc:76:69:b8:ca:33:2e:c4:88: 68:87:2d:c6:3f:cd:f0:d2:1d:ae:7c:79:91:63:e0:c9:37:01: d2:67:7e:26 -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEZNB3yYqAfJ76zM+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDYyMzAwNDUyMFoXDTI2MDkyNjAwNDUyMFowLzEtMCsGA1UEAxMk OWFlYWVmYTEtOTAwOS00ZDQxLTkwOTAtYjI3ZWMwNGVmN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyoKOShl51a06xBvL5clBHI1FGCEehIh+Gh3 AFITtZZ2iw0d1/V477mg5ckwXRU4dHbKTdd6D711syHWhWLAb2hCuTcpnJYfN3ef sySzPxXhQbytnMdpeAYybDwqeyixUapX9THsM4YID+RE9hy8WOvbcet0lq2WwaIC KZOns4Ek/D+U+DUhyh5YgD5HDSjTiRU+V6g4qfSyPXbqPBdS7qV7zDErtMK6YeY9 6rbdOMOOTH3jRa8BkspyN0N+9dPRVtEkhgj5KZQrZNi5zEA8cIJyZVV2xpoz5MSJ qqaKQ4Vm/7ms6uSjUj/H2ZuS4JfqG2f2by+8omAYlmfAzLjeFwIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFDJ4m8xBoI8qI/zr7FutrvyaVsJnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 YWVhZWZhMS05MDA5LTRkNDEtOTA5MC1iMjdlYzA0ZWY3ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhZWFlZmExLTkwMDktNGQ0MS05 MDkwLWIyN2VjMDRlZjdlZi85YWVhZWZhMS05MDA5LTRkNDEtOTA5MC1iMjdlYzA0 ZWY3ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEBReY4AMEABeY4jAOBAIAAjAIAwYAJiABOsAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASvqPySi2FVQAjdROYnot9C+16R58bZLUYCH/HJnxs2phx0jaP57V 1bKYj41da/LXcjHs8qnt7UP6iwBOfod4N7x1Ccouso4sSlcrm8v5ryjt6HkJd42N okAsDmSWm6jgH6B+K27ok/vf9R5oGCGFuBYDhbhORVDdaDYbDdDAcmCtT3cY8Z/H Mhxnk5xWhT4MUzaNZ6GLSeNnS/XlA0jFQ1c1gBar80yvsSFF1Qx35L2ZEELPvpQG EoPS7BBi1TIHgpu9NYVg6dNe1UQg/PdUYnda/2ALOUL6fP9DXDMLZ/FovHZpuMoz LsSIaIctxj/N8NIdrnx5kWPgyTcB0md+Jg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:27 2024 by rpki-client on console-fra.rpki-client.org