$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer File: 9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer (raw, json) Hash identifier: 8oSgBhLAlRQ44N/Ci60gKRIb73NhtERj2+admGavzpo= Subject key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858444B775AD1F4C8F2F62E824300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Dec 2023 01:45:15 +0000 Certificate not after: Thu 26 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 27385 IP: 64.39.96.0/20 IP: 2602:fdaa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:4b:77:5a:d1:f4:c8:f2:f6:2e:82:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 22 01:45:15 2023 GMT Not After : Mar 26 00:45:15 2026 GMT Subject: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:50:ef:19:36:ec:ac:24:e8:fe:e1:7c:14: e4:ed:7f:c1:95:7b:e7:42:fa:57:53:ff:fa:cb:6c: 37:bd:10:ee:d1:26:42:f8:56:0e:ee:98:76:69:ea: b4:ca:53:8a:2e:2c:1d:9d:6e:ed:53:24:18:c9:5b: 80:25:f6:58:b1:b2:cb:1e:23:b6:d2:9b:e6:2b:ae: 1c:28:3b:b8:7b:a4:c5:c7:10:d5:83:a3:0a:9b:7f: 8f:be:64:b6:30:d8:d7:2e:ab:32:7d:2a:06:32:8e: 1a:67:ca:ff:d7:52:52:16:85:21:7d:44:eb:fc:e4: 2f:c2:d0:25:e9:9a:c3:c8:2b:8e:29:2f:67:94:71: 9b:d2:09:b8:cf:94:73:fb:14:2e:6a:b6:dd:6e:7c: 6d:8b:35:a0:b4:00:fd:e5:d6:bc:13:91:95:ce:3c: 59:50:47:19:01:2a:d3:b3:b4:ea:7a:5a:6f:42:b7: 8b:c3:58:f7:f3:ea:47:4e:e9:73:7f:8b:df:51:57: 62:47:e1:cd:08:14:c0:71:37:a0:3f:d4:c4:48:1e: da:52:96:9e:57:89:3d:a0:dc:67:18:8f:a0:9c:b7: 35:66:72:6e:3a:73:69:fd:14:13:10:e6:d0:ce:d4: 2b:e7:6d:e5:5a:61:82:c9:36:05:a5:08:a6:3f:77: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.39.96.0/20 IPv6: 2602:fdaa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27385 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6d:a4:25:60:1f:64:09:00:28:39:f4:7b:3c:b8:3c:87:d1: b4:62:cd:3d:ab:a6:64:88:57:ac:24:dd:34:3c:58:45:57:71: cc:79:6b:48:27:b2:6a:d4:ad:dc:21:22:75:5f:a1:bd:0d:7c: 11:13:bf:a1:34:c4:2d:ac:ca:64:d2:63:ba:cb:df:6a:18:f5: 4d:a8:52:9c:80:d1:78:cc:c1:fd:de:c3:98:8a:66:8a:f4:8f: ae:17:68:a8:4d:1e:5a:64:1c:f1:19:b2:20:f7:d9:78:87:ea: a5:6b:01:a4:c1:30:79:d6:59:ee:36:2c:d0:78:2d:7c:4b:8c: 5d:51:1e:c3:57:70:db:05:18:14:01:ee:40:1f:d5:77:74:d2: d3:e7:8d:c9:f1:40:67:03:7b:bc:f6:8a:e1:5f:a7:37:2c:50: ce:38:f7:ee:4e:9a:7c:79:69:48:98:3d:2c:a4:f8:87:d5:08: 45:1e:88:dc:82:68:a0:b6:93:59:e9:0d:49:11:6f:80:e7:91: d4:30:c2:f3:fd:35:1a:fc:e9:10:3c:23:fe:b0:61:87:2d:72: bf:35:6d:ff:b9:7c:13:39:0f:ef:e3:26:d5:17:ca:78:ce:c0: 49:20:78:5d:b6:da:69:86:6d:d3:9c:95:5c:2d:63:8d:11:b2: 0c:96:88:ff -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWERLd1rR9Mjy9i6CQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIyMjAxNDUxNVoXDTI2MDMyNjAwNDUxNVowLzEtMCsGA1UEAxMk OWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMxZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZQ7xk27Kwk6P7hfBTk7X/BlXvnQvpXU//6 y2w3vRDu0SZC+FYO7ph2aeq0ylOKLiwdnW7tUyQYyVuAJfZYsbLLHiO20pvmK64c KDu4e6TFxxDVg6MKm3+PvmS2MNjXLqsyfSoGMo4aZ8r/11JSFoUhfUTr/OQvwtAl 6ZrDyCuOKS9nlHGb0gm4z5Rz+xQuarbdbnxtizWgtAD95da8E5GVzjxZUEcZASrT s7TqelpvQreLw1j38+pHTulzf4vfUVdiR+HNCBTAcTegP9TESB7aUpaeV4k9oNxn GI+gnLc1ZnJuOnNp/RQTEObQztQr523lWmGCyTYFpQimP3fY7QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAJETV5tCp7t/dz1NNcxY7nLesIMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlkMDZlZDY2LTlmZGQtNDA0OC04 NjQ1LWUzM2U4Y2VjMWQ0MS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNl YzFkNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBARAJ2AwDgQCAAIwCAMGBCYC/aoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmr5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHttpCVgH2QJACg59Hs8uDyH0bRi zT2rpmSIV6wk3TQ8WEVXccx5a0gnsmrUrdwhInVfob0NfBETv6E0xC2symTSY7rL 32oY9U2oUpyA0XjMwf3ew5iKZor0j64XaKhNHlpkHPEZsiD32XiH6qVrAaTBMHnW We42LNB4LXxLjF1RHsNXcNsFGBQB7kAf1Xd00tPnjcnxQGcDe7z2iuFfpzcsUM44 9+5Omnx5aUiYPSyk+IfVCEUeiNyCaKC2k1npDUkRb4DnkdQwwvP9NRr86RA8I/6w YYctcr81bf+5fBM5D+/jJtUXynjOwEkgeF222mmGbdOclVwtY40RsgyWiP8= -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:42 2024 by rpki-client on console-fra.rpki-client.org