$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer File: 9ff9bceb-e14b-4417-b9b7-c51352d95416.cer (raw, json) Hash identifier: bnWFeX3RjiEnVErrC5qatJL6h2GEdvYrjksL7gRz5yU= Subject key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858437054B53F88D06E6F1250C7E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Oct 2023 13:53:25 +0000 Certificate not after: Tue 06 Jan 2026 14:53:25 +0000 Subordinate resources: IP: 192.206.9.0 -- 192.206.11.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:70:54:b5:3f:88:d0:6e:6f:12:50:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 4 13:53:25 2023 GMT Not After : Jan 6 14:53:25 2026 GMT Subject: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:5e:da:63:e9:3b:f3:ff:32:0c:e1:a1:58: 7a:f4:cb:5d:1e:1b:5f:fe:bb:f6:75:c0:4c:96:e2: 6d:fc:20:79:d7:1c:34:da:c3:89:3b:f1:29:72:0d: fb:a1:2b:92:3e:d2:93:ab:99:40:e5:33:54:f0:57: d5:65:02:0d:1e:4a:cb:25:b6:01:67:fd:79:09:81: 3d:c6:80:06:ae:86:c1:1f:ee:b6:96:aa:df:65:97: 89:22:a6:a4:1a:31:e6:99:a5:a0:10:5a:f3:1f:d3: 5e:81:04:9b:d6:95:2c:bf:db:e3:64:c8:57:f9:23: fa:2f:b7:90:70:2d:bc:d7:0c:1a:ed:05:c2:d0:a0: db:61:18:f1:70:be:ef:b2:c7:7a:3f:b6:0f:e9:4f: e9:46:d0:3b:b2:e9:ea:e0:03:28:13:17:84:05:7a: 28:50:a8:50:d7:9b:24:67:0f:d9:f6:be:19:ff:3f: d2:91:25:3f:2b:5a:20:ec:75:3e:31:be:5e:a7:e2: 26:1c:62:7b:8c:bf:7c:7e:90:de:09:e1:f8:95:d5: b1:a6:76:e3:4c:7a:a5:9f:cc:59:1c:9b:c7:17:33: 7d:6f:6b:85:1a:80:c9:5c:c3:7e:fb:e3:a6:4c:59: f3:93:5a:32:da:6f:7f:d1:d3:f9:45:94:7e:50:f9: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.206.9.0-192.206.11.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:b0:82:70:5f:2b:e5:df:9a:40:ea:ef:a2:90:d8:ea:e7: 37:31:f6:70:ae:31:4e:5e:47:27:02:87:2a:02:c6:ac:5c:a5: cf:9a:c7:02:3f:05:4d:79:aa:66:d0:ae:08:ab:14:48:0a:0d: f6:17:60:c7:69:99:dd:c6:2f:12:3f:03:24:e8:bd:37:61:ea: 82:7c:5d:97:76:87:28:90:c9:a2:08:f8:f7:10:9d:5f:a5:00: e9:74:89:27:22:bc:77:9d:18:78:f0:70:e9:72:2a:4c:58:25: 3d:b9:c5:52:1c:a0:7f:29:93:17:3e:2a:dc:75:77:d4:66:c6: 18:9e:7a:e4:c9:cb:6c:36:65:8e:1a:7e:79:f1:f4:4c:4a:f9: 20:36:7d:92:e6:3e:ea:70:b8:2e:c6:9c:57:04:b9:0d:06:b6: 03:fb:80:81:c2:b9:61:24:cf:d4:9c:8e:08:89:48:66:b1:25: 7f:83:da:be:08:db:40:86:7c:7f:bf:11:a7:08:de:f5:a5:19: 42:a3:8b:3b:07:4a:d1:c4:a6:02:1f:91:34:f2:43:87:a2:1d: 8b:c2:5a:a3:4a:e7:5f:a2:56:50:e9:c3:80:93:03:8f:6b:b3: eb:e6:34:42:71:d2:33:63:c1:0d:ac:f7:6e:f2:52:bf:f9:34: cc:bf:b6:3e -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWENwVLU/iNBubxJQx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTAwNDEzNTMyNVoXDTI2MDEwNjE0NTMyNVowLzEtMCsGA1UEAxMk OWZmOWJjZWItZTE0Yi00NDE3LWI5YjctYzUxMzUyZDk1NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHNe2mPpO/P/MgzhoVh69MtdHhtf/rv2dcBM luJt/CB51xw02sOJO/Epcg37oSuSPtKTq5lA5TNU8FfVZQINHkrLJbYBZ/15CYE9 xoAGrobBH+62lqrfZZeJIqakGjHmmaWgEFrzH9NegQSb1pUsv9vjZMhX+SP6L7eQ cC281wwa7QXC0KDbYRjxcL7vssd6P7YP6U/pRtA7sunq4AMoExeEBXooUKhQ15sk Zw/Z9r4Z/z/SkSU/K1og7HU+Mb5ep+ImHGJ7jL98fpDeCeH4ldWxpnbjTHqln8xZ HJvHFzN9b2uFGoDJXMN+++OmTFnzk1oy2m9/0dP5RZR+UPmsfwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFAAOT1FBWW04u/oA66UkxmiMX6DfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJkOTU0MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlmZjliY2ViLWUxNGItNDQxNy1i OWI3LWM1MTM1MmQ5NTQxNi85ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJk OTU0MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMDOCQMEAsDOCDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADZrCCcF8r 5d+aQOrvopDY6uc3MfZwrjFOXkcnAocqAsasXKXPmscCPwVNeapm0K4IqxRICg32 F2DHaZndxi8SPwMk6L03YeqCfF2XdocokMmiCPj3EJ1fpQDpdIknIrx3nRh48HDp cipMWCU9ucVSHKB/KZMXPircdXfUZsYYnnrkyctsNmWOGn558fRMSvkgNn2S5j7q cLguxpxXBLkNBrYD+4CBwrlhJM/UnI4IiUhmsSV/g9q+CNtAhnx/vxGnCN71pRlC o4s7B0rRxKYCH5E08kOHoh2LwlqjSudfolZQ6cOAkwOPa7Pr5jRCcdIzY8ENrPdu 8lK/+TTMv7Y+ -----END CERTIFICATE-----Generated at Wed May 1 20:51:46 2024 by rpki-client on console-ams.rpki-client.org