$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer File: a90f006a-b108-4757-9dfd-b36376534658.cer (raw, json) Hash identifier: l3RH1QSo8983dGcoo/ycSt3llUXizB5YPUIFE8KTjzA= Subject key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584499A28E72999FE71F360A0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Jan 2024 01:45:20 +0000 Certificate not after: Thu 23 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 32288 IP: 45.43.0.0/19 IP: 66.11.112.0/20 IP: 104.192.100.0/22 IP: 104.255.224.0/21 IP: 162.253.64.0/22 IP: 2605:fb80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:99:a2:8e:72:99:9f:e7:1f:36:0a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 19 01:45:20 2024 GMT Not After : Apr 23 00:45:20 2026 GMT Subject: CN=a90f006a-b108-4757-9dfd-b36376534658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:5b:03:ae:7b:52:7f:d6:7a:6f:8d:cf:a7: 42:08:15:4f:26:a5:09:5b:2f:6a:c8:e5:67:0a:3a: cc:10:ad:e5:46:9d:50:f8:6a:b1:05:8e:4c:14:48: 46:bd:4d:43:55:18:36:19:6b:96:8b:5b:fa:9e:a7: 56:cf:3f:e5:58:31:55:e4:89:1e:a8:c8:57:b2:4c: 05:51:0e:5f:86:6d:42:b2:65:5c:98:aa:a3:e7:cd: c3:21:2e:7e:b7:c7:e5:04:13:74:20:40:d5:b9:26: 58:3c:06:84:48:71:d6:7b:34:1c:0d:54:12:3a:ea: dc:0a:93:16:70:62:06:5f:1a:9a:3b:1d:26:a4:57: ec:7d:54:0f:7f:f0:c4:b1:71:5b:6d:24:d3:c7:36: 4c:c3:45:fc:80:17:7e:ad:95:87:bd:d3:dd:e2:5e: d8:21:50:39:41:ef:ba:01:59:06:a8:21:38:83:31: 05:bd:9b:6e:7e:fd:e1:52:05:be:39:83:dd:38:9d: f6:46:85:13:99:b5:28:5f:4c:de:f7:b6:2e:00:f2: 81:42:f7:4b:c3:79:53:38:75:b0:68:00:3d:d4:60: 7f:9d:24:5e:5d:b9:55:df:4c:ee:2d:33:db:57:00: e4:af:24:9f:05:4d:5d:bd:01:c5:a1:49:30:06:6e: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.43.0.0/19 66.11.112.0/20 104.192.100.0/22 104.255.224.0/21 162.253.64.0/22 IPv6: 2605:fb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32288 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:11:43:8b:86:8a:95:e7:a9:22:53:f2:bc:c5:8d:6a:96:fc: 71:9c:7f:dc:ca:11:f3:5f:7a:d3:e9:0b:c4:3b:91:a2:85:db: 4d:dc:ee:b9:3b:71:e9:30:18:5c:ea:0c:de:29:87:34:f2:6c: c0:c4:5e:f4:21:3a:c1:88:ba:ce:44:6f:0f:d7:35:f6:d0:7a: 1a:13:79:ea:d1:52:34:1a:13:63:1a:a3:63:14:4b:9c:d6:bd: 3f:b0:e1:f5:bf:a3:aa:17:f9:e5:3e:2d:00:c1:2a:05:df:00: 4e:0e:6d:94:07:bd:6c:2c:72:1f:4c:41:ac:71:72:08:b2:c3: 2f:a8:83:99:fd:36:67:d2:3a:e8:0b:20:cf:ae:a7:02:c5:5c: 8e:f4:3c:82:51:8c:ba:03:46:9a:a5:00:bf:14:72:0a:4f:4c: b9:48:dd:49:27:7c:c8:af:de:60:3d:67:c6:55:b9:78:d4:c5: 5f:cd:be:37:24:7b:32:35:2c:3f:05:f9:22:b3:3b:d2:c9:65: a1:fe:4d:a8:da:c5:d5:36:a0:e7:8b:dc:78:f5:80:64:62:55: 56:bf:71:60:1a:b1:c8:b3:48:c2:27:66:a9:ee:82:40:60:65: 70:9d:09:ee:b0:42:f2:e4:10:9b:12:06:11:fc:36:7a:79:32: 9c:aa:7c:fe -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWESZoo5ymZ/nHzYKDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDExOTAxNDUyMFoXDTI2MDQyMzAwNDUyMFowLzEtMCsGA1UEAxMk YTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9tbA657Un/Wem+Nz6dCCBVPJqUJWy9qyOVn CjrMEK3lRp1Q+GqxBY5MFEhGvU1DVRg2GWuWi1v6nqdWzz/lWDFV5IkeqMhXskwF UQ5fhm1CsmVcmKqj583DIS5+t8flBBN0IEDVuSZYPAaESHHWezQcDVQSOurcCpMW cGIGXxqaOx0mpFfsfVQPf/DEsXFbbSTTxzZMw0X8gBd+rZWHvdPd4l7YIVA5Qe+6 AVkGqCE4gzEFvZtufv3hUgW+OYPdOJ32RoUTmbUoX0ze97YuAPKBQvdLw3lTOHWw aAA91GB/nSReXblV30zuLTPbVwDkrySfBU1dvQHFoUkwBm5BcQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFFa7dRqLvpINiZkmI/u1pfup9xj4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h OTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E5MGYwMDZhLWIxMDgtNDc1Ny05 ZGZkLWIzNjM3NjUzNDY1OC9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1 MzQ2NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAUtKwADBARCC3ADBAJowGQDBANo/+ADBAKi/UAw DQQCAAIwBwMFACYF+4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfiAwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAoxFDi4aKleepIlPyvMWNapb8cZx/3MoR81960+kLxDuRooXbTdzuuTtx6TAY XOoM3imHNPJswMRe9CE6wYi6zkRvD9c19tB6GhN56tFSNBoTYxqjYxRLnNa9P7Dh 9b+jqhf55T4tAMEqBd8ATg5tlAe9bCxyH0xBrHFyCLLDL6iDmf02Z9I66Asgz66n AsVcjvQ8glGMugNGmqUAvxRyCk9MuUjdSSd8yK/eYD1nxlW5eNTFX82+NyR7MjUs PwX5IrM70sllof5NqNrF1Tag54vcePWAZGJVVr9xYBqxyLNIwidmqe6CQGBlcJ0J 7rBC8uQQmxIGEfw2enkynKp8/g== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:28 2024 by rpki-client on console-fra.rpki-client.org