$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer File: b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer (raw, json) Hash identifier: XypwwaXhmmhThsIqORYgnqXwyyxZIgXCZu9c4ZtLUWQ= Subject key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285844B58D641B1DFEDED897EE72C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jan 2024 01:45:20 +0000 Certificate not after: Sun 03 May 2026 00:45:20 +0000 Subordinate resources: AS: 40244 IP: 66.206.32.0/20 IP: 67.231.240.0/20 IP: 94.26.27.0/24 IP: 94.26.31.0/24 IP: 94.26.44.0/24 IP: 94.26.46.0/23 IP: 94.26.67.0/24 IP: 94.26.73.0/24 IP: 94.26.84.0/23 IP: 104.129.168.0/22 IP: 162.213.120.0/22 IP: 162.250.200.0/22 IP: 163.182.168.0/21 IP: 173.198.192.0/18 IP: 173.233.64.0/19 IP: 192.111.37.0/24 IP: 198.48.48.0/20 IP: 199.223.252.0/22 IP: 208.85.0.0/21 IP: 209.240.96.0/20 IP: 2604:7c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:b5:8d:64:1b:1d:fe:de:d8:97:ee:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 29 01:45:20 2024 GMT Not After : May 3 00:45:20 2026 GMT Subject: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:65:8d:69:c5:1b:46:2b:a9:58:9c:49:29: 1a:84:69:84:d9:a0:10:28:4a:a3:ee:09:0f:92:9e: fb:a2:0e:b5:7b:84:bd:5a:50:41:8c:bd:e7:16:17: f6:ef:a8:31:6d:12:e1:64:f2:aa:0d:f7:75:60:af: 3c:40:7a:e5:d2:1c:31:7f:1b:6f:ca:6b:ab:fc:e7: 41:ba:13:fe:2c:f1:cc:d0:d5:f4:58:b3:2b:cd:69: 06:5e:52:60:00:74:61:17:ce:31:b0:98:73:b6:b3: ba:96:51:a5:70:be:63:d5:3e:d4:61:a5:25:66:cf: 73:01:13:7d:ba:10:f9:0e:bd:b4:a8:17:8b:5b:cf: 9f:5f:26:35:df:f3:88:07:1b:6b:28:16:ac:80:15: f8:51:55:a6:05:21:17:e8:09:20:6e:80:60:b6:95: d5:07:ff:cd:89:81:9c:51:1b:d9:bc:ec:91:86:e5: e5:bf:95:1b:aa:33:00:24:bc:4c:94:3a:a9:9d:47: dd:fa:15:d2:9e:11:93:d7:df:16:ee:39:cb:40:04: 00:de:08:9c:47:c9:87:31:dd:9a:82:4e:fb:8a:8e: 82:82:45:03:ec:35:f9:32:ac:01:bc:80:af:c6:21: 9b:48:06:89:b0:89:9b:36:c6:cd:e6:04:bc:98:e0: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.206.32.0/20 67.231.240.0/20 94.26.27.0/24 94.26.31.0/24 94.26.44.0/24 94.26.46.0/23 94.26.67.0/24 94.26.73.0/24 94.26.84.0/23 104.129.168.0/22 162.213.120.0/22 162.250.200.0/22 163.182.168.0/21 173.198.192.0/18 173.233.64.0/19 192.111.37.0/24 198.48.48.0/20 199.223.252.0/22 208.85.0.0/21 209.240.96.0/20 IPv6: 2604:7c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40244 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6c:9c:bc:51:48:95:fd:6d:4b:23:ca:6f:a2:5f:48:a8:14: 2f:c0:6c:fa:e3:cd:5e:ed:c2:ec:88:06:89:82:27:31:fc:6a: d3:53:aa:67:d7:8e:90:29:35:bc:ce:ca:67:86:35:1d:64:97: d4:e5:68:f7:ff:e3:7c:6f:b6:f2:96:27:35:0e:ce:30:ea:1d: 31:af:cc:66:c7:28:78:3d:93:0e:18:2b:4e:7c:72:cc:44:44: 1b:f7:14:08:bd:65:e0:a7:70:9d:3f:da:d9:5b:db:6f:4f:3f: e5:a5:4b:6e:61:c9:93:e3:c3:83:5b:17:8a:d3:61:23:60:41: 65:a2:94:90:68:28:be:52:b0:8c:84:ee:d5:66:c9:f0:76:be: b1:36:52:0a:1e:85:db:1f:d8:b6:a2:3c:ea:cb:69:59:04:e8: e1:ac:c9:31:dd:eb:15:cb:e0:9a:1e:50:a4:00:50:d9:e7:52: 3a:76:3a:c8:4e:04:2a:9b:66:e0:0d:50:4d:d6:43:7b:22:b0: e2:63:cb:68:5c:7a:13:4c:00:11:1b:99:47:51:fb:cc:09:78: 44:8e:18:bd:06:59:b5:1c:71:ca:da:87:fa:04:e6:2f:6b:2d: b2:32:b2:3d:78:8b:46:a4:9b:85:ae:5e:96:37:64:55:60:47: 96:6d:97:12 -----BEGIN CERTIFICATE----- MIIHjTCCBnWgAwIBAgIUAQ0Mn0MoWES1jWQbHf7e2JfucsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEyOTAxNDUyMFoXDTI2MDUwMzAwNDUyMFowLzEtMCsGA1UEAxMk Yjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgwNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmdljWnFG0YrqVicSSkahGmE2aAQKEqj7gkP kp77og61e4S9WlBBjL3nFhf276gxbRLhZPKqDfd1YK88QHrl0hwxfxtvymur/OdB uhP+LPHM0NX0WLMrzWkGXlJgAHRhF84xsJhztrO6llGlcL5j1T7UYaUlZs9zARN9 uhD5Dr20qBeLW8+fXyY13/OIBxtrKBasgBX4UVWmBSEX6AkgboBgtpXVB//NiYGc URvZvOyRhuXlv5UbqjMAJLxMlDqpnUfd+hXSnhGT198W7jnLQAQA3gicR8mHMd2a gk77io6CgkUD7DX5MqwBvICvxiGbSAaJsImbNsbN5gS8mODd+wIDAQABo4IEnzCC BJswHQYDVR0OBBYEFOXYiBqfB4iRA/yQMu9h30ypFv0WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i NzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I3NDk3YTNiLWEwZjktNDViZC1h YjBiLTRlNzM3Yzg4MDYzYy9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4 ODA2M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgaIGCCsGAQUF BwEHAQH/BIGSMIGPMH4EAgABMHgDBARCziADBARD5/ADBABeGhsDBABeGh8DBABe GiwDBAFeGi4DBABeGkMDBABeGkkDBAFeGlQDBAJogagDBAKi1XgDBAKi+sgDBAOj tqgDBAatxsADBAWt6UADBADAbyUDBATGMDADBALH3/wDBAPQVQADBATR8GAwDQQC AAIwBwMFACYEfAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ00MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEBsnLxRSJX9bUsjym+iX0ioFC/AbPrjzV7twuyIBomCJzH8atNTqmfXjpApNbzO ymeGNR1kl9TlaPf/43xvtvKWJzUOzjDqHTGvzGbHKHg9kw4YK058csxERBv3FAi9 ZeCncJ0/2tlb229PP+WlS25hyZPjw4NbF4rTYSNgQWWilJBoKL5SsIyE7tVmyfB2 vrE2Ugoehdsf2LaiPOrLaVkE6OGsyTHd6xXL4JoeUKQAUNnnUjp2OshOBCqbZuAN UE3WQ3sisOJjy2hcehNMABEbmUdR+8wJeESOGL0GWbUcccrah/oE5i9rLbIysj14 i0akm4WuXpY3ZFVgR5ZtlxI= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:29 2024 by rpki-client on console-fra.rpki-client.org