$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer File: bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer (raw, json) Hash identifier: K6mVEA7mb4bH7ZpkKRNMnQaxZuxEP+WX80zX7B4rpXs= Subject key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584448ACACA3B47EE03734E87600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Dec 2023 01:45:15 +0000 Certificate not after: Wed 25 Mar 2026 00:45:15 +0000 Subordinate resources: IP: 67.58.192.0/19 IP: 67.213.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:48:ac:ac:a3:b4:7e:e0:37:34:e8:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 21 01:45:15 2023 GMT Not After : Mar 25 00:45:15 2026 GMT Subject: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:f7:37:f2:fc:c9:e3:37:cc:4c:45:68:cd: 36:56:00:f1:7f:c8:37:e0:68:0a:58:cc:74:f4:0a: 4b:23:72:7d:f0:01:34:3e:85:09:88:a0:fe:2b:6b: 82:8a:ac:56:dd:04:a2:cb:2a:12:fd:fa:7a:f0:15: 7c:43:75:e5:fc:5d:df:11:5b:c8:1b:c1:4b:c5:4c: d3:d0:8d:da:94:e0:65:e5:69:04:e5:38:da:59:4f: 06:3e:13:ee:1d:78:e5:3d:2f:2c:06:33:30:a2:97: 65:50:40:14:17:84:64:d2:8d:87:6d:7b:40:49:1b: c5:a1:55:c5:63:dc:ad:bc:3e:c0:28:8d:d7:1c:66: ec:c6:64:dd:a4:d5:78:21:f1:93:7f:9b:f9:27:34: 2d:da:43:c0:ed:f6:e8:4c:d7:47:c5:3e:b4:38:46: 4c:46:d5:d2:42:59:c9:51:f5:cc:e8:13:c9:a5:5f: c4:72:0d:42:9d:05:71:21:c2:8f:20:0c:1f:52:96: 81:44:1a:86:7d:18:05:b4:fb:07:fe:85:f5:93:9b: da:55:42:60:12:92:cb:0a:ac:8b:93:27:eb:cb:c9: 59:d4:87:a7:3e:79:a3:95:d8:fc:08:39:65:e9:e7: 2a:e6:2c:76:bc:f4:2e:f1:9a:fe:31:3d:56:55:ea: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 67.58.192.0/19 67.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a5:ea:7b:bd:cb:ab:92:cb:c1:07:22:9c:62:73:4d:78:ea: a8:82:7f:c9:e3:85:60:9e:6f:70:8b:a6:a9:92:50:18:8c:24: 77:a1:f9:5d:56:34:17:ba:dc:38:55:4e:2c:35:6f:53:12:85: d0:63:5d:c4:c3:2d:b7:15:fc:b0:f1:38:8f:0d:d2:a9:ba:d4: 0e:e2:32:27:8b:9f:37:27:70:27:5b:c7:2b:d8:37:e6:00:d3: ac:fa:47:45:13:2f:8f:4a:fd:c0:6d:b0:ef:39:4f:e3:2b:4f: e3:65:8b:72:7d:05:04:bd:a7:aa:ff:49:78:62:a0:87:da:73: 07:5b:44:30:01:cd:7c:60:67:99:5c:8c:62:bd:e5:7a:a7:03: d5:c1:b0:0e:a7:8a:13:3b:c4:41:20:ab:08:14:18:63:96:3f: 2a:cd:9d:b2:9f:91:e9:d6:6c:81:53:e6:eb:3b:9c:ea:67:00: 2f:f0:e4:3b:e1:69:74:63:15:c2:02:dd:26:18:55:22:52:9c: b2:aa:5e:8c:87:54:49:af:01:50:80:60:84:18:d7:a6:26:df: 59:6f:9b:e6:5b:27:bf:38:45:eb:2e:18:2e:f2:78:04:6e:e0: 44:6e:b3:b7:01:80:b8:b4:3f:fa:88:4a:ab:96:f6:c1:eb:0d: a6:64:00:09 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWERIrKyjtH7gNzTodgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIyMTAxNDUxNVoXDTI2MDMyNTAwNDUxNVowLzEtMCsGA1UEAxMk YmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVhYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUv3N/L8yeM3zExFaM02VgDxf8g34GgKWMx0 9ApLI3J98AE0PoUJiKD+K2uCiqxW3QSiyyoS/fp68BV8Q3Xl/F3fEVvIG8FLxUzT 0I3alOBl5WkE5TjaWU8GPhPuHXjlPS8sBjMwopdlUEAUF4Rk0o2HbXtASRvFoVXF Y9ytvD7AKI3XHGbsxmTdpNV4IfGTf5v5JzQt2kPA7fboTNdHxT60OEZMRtXSQlnJ UfXM6BPJpV/Ecg1CnQVxIcKPIAwfUpaBRBqGfRgFtPsH/oX1k5vaVUJgEpLLCqyL kyfry8lZ1IenPnmjldj8CDll6ecq5ix2vPQu8Zr+MT1WVepbRwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJVbUz1OqqPp4OdF/fzmSFknSy0SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i Y2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JjYTQ4YWQwLWY2MTMtNGM2Ni1i MDdhLTY0NzNkOGE1YWEyNi9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhh NWFhMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAVDOsADBARD1WAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk6Xqe73Lq5LL wQcinGJzTXjqqIJ/yeOFYJ5vcIumqZJQGIwkd6H5XVY0F7rcOFVOLDVvUxKF0GNd xMMttxX8sPE4jw3SqbrUDuIyJ4ufNydwJ1vHK9g35gDTrPpHRRMvj0r9wG2w7zlP 4ytP42WLcn0FBL2nqv9JeGKgh9pzB1tEMAHNfGBnmVyMYr3leqcD1cGwDqeKEzvE QSCrCBQYY5Y/Ks2dsp+R6dZsgVPm6zuc6mcAL/DkO+FpdGMVwgLdJhhVIlKcsqpe jIdUSa8BUIBghBjXpibfWW+b5lsnvzhF6y4YLvJ4BG7gRG6ztwGAuLQ/+ohKq5b2 wesNpmQACQ== -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:01 2024 by rpki-client on console-ams.rpki-client.org