$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer File: c003af2f-f626-4f2a-a59d-433951f53b3b.cer (raw, json) Hash identifier: BgghpGro+683S7U6acH/sr65Ku7gEUCGv5i8CHedkfE= Subject key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846CA4B4A45F85454796B401080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Aug 2024 21:38:00 +0000 Certificate not after: Mon 09 Nov 2026 22:38:00 +0000 Subordinate resources: AS: 400147 IP: 204.17.232.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:ca:4b:4a:45:f8:54:54:79:6b:40:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 6 21:38:00 2024 GMT Not After : Nov 9 22:38:00 2026 GMT Subject: CN=c003af2f-f626-4f2a-a59d-433951f53b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:0d:66:af:46:4f:26:b4:8b:b1:82:42:53: f8:cc:6e:a2:88:8f:e6:b1:e6:f4:1c:85:3b:4e:2d: 63:0e:c6:3c:f2:ea:3b:c7:5d:49:d0:ae:c9:b5:04: ee:79:0a:f7:88:da:c7:d0:69:04:83:77:e4:87:ee: 46:91:8e:d7:80:f7:81:f7:c2:ea:8e:27:03:f4:7e: 37:89:fa:93:87:04:9f:c1:38:4a:70:a9:18:8f:31: 1b:f7:d8:ef:60:cc:aa:29:11:9f:ec:df:69:ac:d4: d7:a7:90:0e:3d:5e:15:1b:9b:0c:31:b3:82:60:5c: 2e:71:f0:8b:40:62:4b:b5:f3:b6:19:0c:5f:c3:2f: 7c:37:d2:3d:e5:65:8c:f7:00:ae:39:67:96:eb:7d: ba:df:80:15:38:f0:a2:d7:ed:41:9d:b9:99:0f:aa: ea:ce:06:27:89:96:8f:5f:7f:a7:fc:f7:5f:64:b4: 74:9b:e0:aa:e8:d6:d7:88:07:1e:a6:18:6d:69:51: 2c:3b:f5:74:55:36:30:70:c3:e9:f5:3c:63:e7:9e: bc:e4:b2:fa:ef:58:38:93:d6:5a:c1:32:50:b9:2b: c4:7f:24:63:95:aa:34:ed:df:6e:ca:03:50:77:41: 8a:ba:fd:e0:5f:f6:0c:26:94:61:9c:2d:db:b7:0d: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 204.17.232.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400147 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c6:0a:37:44:a5:f2:a2:d5:cd:8e:14:30:0e:22:f4:8d:44: cd:b5:46:d4:7e:03:a1:b6:cf:eb:39:c8:0b:fb:61:02:86:9f: c8:e7:31:9a:80:28:bc:35:1c:a4:ec:64:2c:90:a8:9a:73:17: 29:7b:80:af:bf:e9:15:ba:d6:ac:4c:7a:34:12:1b:bc:75:2c: 86:c7:96:2e:d8:91:64:90:71:87:bb:7b:f4:ff:73:8d:41:6e: 50:b7:51:fb:c2:9e:f3:83:56:45:01:71:ea:bb:f9:65:2a:4a: bf:93:8f:5b:31:73:38:9f:4a:0b:d1:7b:5a:a0:82:74:2c:c1: 50:80:2f:3a:9f:70:a1:b6:d8:ce:fc:19:41:6f:81:88:93:ae: fd:dd:ce:bc:62:9a:c6:d8:09:e0:b7:3e:e2:f9:64:08:a4:87: fb:bd:3e:f5:35:02:cc:32:fc:f6:a0:42:13:95:a8:c6:13:a6: fb:6c:61:da:8b:76:cf:2b:23:a6:81:b6:ea:3f:6f:92:fd:10: 6a:3a:d8:8f:67:63:2f:80:b1:88:17:7c:17:d2:2e:6d:82:b9: ce:d6:82:0d:97:98:79:43:73:32:2f:6f:4b:4a:21:af:ef:e1: ef:7e:4b:13:dc:c0:af:c1:de:f2:fe:f2:3a:dd:bd:3a:53:ee: c1:7e:e3:76 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEbKS0pF+FRUeWtAEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgwNjIxMzgwMFoXDTI2MTEwOTIyMzgwMFowLzEtMCsGA1UEAxMk YzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUzYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYANZq9GTya0i7GCQlP4zG6iiI/mseb0HIU7 Ti1jDsY88uo7x11J0K7JtQTueQr3iNrH0GkEg3fkh+5GkY7XgPeB98LqjicD9H43 ifqThwSfwThKcKkYjzEb99jvYMyqKRGf7N9prNTXp5AOPV4VG5sMMbOCYFwucfCL QGJLtfO2GQxfwy98N9I95WWM9wCuOWeW632634AVOPCi1+1BnbmZD6rqzgYniZaP X3+n/PdfZLR0m+Cq6NbXiAcephhtaVEsO/V0VTYwcMPp9Txj55685LL671g4k9Za wTJQuSvEfyRjlao07d9uygNQd0GKuv3gX/YMJpRhnC3btw2scQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKHbF+Y1zy3LqlMv6ADQkvGUJK6CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j MDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2MwMDNhZjJmLWY2MjYtNGYyYS1h NTlkLTQzMzk1MWY1M2IzYi9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFm NTNiM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMEegwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhsTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKLGCjdEpfKi1c2OFDAOIvSNRM21RtR+A6G2z+s5yAv7YQKG n8jnMZqAKLw1HKTsZCyQqJpzFyl7gK+/6RW61qxMejQSG7x1LIbHli7YkWSQcYe7 e/T/c41BblC3UfvCnvODVkUBceq7+WUqSr+Tj1sxczifSgvRe1qggnQswVCALzqf cKG22M78GUFvgYiTrv3dzrximsbYCeC3PuL5ZAikh/u9PvU1Aswy/PagQhOVqMYT pvtsYdqLds8rI6aBtuo/b5L9EGo62I9nYy+AsYgXfBfSLm2Cuc7Wgg2XmHlDczIv b0tKIa/v4e9+SxPcwK/B3vL+8jrdvTpT7sF+43Y= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:01 2024 by rpki-client on console-ams.rpki-client.org