$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer File: c727dab7-c852-4d24-82ff-cf171b24f2f9.cer (raw, json) Hash identifier: dKBgD3Me1kFZXaSUvzw7ss8A8+DhvCMep/NtgjReLBU= Subject key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847E1638DCFC028D1F2F740A8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Nov 2024 20:57:25 +0000 Certificate not after: Wed 07 Jan 2026 01:45:23 +0000 Subordinate resources: AS: 394161 AS: 394363 AS: 394943 IP: 66.17.0.0/18 IP: 149.106.192.0/19 IP: 192.95.64.0/24 IP: 199.43.255.0/24 IP: 199.66.8.0/22 IP: 199.120.32.0 -- 199.120.57.255 IP: 2620:137:d000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:63:8d:cf:c0:28:d1:f2:f7:40:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 14 20:57:25 2024 GMT Not After : Jan 7 01:45:23 2026 GMT Subject: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:74:51:af:dc:13:3c:ff:d6:6a:fa:f8:d4: 9a:d0:cf:8c:26:74:b4:1b:e2:ff:87:ef:48:a5:b7: 63:1b:4e:eb:ee:92:0e:07:53:80:b8:f0:34:cb:d0: 1c:14:db:5a:5b:81:c6:50:b8:7f:a2:62:39:6a:b4: ab:ef:5e:62:c8:3c:24:49:b9:65:e1:93:5c:92:01: 1d:10:0f:70:a5:6c:18:09:32:25:0a:81:3b:a6:a7: db:8c:41:f2:fa:d3:a1:91:a4:dd:63:c2:bc:80:c2: c6:5b:5c:8e:e6:3a:cb:c6:9f:c5:19:c6:11:0d:ac: 3f:df:c3:d2:8a:b3:ff:35:69:fc:e9:69:18:c8:64: d5:65:b8:27:71:4e:5d:6c:8a:9f:22:3d:3f:01:18: e2:fd:ef:82:db:a6:2a:2d:91:dd:a1:22:e3:c3:2f: c7:44:2d:68:87:fc:6e:22:1d:d7:62:bd:f1:54:68: e8:d6:32:ba:b9:d1:4e:bf:c5:53:71:6e:2e:dc:f7: d7:13:6f:64:83:1b:2b:40:7c:62:d7:05:0f:26:41: 01:de:6f:79:ce:da:4c:15:8a:91:02:62:5c:e9:c1: 74:72:31:a2:c0:0d:a1:73:21:f0:37:ec:b6:cf:49: 55:ac:75:ee:7e:8f:9d:ad:82:09:ca:d2:83:df:48: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.17.0.0/18 149.106.192.0/19 192.95.64.0/24 199.43.255.0/24 199.66.8.0/22 199.120.32.0-199.120.57.255 IPv6: 2620:137:d000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394161 394363 394943 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:03:94:b0:fe:3d:94:6f:d1:b0:50:02:90:1c:ca:40:c9:59: e9:1c:37:c8:b3:7d:e4:bb:17:a9:8c:ce:9a:0c:44:bc:40:9a: dd:78:ad:cc:f3:ca:7e:39:69:36:33:70:9f:8b:cd:6d:dd:ba: 8a:0c:1e:f8:43:e3:5e:3b:be:00:82:92:25:ee:0c:26:6f:ad: 1b:2e:6a:e2:3e:1f:83:14:e7:58:3c:fd:ba:ff:a3:a5:f0:1a: 2b:65:bd:e2:df:22:c0:ed:f7:79:18:ca:b0:6c:bd:65:5c:c7: 99:6a:e2:f0:d9:7b:3f:f0:3b:f8:af:09:ae:4e:5d:4e:d3:25: 97:93:6c:49:77:88:dd:9d:69:53:26:cb:1c:39:4d:38:f5:4f: 38:15:df:a5:b6:66:c7:3b:d1:73:c6:ec:45:e6:3f:63:4f:61: 13:db:5b:10:a4:42:ba:78:ce:af:b0:a1:7f:77:d5:97:f8:de: af:91:bd:27:75:61:07:8b:21:21:67:5d:9a:86:6f:f0:56:7a: 81:f5:d8:85:5b:f8:49:90:8d:26:86:d7:d7:53:9e:b9:53:b7: 5b:56:cf:44:7f:2c:56:4c:b2:36:35:1c:a8:8f:76:d5:aa:3c: 2e:d7:d4:00:db:42:c6:43:da:1f:25:04:de:7d:15:68:69:e4: 68:bf:9c:de -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWEfhY43PwCjR8vdAqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTExNDIwNTcyNVoXDTI2MDEwNzAxNDUyM1owLzEtMCsGA1UEAxMk YzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRmMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM90Ua/cEzz/1mr6+NSa0M+MJnS0G+L/h+9I pbdjG07r7pIOB1OAuPA0y9AcFNtaW4HGULh/omI5arSr715iyDwkSbll4ZNckgEd EA9wpWwYCTIlCoE7pqfbjEHy+tOhkaTdY8K8gMLGW1yO5jrLxp/FGcYRDaw/38PS irP/NWn86WkYyGTVZbgncU5dbIqfIj0/ARji/e+C26YqLZHdoSLjwy/HRC1oh/xu Ih3XYr3xVGjo1jK6udFOv8VTcW4u3PfXE29kgxsrQHxi1wUPJkEB3m95ztpMFYqR AmJc6cF0cjGiwA2hcyHwN+y2z0lVrHXufo+drYIJytKD30jebQIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFGEfWl8XVf3V0KNOII3UjMwdr2kaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M3MjdkYWI3LWM4NTItNGQyNC04 MmZmLWNmMTcxYjI0ZjJmOS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIy NGYyZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMDIEAgABMCwDBAZCEQADBAWVasADBADAX0ADBADHK/8DBALHQggw DAMEBcd4IAMEAcd4ODAOBAIAAjAIAwYAJiABN9AwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDBgOxAgMGBHsCAwYGvzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkA5Sw/j2Ub9GwUAKQHMpAyVnp HDfIs33kuxepjM6aDES8QJrdeK3M88p+OWk2M3Cfi81t3bqKDB74Q+NeO74AgpIl 7gwmb60bLmriPh+DFOdYPP26/6Ol8BorZb3i3yLA7fd5GMqwbL1lXMeZauLw2Xs/ 8Dv4rwmuTl1O0yWXk2xJd4jdnWlTJsscOU049U84Fd+ltmbHO9FzxuxF5j9jT2ET 21sQpEK6eM6vsKF/d9WX+N6vkb0ndWEHiyEhZ12ahm/wVnqB9diFW/hJkI0mhtfX U565U7dbVs9EfyxWTLI2NRyoj3bVqjwu19QA20LGQ9ofJQTefRVoaeRov5ze -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:01 2024 by rpki-client on console-ams.rpki-client.org