$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer File: c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer (raw, json) Hash identifier: U79XEeQPwaWMUdsmiHVbgk/osulbz5R8HE9JpacP0JI= Subject key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847BABF252DE0791BAE91B77300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Nov 2024 00:45:25 +0000 Certificate not after: Thu 04 Feb 2027 01:45:25 +0000 Subordinate resources: AS: 400260 IP: 104.232.0.0/24 IP: 192.231.84.0/23 IP: 2602:fcac::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:bf:25:2d:e0:79:1b:ae:91:b7:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 1 00:45:25 2024 GMT Not After : Feb 4 01:45:25 2027 GMT Subject: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:02:3f:2f:7c:b5:c1:4e:4a:d0:ff:8f:c1: c5:4a:a8:4e:62:23:ae:e5:29:df:b3:06:49:56:f1: 3c:f3:30:bd:d8:30:3c:50:82:9e:99:cf:f0:04:58: 23:58:ce:08:69:c8:ab:74:4f:4b:4f:aa:71:64:5c: fc:6f:4a:e7:90:e9:26:79:a1:bb:50:61:9a:81:7d: 89:a8:89:e2:c5:c4:2b:a0:23:11:bc:75:ee:f2:eb: c4:e2:98:f3:42:b1:51:1a:72:35:19:39:7f:c9:2a: a7:e3:8b:14:45:69:d6:d7:9c:57:3b:c5:8f:59:17: 13:64:56:09:a5:27:61:73:90:b0:ef:ab:5a:77:1b: bc:3f:bd:f1:6a:0f:15:67:8c:4b:b8:86:ed:89:8f: a9:77:3d:31:83:e4:e1:03:6a:bd:64:b1:65:b2:d8: 8c:68:de:c9:64:47:1d:9f:ec:90:0f:3e:c9:06:7c: b2:21:cf:18:f5:c7:f0:1b:24:13:00:2e:8f:65:fa: 4e:c7:b1:a4:71:e2:d9:72:dc:d1:12:c3:3b:bd:02: 51:49:ca:5e:de:36:cd:30:23:45:26:42:a6:33:10: e5:aa:d7:80:f4:ac:df:67:00:6d:80:55:54:21:0d: 9f:29:f5:58:f2:87:a4:c8:6a:43:57:ab:ed:a9:89: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.232.0.0/24 192.231.84.0/23 IPv6: 2602:fcac::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f9:b0:8b:73:69:53:5e:30:8f:f7:37:35:69:65:7f:6c:50: c6:b3:08:2f:e4:dc:6c:17:d5:7b:2e:69:26:a5:37:20:59:94: 5d:92:2e:43:b0:3e:68:1c:c0:09:18:fb:a6:58:49:29:33:97: f5:b3:95:34:f9:07:6f:71:f4:22:24:58:04:99:53:a2:2d:ef: fe:ee:fa:fb:ef:c1:8e:f3:4e:83:6d:86:7d:98:f5:cd:19:86: 5d:7f:87:69:1e:d6:a5:ee:e5:a2:5d:27:8a:d0:5d:18:92:74: 08:06:cd:a0:9f:a2:94:de:e5:f7:e5:63:8f:2c:63:9d:61:35: 7d:9c:c5:89:b0:ab:4e:ec:15:c1:38:3f:35:d7:8d:3f:07:1b: 47:b2:75:90:aa:f9:a9:f0:b4:a4:dc:21:34:39:c4:f1:17:42: e3:44:67:80:e2:f9:f5:5a:b9:c3:15:e5:4f:48:51:7c:0e:cc: 03:de:4d:96:45:aa:2b:b6:14:bd:dc:ed:13:49:dc:55:50:fc: af:11:5f:2d:87:e8:27:62:7a:69:fc:4b:99:67:cb:9d:45:c5: 72:7c:87:41:dd:61:5a:e5:90:22:83:37:fb:70:84:d8:30:58: 2c:36:fa:ee:b7:9d:4b:da:07:5e:54:b6:e0:e8:92:6e:18:fe: 2f:24:2c:ca -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEe6vyUt4HkbrpG3cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTEwMTAwNDUyNVoXDTI3MDIwNDAxNDUyNVowLzEtMCsGA1UEAxMk YzdmZGUwNjctNmE1Yi00YWU2LWI5YTEtZTNlYzIwOGM1OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgskCPy98tcFOStD/j8HFSqhOYiOu5SnfswZJ VvE88zC92DA8UIKemc/wBFgjWM4IacirdE9LT6pxZFz8b0rnkOkmeaG7UGGagX2J qInixcQroCMRvHXu8uvE4pjzQrFRGnI1GTl/ySqn44sURWnW15xXO8WPWRcTZFYJ pSdhc5Cw76tadxu8P73xag8VZ4xLuIbtiY+pdz0xg+ThA2q9ZLFlstiMaN7JZEcd n+yQDz7JBnyyIc8Y9cfwGyQTAC6PZfpOx7GkceLZctzREsM7vQJRScpe3jbNMCNF JkKmMxDlqteA9KzfZwBtgFVUIQ2fKfVY8oekyGpDV6vtqYnIBQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFDxpAnJtd9xMqY48mldghTU51uqsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j N2ZkZTA2Ny02YTViLTRhZTYtYjlhMS1lM2VjMjA4YzU5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M3ZmRlMDY3LTZhNWItNGFlNi1i OWExLWUzZWMyMDhjNTk0MC9jN2ZkZTA2Ny02YTViLTRhZTYtYjlhMS1lM2VjMjA4 YzU5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABo6AADBAHA51QwDgQCAAIwCAMGACYC/KwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYbhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi+bCLc2lTXjCP9zc1 aWV/bFDGswgv5NxsF9V7LmkmpTcgWZRdki5DsD5oHMAJGPumWEkpM5f1s5U0+Qdv cfQiJFgEmVOiLe/+7vr778GO806DbYZ9mPXNGYZdf4dpHtal7uWiXSeK0F0YknQI Bs2gn6KU3uX35WOPLGOdYTV9nMWJsKtO7BXBOD81140/BxtHsnWQqvmp8LSk3CE0 OcTxF0LjRGeA4vn1WrnDFeVPSFF8DswD3k2WRaorthS93O0TSdxVUPyvEV8th+gn Ynpp/EuZZ8udRcVyfIdB3WFa5ZAigzf7cITYMFgsNvrut51L2gdeVLbg6JJuGP4v JCzK -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:30 2024 by rpki-client on console-fra.rpki-client.org