$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer File: c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer (raw, json) Hash identifier: cyOcxL+pVio1kiecEsvrEp4ph9J6s/NaNU0WYxGfWzk= Subject key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845FEDC54AF7F7805CC6BBA2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 May 2024 00:45:20 +0000 Certificate not after: Sat 29 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 25945 IP: 162.253.80.0/21 IP: 198.252.202.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:fe:dc:54:af:7f:78:05:cc:6b:ba:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 26 00:45:20 2024 GMT Not After : Aug 29 00:45:20 2026 GMT Subject: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b6:11:6a:65:26:f9:c9:13:cc:82:d4:98:29: 9a:44:83:67:40:9d:b8:15:fe:64:64:33:cb:fa:7a: 50:63:cb:89:e2:0d:47:d4:b6:b7:72:0d:89:4f:5f: f2:4a:00:3e:a4:6a:84:f2:53:00:c7:e8:96:7c:1c: ce:e5:60:77:09:1a:17:3a:3b:df:d2:74:82:78:03: 78:16:37:2e:a2:69:ee:e0:9b:b4:53:a3:20:67:4c: 11:a5:c0:b1:c3:dc:80:9e:8d:db:c1:a9:66:ba:1d: 24:01:7e:d2:71:7e:e9:cd:17:09:4e:27:ab:08:e8: 68:13:eb:f8:e1:73:e5:23:75:1a:5b:85:ea:c8:35: 3d:e8:b1:46:a5:e3:ac:22:4e:07:0a:c5:5f:8d:9a: 93:5b:4c:16:69:86:af:53:78:a6:13:36:49:16:4a: a4:8e:f5:b3:76:94:07:56:b8:d0:f1:47:32:76:7d: b6:15:cb:87:da:a4:53:22:31:0c:1e:f1:a7:d6:c6: f3:7d:6a:4d:e5:f6:0b:e2:76:31:28:3f:a7:bd:1b: ca:9d:36:3f:ef:1c:79:71:e9:01:b5:8c:df:a0:d6: 24:c8:0c:6a:2c:4f:7f:43:8a:71:8f:76:19:a2:3a: 6a:34:6f:bc:b7:77:eb:d2:e0:8b:82:9e:65:95:70: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.253.80.0/21 198.252.202.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25945 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b6:eb:0f:cb:d8:23:60:57:0c:93:c3:a1:ab:54:56:a1:f4: fb:70:45:e9:a0:34:80:a5:f0:ce:17:56:fe:69:ca:5b:5c:94: 06:92:f7:2e:b1:1b:3b:3d:da:9a:48:df:cf:cc:76:de:6c:79: 50:2f:c9:6f:cb:7a:c4:16:4a:35:13:9a:53:c2:39:b1:fa:b5: db:4f:76:05:07:65:6e:59:bb:dc:18:4e:0d:c7:46:f8:d3:01: 22:0f:f2:48:89:73:b8:28:5f:a9:40:62:67:5c:f0:a1:4e:26: a3:a0:ac:d3:09:c1:22:d6:47:5d:40:3d:34:61:52:48:b3:1f: e9:42:c8:35:22:0a:68:67:fa:e3:e1:49:0f:c4:80:22:76:1a: 59:ac:a3:5d:9c:68:1a:af:73:98:99:ec:5c:44:c4:ce:60:47: b9:22:80:7a:49:cb:4c:c1:d6:63:7e:16:b8:3d:84:3a:6e:df: cd:b0:c1:fb:d8:6e:17:91:5f:b6:d9:71:15:1b:63:68:55:ca: 68:49:1e:30:3f:a9:cc:4f:d6:f3:d2:9c:d6:c1:8a:89:2a:ec: 5a:09:bb:44:4e:7d:4d:b5:e8:79:e1:73:c6:08:78:78:91:43: fd:69:ca:3d:51:2f:4b:dc:4d:71:ec:01:8b:21:aa:7a:5b:9a: a3:b6:f3:35 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEX+3FSvf3gFzGu6LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDUyNjAwNDUyMFoXDTI2MDgyOTAwNDUyMFowLzEtMCsGA1UEAxMk YzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgyZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rYRamUm+ckTzILUmCmaRINnQJ24Ff5kZDPL +npQY8uJ4g1H1La3cg2JT1/ySgA+pGqE8lMAx+iWfBzO5WB3CRoXOjvf0nSCeAN4 Fjcuomnu4Ju0U6MgZ0wRpcCxw9yAno3bwalmuh0kAX7ScX7pzRcJTierCOhoE+v4 4XPlI3UaW4XqyDU96LFGpeOsIk4HCsVfjZqTW0wWaYavU3imEzZJFkqkjvWzdpQH VrjQ8Ucydn22FcuH2qRTIjEMHvGn1sbzfWpN5fYL4nYxKD+nvRvKnTY/7xx5cekB tYzfoNYkyAxqLE9/Q4pxj3YZojpqNG+8t3fr0uCLgp5llXBLvwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBsT/MholTtTqPzouUuLBCOXSlLRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j OGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M4YzMwMWFiLTdkMjItNDZjMy04 MjExLWY2MzczZWM4MmQ1YS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2Vj ODJkNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOi/VADBAHG/MowGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZVkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAcbbrD8vYI2BXDJPDoatUVqH0+3BF6aA0gKXwzhdW /mnKW1yUBpL3LrEbOz3amkjfz8x23mx5UC/Jb8t6xBZKNROaU8I5sfq12092BQdl blm73BhODcdG+NMBIg/ySIlzuChfqUBiZ1zwoU4mo6Cs0wnBItZHXUA9NGFSSLMf 6ULINSIKaGf64+FJD8SAInYaWayjXZxoGq9zmJnsXETEzmBHuSKAeknLTMHWY34W uD2EOm7fzbDB+9huF5FfttlxFRtjaFXKaEkeMD+pzE/W89Kc1sGKiSrsWgm7RE59 TbXoeeFzxgh4eJFD/WnKPVEvS9xNcewBiyGqeluao7bzNQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:30 2024 by rpki-client on console-fra.rpki-client.org