$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer File: cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer (raw, json) Hash identifier: BbdlMaT2zNS2nR9CH1Xt97U0ubOlZVUvFohEMo/Yrgw= Subject key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847821601108CA156A90D2C3B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Oct 2024 17:39:22 +0000 Certificate not after: Tue 31 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 398940 IP: 192.245.221.0 -- 192.245.224.255 IP: 199.33.130.0 -- 199.33.134.255 IP: 2607:db40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:16:01:10:8c:a1:56:a9:0d:2c:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 11 17:39:22 2024 GMT Not After : Mar 31 00:45:15 2026 GMT Subject: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:a9:9a:f7:4e:87:c7:67:89:77:1f:7a:06: 4a:b2:58:9b:72:9a:08:e5:88:4b:0b:2b:af:25:96: 33:90:3f:37:f7:07:92:5d:35:c8:b5:97:f3:09:e7: 31:16:1f:54:a4:16:df:5b:18:37:21:a6:34:08:72: f8:67:a7:5d:b2:db:1f:c2:ef:0b:01:47:b9:8a:e6: 7a:bb:73:a6:9b:47:cf:39:3c:e7:69:43:d7:45:e1: e1:ab:ac:ed:5e:49:40:a6:a1:17:63:2e:c7:0d:ef: 97:62:09:00:c9:0e:bf:d7:5c:4f:29:a8:c0:a1:ed: 78:5f:7e:0d:bc:94:ca:32:a2:3b:a9:bb:18:2b:52: d2:32:05:6d:7b:70:85:ad:8c:66:50:99:c4:01:77: d2:24:c8:46:fe:f4:fe:25:22:eb:88:30:96:e1:fe: dc:10:af:15:26:09:8a:ca:85:f7:c4:7c:72:da:78: 48:6d:01:66:f3:a2:9c:5b:af:23:92:b9:58:69:55: 8f:d4:50:30:e8:ef:75:ff:39:9b:af:e8:b9:42:54: 7b:1a:a8:8c:5a:ce:d9:b1:38:38:a5:27:b2:bd:93: 7e:3b:77:70:ad:e2:e9:13:59:9c:dc:88:f2:09:07: 4f:c5:99:73:49:59:2f:85:12:af:f2:1c:ad:bf:d8: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.245.221.0-192.245.224.255 199.33.130.0-199.33.134.255 IPv6: 2607:db40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398940 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b3:3d:af:2e:58:86:07:2b:ad:ce:9d:9d:76:4c:b7:7a:ac: 82:f5:34:fb:ea:c2:e0:7b:af:43:b2:55:80:58:41:3d:50:f0: a0:6a:d6:c7:13:e6:68:a7:db:6d:de:17:d1:c8:9f:5a:c6:d4: 21:37:6c:7b:db:cf:41:04:83:fa:e2:05:0a:fe:4b:5d:eb:a6: 38:25:34:6e:33:63:d1:c6:9e:d2:c6:c5:8c:6d:5e:e5:e5:46: ac:63:03:2d:35:32:72:9e:ce:ff:ea:85:5f:97:f6:95:dd:2f: 94:7c:95:52:6e:a9:e9:1f:d1:2f:d8:4d:b8:06:57:e1:31:09: f4:ee:b3:c2:b3:7b:2c:6e:e0:a1:d8:62:62:d7:94:76:11:67: 39:55:10:5b:1c:58:c7:81:4b:a8:3d:9b:b4:88:30:72:5c:50: 65:fb:61:01:e9:b8:27:bd:b1:6f:99:1e:be:a3:1d:6f:49:3d: 07:1c:20:58:e8:b1:8f:d8:4f:3f:b4:c6:48:c9:5e:b9:e7:a4: 7c:1f:bb:3e:7f:55:db:67:ae:54:7b:2b:54:b4:30:1b:c1:b9: 8a:3a:db:a1:32:89:87:e2:a3:b9:f2:66:a3:cf:51:b4:b1:62: a1:2f:10:30:10:3c:3a:fd:1f:e7:5b:74:36:82:24:e8:84:b9: e9:0d:a0:60 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEeCFgEQjKFWqQ0sO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAxMTE3MzkyMloXDTI2MDMzMTAwNDUxNVowLzEtMCsGA1UEAxMk Y2Q1NGU1YmItMzBjZC00NjBhLWEzYWUtNGFiODNjMmY2MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgepmvdOh8dniXcfegZKslibcpoI5YhLCyuv JZYzkD839weSXTXItZfzCecxFh9UpBbfWxg3IaY0CHL4Z6ddstsfwu8LAUe5iuZ6 u3Omm0fPOTznaUPXReHhq6ztXklApqEXYy7HDe+XYgkAyQ6/11xPKajAoe14X34N vJTKMqI7qbsYK1LSMgVte3CFrYxmUJnEAXfSJMhG/vT+JSLriDCW4f7cEK8VJgmK yoX3xHxy2nhIbQFm86KcW68jkrlYaVWP1FAw6O91/zmbr+i5QlR7GqiMWs7ZsTg4 pSeyvZN+O3dwreLpE1mc3IjyCQdPxZlzSVkvhRKv8hytv9jIvQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFAywv/zKnTuWd6sUbrGAXAkvnKdBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j ZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2MyZjYyYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2NkNTRlNWJiLTMwY2QtNDYwYS1h M2FlLTRhYjgzYzJmNjJhMi9jZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2My ZjYyYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRAYIKwYBBQUH AQcBAf8ENTAzMCIEAgABMBwwDAMEAMD13QMEAMD14DAMAwQBxyGCAwQAxyGGMA0E AgACMAcDBQAmB9tAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWXDBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQArsz2vLliGByutzp2ddky3eqyC9TT76sLge69DslWAWEE9UPCgatbHE+Zop9tt 3hfRyJ9axtQhN2x7289BBIP64gUK/ktd66Y4JTRuM2PRxp7SxsWMbV7l5UasYwMt NTJyns7/6oVfl/aV3S+UfJVSbqnpH9Ev2E24BlfhMQn07rPCs3ssbuCh2GJi15R2 EWc5VRBbHFjHgUuoPZu0iDByXFBl+2EB6bgnvbFvmR6+ox1vST0HHCBY6LGP2E8/ tMZIyV6556R8H7s+f1XbZ65UeytUtDAbwbmKOtuhMomH4qO58majz1G0sWKhLxAw EDw6/R/nW3Q2giTohLnpDaBg -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:02 2024 by rpki-client on console-ams.rpki-client.org