$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a.cer File: d339c056-b26d-4cd7-96f4-34cf48d6627a.cer (raw, json) Hash identifier: HpzM9cAIXRJ/YoD/pozpmhsZ0X5YfytV+plfa9l76Ow= Subject key identifier: 73:F3:2A:71:25:C5:35:A2:3B:9B:A3:84:6A:D7:04:17:C0:D2:7F:A5 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584478224FF8E5BAD8FFD16A4A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/d339c056-b26d-4cd7-96f4-34cf48d6627a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jan 2024 01:45:16 +0000 Certificate not after: Sat 11 Apr 2026 00:45:16 +0000 Subordinate resources: AS: 399481 IP: 172.82.60.0/22 IP: 2606:3640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:78:22:4f:f8:e5:ba:d8:ff:d1:6a:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 7 01:45:16 2024 GMT Not After : Apr 11 00:45:16 2026 GMT Subject: CN=d339c056-b26d-4cd7-96f4-34cf48d6627a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9f:5b:99:58:6a:10:50:da:87:31:06:6f:06: 3f:e2:8d:aa:16:b0:b4:c1:5e:3d:de:50:52:06:0c: 2f:89:84:76:e8:aa:7d:69:00:97:49:40:6d:6f:72: 2f:48:3c:d8:a1:7b:9c:01:14:33:b7:b8:63:2a:47: cb:de:6f:47:da:48:d7:89:76:51:ce:ae:6e:33:a7: 88:58:fa:42:d6:77:6b:0f:30:a4:3d:5c:5c:a6:e1: 61:db:c4:22:56:e8:18:5f:74:77:70:83:3d:8b:73: 61:f9:ba:8e:8a:85:6a:ba:30:7c:63:dc:0a:e2:af: 88:c2:6f:0d:1a:6a:05:17:65:d5:95:ba:0e:c3:a1: 5d:2b:6b:84:8d:e1:ab:1d:50:fa:f3:6c:c3:25:6a: c1:75:f1:e8:59:53:5c:41:f8:57:0f:96:eb:23:23: e7:c6:71:2f:f1:55:2c:4d:74:12:36:ec:57:8a:71: 3c:2d:0f:31:0d:f9:e0:01:ce:e1:8b:2d:e8:ae:08: c9:54:fd:b5:ca:69:10:a9:35:60:70:21:c8:77:37: c5:22:63:e9:e8:5b:19:e7:99:d3:ed:88:a5:a4:46: 0d:1f:21:27:a4:f7:95:3c:d8:df:e1:fb:ea:83:30: d7:95:e3:cb:52:e7:50:7b:99:97:98:1b:ed:b0:ba: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F3:2A:71:25:C5:35:A2:3B:9B:A3:84:6A:D7:04:17:C0:D2:7F:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/d339c056-b26d-4cd7-96f4-34cf48d6627a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 172.82.60.0/22 IPv6: 2606:3640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399481 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:df:0b:e9:e3:e7:91:83:3a:c4:d9:3d:1d:ea:06:52:cd:8d: 9e:5d:d5:98:a9:fc:ca:eb:de:62:68:c3:62:ad:ab:0f:c1:93: 04:29:f6:f7:69:5a:ba:5a:87:5e:b5:cb:6f:07:df:b6:85:b5: 52:52:3f:91:c5:c5:ae:3f:34:de:c8:a6:6c:81:64:e8:d7:94: df:15:5b:59:ac:ea:93:d6:dd:7e:ca:ed:a1:d1:7a:99:74:b1: f5:ab:26:9d:25:90:cb:ab:a3:19:e9:6b:91:dc:01:a6:ed:a3: c2:15:86:45:5a:57:f6:5b:99:86:e7:d7:e0:d4:72:a6:51:4f: d2:19:cc:70:5f:b9:e4:23:35:bd:f7:4e:e3:26:9f:bf:6d:1e: 45:96:76:2e:65:49:ad:d7:c0:42:7f:d2:96:b4:d0:83:a8:63: 2b:8b:51:d7:5b:5a:63:69:e9:76:12:10:79:1b:a3:4f:ce:5a: 2c:6e:ba:d2:b2:19:86:da:53:4b:c0:5a:96:01:15:5a:28:bf: b2:bd:70:0a:36:ec:8b:37:9a:77:fa:5b:8b:59:21:d6:98:08: 73:bb:94:26:a4:10:06:23:5e:85:2d:28:f6:d2:ac:af:40:f5: 3b:8b:00:a9:68:e4:d1:49:a2:dd:b9:b6:62:32:76:0e:99:92: be:de:3d:81 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWER4Ik/45brY/9FqSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEwNzAxNDUxNloXDTI2MDQxMTAwNDUxNlowLzEtMCsGA1UEAxMk ZDMzOWMwNTYtYjI2ZC00Y2Q3LTk2ZjQtMzRjZjQ4ZDY2MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg59bmVhqEFDahzEGbwY/4o2qFrC0wV493lBS BgwviYR26Kp9aQCXSUBtb3IvSDzYoXucARQzt7hjKkfL3m9H2kjXiXZRzq5uM6eI WPpC1ndrDzCkPVxcpuFh28QiVugYX3R3cIM9i3Nh+bqOioVqujB8Y9wK4q+Iwm8N GmoFF2XVlboOw6FdK2uEjeGrHVD682zDJWrBdfHoWVNcQfhXD5brIyPnxnEv8VUs TXQSNuxXinE8LQ8xDfngAc7hiy3orgjJVP21ymkQqTVgcCHIdzfFImPp6FsZ55nT 7YilpEYNHyEnpPeVPNjf4fvqgzDXlePLUudQe5mXmBvtsLoCWQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHPzKnElxTWiO5ujhGrXBBfA0n+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MzM5YzA1Ni1iMjZkLTRjZDctOTZmNC0zNGNmNDhkNjYyN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QzMzljMDU2LWIyNmQtNGNkNy05 NmY0LTM0Y2Y0OGQ2NjI3YS9kMzM5YzA1Ni1iMjZkLTRjZDctOTZmNC0zNGNmNDhk NjYyN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKsUjwwDQQCAAIwBwMFACYGNkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhh5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAALfC+nj55GDOsTZPR3qBlLNjZ5d 1Zip/Mrr3mJow2Ktqw/BkwQp9vdpWrpah161y28H37aFtVJSP5HFxa4/NN7IpmyB ZOjXlN8VW1ms6pPW3X7K7aHRepl0sfWrJp0lkMuroxnpa5HcAabto8IVhkVaV/Zb mYbn1+DUcqZRT9IZzHBfueQjNb33TuMmn79tHkWWdi5lSa3XwEJ/0pa00IOoYyuL UddbWmNp6XYSEHkbo0/OWixuutKyGYbaU0vAWpYBFVoov7K9cAo27Is3mnf6W4tZ IdaYCHO7lCakEAYjXoUtKPbSrK9A9TuLAKlo5NFJot25tmIydg6Zkr7ePYE= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:31 2024 by rpki-client on console-fra.rpki-client.org