$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer File: d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer (raw, json) Hash identifier: rKUPUM+ifSdG8TcrD/wn8yCiZfnELKgKAPvvUrabpCM= Subject key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846FCE8A1E3261ABB2C9B686FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Aug 2024 00:45:26 +0000 Certificate not after: Sat 28 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 393444 IP: 72.46.112.0/20 IP: 207.162.208.0/20 IP: 2605:e8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:fc:e8:a1:e3:26:1a:bb:2c:9b:68:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 25 00:45:26 2024 GMT Not After : Nov 28 01:45:26 2026 GMT Subject: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:a0:51:35:df:7c:a8:90:14:df:e0:41:12: 15:47:6a:31:4a:cb:13:1b:8c:fb:38:c3:8f:2e:b7: bb:e2:bb:d5:0c:33:59:31:4c:fd:ea:47:f7:f0:85: 73:b9:8a:2a:8b:b3:ab:2b:45:00:9c:2a:a9:b5:7d: df:25:dc:cc:92:37:92:53:ef:84:56:1d:59:f7:dd: d4:7f:2d:19:cc:8f:5f:3a:a1:8a:bb:a6:ac:ba:68: ea:48:db:e5:4d:58:cf:23:87:23:cf:46:f7:a5:a5: da:8a:b2:d7:2d:d1:a7:7d:3d:a4:87:ab:3b:b7:04: f5:67:56:f0:9d:7a:e7:64:29:cc:66:5b:16:21:66: fe:6e:ac:2d:d6:f4:2a:2d:10:64:98:3e:db:97:88: a1:a1:75:27:f8:83:7b:e1:3b:d5:09:76:10:23:0d: 65:d9:29:00:bb:49:af:7b:78:65:6b:d5:0b:0f:cd: fd:fb:3f:7d:b2:c2:bf:2f:42:e9:21:40:3d:df:29: 05:25:76:a7:78:88:4c:d0:a4:1b:80:ca:be:c4:ac: 48:c3:e5:7b:02:cf:cb:87:94:36:2f:1b:11:68:7e: 18:90:3f:27:0f:ca:51:95:dd:01:6d:e5:20:a8:4d: ff:d8:bc:32:20:21:af:b3:67:95:f5:45:53:83:96: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 72.46.112.0/20 207.162.208.0/20 IPv6: 2605:e8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393444 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:13:c8:a5:62:02:40:6d:15:fe:5e:1e:27:11:0e:f8:76:ff: 3b:45:2e:cf:c7:a3:cd:d6:f7:56:a7:73:e8:73:5a:03:17:20: 1a:27:6d:76:a5:0d:eb:60:e5:e7:43:a8:10:a5:38:7c:92:3c: d7:d3:9a:88:0b:fc:e9:4c:b8:13:f1:35:e0:14:83:13:02:7e: dd:5b:3d:85:6e:47:df:35:d2:b7:e8:77:2e:80:07:89:6a:83: d0:eb:4e:c4:db:88:2e:ee:12:94:7f:b8:1d:8f:09:aa:86:b3: 81:38:47:da:5f:3f:5e:96:a1:96:0f:61:11:15:c7:91:53:67: 00:bf:6d:a6:e5:2a:f2:29:4e:64:81:f4:2d:2e:3e:3b:8c:00: fb:bd:e5:90:34:b4:ee:05:58:2a:11:54:79:a6:c7:68:3e:f6: 24:19:c3:7c:f4:09:a1:dc:29:ec:fa:8a:18:dc:a0:c6:1a:82: 39:f4:98:f0:81:33:84:70:d7:9c:3c:a9:27:32:4b:c2:bb:c7: 5f:f8:5b:6a:f1:fb:03:a3:cb:dd:bb:0c:8f:a0:4e:d4:8b:9e: d6:bf:c3:94:e2:c7:58:af:84:84:52:bb:25:61:65:1a:32:8a: 79:b1:e6:68:57:1f:09:d9:fa:1f:60:c7:41:19:9a:57:bd:9c: 10:06:a7:8d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEb86KHjJhq7LJtob6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgyNTAwNDUyNloXDTI2MTEyODAxNDUyNlowLzEtMCsGA1UEAxMk ZDNiNzA3YWItYjRhNi00MmRlLWE3YmMtNjExNWNhNGIzYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKgUTXffKiQFN/gQRIVR2oxSssTG4z7OMOP Lre74rvVDDNZMUz96kf38IVzuYoqi7OrK0UAnCqptX3fJdzMkjeSU++EVh1Z993U fy0ZzI9fOqGKu6asumjqSNvlTVjPI4cjz0b3paXairLXLdGnfT2kh6s7twT1Z1bw nXrnZCnMZlsWIWb+bqwt1vQqLRBkmD7bl4ihoXUn+IN74TvVCXYQIw1l2SkAu0mv e3hla9ULD839+z99ssK/L0LpIUA93ykFJXaneIhM0KQbgMq+xKxIw+V7As/Lh5Q2 LxsRaH4YkD8nD8pRld0BbeUgqE3/2LwyICGvs2eV9UVTg5bk5wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFHyRxn8bR75s+zIyUO8HUmn0Va7AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k M2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0YjNiM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QzYjcwN2FiLWI0YTYtNDJkZS1h N2JjLTYxMTVjYTRiM2IzZS9kM2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0 YjNiM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARILnADBATPotAwDQQCAAIwBwMFACYF6MAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgDkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAETyKViAkBtFf5eHicR Dvh2/ztFLs/Ho83W91anc+hzWgMXIBonbXalDetg5edDqBClOHySPNfTmogL/OlM uBPxNeAUgxMCft1bPYVuR9810rfody6AB4lqg9DrTsTbiC7uEpR/uB2PCaqGs4E4 R9pfP16WoZYPYREVx5FTZwC/bablKvIpTmSB9C0uPjuMAPu95ZA0tO4FWCoRVHmm x2g+9iQZw3z0CaHcKez6ihjcoMYagjn0mPCBM4Rw15w8qScyS8K7x1/4W2rx+wOj y927DI+gTtSLnta/w5Tix1ivhIRSuyVhZRoyinmx5mhXHwnZ+h9gx0EZmle9nBAG p40= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:03 2024 by rpki-client on console-ams.rpki-client.org