$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer File: d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer (raw, json) Hash identifier: hkTKfJrDb5pou5yRCeiT7FHAieuq9nnOTLjjD6LXA+k= Subject key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584641DCC09CDD4255C91374FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Jun 2024 00:45:20 +0000 Certificate not after: Tue 22 Sep 2026 00:45:20 +0000 Subordinate resources: AS: 23522 AS: 32181 AS: 54674 IP: 66.252.0.0/19 IP: 69.39.224.0/20 IP: 69.65.0.0/18 IP: 70.32.0.0/20 IP: 199.168.112.0/21 IP: 209.212.144.0/20 IP: 216.38.0.0/19 IP: 2001:1850::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:41:dc:c0:9c:dd:42:55:c9:13:74:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 19 00:45:20 2024 GMT Not After : Sep 22 00:45:20 2026 GMT Subject: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:f8:45:55:80:0d:f0:87:7c:e6:47:34:66: 2f:f0:50:ee:29:04:e5:db:01:48:28:84:24:63:55: 38:69:98:e5:05:d3:bc:d1:86:c9:23:c5:1d:32:dc: 53:8b:85:e5:44:02:d5:80:2c:65:07:94:fb:32:c3: 0d:a4:78:da:02:7e:34:85:13:c7:b6:c9:b7:9a:1e: 16:b0:bf:c4:9c:97:29:2e:ae:84:66:c4:80:e8:fb: 64:cf:8b:ee:cb:5d:4e:18:79:77:99:4a:7a:4e:61: 20:8e:e7:0e:24:3d:33:58:64:82:d9:07:0f:52:f1: 93:e8:de:bb:15:23:b2:c7:e9:c0:65:9f:d1:89:93: c7:ee:92:14:36:b5:c2:2b:da:96:30:d1:d4:83:81: 38:3b:51:c7:6a:5b:c6:56:00:5a:64:9a:de:76:13: 4c:7c:e2:aa:99:88:75:d7:c7:01:0d:df:2a:a0:2e: 64:54:65:94:89:e0:a5:53:86:e5:27:78:3d:c7:78: 46:ef:47:43:57:d4:00:d4:8b:d8:ff:a7:42:26:fa: 51:69:66:1c:6c:00:77:97:e8:34:1f:93:97:b2:72: 26:b3:93:d4:a6:31:64:f7:55:61:e6:c9:bb:c1:37: 7f:ff:b6:97:ab:d6:21:ad:a5:1d:1f:1e:39:5a:9f: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 69.39.224.0/20 69.65.0.0/18 70.32.0.0/20 199.168.112.0/21 209.212.144.0/20 216.38.0.0/19 IPv6: 2001:1850::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23522 32181 54674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d6:13:1a:58:33:81:4a:2d:17:b3:80:d2:31:6b:0f:09:b2: 8e:64:98:d3:d5:91:12:0d:ac:e1:1f:cc:cf:e0:47:d3:fa:ee: b9:b0:5f:a9:ce:86:c5:71:24:14:be:32:d1:6a:fe:f2:56:58: aa:58:c6:e1:16:29:25:f0:d3:e3:4b:02:16:57:f8:bd:e6:db: b2:b4:73:64:a5:e4:4a:d2:78:bc:83:68:dc:c3:63:a7:0c:f5: 89:d5:28:03:01:fb:ce:a0:77:91:1f:d6:83:a5:29:06:21:de: c3:d7:ef:45:c7:72:ce:0b:63:61:26:d9:d3:44:a3:24:2f:79: 15:4b:5c:68:15:d8:65:54:df:a0:1c:7b:25:f7:3d:62:5f:eb: 17:1b:83:82:38:73:2d:ca:b8:17:6d:a0:16:b6:a4:d5:87:25: 64:8f:a8:6e:63:25:fa:e7:a4:48:de:b6:12:b1:7d:f9:a1:c2: cf:15:58:4c:5b:c8:7c:3a:a9:03:08:c4:ae:96:02:15:a4:c5: 41:6e:90:5d:18:7e:01:d1:ea:e7:75:30:76:43:8e:1e:63:cf: 72:75:78:68:4b:40:6b:ae:23:c4:9e:ad:fc:7e:3f:73:4a:57: 58:88:ec:b2:17:fe:ad:51:0e:c2:34:ab:1c:a6:35:46:e6:1a: 13:6f:11:49 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEZB3MCc3UJVyRN0+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDYxOTAwNDUyMFoXDTI2MDkyMjAwNDUyMFowLzEtMCsGA1UEAxMk ZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIyMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/4RVWADfCHfOZHNGYv8FDuKQTl2wFIKIQk Y1U4aZjlBdO80YbJI8UdMtxTi4XlRALVgCxlB5T7MsMNpHjaAn40hRPHtsm3mh4W sL/EnJcpLq6EZsSA6Ptkz4vuy11OGHl3mUp6TmEgjucOJD0zWGSC2QcPUvGT6N67 FSOyx+nAZZ/RiZPH7pIUNrXCK9qWMNHUg4E4O1HHalvGVgBaZJredhNMfOKqmYh1 18cBDd8qoC5kVGWUieClU4blJ3g9x3hG70dDV9QA1IvY/6dCJvpRaWYcbAB3l+g0 H5OXsnIms5PUpjFk91Vh5sm7wTd//7aXq9YhraUdHx45Wp9A4wIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFNK5JLG9IdHZ//LHXqN6jEidkLkWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05 N2M5LWRiYzExYzEyMjEwYy9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMx MjIxMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAVC/AADBARFJ+ADBAZFQQADBARGIAADBAPHqHAD BATR1JADBAXYJgAwDQQCAAIwBwMFACABGFAwIgYIKwYBBQUHAQgBAf8EEzARoA8w DQICW+ICAn21AgMA1ZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgdYTGlgzgUotF7OA0jFrDwmyjmSY09WR Eg2s4R/Mz+BH0/ruubBfqc6GxXEkFL4y0Wr+8lZYqljG4RYpJfDT40sCFlf4vebb srRzZKXkStJ4vINo3MNjpwz1idUoAwH7zqB3kR/Wg6UpBiHew9fvRcdyzgtjYSbZ 00SjJC95FUtcaBXYZVTfoBx7Jfc9Yl/rFxuDgjhzLcq4F22gFrak1YclZI+obmMl +uekSN62ErF9+aHCzxVYTFvIfDqpAwjErpYCFaTFQW6QXRh+AdHq53UwdkOOHmPP cnV4aEtAa64jxJ6t/H4/c0pXWIjsshf+rVEOwjSrHKY1RuYaE28RSQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:31 2024 by rpki-client on console-fra.rpki-client.org