$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer File: d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer (raw, json) Hash identifier: rI270GOfb2cTP1eruzefFN57nnq4CWSk2iEFos7Rs5Q= Subject key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842CE8741F25FC38D0874D3EB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:19 +0000 Certificate not after: Thu 16 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 61262 AS: 394298 IP: 103.228.96.0/22 IP: 170.76.176.0/22 IP: 185.39.52.0/22 IP: 185.81.136.0/22 IP: 192.234.88.0/24 IP: 203.89.104.0/22 IP: 2606:7a40::/32 IP: 2620:cc:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:41:f2:5f:c3:8d:08:74:d3:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 7 14:54:19 2023 GMT Not After : Oct 16 00:45:16 2025 GMT Subject: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:dc:9e:87:58:c3:99:e2:6f:83:82:9e:a3: 74:04:23:f9:1e:3e:4b:2e:9a:52:29:47:03:4f:e6: 79:dc:47:8b:83:ad:30:f4:4e:e5:34:05:c0:f5:c3: 6e:d3:92:8e:d3:98:35:2a:47:1e:05:06:8e:e7:36: 4d:6d:e0:d4:ca:0c:70:07:c5:d2:dc:a4:1e:0b:05: 83:47:2a:30:4f:c6:b8:38:77:79:f3:bb:9a:d8:c8: f6:6c:b5:88:e3:14:88:0c:db:00:24:2f:dc:56:93: 29:2e:aa:51:9c:85:0a:72:9c:d5:ff:77:75:7d:b2: 3a:c9:72:f3:e7:02:c9:b5:b1:0b:c7:56:f4:17:d5: 82:f8:8e:8a:5a:3d:01:d8:7d:8d:57:9e:25:d9:17: da:33:22:85:bd:a9:66:6e:74:2f:9f:21:5d:39:be: 0a:d9:5c:dd:a1:7f:fc:26:c5:74:cc:e6:e8:0a:44: 87:08:58:8f:5a:fa:06:c0:3d:a6:4f:78:0b:7b:36: 0d:dc:0f:6c:12:5e:cc:03:57:68:e8:23:e7:25:63: 59:37:89:d0:f1:e7:90:88:23:45:d7:82:42:7e:29: a4:b9:70:cc:d1:52:a8:1c:ae:2b:14:ec:bd:27:d7: e0:98:3f:1b:0d:c8:0c:03:86:a8:74:82:26:53:9e: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 103.228.96.0/22 170.76.176.0/22 185.39.52.0/22 185.81.136.0/22 192.234.88.0/24 203.89.104.0/22 IPv6: 2606:7a40::/32 2620:cc:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61262 394298 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:75:b6:46:e4:ed:0a:ed:c3:03:64:97:e3:ad:5a:79:8e:22: f5:40:ff:b7:0e:ed:98:e8:89:4b:c2:4e:25:8e:ac:0f:c9:d9: 3a:74:cb:e8:3c:7d:b2:a7:83:f1:a1:66:fe:b7:d4:8a:5a:d0: 99:67:4f:d7:52:9e:a3:7e:ea:86:6f:09:d1:d7:66:81:15:12: b0:08:51:b5:58:f4:3c:11:2c:ed:45:4d:ff:23:3f:3a:a9:e6: db:cd:ef:66:7a:64:18:a7:71:2b:dc:64:22:06:88:2f:9a:80: f8:c3:e4:6b:ab:a1:d5:2a:76:8a:55:b6:c4:20:21:1d:e4:19: 4f:14:f5:11:9f:6b:6f:af:59:3a:ac:83:a1:d0:cc:68:2f:d4: 9f:bb:6a:a3:63:bf:28:67:a7:9c:c6:89:c8:dc:bd:b0:86:d6: 4d:0b:d2:b2:2a:38:1f:fa:21:93:71:7b:d0:af:e6:91:10:06: a3:24:a2:bc:0e:8c:89:24:4f:33:74:48:0d:e2:6f:43:68:84: 43:f8:11:c0:3e:7b:b7:3b:5b:90:49:1d:6e:1a:84:85:81:07: 30:f4:1c:e0:0b:3f:76:23:e3:92:b9:bd:51:68:cc:3f:93:9f: 0a:cd:99:19:d9:2d:fa:d9:e8:de:14:10:bd:46:9a:ae:96:e2: 5c:88:f5:58 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWELOh0HyX8ONCHTT60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDgwNzE0NTQxOVoXDTI1MTAxNjAwNDUxNlowLzEtMCsGA1UEAxMk ZDQ1YzYyMTEtMTcxNy00YTc1LWE4MmEtMWQ3YTdhYmFjMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo/cnodYw5nib4OCnqN0BCP5Hj5LLppSKUcD T+Z53EeLg60w9E7lNAXA9cNu05KO05g1KkceBQaO5zZNbeDUygxwB8XS3KQeCwWD RyowT8a4OHd587ua2Mj2bLWI4xSIDNsAJC/cVpMpLqpRnIUKcpzV/3d1fbI6yXLz 5wLJtbELx1b0F9WC+I6KWj0B2H2NV54l2RfaMyKFvalmbnQvnyFdOb4K2VzdoX/8 JsV0zOboCkSHCFiPWvoGwD2mT3gLezYN3A9sEl7MA1do6CPnJWNZN4nQ8eeQiCNF 14JCfimkuXDM0VKoHK4rFOy9J9fgmD8bDcgMA4aodIImU54UPQIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFB0d/bQJFzq9/i+gIytMKqN6+gHZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2FiYWMyYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q0NWM2MjExLTE3MTctNGE3NS1h ODJhLTFkN2E3YWJhYzJhZC9kNDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2Fi YWMyYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCoEAgABMCQDBAJn5GADBAKqTLADBAK5JzQDBAK5UYgDBADA6lgD BALLWWgwFgQCAAIwEAMFACYGekADBwAmIADMwAAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAO9OAgMGBDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcHW2RuTtCu3DA2SX461aeY4i9UD/tw7t mOiJS8JOJY6sD8nZOnTL6Dx9sqeD8aFm/rfUilrQmWdP11Keo37qhm8J0ddmgRUS sAhRtVj0PBEs7UVN/yM/Oqnm283vZnpkGKdxK9xkIgaIL5qA+MPka6uh1Sp2ilW2 xCAhHeQZTxT1EZ9rb69ZOqyDodDMaC/Un7tqo2O/KGennMaJyNy9sIbWTQvSsio4 H/ohk3F70K/mkRAGoySivA6MiSRPM3RIDeJvQ2iEQ/gRwD57tztbkEkdbhqEhYEH MPQc4As/diPjkrm9UWjMP5OfCs2ZGdkt+tno3hQQvUaarpbiXIj1WA== -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:21 2024 by rpki-client on console-fra.rpki-client.org