$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer File: d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer (raw, json) Hash identifier: /RsuK/W63aBcLNoNV9Vn306nW3lZ44ikNeU7BgMryFM= Subject key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858478E143417BBF3C7464A8D3648 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Oct 2024 00:45:26 +0000 Certificate not after: Tue 19 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 61262 AS: 394298 IP: 103.228.96.0/22 IP: 170.76.176.0/22 IP: 185.39.52.0/22 IP: 185.81.136.0/22 IP: 192.234.88.0/24 IP: 203.89.104.0/22 IP: 2606:7a40::/32 IP: 2620:cc:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:14:34:17:bb:f3:c7:46:4a:8d:36:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 16 00:45:26 2024 GMT Not After : Jan 19 01:45:26 2027 GMT Subject: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:dc:9e:87:58:c3:99:e2:6f:83:82:9e:a3: 74:04:23:f9:1e:3e:4b:2e:9a:52:29:47:03:4f:e6: 79:dc:47:8b:83:ad:30:f4:4e:e5:34:05:c0:f5:c3: 6e:d3:92:8e:d3:98:35:2a:47:1e:05:06:8e:e7:36: 4d:6d:e0:d4:ca:0c:70:07:c5:d2:dc:a4:1e:0b:05: 83:47:2a:30:4f:c6:b8:38:77:79:f3:bb:9a:d8:c8: f6:6c:b5:88:e3:14:88:0c:db:00:24:2f:dc:56:93: 29:2e:aa:51:9c:85:0a:72:9c:d5:ff:77:75:7d:b2: 3a:c9:72:f3:e7:02:c9:b5:b1:0b:c7:56:f4:17:d5: 82:f8:8e:8a:5a:3d:01:d8:7d:8d:57:9e:25:d9:17: da:33:22:85:bd:a9:66:6e:74:2f:9f:21:5d:39:be: 0a:d9:5c:dd:a1:7f:fc:26:c5:74:cc:e6:e8:0a:44: 87:08:58:8f:5a:fa:06:c0:3d:a6:4f:78:0b:7b:36: 0d:dc:0f:6c:12:5e:cc:03:57:68:e8:23:e7:25:63: 59:37:89:d0:f1:e7:90:88:23:45:d7:82:42:7e:29: a4:b9:70:cc:d1:52:a8:1c:ae:2b:14:ec:bd:27:d7: e0:98:3f:1b:0d:c8:0c:03:86:a8:74:82:26:53:9e: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 103.228.96.0/22 170.76.176.0/22 185.39.52.0/22 185.81.136.0/22 192.234.88.0/24 203.89.104.0/22 IPv6: 2606:7a40::/32 2620:cc:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61262 394298 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:de:8a:ac:d1:f5:57:44:c4:12:e3:a9:cf:bd:c6:32:be:ee: 9e:fc:72:e6:16:be:bf:8f:ce:a5:5c:e0:7f:c4:8a:6a:8d:e2: ca:eb:b5:80:56:fd:bf:ae:c4:94:85:ca:9b:5d:35:96:cc:c9: 7f:a6:24:24:c7:b2:52:7f:46:db:a2:26:f3:75:29:15:c7:7d: ca:e0:30:2a:89:7b:2d:67:7f:e3:da:f0:25:53:58:fd:a0:3d: 95:cc:25:04:6f:cf:0e:da:47:aa:83:f9:7a:93:f9:33:4d:2a: d8:8c:9f:75:37:c3:c6:30:f1:fa:39:da:22:79:79:c2:12:68: b3:71:c6:c2:9f:fe:15:19:3b:bc:c9:43:0d:f6:30:7e:e6:10: 96:01:09:ed:ee:4b:6d:3d:ec:5a:6c:16:45:90:61:88:ca:a2: bb:39:5f:9f:60:da:99:21:05:59:ad:44:9e:11:c4:77:a5:d4: 4f:d7:de:81:c7:7e:0f:d1:40:07:2a:1b:b8:fd:97:74:f1:71: 2b:b1:34:3e:cd:84:cd:2a:59:05:8a:44:24:da:bc:0c:94:be: fd:2f:07:77:78:b1:bf:ce:8c:9a:65:05:37:40:f9:5f:1b:19: 0e:15:d0:d1:04:1b:b9:7c:ea:c2:e8:a7:5a:49:13:f0:19:3f: 4f:38:18:10 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEeOFDQXu/PHRkqNNkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAxNjAwNDUyNloXDTI3MDExOTAxNDUyNlowLzEtMCsGA1UEAxMk ZDQ1YzYyMTEtMTcxNy00YTc1LWE4MmEtMWQ3YTdhYmFjMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo/cnodYw5nib4OCnqN0BCP5Hj5LLppSKUcD T+Z53EeLg60w9E7lNAXA9cNu05KO05g1KkceBQaO5zZNbeDUygxwB8XS3KQeCwWD RyowT8a4OHd587ua2Mj2bLWI4xSIDNsAJC/cVpMpLqpRnIUKcpzV/3d1fbI6yXLz 5wLJtbELx1b0F9WC+I6KWj0B2H2NV54l2RfaMyKFvalmbnQvnyFdOb4K2VzdoX/8 JsV0zOboCkSHCFiPWvoGwD2mT3gLezYN3A9sEl7MA1do6CPnJWNZN4nQ8eeQiCNF 14JCfimkuXDM0VKoHK4rFOy9J9fgmD8bDcgMA4aodIImU54UPQIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFB0d/bQJFzq9/i+gIytMKqN6+gHZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2FiYWMyYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q0NWM2MjExLTE3MTctNGE3NS1h ODJhLTFkN2E3YWJhYzJhZC9kNDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2Fi YWMyYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCoEAgABMCQDBAJn5GADBAKqTLADBAK5JzQDBAK5UYgDBADA6lgD BALLWWgwFgQCAAIwEAMFACYGekADBwAmIADMwAAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAO9OAgMGBDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI96KrNH1V0TEEuOpz73GMr7unvxy5ha+ v4/OpVzgf8SKao3iyuu1gFb9v67ElIXKm101lszJf6YkJMeyUn9G26Im83UpFcd9 yuAwKol7LWd/49rwJVNY/aA9lcwlBG/PDtpHqoP5epP5M00q2IyfdTfDxjDx+jna Inl5whJos3HGwp/+FRk7vMlDDfYwfuYQlgEJ7e5LbT3sWmwWRZBhiMqiuzlfn2Da mSEFWa1EnhHEd6XUT9fegcd+D9FAByobuP2XdPFxK7E0Ps2EzSpZBYpEJNq8DJS+ /S8Hd3ixv86MmmUFN0D5XxsZDhXQ0QQbuXzqwuinWkkT8Bk/TzgYEA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:03 2024 by rpki-client on console-ams.rpki-client.org