$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.cer File: d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.cer (raw, json) Hash identifier: p29vAEzEqkeRGD0K7CqlhjUBe+RJqszANRaJcnCGQTU= Subject key identifier: 2C:87:3E:A1:6E:5E:0B:38:B4:2E:25:5A:D4:BC:E3:94:A2:2B:56:0C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584671526217B9F361015F8C3000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Jul 2024 00:45:21 +0000 Certificate not after: Fri 09 Oct 2026 00:45:21 +0000 Subordinate resources: AS: 46642 IP: 198.199.171.0/24 IP: 2620:99:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:71:52:62:17:b9:f3:61:01:5f:8c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 6 00:45:21 2024 GMT Not After : Oct 9 00:45:21 2026 GMT Subject: CN=d7510e93-774e-4bdb-a8e4-63e59fb8c1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:2f:bc:cc:eb:8b:fb:67:b4:26:3d:86:83: 59:49:dc:7b:21:bc:fc:80:cd:c5:61:70:51:28:0d: 1a:0e:40:69:54:91:66:b4:ee:34:ec:32:be:59:e4: a7:58:cc:98:9a:23:25:1b:b1:0a:a1:91:60:37:ae: 51:da:68:57:96:f6:55:18:06:b2:48:0a:4d:96:3a: 12:7f:c9:17:bb:b5:59:9f:d8:6a:d3:de:f7:25:7a: 88:14:13:36:7c:23:81:8e:5f:dc:26:de:a7:8f:00: f5:15:52:56:d0:23:1a:fd:ca:93:c1:16:dd:13:4c: b0:6c:dc:73:60:a5:f2:f4:c4:fa:24:43:dc:21:d7: 50:83:31:0a:56:8f:fa:c8:91:9b:d8:54:77:2f:55: 76:b5:79:1f:a1:ea:0b:f9:1f:98:cb:f5:06:45:af: ce:e3:1f:29:0b:12:8f:39:71:e9:a5:e6:f7:96:75: bd:de:b9:37:d2:15:01:a8:85:37:d0:4f:f7:e0:36: 60:c7:84:bf:da:84:70:98:b4:11:61:b7:54:ab:14: 50:39:39:b6:38:64:6d:9b:8c:2f:78:ce:26:0f:bd: 16:d0:63:23:24:44:ad:d9:5d:ea:c1:9b:7e:c0:16: 9d:17:b6:1c:ca:2b:71:08:fc:be:f8:05:77:5b:76: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:3E:A1:6E:5E:0B:38:B4:2E:25:5A:D4:BC:E3:94:A2:2B:56:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 198.199.171.0/24 IPv6: 2620:99:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46642 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8e:d2:74:f4:e8:11:bb:1a:78:4f:ee:77:86:5e:50:2a:fd: 47:79:0f:67:3a:09:4f:17:5c:74:9c:15:25:70:7e:d4:57:11: b1:11:c7:0d:b7:f4:9e:26:32:ad:e7:55:bc:73:0d:fb:ef:c9: 94:80:7c:9c:80:45:9e:08:a2:bb:21:d8:a0:45:05:6e:27:12: c7:3f:73:21:8c:aa:63:c3:02:13:6f:ed:ca:a5:92:c2:d4:bd: 85:00:a7:6e:6f:a9:18:07:b5:0b:34:d0:2e:3e:83:83:ce:d9: aa:53:63:1e:5c:21:22:00:59:c1:c5:05:11:cd:c4:98:af:30: d7:da:4c:77:88:fa:55:4c:59:36:67:f9:2f:8f:3f:15:bc:fa: 4a:0d:f5:9f:6d:9d:22:0d:66:2a:78:5a:74:7f:99:58:c5:8c: 9e:28:f5:59:d1:4a:0c:e9:58:70:32:d5:00:19:29:ee:da:05: c2:b8:b8:c6:03:ef:2f:48:50:32:3a:27:4a:b6:a2:08:d7:12: 8c:d0:6a:43:6c:11:a6:fb:da:52:64:2e:0d:c6:67:f4:4b:2e: ed:19:cc:6e:68:09:85:54:c1:c3:69:d6:dc:ae:bc:48:e6:d5: d2:45:f8:35:98:3b:7a:17:00:47:51:8c:c4:f3:a0:f9:42:1a: 00:68:3e:2f -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEZxUmIXufNhAV+MMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDcwNjAwNDUyMVoXDTI2MTAwOTAwNDUyMVowLzEtMCsGA1UEAxMk ZDc1MTBlOTMtNzc0ZS00YmRiLWE4ZTQtNjNlNTlmYjhjMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjncvvMzri/tntCY9hoNZSdx7Ibz8gM3FYXBR KA0aDkBpVJFmtO407DK+WeSnWMyYmiMlG7EKoZFgN65R2mhXlvZVGAaySApNljoS f8kXu7VZn9hq0973JXqIFBM2fCOBjl/cJt6njwD1FVJW0CMa/cqTwRbdE0ywbNxz YKXy9MT6JEPcIddQgzEKVo/6yJGb2FR3L1V2tXkfoeoL+R+Yy/UGRa/O4x8pCxKP OXHppeb3lnW93rk30hUBqIU30E/34DZgx4S/2oRwmLQRYbdUqxRQOTm2OGRtm4wv eM4mD70W0GMjJESt2V3qwZt+wBadF7YcyitxCPy++AV3W3b8wQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFCyHPqFuXgs4tC4lWtS845SiK1YMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NzUxMGU5My03NzRlLTRiZGItYThlNC02M2U1OWZiOGMxYzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q3NTEwZTkzLTc3NGUtNGJkYi1h OGU0LTYzZTU5ZmI4YzFjMC9kNzUxMGU5My03NzRlLTRiZGItYThlNC02M2U1OWZi OGMxYzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGx6swDwQCAAIwCQMHACYgAJngADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAtjIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATI7SdPToEbsaeE/ud4ZeUCr9 R3kPZzoJTxdcdJwVJXB+1FcRsRHHDbf0niYyredVvHMN++/JlIB8nIBFngiiuyHY oEUFbicSxz9zIYyqY8MCE2/tyqWSwtS9hQCnbm+pGAe1CzTQLj6Dg87ZqlNjHlwh IgBZwcUFEc3EmK8w19pMd4j6VUxZNmf5L48/Fbz6Sg31n22dIg1mKnhadH+ZWMWM nij1WdFKDOlYcDLVABkp7toFwri4xgPvL0hQMjonSraiCNcSjNBqQ2wRpvvaUmQu DcZn9Esu7RnMbmgJhVTBw2nW3K68SObV0kX4NZg7ehcAR1GMxPOg+UIaAGg+Lw== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:32 2024 by rpki-client on console-fra.rpki-client.org