$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer File: df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer (raw, json) Hash identifier: RupXak2E/+o5Hz8oUYWUNgcCVhrGqSkxdJYCeuJMfto= Subject key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858477A896AAE57523C3924446440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Oct 2024 00:45:26 +0000 Certificate not after: Tue 12 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 25649 IP: 74.112.192.0/21 IP: 104.153.204.0/22 IP: 129.220.224.0/19 IP: 142.147.84.0/22 IP: 143.55.84.0/22 IP: 143.55.152.0/23 IP: 161.38.42.0/23 IP: 162.33.240.0/20 IP: 172.110.240.0/22 IP: 192.34.208.0/22 IP: 198.207.148.0/22 IP: 199.187.232.0/22 IP: 208.74.8.0/22 IP: 208.86.44.0/22 IP: 2607:fa38::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7a:89:6a:ae:57:52:3c:39:24:44:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 9 00:45:26 2024 GMT Not After : Jan 12 01:45:26 2027 GMT Subject: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:cc:41:45:a6:1b:b7:27:8d:1e:67:b5:92: 46:1e:82:be:62:43:3c:8e:5c:85:cd:28:21:22:de: de:82:a8:e0:e0:de:0c:3f:f9:75:11:de:e5:08:f9: 7b:2f:2f:52:53:5b:61:1e:e4:1d:5c:10:8a:3d:53: a5:96:43:03:6f:bd:63:97:f7:1f:5e:87:af:66:4b: 77:76:85:98:3b:80:c0:a7:88:23:4b:4c:da:4d:1f: e8:c0:ec:f8:d3:03:a1:bb:cb:70:bd:0a:cd:94:a0: 7c:34:31:d7:12:89:ce:c4:fa:2d:36:da:37:40:5e: e3:ee:d5:12:41:70:51:eb:b4:60:5d:c0:a2:ac:ff: e5:74:f0:1f:fb:24:80:7e:13:59:8f:a1:c3:98:b6: 74:ac:37:2b:bc:5d:56:b1:9a:31:ff:f8:92:31:87: ac:67:c1:08:3b:e7:67:c1:59:ab:f8:68:7d:4d:db: d5:91:80:60:83:90:f7:98:09:ae:e1:d5:11:91:d8: 4f:90:a5:42:90:cc:aa:76:ff:2f:4b:4f:35:66:6f: 5e:5e:fe:06:08:0c:3b:e5:fd:8c:06:d8:b4:07:31: 4d:0a:7b:e2:11:67:64:02:8b:29:79:ad:06:6e:8e: da:c1:62:0b:87:0c:b3:cf:ab:3e:07:0a:a2:34:0f: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.112.192.0/21 104.153.204.0/22 129.220.224.0/19 142.147.84.0/22 143.55.84.0/22 143.55.152.0/23 161.38.42.0/23 162.33.240.0/20 172.110.240.0/22 192.34.208.0/22 198.207.148.0/22 199.187.232.0/22 208.74.8.0/22 208.86.44.0/22 IPv6: 2607:fa38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25649 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8c:74:89:91:19:7e:51:cc:6b:a0:85:ca:f9:63:f2:78:5c: 09:6e:d8:c8:f1:de:f2:62:53:24:83:6b:59:57:ca:43:02:f4: c3:c2:56:d0:cd:c7:e9:e0:02:06:5b:45:9b:1e:5a:69:b3:47: 46:55:98:85:17:69:63:d5:63:69:c0:95:48:ed:0b:1f:4b:22: 5c:6f:48:1c:d0:bc:26:4e:29:e5:35:43:76:de:2b:7f:4f:8a: fb:e9:1d:6c:12:36:d2:41:a5:b3:01:aa:92:60:be:94:af:a1: 9a:cf:68:f2:68:35:5b:b7:88:ff:e4:62:67:db:78:e7:99:a3: dc:d5:5c:ac:30:91:61:d1:90:8b:b3:87:12:ff:82:10:a6:15: 96:b9:8f:77:c5:f1:bf:34:0f:92:4e:21:ca:45:30:65:2e:19: 31:13:b0:e2:72:a4:1a:9a:94:00:94:60:cb:0d:a4:ad:98:ca: 28:83:67:8b:2b:93:ff:1a:b8:48:da:cc:30:84:db:42:89:20: ea:da:24:35:24:2b:64:07:20:2f:44:bb:9a:76:bd:5e:a9:f3: 11:aa:26:da:36:d4:a2:6c:7a:60:ab:2b:ee:4e:17:97:fd:a0: a9:b7:f8:af:69:5e:10:34:58:13:b7:50:a7:f6:72:91:b0:da: c9:54:3a:ac -----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWEd6iWquV1I8OSREZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAwOTAwNDUyNloXDTI3MDExMjAxNDUyNlowLzEtMCsGA1UEAxMk ZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAyZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd/MQUWmG7cnjR5ntZJGHoK+YkM8jlyFzSgh It7egqjg4N4MP/l1Ed7lCPl7Ly9SU1thHuQdXBCKPVOllkMDb71jl/cfXoevZkt3 doWYO4DAp4gjS0zaTR/owOz40wOhu8twvQrNlKB8NDHXEonOxPotNto3QF7j7tUS QXBR67RgXcCirP/ldPAf+ySAfhNZj6HDmLZ0rDcrvF1WsZox//iSMYesZ8EIO+dn wVmr+Gh9TdvVkYBgg5D3mAmu4dURkdhPkKVCkMyqdv8vS081Zm9eXv4GCAw75f2M Bti0BzFNCnviEWdkAospea0Gbo7awWILhwyzz6s+BwqiNA803wIDAQABo4IEdzCC BHMwHQYDVR0OBBYEFPxgH30nLT7ee0lGYrICByxnA6ICMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k ZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RmMGNmNmZmLTZmNjktNDFiNC1h YTY3LTI2ZDBhYmEwMmU4ZS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJh MDJlOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwfAYIKwYBBQUH AQcBAf8EbTBrMFoEAgABMFQDBANKcMADBAJomcwDBAWB3OADBAKOk1QDBAKPN1QD BAGPN5gDBAGhJioDBASiIfADBAKsbvADBALAItADBALGz5QDBALHu+gDBALQSggD BALQViwwDQQCAAIwBwMFACYH+jgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICZDEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX4x0iZEZflHMa6CFyvlj8nhcCW7YyPHe8mJTJINrWVfKQwL0w8JW 0M3H6eACBltFmx5aabNHRlWYhRdpY9VjacCVSO0LH0siXG9IHNC8Jk4p5TVDdt4r f0+K++kdbBI20kGlswGqkmC+lK+hms9o8mg1W7eI/+RiZ9t455mj3NVcrDCRYdGQ i7OHEv+CEKYVlrmPd8XxvzQPkk4hykUwZS4ZMROw4nKkGpqUAJRgyw2krZjKKINn iyuT/xq4SNrMMITbQokg6tokNSQrZAcgL0S7mna9XqnzEaom2jbUomx6YKsr7k4X l/2gqbf4r2leEDRYE7dQp/ZykbDayVQ6rA== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:33 2024 by rpki-client on console-fra.rpki-client.org