$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer File: e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer (raw, json) Hash identifier: ceWzRaaiMtzHcE60CU3guc2vpuubXXKpRkVmwvrCkL8= Subject key identifier: 81:06:2F:A8:8C:38:96:74:3A:C6:EC:B2:75:DF:6A:DC:F6:DB:1A:48 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285844F02DC25464999B46F7669BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Feb 2024 01:45:20 +0000 Certificate not after: Sun 24 May 2026 00:45:20 +0000 Subordinate resources: AS: 21804 IP: 24.72.0.0 -- 24.72.143.255 IP: 24.89.64.0/18 IP: 65.87.224.0/19 IP: 74.206.128.0/19 IP: 96.63.128.0 -- 96.63.175.255 IP: 184.169.48.0/20 IP: 209.34.96.0/20 IP: 2605:7200::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f0:2d:c2:54:64:99:9b:46:f7:66:9b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 19 01:45:20 2024 GMT Not After : May 24 00:45:20 2026 GMT Subject: CN=e2ad8bac-f79e-47d1-8fca-077de04d0f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:dc:34:d3:ae:e4:a2:13:1c:3d:14:ea:54: f7:cf:89:3e:69:6c:66:de:d1:40:2b:18:96:74:78: f1:e3:66:9b:36:bd:f9:af:18:dc:af:46:48:4c:65: e2:4c:c7:6d:a4:ab:68:5d:82:e1:d6:9a:de:d4:3f: bb:92:7f:cc:bf:55:fa:4c:cf:48:c1:47:04:81:2d: f4:c8:80:12:3a:17:e1:e0:18:ce:9f:78:42:12:00: c7:2b:6e:7d:29:1e:28:6a:b7:32:ab:65:1e:22:0d: 10:ac:c1:cb:b3:0c:0f:31:8b:17:82:7b:33:8b:44: 49:55:5e:b4:96:9b:73:6d:ac:2a:6b:60:76:65:88: 9d:ca:44:22:7a:6b:73:57:80:e0:a7:78:f2:a2:34: 81:90:cf:69:e7:05:62:eb:4f:c0:1d:38:5c:01:61: 0b:d1:bc:32:12:50:0a:09:42:e6:1e:64:bf:31:4e: 33:67:eb:75:5d:23:d1:c6:b4:ce:90:a0:f3:bf:6f: f8:24:a8:df:a7:18:eb:f0:d6:61:b3:05:37:06:5d: 49:ac:22:09:26:b8:26:30:9a:30:ae:41:88:44:8c: 61:94:a8:13:73:04:62:d0:6e:52:5c:5a:76:7d:4a: 29:10:53:ec:a8:fa:f3:50:fc:69:d5:9d:6e:95:0a: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:2F:A8:8C:38:96:74:3A:C6:EC:B2:75:DF:6A:DC:F6:DB:1A:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 24.72.0.0-24.72.143.255 24.89.64.0/18 65.87.224.0/19 74.206.128.0/19 96.63.128.0-96.63.175.255 184.169.48.0/20 209.34.96.0/20 IPv6: 2605:7200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ec:ed:82:1e:09:cd:be:62:4e:f3:96:ad:b2:ea:ff:28:1c: b1:92:4a:0f:08:96:4f:f9:16:69:dd:75:56:37:2e:a8:b6:07: a6:85:04:6a:cc:e1:ee:a9:07:7d:0f:a8:a9:7d:10:77:2e:2f: b2:74:f3:6c:89:37:7c:f2:2a:12:d5:48:bf:de:99:b2:fe:ce: 0f:eb:d7:fd:4c:9f:cd:11:e7:0c:a8:44:b7:20:00:83:58:98: f3:54:a1:d1:ad:2b:a4:ba:22:0d:fb:bb:ae:63:78:a0:8b:97: 5b:22:7a:63:d8:90:31:89:fa:b7:73:b3:d8:45:c6:bb:25:09: 32:a0:23:ea:c8:af:02:d6:cd:f1:c7:3b:1f:16:a7:f5:a8:a1: 6d:f3:49:17:08:18:5f:7b:ab:a3:3a:d3:3a:7b:12:b2:39:7d: db:e0:3c:8a:87:66:5a:b7:1a:3a:42:f4:02:0d:c5:6e:79:cb: ca:01:17:d7:db:d7:19:a0:99:ab:f5:52:d1:0b:8e:e6:a4:04: 0d:dd:bb:fa:51:19:6c:bd:77:37:66:54:59:a6:17:ed:9c:f1: fb:eb:26:ce:5e:49:0a:07:4f:5a:28:d7:f1:a6:02:32:6a:6c: ba:fe:b3:16:18:23:2c:66:b3:db:62:8b:32:2a:6c:a0:9f:7d: 00:38:4c:35 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWETwLcJUZJmbRvdmm6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDIxOTAxNDUyMFoXDTI2MDUyNDAwNDUyMFowLzEtMCsGA1UEAxMk ZTJhZDhiYWMtZjc5ZS00N2QxLThmY2EtMDc3ZGUwNGQwZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cvcNNOu5KITHD0U6lT3z4k+aWxm3tFAKxiW dHjx42abNr35rxjcr0ZITGXiTMdtpKtoXYLh1pre1D+7kn/Mv1X6TM9IwUcEgS30 yIASOhfh4BjOn3hCEgDHK259KR4oarcyq2UeIg0QrMHLswwPMYsXgnszi0RJVV60 lptzbawqa2B2ZYidykQiemtzV4Dgp3jyojSBkM9p5wVi60/AHThcAWEL0bwyElAK CULmHmS/MU4zZ+t1XSPRxrTOkKDzv2/4JKjfpxjr8NZhswU3Bl1JrCIJJrgmMJow rkGIRIxhlKgTcwRi0G5SXFp2fUopEFPsqPrzUPxp1Z1ulQrTywIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFIEGL6iMOJZ0OsbssnXfatz22xpIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l MmFkOGJhYy1mNzllLTQ3ZDEtOGZjYS0wNzdkZTA0ZDBmN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2UyYWQ4YmFjLWY3OWUtNDdkMS04 ZmNhLTA3N2RlMDRkMGY3YS9lMmFkOGJhYy1mNzllLTQ3ZDEtOGZjYS0wNzdkZTA0 ZDBmN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwYQYIKwYBBQUH AQcBAf8EUjBQMD8EAgABMDkwCwMDAxhIAwQEGEiAAwQGGFlAAwQFQVfgAwQFSs6A MAwDBAdgP4ADBARgP6ADBAS4qTADBATRImAwDQQCAAIwBwMFACYFcgAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICVSwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkeztgh4Jzb5iTvOWrbLq/ygc sZJKDwiWT/kWad11VjcuqLYHpoUEaszh7qkHfQ+oqX0Qdy4vsnTzbIk3fPIqEtVI v96Zsv7OD+vX/UyfzRHnDKhEtyAAg1iY81Sh0a0rpLoiDfu7rmN4oIuXWyJ6Y9iQ MYn6t3Oz2EXGuyUJMqAj6sivAtbN8cc7Hxan9aihbfNJFwgYX3urozrTOnsSsjl9 2+A8iodmWrcaOkL0Ag3FbnnLygEX19vXGaCZq/VS0QuO5qQEDd27+lEZbL13N2ZU WaYX7Zzx++smzl5JCgdPWijX8aYCMmpsuv6zFhgjLGaz22KLMipsoJ99ADhMNQ== -----END CERTIFICATE-----Generated at Fri Apr 19 01:57:25 2024 by rpki-client on console-ams.rpki-client.org