$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer File: e3370a8c-7e39-490d-985a-a478ce54459f.cer (raw, json) Hash identifier: R8MNBKRcJhO1pPMMrMcXG4Lc4/yQ9WzkrLOoQhKDn1U= Subject key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858475518ECF35D014ABA67E1DB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Sep 2024 14:53:53 +0000 Certificate not after: Tue 29 Dec 2026 15:53:53 +0000 Subordinate resources: AS: 4393 AS: 12039 AS: 14320 AS: 33336 AS: 393920 IP: 204.52.234.0 -- 204.52.236.255 IP: 209.251.192.0 -- 209.251.194.255 IP: 209.251.198.0 -- 209.251.223.255 IP: 2620:9f:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:55:18:ec:f3:5d:01:4a:ba:67:e1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 25 14:53:53 2024 GMT Not After : Dec 29 15:53:53 2026 GMT Subject: CN=e3370a8c-7e39-490d-985a-a478ce54459f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:15:b7:c4:52:f6:06:d5:09:bb:90:0e:26: dc:36:4c:88:57:d1:2e:30:7e:60:a6:90:ca:9f:0d: b8:95:dd:43:3e:1c:d0:51:3a:ce:06:1d:0c:76:29: 49:ee:ee:39:44:23:8c:d2:73:05:0f:b3:ad:41:ab: 96:9b:fc:08:9f:48:63:7d:12:c0:82:b1:09:e5:80: a2:7b:ed:a8:5b:a7:88:9b:b0:af:eb:fb:67:80:7a: 9a:97:84:c2:3a:f0:54:b4:fe:8c:60:51:fe:d4:8b: 37:bc:cd:e3:08:c2:26:2c:b8:ce:34:e4:d5:0e:8f: 4d:2e:1f:46:ed:85:54:bd:52:a6:11:95:48:27:31: 4c:1a:25:28:9d:8e:06:20:b4:54:53:e0:45:38:ba: cd:80:62:44:d2:08:b6:35:f6:1f:d3:ca:c3:7f:0d: d2:18:4b:05:67:8d:28:99:d8:0b:c7:c0:c7:f0:74: 0e:49:78:3f:a3:19:1d:26:80:ae:08:6f:33:c1:8d: f8:22:62:2f:3c:64:09:51:29:21:4a:74:60:a5:f7: 3a:11:60:be:f6:b3:66:0f:5c:64:61:c6:36:d7:41: c6:20:57:d9:99:02:ce:39:3d:86:af:35:77:30:b4: 7e:6e:00:a5:fd:50:87:d6:bd:ce:8f:7c:7b:7c:4a: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 204.52.234.0-204.52.236.255 209.251.192.0-209.251.194.255 209.251.198.0-209.251.223.255 IPv6: 2620:9f:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4393 12039 14320 33336 393920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b3:5d:dd:72:44:d5:24:77:e0:86:4f:b2:e6:79:fb:12:96: 15:b8:9f:fc:b7:54:ae:a7:e5:e0:91:34:49:75:0c:03:63:bf: 8d:7d:30:8a:3c:d8:bc:43:f9:dd:2a:a6:80:b5:9a:62:70:b5: 6a:10:89:58:0f:aa:3b:d0:ae:09:40:67:07:7a:95:99:c0:e5: b1:8e:55:cb:00:f4:dc:6b:3f:89:c6:e5:fb:4a:ac:6c:a6:84: c7:00:dd:4a:57:ce:27:cb:30:3f:02:51:f2:ab:05:8d:73:85: 30:43:25:21:7b:54:9c:9c:50:ed:06:67:d3:e3:3c:78:b3:c9: 68:c1:e9:21:08:a5:5f:d1:13:70:5e:69:38:a4:d3:5b:1b:5d: f9:5f:4b:17:fe:f4:5b:60:8f:af:b4:26:c5:f1:10:31:10:63: 31:ef:22:af:f5:b5:b4:9c:d4:09:1b:b9:43:84:13:61:5a:7d: d5:b3:83:41:99:a8:f9:1f:84:68:24:59:14:af:dc:e6:11:0c: 79:ba:1a:57:3e:80:6e:26:f4:3b:7f:1e:37:65:c7:84:f6:c3: e5:4b:c6:95:12:db:8c:ba:49:13:1b:02:b2:d9:1c:08:9f:d3: 01:c1:09:91:56:b6:9e:0d:a2:8a:59:b4:03:51:21:5a:d3:a3: e8:a9:c9:ec -----BEGIN CERTIFICATE----- MIIHTzCCBjegAwIBAgIUAQ0Mn0MoWEdVGOzzXQFKumfh2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkyNTE0NTM1M1oXDTI2MTIyOTE1NTM1M1owLzEtMCsGA1UEAxMk ZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS0Vt8RS9gbVCbuQDibcNkyIV9EuMH5gppDK nw24ld1DPhzQUTrOBh0MdilJ7u45RCOM0nMFD7OtQauWm/wIn0hjfRLAgrEJ5YCi e+2oW6eIm7Cv6/tngHqal4TCOvBUtP6MYFH+1Is3vM3jCMImLLjONOTVDo9NLh9G 7YVUvVKmEZVIJzFMGiUonY4GILRUU+BFOLrNgGJE0gi2NfYf08rDfw3SGEsFZ40o mdgLx8DH8HQOSXg/oxkdJoCuCG8zwY34ImIvPGQJUSkhSnRgpfc6EWC+9rNmD1xk YcY210HGIFfZmQLOOT2GrzV3MLR+bgCl/VCH1r3Oj3x7fEoW9wIDAQABo4IEYTCC BF0wHQYDVR0OBBYEFOLqC0Uv6f70XmzfF37IA2JcRVIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l MzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2UzMzcwYThjLTdlMzktNDkwZC05 ODVhLWE0NzhjZTU0NDU5Zi9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1 NDQ1OWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDAEAgABMCowDAMEAcw06gMEAMw07DAMAwQG0fvAAwQA0fvCMAwD BAHR+8YDBAXR+8AwDwQCAAIwCQMHACYgAJ+AADArBggrBgEFBQcBCAEB/wQcMBqg GDAWAgIRKQICLwcCAjfwAgMAgjgCAwYCwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBks13dckTVJHfghk+y 5nn7EpYVuJ/8t1Sup+XgkTRJdQwDY7+NfTCKPNi8Q/ndKqaAtZpicLVqEIlYD6o7 0K4JQGcHepWZwOWxjlXLAPTcaz+JxuX7SqxspoTHAN1KV84nyzA/AlHyqwWNc4Uw QyUhe1ScnFDtBmfT4zx4s8lowekhCKVf0RNwXmk4pNNbG135X0sX/vRbYI+vtCbF 8RAxEGMx7yKv9bW0nNQJG7lDhBNhWn3Vs4NBmaj5H4RoJFkUr9zmEQx5uhpXPoBu JvQ7fx43ZceE9sPlS8aVEtuMukkTGwKy2RwIn9MBwQmRVraeDaKKWbQDUSFa06Po qcns -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:33 2024 by rpki-client on console-fra.rpki-client.org