$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer File: e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer (raw, json) Hash identifier: erJkNTtM8PNo+IE+2qQmqQa/QHiM/9J12voBRvQNGp4= Subject key identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858477D5419BC73C4A374D1B1F620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Oct 2024 00:45:26 +0000 Certificate not after: Wed 13 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 3801 IP: 69.176.0.0/18 IP: 74.214.176.0/20 IP: 76.8.160.0/19 IP: 204.68.227.0 -- 204.68.228.255 IP: 2607:c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:54:19:bc:73:c4:a3:74:d1:b1:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 10 00:45:26 2024 GMT Not After : Jan 13 01:45:26 2027 GMT Subject: CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:e1:68:68:e7:ec:74:1e:32:e4:e8:ba:4e: f6:90:5b:1c:a1:6b:ba:6c:24:0f:20:bb:20:b4:a0: 3b:0c:1a:34:93:30:82:d0:e2:f5:8e:1a:20:b2:25: 1e:54:65:45:c9:54:6e:a9:8d:03:ab:b0:a1:17:51: be:31:d7:95:ba:5d:1c:b3:26:38:18:02:16:c1:e0: 0d:ee:52:63:f5:8d:92:3b:4c:0a:c8:89:d0:b5:9f: d1:46:31:f2:00:76:d1:ca:4b:c9:26:a8:64:2b:00: 84:66:f4:6d:b6:df:37:06:18:95:11:07:39:d5:c7: ff:5e:34:3b:59:b3:b9:5e:66:92:7a:49:5c:e7:22: c1:c2:fd:cd:26:07:e1:9a:76:ed:36:f5:df:ea:c4: e2:fb:ad:37:d1:90:18:e1:09:b2:12:5d:fd:57:da: b7:7c:f7:4a:e5:3b:b4:5a:d5:f4:45:fc:f7:e5:66: 53:b8:8b:36:55:ac:b3:98:a4:ef:89:0b:8b:1e:06: 3c:be:a9:bd:d9:28:da:f6:69:be:16:70:b4:63:c7: 20:3d:51:7e:05:28:ab:dd:4c:9d:72:6e:d7:6c:19: ff:42:8f:63:34:62:87:c3:60:72:94:ec:91:a8:08: ea:1d:5f:0f:2d:ea:8c:88:ac:ec:98:7f:c5:bf:bf: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.176.0.0/18 74.214.176.0/20 76.8.160.0/19 204.68.227.0-204.68.228.255 IPv6: 2607:c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3801 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d2:50:07:76:b0:ad:17:35:e2:d1:6d:da:43:b0:ec:42:13: 79:50:4f:7d:fe:d7:4e:e1:00:a4:b4:29:1f:f8:9a:48:9c:63: 3d:4c:c7:a4:6a:4a:7d:3e:c9:50:7c:e9:c1:66:f1:db:ae:68: 85:15:61:b5:c7:49:05:90:29:cf:2c:21:58:3d:50:4d:2f:f7: 04:cf:ee:74:7d:b8:68:6e:9a:e2:24:64:fc:38:0b:b7:67:03: d3:5e:9f:b4:f9:4f:dd:18:9d:b9:0d:3e:15:1a:99:e7:d6:e9: 85:71:9f:8f:a8:eb:e1:de:79:33:1a:74:71:a7:ca:dc:ec:4a: 0c:6e:05:55:2e:97:c9:c5:bf:74:f7:45:fe:9a:a8:b7:fe:6a: 39:aa:1a:75:be:4a:c2:0d:ac:bf:ec:44:ab:cd:af:e8:48:35: c1:54:48:71:cb:e7:a9:8f:a4:17:27:4d:d8:4b:3c:20:4b:ed: bb:64:29:ad:83:7a:27:a4:44:bd:6a:f7:f4:22:82:e5:64:5c: dd:f5:d3:d5:91:02:fd:23:e2:a7:e7:0b:11:33:56:9c:89:92: b8:53:a4:36:ec:62:8e:52:ff:95:1e:98:d2:59:eb:98:fb:63: 22:c9:b7:22:75:46:bf:89:07:48:be:86:4f:4c:9c:dd:2a:04: 7c:c6:61:65 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEd9VBm8c8SjdNGx9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAxMDAwNDUyNloXDTI3MDExMzAxNDUyNlowLzEtMCsGA1UEAxMk ZTYyY2UzMmEtNTgyZS00OWQxLTljNGEtYmQ4Y2FiODNmN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdbhaGjn7HQeMuTouk72kFscoWu6bCQPILsg tKA7DBo0kzCC0OL1jhogsiUeVGVFyVRuqY0Dq7ChF1G+MdeVul0csyY4GAIWweAN 7lJj9Y2SO0wKyInQtZ/RRjHyAHbRykvJJqhkKwCEZvRttt83BhiVEQc51cf/XjQ7 WbO5XmaSeklc5yLBwv3NJgfhmnbtNvXf6sTi+6030ZAY4QmyEl39V9q3fPdK5Tu0 WtX0Rfz35WZTuIs2VayzmKTviQuLHgY8vqm92Sja9mm+FnC0Y8cgPVF+BSir3Uyd cm7XbBn/Qo9jNGKHw2BylOyRqAjqHV8PLeqMiKzsmH/Fv78yMwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFF/wT1b/x+MiPyN6zfNCrj5k4/s4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l NjJjZTMyYS01ODJlLTQ5ZDEtOWM0YS1iZDhjYWI4M2Y3ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U2MmNlMzJhLTU4MmUtNDlkMS05 YzRhLWJkOGNhYjgzZjdlYi9lNjJjZTMyYS01ODJlLTQ5ZDEtOWM0YS1iZDhjYWI4 M2Y3ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCYEAgABMCADBAZFsAADBARK1rADBAVMCKAwDAMEAMxE4wMEAMxE 5DANBAIAAjAHAwUAJgcMADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIO2TBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCz0lAHdrCtFzXi0W3aQ7DsQhN5UE99/tdO4QCktCkf+JpInGM9TMekakp9 PslQfOnBZvHbrmiFFWG1x0kFkCnPLCFYPVBNL/cEz+50fbhobpriJGT8OAu3ZwPT Xp+0+U/dGJ25DT4VGpnn1umFcZ+PqOvh3nkzGnRxp8rc7EoMbgVVLpfJxb9090X+ mqi3/mo5qhp1vkrCDay/7ESrza/oSDXBVEhxy+epj6QXJ03YSzwgS+27ZCmtg3on pES9avf0IoLlZFzd9dPVkQL9I+Kn5wsRM1aciZK4U6Q27GKOUv+VHpjSWeuY+2Mi ybcidUa/iQdIvoZPTJzdKgR8xmFl -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:04 2024 by rpki-client on console-ams.rpki-client.org