$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer File: ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer (raw, json) Hash identifier: RQVI+pGNYt87yFBywMbwaVO134+PFsxG6IOjHvQaH8M= Subject key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858472B1080991D3B025504A56180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Sep 2024 13:32:58 +0000 Certificate not after: Mon 14 Dec 2026 14:32:58 +0000 Subordinate resources: AS: 13376 IP: 37.26.88.0/21 IP: 150.228.0.0/16 IP: 2620:8c:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:10:80:99:1d:3b:02:55:04:a5:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 10 13:32:58 2024 GMT Not After : Dec 14 14:32:58 2026 GMT Subject: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:66:34:00:8e:30:f7:12:73:e4:78:6e:7f:44: 33:d9:e2:f1:eb:38:8c:3a:7f:27:16:92:6f:57:dd: 90:df:7d:e7:88:1b:d4:fe:c9:76:45:07:9d:dd:08: 1d:4f:9c:9d:cc:94:29:26:f4:b9:e0:a9:ea:e7:b8: 91:86:96:10:53:54:cb:3a:8d:0d:31:f0:46:bc:14: 4d:1c:c3:9f:b0:39:60:da:da:a0:c9:29:22:1b:37: 77:48:b6:b0:7e:b5:66:d7:ba:90:2f:98:45:d3:c6: a9:17:ba:cd:ba:81:3d:ca:d4:34:cc:e1:2f:cf:5a: f9:a6:6e:92:a1:43:bb:f6:97:48:c0:e8:18:d0:81: 3f:79:5b:80:7b:07:0b:fb:ff:fb:41:04:ac:4c:2e: 3b:32:8c:6d:2a:30:32:37:0f:a2:b0:ab:93:de:1b: a7:30:a3:97:eb:82:78:1a:fa:93:90:0b:90:f5:dc: 0c:87:e5:de:d5:72:58:d7:ce:7e:a0:59:e0:e1:ba: 3c:f2:15:9b:23:52:8f:9c:32:85:19:ea:2b:6b:46: cf:9b:43:8a:29:63:e3:e9:00:d5:00:7f:10:27:53: bb:f7:01:c8:e0:c0:cc:74:70:18:d6:6e:9a:5d:42: d3:9b:35:1f:3c:89:b9:d9:b0:cd:51:87:dc:7a:62: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 37.26.88.0/21 150.228.0.0/16 IPv6: 2620:8c:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13376 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:52:15:83:88:dd:76:a1:1e:11:00:53:46:0d:bc:65:74:79: ab:43:9a:56:26:3a:73:b7:c8:25:47:3c:e6:9a:01:d1:b4:9b: 2b:e7:b3:97:be:f1:af:61:3a:6c:b7:88:b4:de:52:57:e9:a1: d0:89:3d:fc:aa:52:0f:00:d4:55:ae:d3:b3:9c:83:7d:a3:1f: ae:f6:83:02:04:0e:70:af:74:0d:1c:c7:a0:2c:fc:0d:58:d6: 8c:22:7b:b4:fb:2c:44:d0:24:87:93:8f:ee:05:07:c3:6e:be: 72:66:32:4e:a9:60:53:27:e3:5f:54:91:2a:8e:3b:b1:98:8c: 5f:38:36:85:8a:11:b2:80:b9:31:dc:df:82:b8:cc:06:af:56: ac:6f:45:d5:f9:93:9c:88:57:0d:4a:fd:db:9c:91:52:7e:09: 82:ec:b6:15:1d:c1:10:dc:16:b8:ea:80:13:b4:ca:03:7a:88: ad:6b:78:25:1c:5c:e7:6f:14:4a:8e:ab:2a:50:33:72:0c:97: d7:fe:ce:a6:2f:78:03:6b:06:0b:70:a5:e7:92:18:21:90:07: d5:97:c5:4a:c3:ce:a4:00:83:67:b3:70:6c:60:f0:9e:25:20: 3b:37:04:f6:a8:f4:a1:01:87:70:f9:ef:01:d4:ea:9f:e2:0f: 30:d5:77:3f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEcrEICZHTsCVQSlYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkxMDEzMzI1OFoXDTI2MTIxNDE0MzI1OFowLzEtMCsGA1UEAxMk ZWE1YzNkODItYzdlMC00NTExLWIxMDItODk5NWVkODEzYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/GY0AI4w9xJz5Hhuf0Qz2eLx6ziMOn8nFpJv V92Q333niBvU/sl2RQed3QgdT5ydzJQpJvS54Knq57iRhpYQU1TLOo0NMfBGvBRN HMOfsDlg2tqgySkiGzd3SLawfrVm17qQL5hF08apF7rNuoE9ytQ0zOEvz1r5pm6S oUO79pdIwOgY0IE/eVuAewcL+//7QQSsTC47MoxtKjAyNw+isKuT3hunMKOX64J4 GvqTkAuQ9dwMh+Xe1XJY185+oFng4bo88hWbI1KPnDKFGeora0bPm0OKKWPj6QDV AH8QJ1O79wHI4MDMdHAY1m6aXULTmzUfPIm52bDNUYfcemLgHwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFC3iZaiRXeN4wC1PsypLxp1pxRPGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l YTVjM2Q4Mi1jN2UwLTQ1MTEtYjEwMi04OTk1ZWQ4MTNhOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2VhNWMzZDgyLWM3ZTAtNDUxMS1i MTAyLTg5OTVlZDgxM2E4YS9lYTVjM2Q4Mi1jN2UwLTQ1MTEtYjEwMi04OTk1ZWQ4 MTNhOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBEEAgABMAsDBAMlGlgDAwCW5DAPBAIAAjAJAwcAJiAAjIAAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFFSFYOI3XahHhEAU0YN vGV0eatDmlYmOnO3yCVHPOaaAdG0myvns5e+8a9hOmy3iLTeUlfpodCJPfyqUg8A 1FWu07Ocg32jH672gwIEDnCvdA0cx6As/A1Y1owie7T7LETQJIeTj+4FB8NuvnJm Mk6pYFMn419UkSqOO7GYjF84NoWKEbKAuTHc34K4zAavVqxvRdX5k5yIVw1K/duc kVJ+CYLsthUdwRDcFrjqgBO0ygN6iK1reCUcXOdvFEqOqypQM3IMl9f+zqYveANr BgtwpeeSGCGQB9WXxUrDzqQAg2ezcGxg8J4lIDs3BPao9KEBh3D57wHU6p/iDzDV dz8= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:05 2024 by rpki-client on console-ams.rpki-client.org