$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer File: f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer (raw, json) Hash identifier: IlOgBZR2GBHn/tq1JCKPEFiFLPuNPxTtLb49vOVujUw= Subject key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847ED1D4B3504AD07D194455FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Nov 2024 01:45:33 +0000 Certificate not after: Mon 22 Feb 2027 01:45:33 +0000 Subordinate resources: IP: 64.89.208.0/20 IP: 72.250.128.0/19 IP: 108.59.112.0/20 IP: 144.86.208.0/20 IP: 216.228.32.0/19 IP: 2607:8380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:1d:4b:35:04:ad:07:d1:94:45:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 19 01:45:33 2024 GMT Not After : Feb 22 01:45:33 2027 GMT Subject: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:f2:2b:75:2d:3f:6f:a9:a8:8f:de:99:e7:cf: f2:05:34:22:d1:65:12:91:d0:1e:7d:e3:c0:a8:8c: b3:d5:e7:1b:71:63:e2:6c:37:6e:71:ee:dd:f8:52: 16:5c:2e:3f:38:38:f1:3c:ac:6c:54:91:3a:fb:da: ed:95:91:e8:94:99:19:4e:c0:35:6e:b1:9c:dc:d5: a0:7e:6a:11:33:ce:45:66:9b:f5:92:c2:e8:50:bd: 39:a3:1c:a9:e4:da:7f:6e:7c:f3:3e:62:51:b5:df: 08:88:5d:86:e5:eb:77:86:db:b8:8d:9f:f5:e7:8d: cd:0e:4c:e0:aa:20:11:88:2c:0a:c9:07:c3:54:0b: c9:4a:33:26:0a:63:e6:ed:41:59:e8:ee:bb:43:9d: 63:6a:9e:f6:22:3c:77:a5:e3:09:50:10:a9:a5:61: fc:9d:6f:7b:e8:4d:71:92:b3:38:ee:67:5c:20:57: 60:ef:aa:3b:75:7f:1a:c2:96:84:de:32:e2:b0:1a: 8f:b0:50:2b:57:36:51:46:0c:40:cf:fc:1e:dd:aa: 94:b3:48:bf:e5:23:1f:d2:52:7d:24:0a:52:4f:6e: 0e:fe:56:51:ce:35:82:d3:4e:4b:a8:6f:37:f0:ad: 94:00:24:7b:6a:7a:24:1c:ae:64:43:ce:dd:b6:89: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.89.208.0/20 72.250.128.0/19 108.59.112.0/20 144.86.208.0/20 216.228.32.0/19 IPv6: 2607:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b3:e6:af:24:1c:7d:8c:a0:2a:38:05:04:09:a2:b7:ac:79: 2b:f7:36:08:0a:b1:0c:3f:2f:3d:51:39:8a:c4:30:6e:19:71: f9:9e:0b:ce:7b:e7:e4:cb:7a:16:f1:3e:7c:a6:51:aa:58:82: 11:23:f0:b0:cc:e6:d0:14:e7:f6:47:8b:4a:2c:e7:20:41:88: 7b:17:95:1e:4f:1e:98:b6:15:3f:db:77:30:ba:64:c7:05:c1: bd:d4:88:eb:f7:56:22:59:94:c8:18:04:34:97:91:1e:5e:07: 26:79:57:8a:5c:9f:d1:fd:a5:87:b4:de:80:1c:77:72:06:c4: 0f:58:1f:54:6f:87:be:5d:eb:32:ed:b6:2f:8f:5b:22:49:62: 5e:a1:13:a6:0a:8e:b7:f3:25:30:b5:06:46:02:3e:bf:8b:dc: f0:51:cb:5f:d4:5e:b3:92:48:b5:78:a4:e7:b4:b8:29:eb:91: f0:24:ed:ba:d8:b1:05:76:d1:7c:59:47:8a:ac:12:fb:58:93: 76:94:2c:4c:f6:3c:99:1a:87:71:7f:7f:7c:28:ad:cf:e8:ab: 60:50:f3:23:bc:2f:90:72:f4:7b:18:d6:62:6b:02:c2:54:d1: 8f:79:d8:a0:5b:78:8e:af:94:3e:d6:50:90:f2:ea:3c:16:69: e4:82:51:5c -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEftHUs1BK0H0ZRFX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTExOTAxNDUzM1oXDTI3MDIyMjAxNDUzM1owLzEtMCsGA1UEAxMk ZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/IrdS0/b6moj96Z58/yBTQi0WUSkdAefePA qIyz1ecbcWPibDduce7d+FIWXC4/ODjxPKxsVJE6+9rtlZHolJkZTsA1brGc3NWg fmoRM85FZpv1ksLoUL05oxyp5Np/bnzzPmJRtd8IiF2G5et3htu4jZ/1543NDkzg qiARiCwKyQfDVAvJSjMmCmPm7UFZ6O67Q51jap72Ijx3peMJUBCppWH8nW976E1x krM47mdcIFdg76o7dX8awpaE3jLisBqPsFArVzZRRgxAz/we3aqUs0i/5SMf0lJ9 JApST24O/lZRzjWC005LqG838K2UACR7anokHK5kQ87dtolWcwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFCohftgoOtJB/s/l6R0yP8C3ivcLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m NWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y1ZGQyZjNiLWQ1NDQtNGE5MC04 NGE1LTU4YWYwZGI4NGRhYi9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRi ODRkYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARAWdADBAVI+oADBARsO3ADBASQVtADBAXY5CAw DQQCAAIwBwMFACYHg4AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK7PmryQcfYygKjgFBAmit6x5K/c2CAqx DD8vPVE5isQwbhlx+Z4Lznvn5Mt6FvE+fKZRqliCESPwsMzm0BTn9keLSiznIEGI exeVHk8emLYVP9t3MLpkxwXBvdSI6/dWIlmUyBgENJeRHl4HJnlXilyf0f2lh7Te gBx3cgbED1gfVG+Hvl3rMu22L49bIkliXqETpgqOt/MlMLUGRgI+v4vc8FHLX9Re s5JItXik57S4KeuR8CTtutixBXbRfFlHiqwS+1iTdpQsTPY8mRqHcX9/fCitz+ir YFDzI7wvkHL0exjWYmsCwlTRj3nYoFt4jq+UPtZQkPLqPBZp5IJRXA== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:34 2024 by rpki-client on console-fra.rpki-client.org