$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer File: fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer (raw, json) Hash identifier: ju9nyOQsuytBQlEmbxEzCZrmNM46Hq7swnyL+eHDQG8= Subject key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285843D9014FE9F42B6353AE891780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Nov 2023 01:45:15 +0000 Certificate not after: Fri 13 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 20055 AS: 26935 AS: 400533 IP: 64.52.6.0/24 IP: 64.52.96.0/22 IP: 66.35.0.0/20 IP: 69.55.208.0/20 IP: 72.21.10.0/23 IP: 107.191.236.0/22 IP: 137.83.56.0/24 IP: 137.83.72.0/24 IP: 137.83.80.0/23 IP: 162.33.232.0/21 IP: 162.43.200.0/21 IP: 192.75.144.0/24 IP: 192.152.0.0/24 IP: 198.179.52.0/22 IP: 198.186.143.0/24 IP: 204.11.64.0/22 IP: 204.194.220.0/23 IP: 205.174.152.0/22 IP: 206.166.252.0/23 IP: 207.32.192.0/20 IP: 208.52.160.0/24 IP: 208.52.175.0/24 IP: 209.188.99.0/24 IP: 209.237.136.0/22 IP: 2001:506:38::/47 IP: 2605:21c0::/32 IP: 2607:f688::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:d9:01:4f:e9:f4:2b:63:53:ae:89:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 11 01:45:15 2023 GMT Not After : Feb 13 01:45:15 2026 GMT Subject: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:dd:98:b4:f1:06:70:65:f7:8f:08:60:45: 6a:3e:29:7f:07:b6:88:7a:3d:0b:54:37:dc:4b:be: 84:80:3b:05:fc:54:20:0e:30:a8:b4:5f:23:45:dc: 43:36:25:e6:92:02:d8:3f:f7:3b:63:56:4e:51:8c: f4:22:d6:66:e3:0b:7c:d2:25:20:21:91:e9:77:cf: a5:fd:bc:3b:92:93:05:55:0c:4d:f9:4e:ad:a3:ac: 7c:b8:8b:ff:be:2a:5d:27:5c:7b:99:2c:92:7e:8b: 97:ea:4f:79:be:40:6a:7c:94:e1:3f:74:99:6b:ed: 23:ef:73:73:13:3f:10:17:77:11:a1:f1:32:55:02: c4:90:ff:97:38:84:29:62:56:08:e2:92:f5:13:bf: 3b:29:59:83:f9:9c:ca:f5:6a:fb:cd:7b:24:34:79: 71:ab:6f:b9:1c:9d:f3:28:46:cf:96:20:e7:04:c2: fc:8c:18:9a:1a:b3:e8:61:24:08:f8:1c:e4:8c:99: 8b:85:d2:22:77:8b:a8:2d:8e:6c:f9:fc:32:08:3f: ed:21:87:1d:c8:66:84:23:52:5f:81:3c:59:32:f0: fa:d0:93:35:0f:93:56:2f:c9:23:88:02:ed:7d:0f: 50:c8:cc:49:c5:6a:81:dd:58:f6:97:8e:ff:87:12: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.52.6.0/24 64.52.96.0/22 66.35.0.0/20 69.55.208.0/20 72.21.10.0/23 107.191.236.0/22 137.83.56.0/24 137.83.72.0/24 137.83.80.0/23 162.33.232.0/21 162.43.200.0/21 192.75.144.0/24 192.152.0.0/24 198.179.52.0/22 198.186.143.0/24 204.11.64.0/22 204.194.220.0/23 205.174.152.0/22 206.166.252.0/23 207.32.192.0/20 208.52.160.0/24 208.52.175.0/24 209.188.99.0/24 209.237.136.0/22 IPv6: 2001:506:38::/47 2605:21c0::/32 2607:f688::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20055 26935 400533 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ab:4c:77:dd:0d:9a:53:0a:a8:39:ac:19:30:40:53:ba:da: a6:02:79:71:8f:41:17:83:d4:43:17:47:38:ae:15:11:97:84: cf:5e:3d:57:54:f3:42:11:71:e4:f7:59:f5:79:61:c0:0c:6f: aa:ae:e5:de:d3:0c:9f:bc:6d:b3:b0:2d:bc:61:ee:00:fa:21: cc:47:ba:91:ff:71:6a:30:69:50:ad:09:b0:af:fb:47:ca:ed: 0b:56:5f:9c:22:61:30:ac:66:73:ee:67:1e:b6:14:34:97:b4: e1:34:e9:ee:c8:fc:b6:38:db:6c:e1:c1:53:0b:28:a3:45:51: eb:18:4a:c6:db:69:2a:be:d8:34:dd:13:ab:9b:4f:82:14:9e: 41:95:d9:94:29:e7:d5:e0:d9:a1:5a:8e:a7:ab:d4:54:4f:5d: 4d:08:5c:60:73:1d:76:bb:9b:87:81:78:30:74:a2:59:8f:15: c5:dc:7a:80:a4:72:8c:95:ee:6a:c6:36:c4:c9:9d:d5:61:0a: b8:dc:43:27:70:00:b1:17:5f:a4:86:a6:73:1b:aa:e8:f2:b3: 84:9f:b7:d2:b9:0b:43:aa:39:fa:33:b2:82:53:f3:21:f4:45: b3:be:55:07:5c:52:ea:17:ae:0e:f4:c7:08:28:79:37:d5:fc: 91:0e:c5:b1 -----BEGIN CERTIFICATE----- MIIHvzCCBqegAwIBAgIUAQ0Mn0MoWEPZAU/p9CtjU66JF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTExMTAxNDUxNVoXDTI2MDIxMzAxNDUxNVowLzEtMCsGA1UEAxMk ZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJmM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJHdmLTxBnBl948IYEVqPil/B7aIej0LVDfc S76EgDsF/FQgDjCotF8jRdxDNiXmkgLYP/c7Y1ZOUYz0ItZm4wt80iUgIZHpd8+l /bw7kpMFVQxN+U6to6x8uIv/vipdJ1x7mSySfouX6k95vkBqfJThP3SZa+0j73Nz Ez8QF3cRofEyVQLEkP+XOIQpYlYI4pL1E787KVmD+ZzK9Wr7zXskNHlxq2+5HJ3z KEbPliDnBML8jBiaGrPoYSQI+BzkjJmLhdIid4uoLY5s+fwyCD/tIYcdyGaEI1Jf gTxZMvD60JM1D5NWL8kjiALtfQ9QyMxJxWqB3Vj2l47/hxKUGQIDAQABo4IE0TCC BM0wHQYDVR0OBBYEFGyrSrL1WDv0VQT9xfGLnt5uSQE9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m YzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2ZjMWZiZDhiLTRlZDktNGY1ZC1h OGYwLTc1NTlkOTFiZjNjOC9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkx YmYzYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgcwGCCsGAQUF BwEHAQH/BIG8MIG5MIGXBAIAATCBkAMEAEA0BgMEAkA0YAMEBEIjAAMEBEU30AME AUgVCgMEAmu/7AMEAIlTOAMEAIlTSAMEAYlTUAMEA6Ih6AMEA6IryAMEAMBLkAME AMCYAAMEAsazNAMEAMa6jwMEAswLQAMEAczC3AMEAs2umAMEAc6m/AMEBM8gwAME ANA0oAMEANA0rwMEANG8YwMEAtHtiDAdBAIAAjAXAwcBIAEFBgA4AwUAJgUhwAMF ACYH9ogwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICTlcCAmk3AgMGHJUwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAaqtMd90NmlMKqDmsGTBAU7rapgJ5cY9BF4PUQxdHOK4VEZeEz149V1TzQhFx 5PdZ9XlhwAxvqq7l3tMMn7xts7AtvGHuAPohzEe6kf9xajBpUK0JsK/7R8rtC1Zf nCJhMKxmc+5nHrYUNJe04TTp7sj8tjjbbOHBUwsoo0VR6xhKxttpKr7YNN0Tq5tP ghSeQZXZlCnn1eDZoVqOp6vUVE9dTQhcYHMddrubh4F4MHSiWY8Vxdx6gKRyjJXu asY2xMmd1WEKuNxDJ3AAsRdfpIamcxuq6PKzhJ+30rkLQ6o5+jOyglPzIfRFs75V B1xS6heuDvTHCCh5N9X8kQ7FsQ== -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:23 2024 by rpki-client on console-fra.rpki-client.org