$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer File: 3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer (raw, json) Hash identifier: l8PQDViOOE8BVc5xtLyUoB0k0DiV95KF/UakAZPkf50= Subject key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48352D27A660DF093922300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sat 26 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 6977 IP: 23.188.16.0/21 IP: 172.98.32.0/22 IP: 2602:fc4b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:52:d2:7a:66:0d:f0:93:92:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 26 19:06:39 2025 GMT Subject: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:10:0a:45:94:64:fb:cf:1f:47:9c:c4:fb: 77:72:fc:60:0d:6e:3d:97:a9:09:57:9c:ae:f3:af: 3f:71:95:a9:8b:c1:23:2d:4b:b4:43:3f:47:ed:2d: f1:45:89:68:6c:5b:3d:01:e6:93:43:50:e7:37:1f: df:2f:3d:8d:c0:6b:69:c4:6c:99:0d:3f:9f:4f:50: ac:de:06:c8:55:88:0e:e8:1f:95:53:03:26:10:a7: 05:8e:5d:5b:f4:15:c5:b7:70:3b:79:ea:06:a2:fb: 8a:2e:32:76:62:85:20:82:51:69:e8:57:f6:09:98: d7:79:d1:0d:cd:5b:6c:12:ad:bc:5f:0e:04:2e:59: 6e:6b:a6:d9:20:c5:3a:d5:39:65:c0:b1:ff:bc:19: 3e:95:19:a9:c0:7f:f0:c4:26:00:9e:3b:7b:b6:6a: 07:82:2e:f9:78:9e:ab:ac:46:90:f1:0f:bb:69:4b: df:18:84:cf:3e:20:11:a6:3c:9b:f6:69:0e:d1:7f: 17:eb:6e:eb:07:f9:71:40:a9:37:68:e7:1b:18:d0: ad:a6:9f:d3:23:05:74:85:ac:53:1e:d0:22:e1:e0: 8a:27:55:4d:14:a7:01:af:55:9c:3d:c5:71:8d:14: 6f:c8:11:84:57:18:94:e6:43:26:d5:c8:21:55:79: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/21 172.98.32.0/22 IPv6: 2602:fc4b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6977 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2e:12:97:c1:51:37:04:4b:ec:e0:d7:01:61:84:a3:81:a9: 5d:7a:a8:8b:f9:d0:df:09:22:f2:b5:a0:8a:11:e6:07:87:70: ca:84:7b:04:ae:3b:5d:6c:a2:d4:66:41:bf:32:ea:0f:22:c4: 5f:65:ae:f9:ee:37:f3:45:d1:63:9e:4c:22:9d:ad:b9:d0:f9: b1:8a:51:10:51:00:41:5e:25:d1:60:71:46:9b:4b:23:10:d4: e6:98:85:2e:0b:31:3c:11:49:c4:d7:43:90:b5:cd:3b:40:fb: 24:8d:14:77:7d:e1:86:fb:c8:69:b9:a2:99:df:87:61:50:16: 3d:73:b2:51:7d:93:6c:5e:7c:ba:b6:69:32:59:8a:06:a1:65: ce:3a:4d:e7:44:93:46:28:02:ce:20:ec:23:d3:27:57:63:c3: 7c:44:01:2f:c5:36:47:51:40:85:dd:4f:cb:00:d4:7c:61:61: a2:6a:ae:0f:2a:8e:bd:45:02:f1:8f:fe:1a:31:b6:2b:a8:9c: 24:f7:e3:0c:5b:84:06:6d:97:22:7a:dc:8b:47:ef:b4:fb:7c: b1:29:ee:79:d4:58:28:ea:22:ba:ad:9a:3a:88:cd:0e:5a:a4: af:22:8d:46:80:48:68:ca:35:e6:0b:1d:9a:56:98:a8:bf:44: 5e:a1:8f:a7 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEHkg1LSemYN8JOSIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyNjE5MDYzOVowLzEtMCsGA1UEAxMk M2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFwQCkWUZPvPH0ecxPt3cvxgDW49l6kJV5yu 868/cZWpi8EjLUu0Qz9H7S3xRYlobFs9AeaTQ1DnNx/fLz2NwGtpxGyZDT+fT1Cs 3gbIVYgO6B+VUwMmEKcFjl1b9BXFt3A7eeoGovuKLjJ2YoUgglFp6Ff2CZjXedEN zVtsEq28Xw4ELllua6bZIMU61TllwLH/vBk+lRmpwH/wxCYAnjt7tmoHgi75eJ6r rEaQ8Q+7aUvfGITPPiARpjyb9mkO0X8X627rB/lxQKk3aOcbGNCtpp/TIwV0haxT HtAi4eCKJ1VNFKcBr1WcPcVxjRRvyBGEVxiU5kMm1cghVXnmxwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPYpvfjWUMpDhTEFJ4EgY0g6SlhbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNlYjYwMjUzLWYwMmQtNDcyMy05 OTlmLWUyZTNlMGZkOWIxMi8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBm ZDliMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAMXvBADBAKsYiAwDgQCAAIwCAMGBCYC/EsAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhtBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADIuEpfBUTcES+zg1wFh hKOBqV16qIv50N8JIvK1oIoR5geHcMqEewSuO11sotRmQb8y6g8ixF9lrvnuN/NF 0WOeTCKdrbnQ+bGKURBRAEFeJdFgcUabSyMQ1OaYhS4LMTwRScTXQ5C1zTtA+ySN FHd94Yb7yGm5opnfh2FQFj1zslF9k2xefLq2aTJZigahZc46TedEk0YoAs4g7CPT J1djw3xEAS/FNkdRQIXdT8sA1HxhYaJqrg8qjr1FAvGP/hoxtiuonCT34wxbhAZt lyJ63ItH77T7fLEp7nnUWCjqIrqtmjqIzQ5apK8ijUaASGjKNeYLHZpWmKi/RF6h j6c= -----END CERTIFICATE-----Generated at Fri May 3 15:15:30 2024 by rpki-client on console-fra.rpki-client.org