$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer File: 4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer (raw, json) Hash identifier: fk8jym7nsNPpuD7b0Odceb9EBkXgczfkcpqWStqctAw= Subject key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584331628AFB0A8D4D0762F45790 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Sep 2023 00:45:21 +0000 Certificate not after: Mon 15 Dec 2025 01:45:21 +0000 Subordinate resources: AS: 63072 IP: 23.135.176.0/24 IP: 162.253.244.0/22 IP: 2605:1740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:31:62:8a:fb:0a:8d:4d:07:62:f4:57:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 12 00:45:21 2023 GMT Not After : Dec 15 01:45:21 2025 GMT Subject: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:30:10:1d:6c:30:dd:7f:c7:86:bc:77:77: f6:3f:ae:d5:30:07:43:c7:ab:8b:bc:b8:22:e8:3c: 41:c8:6d:3b:eb:0d:bf:ea:47:a5:1c:1e:f6:c8:f0: 99:49:f3:6a:fb:c0:0a:de:16:9e:52:5a:c1:4d:b2: da:bc:fa:0d:d4:86:be:e0:1e:d3:96:02:39:b3:16: 74:56:c5:0c:60:0a:79:d6:0a:7c:63:b9:15:7c:ce: 66:97:72:95:11:3d:3d:50:10:4b:6e:34:68:ed:6d: 82:fa:40:92:e6:37:6d:4b:90:6c:1d:28:7e:63:e7: c8:98:3a:ab:e7:03:56:5b:b6:a0:f1:7b:06:1a:66: 30:19:7f:99:38:4c:51:12:0c:e7:eb:5e:bd:b8:3c: e5:b5:80:ab:c5:fe:e1:fb:e3:8c:ec:cc:0e:d6:86: 06:3d:a7:ba:78:cc:e6:75:21:1d:7e:85:5d:d8:ac: cd:30:d9:17:4f:fc:64:48:34:47:e5:a5:ed:84:59: 93:52:38:5f:4c:3f:b6:85:04:4c:ba:bf:7b:f6:02: 68:04:ca:53:99:d2:5f:e1:49:9a:0d:40:6e:17:bb: 2e:08:e5:5e:61:4d:b3:84:a8:7f:29:41:02:13:87: 64:60:f5:52:d6:fc:29:47:b4:8a:9c:b2:68:72:7d: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 162.253.244.0/22 IPv6: 2605:1740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:86:00:bd:43:c2:2c:68:d5:d9:8e:de:e5:09:6d:0c:a9:d0: d4:4d:26:e3:8b:68:ff:30:b1:1b:32:aa:dc:09:ee:b9:11:4e: 58:42:45:c3:23:5b:be:72:07:99:f8:39:3e:e6:3b:91:c5:18: 76:a7:59:cd:59:32:42:8a:56:3b:04:d6:a4:d4:ae:06:20:58: 8a:a4:4b:23:e8:6e:cd:51:2b:25:b8:cf:20:17:d0:63:9f:cc: be:97:58:66:c5:04:9b:72:f1:8b:2f:e0:53:83:06:43:6e:c8: 1c:c6:3c:db:6a:07:ad:d0:fe:c7:69:47:c2:df:1f:db:3e:f7: ec:5d:ee:b0:10:be:d9:7b:b2:fa:e9:3b:f7:ea:a4:e8:2c:83: 57:d5:be:00:32:4b:36:0e:81:18:65:d8:0f:f0:88:e3:13:9e: 0b:7b:26:82:a9:55:6b:2e:36:44:c3:bc:9b:6a:84:05:41:d2: 69:c2:5b:70:27:ef:24:8b:de:db:56:40:d8:1c:8d:f1:90:c5: 5a:d6:b7:9d:80:f5:88:0f:1e:72:b3:17:25:2e:69:de:59:21: f1:a4:10:2d:b1:46:97:ad:28:a9:33:86:36:dc:91:7c:bb:19: 2b:d6:be:06:a8:64:00:2e:a1:e3:2e:a5:28:ed:e4:bb:08:20: 29:db:c9:b5 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEMxYor7Co1NB2L0V5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkxMjAwNDUyMVoXDTI1MTIxNTAxNDUyMVowLzEtMCsGA1UEAxMk NDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0wEB1sMN1/x4a8d3f2P67VMAdDx6uLvLgi 6DxByG076w2/6kelHB72yPCZSfNq+8AK3haeUlrBTbLavPoN1Ia+4B7TlgI5sxZ0 VsUMYAp51gp8Y7kVfM5ml3KVET09UBBLbjRo7W2C+kCS5jdtS5BsHSh+Y+fImDqr 5wNWW7ag8XsGGmYwGX+ZOExREgzn6169uDzltYCrxf7h++OM7MwO1oYGPae6eMzm dSEdfoVd2KzNMNkXT/xkSDRH5aXthFmTUjhfTD+2hQRMur979gJoBMpTmdJf4Uma DUBuF7suCOVeYU2zhKh/KUECE4dkYPVS1vwpR7SKnLJocn10RwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNkpuObM1CNDRkeJM5dKJHaZjKtyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMDlkOTNhLWQ5ZTctNGViNy05 NGNkLWZmZWMwNjE4YzNlYy80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYx OGMzZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXh7ADBAKi/fQwDQQCAAIwBwMFACYFF0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPZgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFiGAL1Dwixo1dmO3uUJ bQyp0NRNJuOLaP8wsRsyqtwJ7rkRTlhCRcMjW75yB5n4OT7mO5HFGHanWc1ZMkKK VjsE1qTUrgYgWIqkSyPobs1RKyW4zyAX0GOfzL6XWGbFBJty8Ysv4FODBkNuyBzG PNtqB63Q/sdpR8LfH9s+9+xd7rAQvtl7svrpO/fqpOgsg1fVvgAySzYOgRhl2A/w iOMTngt7JoKpVWsuNkTDvJtqhAVB0mnCW3An7ySL3ttWQNgcjfGQxVrWt52A9YgP HnKzFyUuad5ZIfGkEC2xRpetKKkzhjbckXy7GSvWvgaoZAAuoeMupSjt5LsIICnb ybU= -----END CERTIFICATE-----Generated at Fri May 3 20:36:38 2024 by rpki-client on console-fra.rpki-client.org