$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer File: 63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer (raw, json) Hash identifier: eJr9CFO9ZDZN4MfcDiLmj8HoXXOIDC8N3jru7AeFn68= Subject key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845B4AB8C8EEAD5E8C52D90B040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Apr 2024 10:57:14 +0000 Certificate not after: Fri 19 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 401038 IP: 23.130.136.0/22 IP: 149.112.74.0/24 IP: 172.99.232.0/23 IP: 204.10.192.0/22 IP: 2001:504:132::/48 IP: 2602:fcd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:ab:8c:8e:ea:d5:e8:c5:2d:90:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 29 10:57:14 2024 GMT Not After : Sep 19 00:45:16 2025 GMT Subject: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:36:0a:38:5b:cc:00:34:eb:a3:ed:59:27: b4:e8:c2:c3:89:e3:e0:fb:ad:c7:50:b9:84:48:3b: f9:59:a3:74:57:b5:d6:ba:cf:64:87:9c:a1:f3:91: 6a:67:1d:47:92:5e:c6:90:b0:6f:43:70:85:20:f8: fa:d3:bc:63:6d:16:02:b1:32:2a:6e:6e:73:2d:c5: 15:70:81:23:b5:ee:56:92:11:7c:54:e4:3b:2f:2f: 10:85:4a:a2:32:c2:9a:40:fa:56:34:01:73:b2:39: 51:bc:11:90:6e:a0:c3:ba:ab:ad:25:2a:fa:90:d2: 22:86:3e:25:3d:18:ef:9c:6c:11:f5:2a:7b:39:89: 20:86:6e:67:9c:1c:1e:56:e9:16:8e:bf:20:33:b1: 5c:c8:af:c3:4d:f0:30:43:8f:1a:af:a2:b7:e7:42: 09:00:a3:8d:68:b7:37:b9:5a:60:40:0c:7d:2c:c2: a3:ff:17:f2:44:43:03:72:be:d2:36:f8:05:38:b1: 91:f4:b4:ae:cd:c3:78:9e:fd:9d:e8:78:4b:ca:79: e3:52:9b:70:8f:c9:c7:ff:4f:b5:97:68:25:a4:e7: 25:e0:0a:8e:5c:2a:e0:cc:43:74:78:cf:01:48:ee: ae:d9:b0:67:32:33:d7:a7:92:f4:6f:20:34:17:3b: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.130.136.0/22 149.112.74.0/24 172.99.232.0/23 204.10.192.0/22 IPv6: 2001:504:132::/48 2602:fcd3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c5:b5:91:9d:1d:4b:11:31:5c:ae:f1:7e:c6:35:ea:c7:32: 7f:47:f4:e1:07:1f:d6:7d:17:f2:95:f5:b2:09:66:84:c7:94: 9c:b9:7c:f7:63:91:d3:55:59:71:1f:79:fc:f1:ed:78:4e:b5: c7:da:ee:f1:ab:c3:f2:9f:79:6b:b9:83:56:57:a6:6d:a0:bf: 62:36:75:36:8f:8c:2d:88:fd:21:52:1c:71:33:cf:e2:ab:bf: 10:41:3d:d9:96:40:4a:2b:27:76:c9:e3:40:21:ff:9a:c2:eb: bd:46:a2:0b:0a:4d:ef:60:f0:59:38:79:d5:93:d1:bc:5e:05: 67:42:c7:8b:f3:00:49:e2:e6:d0:2e:48:a8:39:48:8a:24:ca: e2:9d:9d:4e:47:0d:de:4f:75:47:85:91:5b:87:d6:16:4d:e0: bc:a1:26:bf:54:45:3c:eb:77:89:0b:1d:d7:8d:e9:fc:a0:34: ec:12:13:e6:7f:ba:e2:5e:a2:f5:f3:08:cf:88:ae:f4:f2:76: c6:c4:a5:25:dc:96:a0:41:be:b7:c6:0d:55:0f:54:96:1d:91: 01:33:14:60:be:c3:a2:0e:0c:1b:62:4d:06:dc:a6:39:da:d0: aa:d9:12:09:13:28:18:ac:ba:58:ee:a0:f3:ce:ae:c5:63:46: 03:52:75:01 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEW0q4yO6tXoxS2QsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDQyOTEwNTcxNFoXDTI1MDkxOTAwNDUxNlowLzEtMCsGA1UEAxMk NjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLw2CjhbzAA066PtWSe06MLDiePg+63HULmE SDv5WaN0V7XWus9kh5yh85FqZx1Hkl7GkLBvQ3CFIPj607xjbRYCsTIqbm5zLcUV cIEjte5WkhF8VOQ7Ly8QhUqiMsKaQPpWNAFzsjlRvBGQbqDDuqutJSr6kNIihj4l PRjvnGwR9Sp7OYkghm5nnBweVukWjr8gM7FcyK/DTfAwQ48ar6K350IJAKONaLc3 uVpgQAx9LMKj/xfyREMDcr7SNvgFOLGR9LSuzcN4nv2d6HhLynnjUptwj8nH/0+1 l2glpOcl4AqOXCrgzEN0eM8BSO6u2bBnMjPXp5L0byA0FztyAwIDAQABo4IERjCC BEIwHQYDVR0OBBYEFDKWuBloAAskortzDiHkKGxHdkvwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1h MWNkLTEyMjZlYTNjNDc5Ny82M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEz YzQ3OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSgYIKwYBBQUH AQcBAf8EOzA5MB4EAgABMBgDBAIXgogDBACVcEoDBAGsY+gDBALMCsAwFwQCAAIw EQMHACABBQQBMgMGBCYC/NMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYejjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWxbWRnR1LETFcrvF+xjXqxzJ/R/ThBx/WfRfylfWyCWaEx5ScuXz3 Y5HTVVlxH3n88e14TrXH2u7xq8Pyn3lruYNWV6ZtoL9iNnU2j4wtiP0hUhxxM8/i q78QQT3ZlkBKKyd2yeNAIf+awuu9RqILCk3vYPBZOHnVk9G8XgVnQseL8wBJ4ubQ LkioOUiKJMrinZ1ORw3eT3VHhZFbh9YWTeC8oSa/VEU863eJCx3Xjen8oDTsEhPm f7riXqL18wjPiK708nbGxKUl3JagQb63xg1VD1SWHZEBMxRgvsOiDgwbYk0G3KY5 2tCq2RIJEygYrLpY7qDzzq7FY0YDUnUB -----END CERTIFICATE-----Generated at Fri May 3 15:36:43 2024 by rpki-client on console-ams.rpki-client.org