$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer File: 7afae497-a3f6-4f52-abeb-632cca8db94a.cer (raw, json) Hash identifier: FXJ742duES0xuCF//h3T6IZkq6yjtRVRKsRt64mdhjk= Subject key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845A85120D0EF4DA618B1C3F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Apr 2024 00:45:20 +0000 Certificate not after: Wed 29 Jul 2026 00:45:20 +0000 Subordinate resources: IP: 23.148.56.0/24 IP: 23.177.176.0/24 IP: 45.41.224.0/22 IP: 2606:40c0::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a8:51:20:d0:ef:4d:a6:18:b1:c3:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 25 00:45:20 2024 GMT Not After : Jul 29 00:45:20 2026 GMT Subject: CN=7afae497-a3f6-4f52-abeb-632cca8db94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:fa:0a:24:2a:08:4c:d6:28:dc:2e:a1:d8: 41:b0:19:c1:f4:38:52:d1:d7:50:1f:87:0b:d3:c5: 4d:ec:0f:86:29:00:a1:12:ad:8b:14:cb:de:02:54: 37:ea:d3:62:57:2e:a3:aa:0e:ef:15:3b:86:40:9e: ba:15:a0:73:5c:45:b5:b0:54:59:cd:16:bc:eb:e5: 1e:32:d5:e5:1c:37:68:0b:9b:d9:55:eb:67:f6:03: 8e:c3:cd:1b:4e:35:57:58:ba:d4:64:7c:11:e3:a9: 2b:54:fc:cd:32:7a:6a:ef:63:99:2d:17:19:53:c9: 5c:ae:87:e9:1c:cb:ca:8e:ee:e1:de:76:71:56:60: 59:d6:63:8d:74:f0:01:40:8d:5a:16:2e:b6:d8:70: fe:84:6f:a6:41:b8:b1:55:6b:5f:ff:50:ba:e2:5e: b8:f7:90:f0:09:78:f4:37:3c:5f:bf:02:ca:59:e8: a8:fc:17:01:10:d4:4d:7c:e1:5d:50:8d:74:78:12: 7c:dc:f6:dd:07:a9:4d:b5:e5:a0:e0:60:3c:7b:0f: 05:f8:df:4f:c8:a9:5d:5a:32:5f:d8:de:0d:c4:cc: 68:2f:e8:a1:19:a6:ff:76:67:2a:59:c5:4c:d2:9d: 96:cd:3c:f9:a1:1f:0a:e7:fb:0a:e4:8f:45:72:e5: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.148.56.0/24 23.177.176.0/24 45.41.224.0/22 IPv6: 2606:40c0::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:81:2d:3a:f6:e5:16:aa:64:06:ba:82:d0:69:97:23:d1:d8: 1f:f4:bd:2d:0a:e1:1e:63:ba:f8:9c:4b:b6:99:14:9f:12:91: ac:01:f3:35:e4:00:6b:fa:21:f5:d2:8f:de:f3:12:65:de:3a: 8d:23:c9:69:bb:ea:f8:ef:5c:88:75:95:a6:28:fd:61:5b:c5: 27:77:47:24:84:07:46:92:87:c7:fe:bf:3a:d0:64:54:25:97: d8:df:ec:28:b6:fa:02:e2:7b:a1:f2:10:01:59:f9:3f:d8:5a: 0b:63:73:be:1f:82:f2:2f:cc:63:5d:f1:19:1d:c1:36:bc:00: a7:5d:3e:f2:05:6a:b0:eb:b0:02:af:cf:00:9e:aa:d8:b9:9b: 5b:a3:38:d8:55:30:de:0d:6a:b3:e1:49:e6:d7:95:b2:de:84: 32:2e:dc:84:cf:97:0b:06:75:5f:71:ed:d5:b5:8e:e4:51:b6: 3b:c8:b7:ff:66:d6:7c:97:a2:69:f9:70:89:dc:18:97:1d:bf: 84:ed:51:34:92:06:03:4d:48:8d:b6:58:d5:75:8a:da:ca:bf: b8:b7:b6:fc:94:aa:96:61:f7:2f:78:cd:ce:11:9a:0e:0c:09: 35:21:ae:0d:1f:11:cc:bd:5a:35:43:ea:91:02:fd:0a:10:ca: 15:db:10:85 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEWoUSDQ702mGLHD8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDQyNTAwNDUyMFoXDTI2MDcyOTAwNDUyMFowLzEtMCsGA1UEAxMk N2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRiOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8v6CiQqCEzWKNwuodhBsBnB9DhS0ddQH4cL 08VN7A+GKQChEq2LFMveAlQ36tNiVy6jqg7vFTuGQJ66FaBzXEW1sFRZzRa86+Ue MtXlHDdoC5vZVetn9gOOw80bTjVXWLrUZHwR46krVPzNMnpq72OZLRcZU8lcrofp HMvKju7h3nZxVmBZ1mONdPABQI1aFi622HD+hG+mQbixVWtf/1C64l6495DwCXj0 NzxfvwLKWeio/BcBENRNfOFdUI10eBJ83PbdB6lNteWg4GA8ew8F+N9PyKldWjJf 2N4NxMxoL+ihGab/dmcqWcVM0p2WzTz5oR8K5/sK5I9FcuWMJQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEyCvSs/lCCD/+RoTmO3ZFXCy3mkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzdhZmFlNDk3LWEzZjYtNGY1Mi1h YmViLTYzMmNjYThkYjk0YS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4 ZGI5NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXlDgDBAAXsbADBAItKeAwDQQCAAIwBwMFBCYG QMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAmYEtOvblFqpkBrqC0GmXI9HYH/S9LQrhHmO6+JxLtpkUnxKR rAHzNeQAa/oh9dKP3vMSZd46jSPJabvq+O9ciHWVpij9YVvFJ3dHJIQHRpKHx/6/ OtBkVCWX2N/sKLb6AuJ7ofIQAVn5P9haC2Nzvh+C8i/MY13xGR3BNrwAp10+8gVq sOuwAq/PAJ6q2LmbW6M42FUw3g1qs+FJ5teVst6EMi7chM+XCwZ1X3Ht1bWO5FG2 O8i3/2bWfJeiaflwidwYlx2/hO1RNJIGA01IjbZY1XWK2sq/uLe2/JSqlmH3L3jN zhGaDgwJNSGuDR8RzL1aNUPqkQL9ChDKFdsQhQ== -----END CERTIFICATE-----Generated at Fri May 3 21:34:11 2024 by rpki-client on console-ams.rpki-client.org