$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer File: 81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer (raw, json) Hash identifier: Nu70mCn7fB+uyDuZ5TmQNi13lR3D004WC3Y2/2BcO7M= Subject key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285844B2C2B5F3EDA5041555031880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Jan 2024 01:45:20 +0000 Certificate not after: Sat 02 May 2026 00:45:20 +0000 Subordinate resources: AS: 33196 IP: 136.175.141.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:b2:c2:b5:f3:ed:a5:04:15:55:03:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 28 01:45:20 2024 GMT Not After : May 2 00:45:20 2026 GMT Subject: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:37:62:11:80:a1:64:2b:0b:2f:ca:ea:57: e0:8a:bd:1e:22:56:92:b7:34:97:d9:4b:af:d8:11: 59:c7:a3:35:34:f8:93:fa:ac:21:f5:29:ff:2a:00: 25:a8:a0:43:43:bd:05:4d:89:80:cc:7f:5a:48:19: c9:23:1c:e7:49:ee:ca:c9:d2:96:cd:90:47:65:53: c7:30:c7:38:8d:e9:d6:be:b8:03:f2:a3:50:84:b8: a5:45:0b:7d:47:2c:c9:ad:3c:54:7f:fd:4d:59:05: 50:6e:cc:ec:b7:2b:9a:19:3d:fe:0b:bf:6e:55:7c: d7:74:fd:2d:34:64:88:37:6f:03:a6:6b:9f:e1:ef: 59:1c:b9:55:24:3f:93:da:3e:f5:bf:10:17:d0:45: 74:25:bd:f8:96:96:26:b1:4d:69:80:48:c6:f6:b9: 79:5e:f1:56:67:32:9e:6a:01:f6:b1:87:6c:3d:a4: 88:eb:aa:91:93:c5:e7:cf:8a:63:f3:68:c5:80:26: d8:54:1c:2c:69:89:1f:2f:17:35:63:26:50:da:2e: 3d:7c:fc:8f:8c:ae:74:2a:e0:19:b3:cf:42:24:23: b2:75:b1:d4:c3:54:f1:c1:2d:4d:0c:66:36:4d:e5: 0f:24:d0:b3:da:38:14:ea:bf:53:8f:eb:aa:c5:8d: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 136.175.141.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33196 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:36:34:f8:d6:31:67:44:58:3d:6b:5e:44:b1:d8:cd:de:f7: f5:a1:ed:d8:80:ff:72:93:f2:c0:af:00:f9:85:76:cc:ff:ce: 55:d0:0f:fb:d5:e1:aa:54:15:3f:c5:bb:16:a9:57:af:67:2e: c7:5b:b0:4d:ea:c6:0e:45:b7:0e:6b:51:f2:da:fa:33:13:d6: 31:31:ab:ee:65:82:f0:3e:65:6b:48:91:c8:de:50:79:f8:42: d3:95:5c:04:09:94:91:80:9b:c2:05:19:13:47:14:08:38:0d: 30:4d:ef:a5:69:16:80:d0:91:cb:4e:b4:e5:38:ef:fd:93:a6: 0c:27:98:48:9c:fc:fc:f3:be:45:3f:12:e2:fd:cb:b5:27:63: 5f:c8:ab:b7:fe:8f:bd:4d:80:67:13:82:f2:b4:32:27:ae:50: bf:31:15:ed:1a:b6:2d:b1:1d:48:0c:1f:51:b5:d3:e9:2f:98: 45:07:c6:50:8d:5c:71:ab:59:fb:28:c8:14:4f:48:5e:7d:24: 3b:45:03:24:9c:7e:61:0e:05:07:23:b2:f8:2a:e9:b4:ee:cb: e9:ef:82:e1:60:9c:04:1a:69:e3:5e:74:cb:d2:44:2e:9a:87: 60:9d:9a:0f:5a:a6:a9:25:fb:08:52:62:88:6f:69:c6:1a:22: 2f:b4:e5:7f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWESywrXz7aUEFVUDGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEyODAxNDUyMFoXDTI2MDUwMjAwNDUyMFowLzEtMCsGA1UEAxMk ODFlYWYwNDEtYzlmOS00ZDY3LTgwYzItNDNiZDUxYWY2Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtg3YhGAoWQrCy/K6lfgir0eIlaStzSX2Uuv 2BFZx6M1NPiT+qwh9Sn/KgAlqKBDQ70FTYmAzH9aSBnJIxznSe7KydKWzZBHZVPH MMc4jenWvrgD8qNQhLilRQt9RyzJrTxUf/1NWQVQbszstyuaGT3+C79uVXzXdP0t NGSIN28Dpmuf4e9ZHLlVJD+T2j71vxAX0EV0Jb34lpYmsU1pgEjG9rl5XvFWZzKe agH2sYdsPaSI66qRk8Xnz4pj82jFgCbYVBwsaYkfLxc1YyZQ2i49fPyPjK50KuAZ s89CJCOydbHUw1TxwS1NDGY2TeUPJNCz2jgU6r9Tj+uqxY3V9QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKHcKeMwwi9+p9igZcRIT1nFVwZEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 MWVhZjA0MS1jOWY5LTRkNjctODBjMi00M2JkNTFhZjZiODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzgxZWFmMDQxLWM5ZjktNGQ2Ny04 MGMyLTQzYmQ1MWFmNmI4NC84MWVhZjA0MS1jOWY5LTRkNjctODBjMi00M2JkNTFh ZjZiODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACIr40wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIGsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI82NPjWMWdEWD1rXkSx2M3e9/Wh7diA/3KT8sCvAPmFdsz/ zlXQD/vV4apUFT/FuxapV69nLsdbsE3qxg5Ftw5rUfLa+jMT1jExq+5lgvA+ZWtI kcjeUHn4QtOVXAQJlJGAm8IFGRNHFAg4DTBN76VpFoDQkctOtOU47/2TpgwnmEic /PzzvkU/EuL9y7UnY1/Iq7f+j71NgGcTgvK0MieuUL8xFe0ati2xHUgMH1G10+kv mEUHxlCNXHGrWfsoyBRPSF59JDtFAyScfmEOBQcjsvgq6bTuy+nvguFgnAQaaeNe dMvSRC6ah2Cdmg9apqkl+whSYohvacYaIi+05X8= -----END CERTIFICATE-----Generated at Sat May 4 03:00:55 2024 by rpki-client on console-fra.rpki-client.org