$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer File: a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer (raw, json) Hash identifier: 1UpgooGJPoNL/d2xe9SSBfLtXoKqUwoixMxP3GZ0bTg= Subject key identifier: 09:34:4F:22:0E:7B:21:C1:CA:04:08:C6:2A:83:C0:09:FE:63:B4:41 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858442632502AEB90F15149DEB700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Dec 2023 17:21:14 +0000 Certificate not after: Tue 10 Mar 2026 00:45:16 +0000 Subordinate resources: AS: 54110 IP: 199.182.132.0/22 IP: 206.168.36.0/23 IP: 2605:3880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:26:32:50:2a:eb:90:f1:51:49:de:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 8 17:21:14 2023 GMT Not After : Mar 10 00:45:16 2026 GMT Subject: CN=a816e8ad-9bcc-46da-afd8-70dd97bd0232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:0c:f0:00:6f:09:3e:ef:39:9a:7e:80:2e: 25:f0:af:18:8b:07:89:aa:59:33:73:a8:cf:60:87: c2:d0:77:78:d9:d8:8d:1d:ff:ed:be:3c:cb:b0:99: 6a:5d:da:53:fe:d2:49:c6:db:82:af:e2:3e:a6:c6: 34:f6:60:bb:dd:90:6f:e7:06:3c:a8:0b:82:ec:c4: 4b:8e:4d:d4:28:38:de:11:38:60:54:3a:03:83:39: 9e:6f:f5:fa:2a:7a:01:96:32:5f:d8:16:bf:88:2f: 8e:52:f5:4c:c2:87:c6:a3:c2:4a:df:dc:7c:17:65: 11:c6:1d:e9:e3:3d:2b:d0:36:88:1d:f8:3e:44:9a: 40:c0:b4:bb:40:1f:28:02:21:e9:0c:18:7f:00:41: f1:9c:f8:06:b6:73:b6:73:cf:60:d9:8e:98:72:e9: 18:6b:ff:85:c5:d9:07:a2:d2:0b:b8:53:1c:68:1f: 52:0a:39:ad:68:73:0b:ec:ae:78:a8:dd:12:34:b1: a1:9d:68:18:4e:66:7e:6b:5d:37:53:d6:92:64:e5: d1:a4:a1:97:bf:96:65:59:2f:80:2f:97:84:90:5a: cc:c0:88:e8:86:a9:26:1e:d1:8a:42:84:48:78:94: ca:99:f6:58:0d:8f:92:a5:d7:7d:92:7f:3c:82:c9: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:4F:22:0E:7B:21:C1:CA:04:08:C6:2A:83:C0:09:FE:63:B4:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.182.132.0/22 206.168.36.0/23 IPv6: 2605:3880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bf:cb:b3:f6:11:72:9b:2f:5c:81:ba:c3:2b:59:4e:33:fd: 38:f1:c4:dc:39:47:f4:dd:cf:be:e3:cf:97:47:ea:3e:82:72: 36:c4:10:ff:99:b2:c4:b6:b4:ac:d4:1c:8a:f9:c6:38:df:26: 6b:c5:21:c3:f5:bc:e5:b3:a4:aa:c9:50:03:13:b3:59:b9:59: 98:dd:52:83:9a:d2:35:f1:91:85:de:1e:12:a3:9a:ce:ca:1e: 14:0c:cb:9a:aa:b2:b9:df:e5:08:91:36:3c:3f:f2:a6:1d:d5: 56:42:97:db:d8:72:97:40:92:cb:84:3e:f6:d6:f4:28:9b:4a: 9e:e8:5e:b0:5a:c5:11:e4:7f:0f:26:68:45:e0:08:37:ad:a1: 63:e2:3f:c7:69:17:0e:4f:0a:42:c2:c3:7a:1a:80:b7:c5:0a: 13:6c:93:5a:23:ee:ba:f5:27:12:6e:20:71:34:15:ea:53:64: 00:40:96:88:db:6b:8b:46:bc:5a:5b:76:33:f7:d8:21:81:a7: 7a:0a:0d:99:7f:bd:c0:f4:3d:ba:9d:13:5a:8a:14:cd:5a:bf: 9e:76:09:e0:03:0f:9d:da:8c:53:e7:48:a6:84:3a:23:ce:31: e6:26:89:a6:98:30:c3:30:24:c8:4a:2f:1b:50:d3:b5:9b:ad: db:3a:0c:b7 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEQmMlAq65DxUUnetwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIwODE3MjExNFoXDTI2MDMxMDAwNDUxNlowLzEtMCsGA1UEAxMk YTgxNmU4YWQtOWJjYy00NmRhLWFmZDgtNzBkZDk3YmQwMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DQM8ABvCT7vOZp+gC4l8K8YiweJqlkzc6jP YIfC0Hd42diNHf/tvjzLsJlqXdpT/tJJxtuCr+I+psY09mC73ZBv5wY8qAuC7MRL jk3UKDjeEThgVDoDgzmeb/X6KnoBljJf2Ba/iC+OUvVMwofGo8JK39x8F2URxh3p 4z0r0DaIHfg+RJpAwLS7QB8oAiHpDBh/AEHxnPgGtnO2c89g2Y6YcukYa/+FxdkH otILuFMcaB9SCjmtaHML7K54qN0SNLGhnWgYTmZ+a103U9aSZOXRpKGXv5ZlWS+A L5eEkFrMwIjohqkmHtGKQoRIeJTKmfZYDY+Spdd9kn88gsmiYwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFAk0TyIOeyHBygQIxiqDwAn+Y7RBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h ODE2ZThhZC05YmNjLTQ2ZGEtYWZkOC03MGRkOTdiZDAyMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1h ZmQ4LTcwZGQ5N2JkMDIzMi9hODE2ZThhZC05YmNjLTQ2ZGEtYWZkOC03MGRkOTdi ZDAyMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALHtoQDBAHOqCQwDQQCAAIwBwMFACYFOIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANNeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKS/y7P2EXKbL1yBusMr WU4z/TjxxNw5R/Tdz77jz5dH6j6CcjbEEP+ZssS2tKzUHIr5xjjfJmvFIcP1vOWz pKrJUAMTs1m5WZjdUoOa0jXxkYXeHhKjms7KHhQMy5qqsrnf5QiRNjw/8qYd1VZC l9vYcpdAksuEPvbW9CibSp7oXrBaxRHkfw8maEXgCDetoWPiP8dpFw5PCkLCw3oa gLfFChNsk1oj7rr1JxJuIHE0FepTZABAlojba4tGvFpbdjP32CGBp3oKDZl/vcD0 PbqdE1qKFM1av552CeADD53ajFPnSKaEOiPOMeYmiaaYMMMwJMhKLxtQ07Wbrds6 DLc= -----END CERTIFICATE-----Generated at Fri May 3 20:36:49 2024 by rpki-client on console-fra.rpki-client.org