$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0.cer File: bf199120-727f-4e3f-bb44-8136224777e0.cer (raw, json) Hash identifier: Nta2YsKTcXnl+VyW/bKz+zSWzn8ebJSLx2RFeCWuCRM= Subject key identifier: E7:5D:2A:3B:AE:64:3D:38:0F:62:5D:33:61:15:39:70:E5:F6:58:C6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285844B8581552B7C11F61CAD55500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/bf199120-727f-4e3f-bb44-8136224777e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jan 2024 01:45:21 +0000 Certificate not after: Mon 04 May 2026 00:45:21 +0000 Subordinate resources: IP: 23.151.72.0/24 IP: 23.169.208.0/24 IP: 66.187.8.0/22 IP: 2606:bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:b8:58:15:52:b7:c1:1f:61:ca:d5:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 30 01:45:21 2024 GMT Not After : May 4 00:45:21 2026 GMT Subject: CN=bf199120-727f-4e3f-bb44-8136224777e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:38:86:a8:99:f2:e8:c0:1a:fe:64:03:46: ad:c8:9a:c9:b7:38:10:36:c4:3b:3a:9f:3b:76:05: f6:fd:06:ce:78:5d:25:49:ee:29:d5:b3:45:95:05: f8:2f:52:1f:32:d9:30:79:61:10:04:d9:05:20:44: 18:50:0c:41:ca:65:31:05:58:cf:86:3e:f0:88:0d: a7:34:b2:9b:fe:75:47:31:c1:e1:a5:cf:ed:e4:08: 9b:4b:fd:63:46:30:e7:f1:15:c0:ee:d1:bc:9b:52: 59:67:d4:63:d7:f4:93:ab:31:be:20:e4:06:f1:33: ad:2c:56:a1:80:88:c8:d5:35:a0:41:c8:8c:0d:e1: 11:d8:39:9b:19:aa:a9:5d:e5:17:55:00:8e:c7:2a: 0e:c5:6f:79:d7:54:5c:21:5a:2d:85:5b:1e:69:96: 15:4f:b1:9f:c1:7f:22:4d:c9:18:d3:df:6d:2a:f9: f1:de:58:87:0b:b5:76:01:d9:94:9f:39:33:24:3a: 2f:95:e6:3a:57:d8:74:f8:4a:54:d1:ff:b5:34:f7: fb:4c:9d:c3:0e:97:3b:d4:a1:7f:16:8d:52:a1:54: 8d:1d:dc:fd:18:ae:bd:6a:1b:4c:0d:14:cd:e4:bd: c3:fd:44:b6:58:b4:cc:59:9a:11:26:02:52:39:90: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5D:2A:3B:AE:64:3D:38:0F:62:5D:33:61:15:39:70:E5:F6:58:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/bf199120-727f-4e3f-bb44-8136224777e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.151.72.0/24 23.169.208.0/24 66.187.8.0/22 IPv6: 2606:bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:24:88:9d:86:d1:b5:07:99:b4:34:66:3d:0f:74:49:44:c8: 6c:5e:d9:6d:af:58:02:87:9f:47:91:f3:1f:b9:eb:e2:40:83: 36:e2:f9:54:d2:a3:7f:f4:19:8b:98:18:46:5d:c7:cd:9b:71: d9:1b:43:f3:ae:93:85:af:b9:76:d1:9d:af:5d:e3:8c:a1:6d: 8c:96:ee:eb:6f:aa:36:c5:d3:61:9c:3e:2b:9b:d2:80:0b:92: 7b:c2:9b:7c:7b:1a:0d:0e:e3:81:a3:df:26:af:cb:54:0c:a4: dc:40:3d:d2:44:de:e4:4c:78:09:27:d3:d7:0c:e0:26:d6:b2: ce:64:87:bd:18:55:66:ce:a6:d5:3a:34:ba:62:0b:fc:5d:fd: 01:27:b6:fd:71:bc:c8:d4:a0:8a:16:d3:49:7d:ec:93:3c:7b: cc:9b:97:1b:c1:d5:16:9b:10:f9:52:35:6c:04:d1:17:33:c6: 86:77:5b:a5:a4:fa:c6:39:a5:33:78:bc:db:02:af:1a:4c:12: 16:59:37:0c:f9:01:2d:ae:8a:77:ee:88:79:4d:39:d9:47:fe: 72:9a:af:6a:6f:2b:d3:e4:dc:2c:d8:ab:7b:dc:a5:b5:ae:da: ae:3a:01:04:50:75:4a:0b:87:12:b1:79:fc:87:2f:80:45:57: e4:66:fe:7a -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWES4WBVSt8EfYcrVVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEzMDAxNDUyMVoXDTI2MDUwNDAwNDUyMVowLzEtMCsGA1UEAxMk YmYxOTkxMjAtNzI3Zi00ZTNmLWJiNDQtODEzNjIyNDc3N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLU4hqiZ8ujAGv5kA0atyJrJtzgQNsQ7Op87 dgX2/QbOeF0lSe4p1bNFlQX4L1IfMtkweWEQBNkFIEQYUAxBymUxBVjPhj7wiA2n NLKb/nVHMcHhpc/t5AibS/1jRjDn8RXA7tG8m1JZZ9Rj1/STqzG+IOQG8TOtLFah gIjI1TWgQciMDeER2DmbGaqpXeUXVQCOxyoOxW9511RcIVothVseaZYVT7GfwX8i TckY099tKvnx3liHC7V2AdmUnzkzJDovleY6V9h0+EpU0f+1NPf7TJ3DDpc71KF/ Fo1SoVSNHdz9GK69ahtMDRTN5L3D/US2WLTMWZoRJgJSOZALZwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFOddKjuuZD04D2JdM2EVOXDl9ljGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i ZjE5OTEyMC03MjdmLTRlM2YtYmI0NC04MTM2MjI0Nzc3ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JmMTk5MTIwLTcyN2YtNGUzZi1i YjQ0LTgxMzYyMjQ3NzdlMC9iZjE5OTEyMC03MjdmLTRlM2YtYmI0NC04MTM2MjI0 Nzc3ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXl0gDBAAXqdADBAJCuwgwDQQCAAIwBwMFACYG C8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHCSInYbRtQeZtDRmPQ90SUTIbF7Zba9YAoefR5HzH7nr4kCD NuL5VNKjf/QZi5gYRl3HzZtx2RtD866Tha+5dtGdr13jjKFtjJbu62+qNsXTYZw+ K5vSgAuSe8KbfHsaDQ7jgaPfJq/LVAyk3EA90kTe5Ex4CSfT1wzgJtayzmSHvRhV Zs6m1To0umIL/F39ASe2/XG8yNSgihbTSX3skzx7zJuXG8HVFpsQ+VI1bATRFzPG hndbpaT6xjmlM3i82wKvGkwSFlk3DPkBLa6Kd+6IeU052Uf+cpqvam8r0+TcLNir e9ylta7arjoBBFB1SguHErF5/IcvgEVX5Gb+eg== -----END CERTIFICATE-----Generated at Fri May 3 15:15:42 2024 by rpki-client on console-fra.rpki-client.org