$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer File: bfc0b168-b834-4192-acf1-30565a4b3e0c.cer (raw, json) Hash identifier: ZXCRm52wCmW4CDTx4S6hmtjAwc34kNZLsJipYVngMuo= Subject key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842CE8744E9D5AF541B6CCEBDB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:20 +0000 Certificate not after: Sat 19 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 399868 IP: 23.183.48.0/24 IP: 173.249.176.0/22 IP: 2602:fc5c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:44:e9:d5:af:54:1b:6c:ce:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 7 14:54:20 2023 GMT Not After : Jul 19 19:06:39 2025 GMT Subject: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:7d:49:b3:17:43:33:05:9c:3f:a0:a6:6a: 37:f4:25:85:fd:df:9a:60:94:db:9d:4e:7d:85:f0: 97:24:8e:d1:38:85:74:b9:d8:f1:25:b2:ed:de:e3: 10:cc:18:61:f8:79:10:27:dd:93:df:52:bb:66:d4: 77:8d:33:75:19:cf:0a:70:01:31:08:45:0e:23:ae: ea:be:36:d5:4e:11:6a:f9:56:73:d1:f1:c7:c1:0e: 83:30:6e:38:b3:22:94:84:a3:94:02:91:0d:d6:35: 1e:81:60:59:95:7f:42:84:a8:21:a0:7d:c7:a9:fb: 7d:40:6e:33:73:09:ce:26:2f:23:a5:f5:76:6f:f0: 5c:b1:01:cb:3e:15:fd:e6:44:d8:14:36:9d:96:e0: ba:6c:c7:16:4c:8b:b2:78:c1:29:cf:e1:4b:1b:8a: d7:63:d8:57:7d:2d:83:9d:d1:35:18:2b:ee:81:d5: 62:40:d8:c6:4c:8d:09:2f:58:65:34:21:fe:cd:c6: dd:5c:6c:0b:29:53:9f:4f:2a:78:c9:68:f0:a8:17: 6c:50:21:81:39:c4:de:cf:c0:3b:fa:cd:9b:fe:29: b3:30:4b:60:79:1d:93:ed:2f:22:0f:f6:7d:9f:69: bb:27:dd:38:13:b3:43:93:a7:dc:8b:f4:83:3f:68: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.183.48.0/24 173.249.176.0/22 IPv6: 2602:fc5c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e9:39:58:69:42:c0:a6:ec:ea:08:20:19:19:da:e2:e8:e4: 74:07:22:a4:13:08:af:04:fb:ee:bc:ae:ed:48:aa:43:30:06: 7a:07:83:c6:a1:48:52:f7:ee:e4:77:42:44:4c:05:54:02:93: 2c:de:be:e9:99:53:2b:b8:6b:7d:26:c9:54:eb:b5:80:72:1d: 24:8f:31:76:7a:5c:db:e0:1e:6c:6d:5e:2f:f7:16:a0:ee:ad: 50:76:9d:cb:b0:ca:b5:44:77:f1:e1:03:82:e5:9f:b7:dc:f1: 77:bc:51:c1:20:49:32:9f:d7:b9:6d:63:a3:9b:40:6b:dc:c8: bb:85:40:bd:1b:06:b7:e5:6f:47:21:7a:20:82:ba:90:c5:1d: f2:47:de:e4:a9:44:aa:3d:c2:e3:1c:52:27:90:87:77:b3:4a: 8a:ec:11:8b:9c:16:3f:ed:72:43:19:c6:35:0b:01:b4:5c:45: 20:2c:9e:96:23:81:a5:4e:ae:95:1b:bd:89:15:92:c6:f1:aa: 29:48:2b:40:2d:3d:dc:96:47:c8:27:ab:e5:ef:c0:fc:97:ef: 3f:53:53:4d:21:63:30:7f:b7:82:b5:9e:98:a6:c7:1e:41:42: 87:05:5e:8d:6e:df:df:4e:85:3e:38:5e:19:86:1a:06:0f:b2: 22:fa:1b:9e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWELOh0Tp1a9UG2zOvbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDgwNzE0NTQyMFoXDTI1MDcxOTE5MDYzOVowLzEtMCsGA1UEAxMk YmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIzZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWN9SbMXQzMFnD+gpmo39CWF/d+aYJTbnU59 hfCXJI7ROIV0udjxJbLt3uMQzBhh+HkQJ92T31K7ZtR3jTN1Gc8KcAExCEUOI67q vjbVThFq+VZz0fHHwQ6DMG44syKUhKOUApEN1jUegWBZlX9ChKghoH3Hqft9QG4z cwnOJi8jpfV2b/BcsQHLPhX95kTYFDadluC6bMcWTIuyeMEpz+FLG4rXY9hXfS2D ndE1GCvugdViQNjGTI0JL1hlNCH+zcbdXGwLKVOfTyp4yWjwqBdsUCGBOcTez8A7 +s2b/imzMEtgeR2T7S8iD/Z9n2m7J904E7NDk6fci/SDP2hfxwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAtfaEJ4it+jsBqrmuE9xrkeD9GhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i ZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JmYzBiMTY4LWI4MzQtNDE5Mi1h Y2YxLTMwNTY1YTRiM2UwYy9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0 YjNlMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXtzADBAKt+bAwDgQCAAIwCAMGBCYC/FwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZ/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBA6TlYaULApuzqCCAZ Gdri6OR0ByKkEwivBPvuvK7tSKpDMAZ6B4PGoUhS9+7kd0JETAVUApMs3r7pmVMr uGt9JslU67WAch0kjzF2elzb4B5sbV4v9xag7q1Qdp3LsMq1RHfx4QOC5Z+33PF3 vFHBIEkyn9e5bWOjm0Br3Mi7hUC9Gwa35W9HIXoggrqQxR3yR97kqUSqPcLjHFIn kId3s0qK7BGLnBY/7XJDGcY1CwG0XEUgLJ6WI4GlTq6VG72JFZLG8aopSCtALT3c lkfIJ6vl78D8l+8/U1NNIWMwf7eCtZ6YpsceQUKHBV6Nbt/fToU+OF4ZhhoGD7Ii +hue -----END CERTIFICATE-----Generated at Fri May 3 15:36:52 2024 by rpki-client on console-ams.rpki-client.org