$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer File: d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer (raw, json) Hash identifier: QSLnhPbcgtNr8xoR59+AC6nH1VILY9Wyg3ZI7XUGIlY= Subject key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E4834D4B03D96D0A6DA45860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Wed 18 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 23522 AS: 32181 AS: 54674 IP: 66.252.0.0/19 IP: 69.39.224.0/20 IP: 69.65.0.0/18 IP: 70.32.0.0/20 IP: 199.168.112.0/21 IP: 209.212.144.0/20 IP: 216.38.0.0/19 IP: 2001:1850::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4d:4b:03:d9:6d:0a:6d:a4:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 18 19:06:39 2025 GMT Subject: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:f8:45:55:80:0d:f0:87:7c:e6:47:34:66: 2f:f0:50:ee:29:04:e5:db:01:48:28:84:24:63:55: 38:69:98:e5:05:d3:bc:d1:86:c9:23:c5:1d:32:dc: 53:8b:85:e5:44:02:d5:80:2c:65:07:94:fb:32:c3: 0d:a4:78:da:02:7e:34:85:13:c7:b6:c9:b7:9a:1e: 16:b0:bf:c4:9c:97:29:2e:ae:84:66:c4:80:e8:fb: 64:cf:8b:ee:cb:5d:4e:18:79:77:99:4a:7a:4e:61: 20:8e:e7:0e:24:3d:33:58:64:82:d9:07:0f:52:f1: 93:e8:de:bb:15:23:b2:c7:e9:c0:65:9f:d1:89:93: c7:ee:92:14:36:b5:c2:2b:da:96:30:d1:d4:83:81: 38:3b:51:c7:6a:5b:c6:56:00:5a:64:9a:de:76:13: 4c:7c:e2:aa:99:88:75:d7:c7:01:0d:df:2a:a0:2e: 64:54:65:94:89:e0:a5:53:86:e5:27:78:3d:c7:78: 46:ef:47:43:57:d4:00:d4:8b:d8:ff:a7:42:26:fa: 51:69:66:1c:6c:00:77:97:e8:34:1f:93:97:b2:72: 26:b3:93:d4:a6:31:64:f7:55:61:e6:c9:bb:c1:37: 7f:ff:b6:97:ab:d6:21:ad:a5:1d:1f:1e:39:5a:9f: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 69.39.224.0/20 69.65.0.0/18 70.32.0.0/20 199.168.112.0/21 209.212.144.0/20 216.38.0.0/19 IPv6: 2001:1850::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23522 32181 54674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:05:ad:f4:74:bb:e8:7d:11:c4:6e:2d:96:07:d4:de:8d:63: bc:f2:14:00:ee:e9:c1:c8:bc:04:04:2e:5a:04:61:4d:bd:66: de:22:de:b7:04:86:f4:da:73:09:0f:83:f1:39:c8:af:cf:b3: aa:06:ea:fd:08:16:fe:b5:02:05:7d:d6:59:be:cc:f5:55:54: 3c:db:44:68:d6:fa:41:61:77:28:d5:e7:94:1e:d3:e3:38:8d: 09:c2:68:d2:72:fe:6b:80:4f:b4:68:37:0c:4d:07:49:ac:13: 15:2d:66:93:70:d0:68:57:c9:1d:3b:62:9e:4a:74:d1:1a:9b: a4:d2:2b:9e:a4:16:88:07:29:31:cb:7d:e4:b4:f0:5b:7b:be: 2d:b3:83:0e:47:7a:6a:57:2f:4a:65:84:c5:5c:69:b3:0a:91: 2b:0f:a0:5f:99:d3:43:6a:3e:9b:0b:3b:56:80:f4:71:b6:3c: 4c:20:8f:77:a7:6e:f6:9a:9d:86:19:11:4b:05:7c:b5:23:8e: a5:db:f2:31:dc:84:d4:56:56:66:c6:20:62:65:60:0e:08:74: da:9e:a9:dc:6a:db:bb:fc:23:e6:b6:83:b6:e7:8e:39:d3:93: dd:1d:89:d6:74:51:19:87:23:eb:77:ff:b7:79:7f:b6:7b:dc: bb:56:7b:2f -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEHkg01LA9ltCm2kWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYxODE5MDYzOVowLzEtMCsGA1UEAxMk ZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIyMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/4RVWADfCHfOZHNGYv8FDuKQTl2wFIKIQk Y1U4aZjlBdO80YbJI8UdMtxTi4XlRALVgCxlB5T7MsMNpHjaAn40hRPHtsm3mh4W sL/EnJcpLq6EZsSA6Ptkz4vuy11OGHl3mUp6TmEgjucOJD0zWGSC2QcPUvGT6N67 FSOyx+nAZZ/RiZPH7pIUNrXCK9qWMNHUg4E4O1HHalvGVgBaZJredhNMfOKqmYh1 18cBDd8qoC5kVGWUieClU4blJ3g9x3hG70dDV9QA1IvY/6dCJvpRaWYcbAB3l+g0 H5OXsnIms5PUpjFk91Vh5sm7wTd//7aXq9YhraUdHx45Wp9A4wIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFNK5JLG9IdHZ//LHXqN6jEidkLkWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05 N2M5LWRiYzExYzEyMjEwYy9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMx MjIxMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAVC/AADBARFJ+ADBAZFQQADBARGIAADBAPHqHAD BATR1JADBAXYJgAwDQQCAAIwBwMFACABGFAwIgYIKwYBBQUHAQgBAf8EEzARoA8w DQICW+ICAn21AgMA1ZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQAWt9HS76H0RxG4tlgfU3o1jvPIUAO7p wci8BAQuWgRhTb1m3iLetwSG9NpzCQ+D8TnIr8+zqgbq/QgW/rUCBX3WWb7M9VVU PNtEaNb6QWF3KNXnlB7T4ziNCcJo0nL+a4BPtGg3DE0HSawTFS1mk3DQaFfJHTti nkp00RqbpNIrnqQWiAcpMct95LTwW3u+LbODDkd6alcvSmWExVxpswqRKw+gX5nT Q2o+mws7VoD0cbY8TCCPd6du9pqdhhkRSwV8tSOOpdvyMdyE1FZWZsYgYmVgDgh0 2p6p3Grbu/wj5raDtueOOdOT3R2J1nRRGYcj63f/t3l/tnvcu1Z7Lw== -----END CERTIFICATE-----Generated at Fri May 3 15:15:43 2024 by rpki-client on console-fra.rpki-client.org