$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707.cer File: f28cc06c-5b21-4cf4-9ebc-1c91f6868707.cer (raw, json) Hash identifier: xtUTS+d4kxVrGlDmmnNw3PAcWLA/Y4nLZFCx3N+oOyA= Subject key identifier: F7:49:62:2D:4A:73:83:C0:DE:74:6B:60:5D:AF:22:28:E4:77:01:2E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858440E0C4FCCF6D710ABB27B2D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/f28cc06c-5b21-4cf4-9ebc-1c91f6868707.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Nov 2023 01:45:15 +0000 Certificate not after: Wed 04 Mar 2026 01:45:15 +0000 Subordinate resources: AS: 26801 AS: 54388 IP: 24.51.128.0/18 IP: 67.58.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:0e:0c:4f:cc:f6:d7:10:ab:b2:7b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 30 01:45:15 2023 GMT Not After : Mar 4 01:45:15 2026 GMT Subject: CN=f28cc06c-5b21-4cf4-9ebc-1c91f6868707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:94:af:18:75:59:27:b3:f3:8e:27:ab:9b: 83:ef:88:c3:1b:b2:38:cc:4d:c4:81:f3:5e:13:be: a2:28:9a:41:de:98:8e:09:9b:eb:f5:d3:39:b8:ca: 06:cd:9b:91:fa:6e:58:10:4b:99:b5:6c:b4:92:3e: 1e:1f:1f:37:49:1b:5e:76:d4:a0:80:93:2b:8d:4b: 76:30:98:69:8a:19:41:ce:60:1c:aa:5f:20:c5:c7: 4d:7d:98:5f:04:84:0e:95:b0:56:25:e1:21:3b:5c: bd:d1:10:bb:33:ed:c0:eb:0d:96:98:68:bf:19:67: b9:43:df:db:94:6a:d8:c2:d0:89:dd:e9:bf:61:32: 19:fb:6a:2a:27:77:e3:24:cc:ea:89:3f:1f:19:69: 14:b2:51:32:11:69:90:c6:f1:ce:0c:46:59:36:be: b7:45:49:86:62:df:11:42:ed:18:e9:e4:71:0d:75: 77:12:04:52:5c:0d:c5:e8:cf:1d:34:c9:6c:13:2c: 1e:2c:5d:4c:d8:82:45:37:d1:3c:e5:09:f9:c7:14: 53:8e:49:18:16:a0:ea:0f:22:24:d5:61:05:ee:4e: cc:03:19:fe:f5:94:44:56:28:90:0c:88:e2:54:00: 20:17:3c:bb:78:2c:d1:65:c9:53:44:95:ee:e5:c2: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:49:62:2D:4A:73:83:C0:DE:74:6B:60:5D:AF:22:28:E4:77:01:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/f28cc06c-5b21-4cf4-9ebc-1c91f6868707.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 24.51.128.0/18 67.58.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26801 54388 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:77:89:1b:70:11:96:2f:35:1c:35:d5:1a:62:43:93:11: 1a:83:5d:a1:86:94:a3:33:71:65:c2:d2:78:21:29:56:86:92: 9e:b8:3a:3c:53:02:e8:e6:c9:c6:24:be:de:13:c3:77:52:93: 17:ef:2c:7a:4a:d2:8e:5a:b7:a3:12:59:c4:1d:63:32:0f:ab: be:d5:99:03:2c:14:2d:7f:dc:ce:b5:4c:2b:20:9d:fc:e7:56: 93:9d:99:b9:0f:04:a6:dd:3d:af:af:e4:3f:c7:86:37:19:ce: 5f:b3:c6:89:8d:bf:6e:c9:0c:c8:fd:fb:8e:4e:af:02:36:87: e9:4e:9e:88:66:08:70:f9:8f:d0:fb:f7:c4:85:76:b4:d4:1c: 9d:da:d8:e6:e1:3d:17:2b:50:1e:b5:81:7a:8a:0b:d1:6e:07: 41:51:fd:4e:86:76:ca:0f:33:1d:90:ff:f1:fe:4c:fd:5b:ef: 37:c3:08:1f:ee:8e:e9:61:c1:f5:24:23:a9:8d:0e:40:a2:8c: 16:9c:dd:db:9f:3d:cf:e7:ab:1d:7c:ef:ee:0c:4f:b5:4f:4c: 31:5e:09:93:d4:c0:02:1d:77:93:87:3c:92:00:e4:04:1c:f8: 91:58:5b:7b:6e:c6:44:d6:d2:02:6c:80:48:78:2c:86:05:91: 66:ff:0d:ef -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEQODE/M9tcQq7J7LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTEzMDAxNDUxNVoXDTI2MDMwNDAxNDUxNVowLzEtMCsGA1UEAxMk ZjI4Y2MwNmMtNWIyMS00Y2Y0LTllYmMtMWM5MWY2ODY4NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3uUrxh1WSez844nq5uD74jDG7I4zE3EgfNe E76iKJpB3piOCZvr9dM5uMoGzZuR+m5YEEuZtWy0kj4eHx83SRtedtSggJMrjUt2 MJhpihlBzmAcql8gxcdNfZhfBIQOlbBWJeEhO1y90RC7M+3A6w2WmGi/GWe5Q9/b lGrYwtCJ3em/YTIZ+2oqJ3fjJMzqiT8fGWkUslEyEWmQxvHODEZZNr63RUmGYt8R Qu0Y6eRxDXV3EgRSXA3F6M8dNMlsEyweLF1M2IJFN9E85Qn5xxRTjkkYFqDqDyIk 1WEF7k7MAxn+9ZREViiQDIjiVAAgFzy7eCzRZclTRJXu5cKGCQIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFPdJYi1Kc4PA3nRrYF2vIijkdwEuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m MjhjYzA2Yy01YjIxLTRjZjQtOWViYy0xYzkxZjY4Njg3MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2YyOGNjMDZjLTViMjEtNGNmNC05 ZWJjLTFjOTFmNjg2ODcwNy9mMjhjYzA2Yy01YjIxLTRjZjQtOWViYy0xYzkxZjY4 Njg3MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAYYM4ADBAVDOqAwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICaLECAwDUdDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoOneJG3ARli81HDXVGmJDkxEag12hhpSj M3FlwtJ4ISlWhpKeuDo8UwLo5snGJL7eE8N3UpMX7yx6StKOWrejElnEHWMyD6u+ 1ZkDLBQtf9zOtUwrIJ3851aTnZm5DwSm3T2vr+Q/x4Y3Gc5fs8aJjb9uyQzI/fuO Tq8CNofpTp6IZghw+Y/Q+/fEhXa01Byd2tjm4T0XK1AetYF6igvRbgdBUf1OhnbK DzMdkP/x/kz9W+83wwgf7o7pYcH1JCOpjQ5AoowWnN3bnz3P56sdfO/uDE+1T0wx XgmT1MACHXeThzySAOQEHPiRWFt7bsZE1tICbIBIeCyGBZFm/w3v -----END CERTIFICATE-----Generated at Sat May 4 02:10:20 2024 by rpki-client on console-ams.rpki-client.org