$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer File: 1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer (raw, json) Hash identifier: cd+UZhI8BDeBd/AcBJY0nVhgJR/Jy986Wdt+xVT4KVg= Subject key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841FE4B3F85C2D24CCA0C99E580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 May 2023 00:45:15 +0000 Certificate not after: Wed 27 Aug 2025 00:45:15 +0000 Subordinate resources: AS: 23295 IP: 199.68.208.0/22 IP: 208.82.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:fe:4b:3f:85:c2:d2:4c:ca:0c:99:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 25 00:45:15 2023 GMT Not After : Aug 27 00:45:15 2025 GMT Subject: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:1c:4d:13:3e:0c:36:e8:60:94:48:a6:1d: a2:e5:5d:58:4e:fc:c5:2b:13:1e:1e:47:80:05:22: d1:a6:93:dd:eb:4d:8f:fc:7a:56:4a:c5:13:30:1d: 41:e1:84:dc:6a:47:2b:ec:3f:7d:97:43:42:c6:d6: f8:73:05:a6:a8:e6:66:b9:48:69:39:69:35:c5:00: 43:ff:00:55:a8:9f:e1:45:cc:db:a2:6e:a9:d8:bf: 46:1d:3f:1e:c8:bf:e1:c6:bf:11:13:3c:fe:c0:54: 80:c8:d3:4b:aa:64:54:ed:d7:b7:26:31:77:5e:26: 4c:29:37:76:9f:1d:34:9b:c1:e2:40:3e:da:fc:27: ef:a2:7b:34:34:e1:df:58:04:56:48:d6:7d:21:0d: d2:de:cb:e4:22:40:eb:e3:74:7c:e3:c0:eb:67:b1: d6:2b:55:8b:b5:1e:0a:03:53:d7:3d:b0:fe:ec:96: d6:4e:2b:d6:6e:24:45:7d:3f:dd:f5:19:e6:4d:26: d5:77:45:24:c7:31:d9:f3:c2:f6:09:82:bd:f3:82: dc:3a:6e:f1:4e:3c:1d:30:e9:2c:93:80:87:86:00: b8:1b:63:5c:de:69:7d:a6:ed:e8:62:77:44:62:8c: 93:d5:8d:a5:19:da:04:ad:13:fd:06:dc:7a:dc:d4: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.68.208.0/22 208.82.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23295 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:43:4d:8f:b7:a7:3b:a8:75:da:5a:c1:aa:40:5d:ab:78:dd: 67:ae:bf:db:e7:02:e1:bf:ec:d5:f7:6f:d8:e7:87:ef:b8:7e: 5f:5f:15:78:18:c8:f5:7c:6e:3d:ff:d6:19:b3:e4:1e:05:a1: bd:32:af:62:33:23:6f:9a:b7:ee:52:bd:85:d9:0e:ad:86:c0: b6:8d:40:71:38:8a:b6:33:6e:f0:b7:71:97:14:e3:0e:79:aa: 8d:01:65:0d:53:bb:78:cc:35:86:10:16:ff:4f:91:21:8e:e1: 09:5c:1a:16:67:36:d0:45:74:1c:01:ff:7e:00:35:2f:02:f5: be:7a:b5:93:0e:61:ef:34:1f:a1:ec:58:57:57:a7:70:66:0a: 86:78:3d:15:d5:3d:ea:c2:a4:ca:ac:e1:21:fc:b4:af:f6:7e: 3a:d9:3b:93:ab:f8:a9:8b:7c:86:db:5a:e5:41:48:e4:32:e3: e5:9e:9a:83:f7:4c:02:0b:4c:df:5e:0e:b2:6e:00:d5:db:ba: 13:25:8d:92:4c:b4:a6:ae:49:ab:51:33:cf:c2:d0:36:c3:ba: d6:1c:0b:4f:f1:a3:d4:22:09:17:7e:e2:c9:9f:ed:77:03:4c: 54:a6:36:67:8c:ff:ce:09:3e:6c:03:9f:ac:23:b0:ee:2b:8c: 0b:3d:62:e4 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEH+Sz+FwtJMygyZ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUyNTAwNDUxNVoXDTI1MDgyNzAwNDUxNVowLzEtMCsGA1UEAxMk MWYwOGFlNTAtNzU2Ni00ZjUyLTljMzYtM2EzZjg0YTM3YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfIcTRM+DDboYJRIph2i5V1YTvzFKxMeHkeA BSLRppPd602P/HpWSsUTMB1B4YTcakcr7D99l0NCxtb4cwWmqOZmuUhpOWk1xQBD /wBVqJ/hRczbom6p2L9GHT8eyL/hxr8REzz+wFSAyNNLqmRU7de3JjF3XiZMKTd2 nx00m8HiQD7a/Cfvons0NOHfWARWSNZ9IQ3S3svkIkDr43R848DrZ7HWK1WLtR4K A1PXPbD+7JbWTivWbiRFfT/d9RnmTSbVd0UkxzHZ88L2CYK984LcOm7xTjwdMOks k4CHhgC4G2Nc3ml9pu3oYndEYoyT1Y2lGdoErRP9Btx63NTwmwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNhfqiFykX68S7spyAenjN0aK61rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x ZjA4YWU1MC03NTY2LTRmNTItOWMzNi0zYTNmODRhMzdjNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFmMDhhZTUwLTc1NjYtNGY1Mi05 YzM2LTNhM2Y4NGEzN2M1OS8xZjA4YWU1MC03NTY2LTRmNTItOWMzNi0zYTNmODRh MzdjNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHRNADBALQUlAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICWv8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAgkNNj7enO6h12lrBqkBdq3jdZ66/2+cC4b/s1fdv 2OeH77h+X18VeBjI9XxuPf/WGbPkHgWhvTKvYjMjb5q37lK9hdkOrYbAto1AcTiK tjNu8LdxlxTjDnmqjQFlDVO7eMw1hhAW/0+RIY7hCVwaFmc20EV0HAH/fgA1LwL1 vnq1kw5h7zQfoexYV1encGYKhng9FdU96sKkyqzhIfy0r/Z+Otk7k6v4qYt8htta 5UFI5DLj5Z6ag/dMAgtM314Osm4A1du6EyWNkky0pq5Jq1Ezz8LQNsO61hwLT/Gj 1CIJF37iyZ/tdwNMVKY2Z4z/zgk+bAOfrCOw7iuMCz1i5A== -----END CERTIFICATE-----Generated at Thu Apr 25 02:15:47 2024 by rpki-client on console-ams.rpki-client.org