$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067.cer File: 20b01b41-6f04-43fa-8e06-b61037281067.cer (raw, json) Hash identifier: j3oZnMPFYD/FP5TtP/aYc81wlYekK+UM8wal1m03Fp4= Subject key identifier: 0B:8E:F8:08:14:38:52:A8:6C:23:E8:4E:12:68:C7:82:EB:83:EE:10 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842D1A3D021170554A1FF204800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Aug 2023 17:39:16 +0000 Certificate not after: Sat 20 Sep 2025 00:45:17 +0000 Subordinate resources: AS: 400818 IP: 23.159.200.0/24 IP: 2602:fabb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:d1:a3:d0:21:17:05:54:a1:ff:20:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 8 17:39:16 2023 GMT Not After : Sep 20 00:45:17 2025 GMT Subject: CN=20b01b41-6f04-43fa-8e06-b61037281067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:d1:38:4f:24:e9:fd:b1:95:44:f8:78:c9: 52:fe:c0:2b:f0:26:57:e3:9f:54:12:cf:96:a1:fb: 2c:94:43:50:42:90:e2:e9:69:f8:5f:42:6d:24:4c: d1:43:57:c8:93:fe:2e:c0:f6:33:a1:3d:51:95:18: 9a:04:61:03:5f:e4:7a:d3:e8:43:54:26:d5:90:1d: 4e:ad:70:93:cf:5e:2b:21:a2:22:5f:b3:f9:be:6b: da:66:8c:9a:da:1b:24:cd:9e:a0:39:e9:e3:6c:72: 05:62:e0:3a:29:7c:a1:f1:f1:be:5a:b9:82:f6:d9: da:c8:fe:9e:c5:e3:e3:ff:a4:a9:1f:04:5b:73:ab: eb:7e:f9:0b:76:62:c0:d3:cd:a4:65:f0:17:7e:41: 18:73:8f:9b:08:63:fc:b8:d9:8e:3f:96:23:dd:af: 96:5f:87:8d:c1:76:49:d0:c1:c1:03:77:b3:fe:91: f5:86:25:94:05:c8:30:6b:29:4f:cc:89:3c:41:c5: 06:48:b3:1f:f6:32:09:93:88:09:cd:a5:25:cf:24: f1:05:34:09:a9:97:b1:27:1d:cc:77:e7:4a:6d:d0: 16:c4:69:13:be:c8:48:b8:7d:65:20:85:af:2e:5a: 92:20:4c:54:cc:e4:c5:00:4a:42:27:fe:31:3b:ab: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:F8:08:14:38:52:A8:6C:23:E8:4E:12:68:C7:82:EB:83:EE:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20b01b41-6f04-43fa-8e06-b61037281067/20b01b41-6f04-43fa-8e06-b61037281067.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.159.200.0/24 IPv6: 2602:fabb::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400818 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:31:3e:32:be:34:65:91:b4:0c:91:8a:24:5e:cb:8f:35:a7: d9:99:d4:a2:1e:81:82:e7:21:c0:06:b1:73:e4:e1:8c:a7:e3: 74:7d:eb:35:71:a7:08:8b:8e:f6:43:be:37:d3:bf:b1:9a:d7: 2f:4d:aa:74:f4:5c:ef:92:4e:35:0f:50:89:e6:5e:91:ca:8a: 9a:14:8b:70:44:5f:50:05:05:7c:e1:dc:e7:bb:eb:32:bc:5e: 6b:e9:34:b2:9d:d7:4c:4a:62:5b:5b:a6:6d:70:36:0a:bf:4b: 5c:7f:a9:00:7f:3f:5a:4d:d1:df:5d:fb:92:a4:3e:11:dc:1f: bb:d6:a7:55:e7:3e:6f:6a:19:54:67:cd:58:a9:52:9a:df:d5: 5b:66:f6:1f:b6:64:ad:b6:04:4a:c0:63:4a:e6:68:61:c7:ee: 7b:46:57:8b:fd:f7:6b:08:27:d3:df:09:d2:69:7a:94:15:de: f8:6b:c8:29:1a:27:b2:d8:54:ce:77:47:13:c6:99:63:43:ce: 69:2d:b0:20:b6:49:c0:33:52:a4:1e:00:3a:0e:34:de:ff:86: 6f:2b:36:42:b3:78:43:a7:83:68:80:6b:6c:20:13:a7:e7:b3: b1:3e:c9:c3:88:e7:db:57:03:05:78:b5:09:12:c1:f1:82:9e: 38:37:3d:76 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWELRo9AhFwVUof8gSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDgwODE3MzkxNloXDTI1MDkyMDAwNDUxN1owLzEtMCsGA1UEAxMk MjBiMDFiNDEtNmYwNC00M2ZhLThlMDYtYjYxMDM3MjgxMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTjROE8k6f2xlUT4eMlS/sAr8CZX459UEs+W ofsslENQQpDi6Wn4X0JtJEzRQ1fIk/4uwPYzoT1RlRiaBGEDX+R60+hDVCbVkB1O rXCTz14rIaIiX7P5vmvaZoya2hskzZ6gOenjbHIFYuA6KXyh8fG+WrmC9tnayP6e xePj/6SpHwRbc6vrfvkLdmLA082kZfAXfkEYc4+bCGP8uNmOP5Yj3a+WX4eNwXZJ 0MHBA3ez/pH1hiWUBcgwaylPzIk8QcUGSLMf9jIJk4gJzaUlzyTxBTQJqZexJx3M d+dKbdAWxGkTvshIuH1lIIWvLlqSIExUzOTFAEpCJ/4xO6sf5wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAuO+AgUOFKobCPoThJox4Lrg+4QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MGIwMWI0MS02ZjA0LTQzZmEtOGUwNi1iNjEwMzcyODEwNjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIwYjAxYjQxLTZmMDQtNDNmYS04 ZTA2LWI2MTAzNzI4MTA2Ny8yMGIwMWI0MS02ZjA0LTQzZmEtOGUwNi1iNjEwMzcy ODEwNjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXn8gwDgQCAAIwCAMGACYC+rsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYdsjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsMT4yvjRlkbQMkYokXsuPNafZ mdSiHoGC5yHABrFz5OGMp+N0fes1cacIi472Q74307+xmtcvTap09Fzvkk41D1CJ 5l6RyoqaFItwRF9QBQV84dznu+syvF5r6TSynddMSmJbW6ZtcDYKv0tcf6kAfz9a TdHfXfuSpD4R3B+71qdV5z5vahlUZ81YqVKa39VbZvYftmSttgRKwGNK5mhhx+57 RleL/fdrCCfT3wnSaXqUFd74a8gpGiey2FTOd0cTxpljQ85pLbAgtknAM1KkHgA6 DjTe/4ZvKzZCs3hDp4NogGtsIBOn57OxPsnDiOfbVwMFeLUJEsHxgp44Nz12 -----END CERTIFICATE-----Generated at Wed Apr 24 21:26:25 2024 by rpki-client on console-ams.rpki-client.org