$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer File: 226a13a2-fbfb-49ed-89c3-233c745ffa52.cer (raw, json) Hash identifier: hKJUrS/vIrunPw4ZDrNUI4P6XB/6XIcfM3G52MWa7hY= Subject key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584262CBE2C25A3E822CF1FD7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jun 2023 00:45:17 +0000 Certificate not after: Thu 02 Oct 2025 00:45:17 +0000 Subordinate resources: AS: 25795 IP: 174.136.96.0/20 IP: 194.156.175.0/24 IP: 206.125.168.0/21 IP: 206.162.240.0/20 IP: 208.79.88.0/21 IP: 2607:f2f8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:62:cb:e2:c2:5a:3e:82:2c:f1:fd:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 30 00:45:17 2023 GMT Not After : Oct 2 00:45:17 2025 GMT Subject: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:1f:1c:c9:8e:a5:e4:5d:04:af:6d:ac:46: 84:c9:6e:c8:b8:f6:d0:8e:cf:f9:7a:2d:06:db:be: 41:dc:4c:cd:b8:72:a6:d0:ce:5a:de:93:43:8c:99: 91:87:f3:6a:2e:ca:61:d2:b3:c4:77:e0:f0:29:7f: 1b:14:c4:fe:4c:c4:69:7e:a7:e7:0d:8b:d1:ee:9b: e9:1b:41:2b:8b:4b:72:e2:f6:be:28:4a:2f:15:25: 5b:bc:b1:e6:9b:0b:7f:c4:27:0b:6b:c2:46:cf:1d: 74:d5:67:10:76:75:90:50:55:db:0f:22:91:0b:58: f4:25:93:19:b8:8f:00:4d:d1:3f:c9:22:d5:e3:b7: 92:35:c8:96:81:8b:bd:d2:d3:73:af:15:dd:68:e2: a8:af:77:3c:07:28:47:f1:0a:5f:2f:4b:1e:56:ac: a7:6a:f9:58:08:19:b7:11:15:f6:d0:06:12:16:74: ff:bb:5b:f8:33:57:47:8d:1d:2d:64:bb:7e:5a:97: 9b:c6:b6:13:d1:47:69:69:15:98:53:0f:fa:75:30: bf:d5:d0:23:f1:0c:d6:dc:33:1d:c3:81:5c:65:a9: 13:83:c6:a3:04:ce:80:36:56:99:6b:7e:10:f7:b0: 55:8b:d4:3b:a2:fa:71:e5:d8:22:27:40:df:24:98: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 174.136.96.0/20 194.156.175.0/24 206.125.168.0/21 206.162.240.0/20 208.79.88.0/21 IPv6: 2607:f2f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25795 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6d:2b:4c:f8:d7:8c:21:e3:bf:7d:d1:0b:e9:4c:77:5d:0c: e0:7f:8a:17:f6:2a:d1:ca:be:c4:b7:27:57:60:3c:b2:71:f4: ac:7e:ef:8e:51:37:01:07:93:78:45:dc:f7:d4:ec:26:f2:cb: 0f:6c:34:cb:ad:ef:df:27:e7:86:e3:73:23:b1:23:c6:4f:4b: 84:24:b9:90:f5:d0:02:b9:3b:09:77:82:a5:68:5d:4e:2b:68: fe:41:c0:f4:dd:07:b2:f2:fd:e4:98:bb:c7:26:c4:69:64:e1: 7b:c3:54:fc:90:7e:e9:c9:92:b7:4d:c3:55:d1:cd:8a:f1:d7: da:9b:89:f2:88:94:cd:0b:8e:ff:0f:92:86:01:3e:e1:c7:03: 7d:19:99:09:b9:d8:8c:a4:0a:03:e0:bc:02:dd:fe:8f:1f:02: b4:05:56:a2:7f:ed:17:95:96:60:2d:0e:a4:c8:7c:93:b3:91: dd:02:66:6c:3b:3e:35:6b:4c:92:9a:ba:d8:6a:b4:1a:39:f1: 93:0e:03:df:c5:a7:f2:4f:76:3c:66:76:ba:ea:ee:a8:3b:d0: 4d:93:83:ea:72:93:ac:81:16:26:fe:e4:a7:e0:e3:28:13:67: 7e:30:17:d3:e1:6c:a4:c4:e8:13:3a:6c:03:a9:29:1f:14:86: 87:ed:32:ee -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEJiy+LCWj6CLPH9cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDYzMDAwNDUxN1oXDTI1MTAwMjAwNDUxN1owLzEtMCsGA1UEAxMk MjI2YTEzYTItZmJmYi00OWVkLTg5YzMtMjMzYzc0NWZmYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EkfHMmOpeRdBK9trEaEyW7IuPbQjs/5ei0G 275B3EzNuHKm0M5a3pNDjJmRh/NqLsph0rPEd+DwKX8bFMT+TMRpfqfnDYvR7pvp G0Eri0ty4va+KEovFSVbvLHmmwt/xCcLa8JGzx101WcQdnWQUFXbDyKRC1j0JZMZ uI8ATdE/ySLV47eSNciWgYu90tNzrxXdaOKor3c8ByhH8QpfL0seVqynavlYCBm3 ERX20AYSFnT/u1v4M1dHjR0tZLt+WpebxrYT0UdpaRWYUw/6dTC/1dAj8QzW3DMd w4FcZakTg8ajBM6ANlaZa34Q97BVi9Q7ovpx5dgiJ0DfJJgDBQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFDeeedaCMofVUJ85oyRa4SGU2coTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1ZmZhNTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyNmExM2EyLWZiZmItNDllZC04 OWMzLTIzM2M3NDVmZmE1Mi8yMjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1 ZmZhNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBASuiGADBADCnK8DBAPOfagDBATOovADBAPQT1gw DQQCAAIwBwMFACYH8vgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICZMMwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAN20rTPjXjCHjv33RC+lMd10M4H+KF/Yq0cq+xLcnV2A8snH0rH7vjlE3AQeT eEXc99TsJvLLD2w0y63v3yfnhuNzI7Ejxk9LhCS5kPXQArk7CXeCpWhdTito/kHA 9N0HsvL95Ji7xybEaWThe8NU/JB+6cmSt03DVdHNivHX2puJ8oiUzQuO/w+ShgE+ 4ccDfRmZCbnYjKQKA+C8At3+jx8CtAVWon/tF5WWYC0OpMh8k7OR3QJmbDs+NWtM kpq62Gq0Gjnxkw4D38Wn8k92PGZ2uuruqDvQTZOD6nKTrIEWJv7kp+DjKBNnfjAX 0+FspMToEzpsA6kpHxSGh+0y7g== -----END CERTIFICATE-----Generated at Fri Apr 26 11:15:49 2024 by rpki-client on console-ams.rpki-client.org