$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer File: 397724ba-b516-4bac-893a-fcaae9e60f35.cer (raw, json) Hash identifier: 65keehFn5YyWGlLpTYjswgcEzXCEjeTNFRaFSgQIB2A= Subject key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858455FBB5966EA5D1DCC1543620E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 Mar 2024 00:45:21 +0000 Certificate not after: Fri 03 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 11686 IP: 96.4.0.0/15 IP: 207.191.176.0/20 IP: 2610:128::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:bb:59:66:ea:5d:1d:cc:15:43:62:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 30 00:45:21 2024 GMT Not After : Jul 3 00:45:21 2026 GMT Subject: CN=397724ba-b516-4bac-893a-fcaae9e60f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:22:3f:c8:41:eb:c2:0c:ba:19:0a:87:ef: 28:2d:f7:58:9e:86:ed:ca:db:b4:b9:c1:3f:5b:ba: f3:df:7d:9b:53:89:00:ce:0a:11:7e:8f:36:5e:f1: 26:4e:76:1b:b9:e3:ac:89:25:01:f4:fe:60:ac:5e: cd:48:ec:e2:a5:16:37:4c:25:6c:d5:93:ca:d3:11: 4e:11:86:b4:3d:48:92:60:e0:3c:19:7f:6f:dc:31: da:0a:71:cf:b7:28:30:a0:ab:74:52:d1:b3:3c:40: c2:9f:3e:46:a4:a5:8d:46:03:c8:d8:da:ba:bc:2b: 9c:99:16:59:a0:71:90:71:fa:b1:9c:5d:c4:f5:7b: bc:53:71:58:c7:50:16:ea:e1:a8:af:23:fd:81:79: d3:de:81:4b:8c:ca:5b:87:69:52:d5:38:8f:24:b8: 2d:45:3f:10:c1:77:ae:1c:2f:d1:52:3e:c9:c8:d8: e8:f7:f1:ed:9d:9d:27:34:df:2d:b3:3a:8d:5e:43: 11:a8:66:8a:b3:a1:ea:03:a3:9d:61:d0:10:b3:61: dd:8d:ac:81:ca:57:18:06:8f:0a:d6:8b:51:0c:09: c1:e4:ec:7e:c3:2a:a5:d4:ce:6f:68:24:62:79:c0: 50:71:b6:34:ef:c1:a5:b0:33:b8:ae:c4:36:1a:50: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 96.4.0.0/15 207.191.176.0/20 IPv6: 2610:128::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9d:33:4f:6c:af:9d:81:94:d3:c0:dd:a3:66:74:6c:72:50: 99:c7:db:e1:47:01:2e:d7:60:a0:9b:25:08:ff:59:d3:d8:7d: 35:7b:3a:9c:1d:47:17:21:eb:7d:78:95:c7:65:8c:db:28:25: e1:28:48:0b:99:d4:c8:b1:9e:19:9d:91:21:2e:3b:b7:17:ab: fa:50:89:66:ac:28:66:88:fc:ee:77:a5:7c:b7:3a:04:2c:9b: fd:29:73:48:8b:1e:a9:34:a2:0e:e0:ba:e6:57:04:20:df:54: 8c:ee:1e:a4:40:c0:63:0b:de:97:d2:8c:22:81:a3:d8:32:29: 81:89:fa:82:a9:99:af:2a:ea:d7:1b:c4:5b:18:eb:7d:2b:70: 11:b6:9f:bf:c4:f2:ee:98:2a:fd:3d:64:17:1d:60:10:63:73: a6:5a:53:68:b1:bb:c1:9d:29:ae:4c:37:a5:6b:0f:12:bf:56: 84:ab:35:2e:8f:f4:41:ec:5a:81:8b:f4:d1:44:81:c6:df:a0: 3e:9f:44:08:39:f5:71:41:88:ed:b6:1e:d8:d1:39:1e:d7:c6: d6:03:b6:6c:d7:3f:34:12:61:99:b4:6d:7d:43:cc:d2:75:47: 37:21:bd:b4:dd:d0:94:51:d1:b2:d5:06:44:3d:61:a6:97:b8: 51:18:74:45 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEVfu1lm6l0dzBVDYg4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDMzMDAwNDUyMVoXDTI2MDcwMzAwNDUyMVowLzEtMCsGA1UEAxMk Mzk3NzI0YmEtYjUxNi00YmFjLTg5M2EtZmNhYWU5ZTYwZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98iP8hB68IMuhkKh+8oLfdYnobtytu0ucE/ W7rz332bU4kAzgoRfo82XvEmTnYbueOsiSUB9P5grF7NSOzipRY3TCVs1ZPK0xFO EYa0PUiSYOA8GX9v3DHaCnHPtygwoKt0UtGzPEDCnz5GpKWNRgPI2Nq6vCucmRZZ oHGQcfqxnF3E9Xu8U3FYx1AW6uGoryP9gXnT3oFLjMpbh2lS1TiPJLgtRT8QwXeu HC/RUj7JyNjo9/HtnZ0nNN8tszqNXkMRqGaKs6HqA6OdYdAQs2HdjayBylcYBo8K 1otRDAnB5Ox+wyql1M5vaCRiecBQcbY078GlsDO4rsQ2GlCPcQIDAQABo4IELjCC BCowHQYDVR0OBBYEFB1Cd8UxqTfM5wWtzys7az+36iyaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z OTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTllNjBmMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM5NzcyNGJhLWI1MTYtNGJhYy04 OTNhLWZjYWFlOWU2MGYzNS8zOTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTll NjBmMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMBEEAgABMAsDAwFgBAMEBM+/sDANBAIAAjAHAwUAJhABKDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgItpjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxnTNPbK+dgZTTwN2jZnRs clCZx9vhRwEu12CgmyUI/1nT2H01ezqcHUcXIet9eJXHZYzbKCXhKEgLmdTIsZ4Z nZEhLju3F6v6UIlmrChmiPzud6V8tzoELJv9KXNIix6pNKIO4LrmVwQg31SM7h6k QMBjC96X0owigaPYMimBifqCqZmvKurXG8RbGOt9K3ARtp+/xPLumCr9PWQXHWAQ Y3OmWlNosbvBnSmuTDelaw8Sv1aEqzUuj/RB7FqBi/TRRIHG36A+n0QIOfVxQYjt th7Y0Tke18bWA7Zs1z80EmGZtG19Q8zSdUc3Ib203dCUUdGy1QZEPWGml7hRGHRF -----END CERTIFICATE-----Generated at Wed May 1 20:51:35 2024 by rpki-client on console-ams.rpki-client.org