$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer File: 3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer (raw, json) Hash identifier: I7/D0Rk+HCpscc+Cg9yRpoOzjYSlSzjlYDJoc4+WjQE= Subject key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858432637D16F3124990C989D31C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Sep 2023 00:45:23 +0000 Certificate not after: Thu 11 Dec 2025 01:45:23 +0000 Subordinate resources: AS: 399612 IP: 68.68.221.0/24 IP: 2602:fc7a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:26:37:d1:6f:31:24:99:0c:98:9d:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 8 00:45:23 2023 GMT Not After : Dec 11 01:45:23 2025 GMT Subject: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:be:4c:e9:a2:b5:3c:d5:bd:a9:2f:51:c4: 49:7f:61:7e:a2:d5:d8:88:b4:43:6d:13:de:2c:c2: 06:8a:e5:7b:0a:38:84:af:05:63:10:13:a2:dc:64: 34:61:f5:97:68:f9:3e:80:60:09:bc:e0:22:d2:d6: 87:fb:8f:93:d6:ee:70:f9:ab:ee:53:a7:b2:f5:2b: 4e:3d:f2:f2:6d:f5:72:d0:42:5d:1a:83:f2:74:fb: ba:ee:3b:30:ca:01:65:5d:be:04:e3:4a:b8:58:03: a0:ec:76:04:b0:f8:a0:11:07:dc:bc:9b:63:53:aa: 7a:63:1d:c0:a5:b4:76:03:84:57:74:c9:7a:7e:fc: 42:7a:fc:6c:a2:67:0d:89:6f:90:3d:46:c9:4f:f6: dd:57:c4:9c:23:0f:0c:cc:5d:78:93:c3:32:14:79: 66:bb:e4:4c:3c:81:b8:f2:0d:be:14:c9:fc:ba:41: b7:da:73:34:ee:8a:b7:09:fb:f5:60:eb:fa:9d:d3: 2a:57:48:1f:cc:40:fa:01:99:20:cd:a5:d6:24:c8: 07:30:8a:ec:d4:e8:51:f2:f0:5d:3f:4f:34:87:a4: c1:ca:62:77:e5:f3:3e:df:03:39:c6:cb:07:cc:28: 7b:c4:c7:26:42:38:3e:d1:eb:14:19:b9:94:91:e6: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 68.68.221.0/24 IPv6: 2602:fc7a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399612 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:07:c3:03:5a:fd:bf:2d:d5:47:d1:5b:a8:b9:cc:b3:53:91: d6:cc:4a:3b:37:ec:14:a6:f8:75:15:b9:9a:28:0e:fb:c6:a6: 47:a9:11:49:01:df:3c:03:54:36:82:6e:46:8f:88:fd:6c:ed: 64:de:ae:ca:d3:c5:5e:92:57:c7:95:0f:e1:06:8c:c4:c2:35: 3a:bb:9d:1a:22:0e:80:10:d6:7a:59:01:65:cc:c8:66:79:8f: 39:12:39:1a:e4:e9:c7:9b:ff:27:d6:e7:a6:d8:f9:65:c1:69: d0:ab:83:00:42:6e:eb:d7:a1:c1:73:de:94:07:f1:7a:44:fe: d0:f1:dc:32:e5:f1:bb:5a:76:56:57:81:d2:6a:e1:1f:24:76: cd:78:59:61:2c:b1:bb:1c:d3:6a:39:cb:e2:24:1e:b6:1e:e9: 54:76:44:98:f4:38:b8:e9:71:11:b2:41:58:f0:a5:50:b0:3a: 0c:1b:1f:1b:12:ad:ea:8e:f7:0d:6a:6b:2e:e6:b5:cd:4f:4e: df:68:b8:b5:30:36:96:2c:bd:89:86:44:01:45:d7:ec:62:c3: ce:d9:c0:c2:40:06:52:09:87:14:3c:1e:c0:25:27:81:80:e6: 06:9b:15:b4:53:35:b2:e2:e4:a1:5a:df:3c:59:d2:55:24:70: c6:02:ae:b9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEMmN9FvMSSZDJidMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkwODAwNDUyM1oXDTI1MTIxMTAxNDUyM1owLzEtMCsGA1UEAxMk M2IwYjRlNDUtYzkxNi00OGJlLWFlMGQtYjU3YjgwYTMwY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTa+TOmitTzVvakvUcRJf2F+otXYiLRDbRPe LMIGiuV7CjiErwVjEBOi3GQ0YfWXaPk+gGAJvOAi0taH+4+T1u5w+avuU6ey9StO PfLybfVy0EJdGoPydPu67jswygFlXb4E40q4WAOg7HYEsPigEQfcvJtjU6p6Yx3A pbR2A4RXdMl6fvxCevxsomcNiW+QPUbJT/bdV8ScIw8MzF14k8MyFHlmu+RMPIG4 8g2+FMn8ukG32nM07oq3Cfv1YOv6ndMqV0gfzED6AZkgzaXWJMgHMIrs1OhR8vBd P080h6TBymJ35fM+3wM5xssHzCh7xMcmQjg+0esUGbmUkeYP1QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFM3wDkvx+7U57T96lDzXSivCDvcWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z YjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBhMzBjZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNiMGI0ZTQ1LWM5MTYtNDhiZS1h ZTBkLWI1N2I4MGEzMGNkYy8zYjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBh MzBjZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABERN0wDgQCAAIwCAMGBCYC/HoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYY/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtB8MDWv2/LdVH0VuoucyzU5HW zEo7N+wUpvh1FbmaKA77xqZHqRFJAd88A1Q2gm5Gj4j9bO1k3q7K08VeklfHlQ/h BozEwjU6u50aIg6AENZ6WQFlzMhmeY85Ejka5OnHm/8n1uem2PllwWnQq4MAQm7r 16HBc96UB/F6RP7Q8dwy5fG7WnZWV4HSauEfJHbNeFlhLLG7HNNqOcviJB62HulU dkSY9Di46XERskFY8KVQsDoMGx8bEq3qjvcNamsu5rXNT07faLi1MDaWLL2JhkQB RdfsYsPO2cDCQAZSCYcUPB7AJSeBgOYGmxW0UzWy4uShWt88WdJVJHDGAq65 -----END CERTIFICATE-----Generated at Thu Apr 25 02:15:48 2024 by rpki-client on console-ams.rpki-client.org