$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer File: 3d21f741-fd91-4158-8853-7388dab3b3e3.cer (raw, json) Hash identifier: Iqu8VVVw83QWJ/v5LeI89MwhBMFmUq18X3nHuV813xo= Subject key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48353D2534C292B051ACA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sat 02 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 53274 IP: 162.255.168.0/22 IP: 199.168.200.0/21 IP: 204.48.56.0/22 IP: 2602:ff8f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:d2:53:4c:29:2b:05:1a:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 2 19:06:39 2025 GMT Subject: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:7e:99:cb:90:d9:b3:57:98:e8:84:70:49: aa:eb:2a:a9:aa:fe:3b:fc:85:09:40:ac:2e:3e:3c: 3a:17:34:53:33:bd:5c:19:95:9c:e0:85:f4:19:3a: fb:56:be:ef:d2:8b:5b:72:02:fd:0a:19:79:12:dd: 9a:28:41:2d:ff:cc:bb:f6:c0:b0:63:38:11:dc:3a: 1b:89:fa:33:7f:35:33:c4:76:6b:60:89:e3:ca:7b: 4e:2d:fb:0d:f3:fb:93:dd:06:49:51:e4:7b:5b:8f: 5e:1a:3b:ea:db:85:9c:7c:cf:72:b7:9a:65:15:16: 29:a9:99:3b:72:bf:20:d8:4f:ec:94:8c:1c:bf:5a: 17:91:e8:38:48:79:54:46:9d:c5:7c:7c:34:0a:33: 24:4d:bc:58:dd:21:31:a3:86:41:e9:bd:a5:08:94: 00:ac:87:0f:d0:b5:c4:fe:ea:e9:73:6a:4a:16:a8: 0c:d6:7e:02:00:6b:f3:54:17:6f:77:1a:f9:26:08: 93:bd:d3:8e:0c:72:f8:9c:ed:bd:3e:d7:85:f8:3e: fe:22:26:34:85:05:5d:64:fb:31:ce:d1:b2:9a:97: 05:d5:bf:08:ab:28:89:66:18:ae:b0:30:71:cd:53: 9a:2c:b4:98:6f:ef:57:b8:4a:ff:ae:46:29:e1:e1: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.255.168.0/22 199.168.200.0/21 204.48.56.0/22 IPv6: 2602:ff8f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c3:b1:35:a7:b0:61:7b:c6:d4:d4:e8:5d:1c:0e:0c:7c:88: e9:fd:ce:a5:d2:7d:9d:f0:60:b7:cc:2a:e9:77:02:5a:c3:3c: 5e:ac:92:d5:1b:41:5b:92:7b:b0:ba:45:b8:89:16:59:20:ab: a1:c4:9f:3b:48:a0:5a:56:4a:6b:46:50:f8:d0:63:09:5e:e5: fa:7a:c7:cc:00:69:22:2f:49:c2:04:9e:3a:2f:b5:88:8c:2a: 5d:e8:0f:f1:83:c1:b3:54:79:0d:51:82:f9:ad:00:29:73:69: bb:f1:78:78:80:b7:07:67:94:e7:5b:41:ef:d1:7d:df:d9:0f: c1:7f:b9:4c:1e:88:e1:34:3c:ee:a7:e9:1a:76:06:a5:c2:72: 22:39:b8:cd:57:2d:a8:4d:43:24:6b:c7:a5:cf:ab:f1:38:0a: 73:5f:0d:1d:eb:14:0d:8f:2e:f4:b2:88:3e:e7:8a:b9:e0:07: d2:df:55:71:c2:3b:2f:48:11:df:0c:1b:fe:6d:03:a9:fa:99: b7:5f:91:fe:29:f1:70:1b:e1:cd:50:ad:86:d4:e3:bd:34:08: 27:9d:9a:5e:ef:eb:06:c3:9a:0c:6d:de:2d:c0:03:6c:b3:c0: 8f:1b:72:48:0b:77:da:74:d8:b8:f1:16:14:e2:9d:4e:82:ea: 0a:a4:5e:24 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEHkg1PSU0wpKwUaygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwMjE5MDYzOVowLzEtMCsGA1UEAxMk M2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNiM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5x+mcuQ2bNXmOiEcEmq6yqpqv47/IUJQKwu Pjw6FzRTM71cGZWc4IX0GTr7Vr7v0otbcgL9Chl5Et2aKEEt/8y79sCwYzgR3Dob ifozfzUzxHZrYInjyntOLfsN8/uT3QZJUeR7W49eGjvq24WcfM9yt5plFRYpqZk7 cr8g2E/slIwcv1oXkeg4SHlURp3FfHw0CjMkTbxY3SExo4ZB6b2lCJQArIcP0LXE /urpc2pKFqgM1n4CAGvzVBdvdxr5JgiTvdOODHL4nO29PteF+D7+IiY0hQVdZPsx ztGympcF1b8IqyiJZhiusDBxzVOaLLSYb+9XuEr/rkYp4eFb9wIDAQABo4IENzCC BDMwHQYDVR0OBBYEFKevv+FiOa+Xm1alB744CTB/874UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNkMjFmNzQxLWZkOTEtNDE1OC04 ODUzLTczODhkYWIzYjNlMy8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFi M2IzZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKi/6gDBAPHqMgDBALMMDgwDgQCAAIwCAMGBCYC /48AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDQGjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzw7E1p7Bh e8bU1OhdHA4MfIjp/c6l0n2d8GC3zCrpdwJawzxerJLVG0FbknuwukW4iRZZIKuh xJ87SKBaVkprRlD40GMJXuX6esfMAGkiL0nCBJ46L7WIjCpd6A/xg8GzVHkNUYL5 rQApc2m78Xh4gLcHZ5TnW0Hv0X3f2Q/Bf7lMHojhNDzup+kadgalwnIiObjNVy2o TUMka8elz6vxOApzXw0d6xQNjy70sog+54q54AfS31VxwjsvSBHfDBv+bQOp+pm3 X5H+KfFwG+HNUK2G1OO9NAgnnZpe7+sGw5oMbd4twANss8CPG3JIC3fadNi48RYU 4p1OguoKpF4k -----END CERTIFICATE-----Generated at Wed Apr 24 02:00:05 2024 by rpki-client on console-fra.rpki-client.org