$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer File: 451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer (raw, json) Hash identifier: 1fYN22b9Fn7ZH7HcderH49aOna1Zb0eJkoJB08yZYe8= Subject key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285843F43DF001A14766EBF9951D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Nov 2023 19:54:14 +0000 Certificate not after: Mon 28 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 63173 AS: 63339 IP: 45.88.216.0/22 IP: 45.89.48.0/22 IP: 45.91.108.0/22 IP: 45.92.16.0/22 IP: 107.178.48.0/21 IP: 2602:fc48::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f4:3d:f0:01:a1:47:66:eb:f9:95:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 20 19:54:14 2023 GMT Not After : Jul 28 19:06:39 2025 GMT Subject: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:52:9d:70:d6:b5:5f:41:eb:9f:38:cc:9f: b8:62:ce:77:46:48:21:c7:fa:f0:3d:6f:c1:7a:a5: 77:3e:1d:38:60:13:e9:b4:8a:c4:1b:ad:47:50:1b: 86:c3:08:b4:7c:f9:a8:2d:07:48:7f:de:20:a3:87: c8:dc:22:22:4e:fe:64:63:5b:15:e4:30:f8:20:91: dd:5c:7b:4f:00:80:af:09:af:a0:60:56:1e:9d:35: 99:6a:2b:74:dc:23:e0:fc:2d:70:7e:cd:bd:35:ff: e0:a3:0d:70:3b:d7:22:6a:7f:62:88:23:1d:cc:62: d4:8d:41:fa:36:e9:e3:a4:f3:e5:49:11:e4:d2:35: dd:e5:55:5d:9a:a9:9f:a6:75:08:9c:6c:94:48:b2: fc:2b:47:13:ee:c8:ad:cb:2d:4b:b7:83:83:d2:7f: 52:11:af:1b:33:ad:d3:4d:0e:09:24:a9:2b:44:0e: fd:fc:23:6d:d4:87:c1:41:ee:34:74:9d:de:ac:9d: dc:f5:43:cb:a6:9d:af:e0:b2:bf:0c:cc:b9:fd:e4: 72:1a:92:79:94:4a:ff:16:f7:b8:ba:00:81:f8:d3: f5:8b:89:ab:92:b9:d9:f0:22:d8:da:34:71:9f:5c: 6c:7f:25:5b:69:0e:99:37:48:d8:b9:70:74:e2:66: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.88.216.0/22 45.89.48.0/22 45.91.108.0/22 45.92.16.0/22 107.178.48.0/21 IPv6: 2602:fc48::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63173 63339 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a8:7c:59:51:98:e5:ef:5d:d0:0e:7a:21:c5:02:09:6c:26: ee:75:3f:83:e7:c8:ae:98:78:dc:1a:01:9f:da:1d:d2:75:14: b2:ac:54:ac:5f:97:ea:88:71:40:d0:65:04:65:41:32:51:46: 19:dd:39:fd:53:f1:a6:ba:da:dc:51:b6:20:35:1d:91:86:4d: 0c:b6:1b:1c:f5:3a:98:44:11:41:e5:87:3a:e0:bd:13:5c:e6: 58:f1:54:96:9d:b8:6c:62:3b:00:05:56:c2:0b:9f:31:8b:ec: c6:f2:0a:57:d0:24:b2:fe:f9:17:0f:16:96:20:a4:7a:4e:6e: d3:3e:24:4e:7d:0a:d6:9c:ec:74:37:c7:7d:44:4a:d4:cb:9c: d4:1e:31:a2:46:83:87:01:42:c4:c8:eb:98:fe:91:66:08:4f: 7d:8d:c4:c9:b2:ee:81:39:2d:a1:a6:af:78:e6:33:bc:49:ce: 6d:86:96:d5:ee:e8:1f:1c:95:21:65:38:b0:22:be:9d:ed:72: f3:28:2d:15:af:40:94:f0:63:a5:52:f3:68:e5:ec:4b:6a:60: 1d:38:fb:1b:54:c9:b5:f5:01:57:27:9a:c8:4e:d8:f9:41:87: 26:a2:cf:9d:af:e0:17:17:f1:f5:70:fc:bf:fc:f0:95:ae:e9: 72:58:a0:38 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEP0PfABoUdm6/mVHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTEyMDE5NTQxNFoXDTI1MDcyODE5MDYzOVowLzEtMCsGA1UEAxMk NDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgppSnXDWtV9B6584zJ+4Ys53Rkghx/rwPW/B eqV3Ph04YBPptIrEG61HUBuGwwi0fPmoLQdIf94go4fI3CIiTv5kY1sV5DD4IJHd XHtPAICvCa+gYFYenTWZait03CPg/C1wfs29Nf/gow1wO9cian9iiCMdzGLUjUH6 NunjpPPlSRHk0jXd5VVdmqmfpnUInGyUSLL8K0cT7sityy1Lt4OD0n9SEa8bM63T TQ4JJKkrRA79/CNt1IfBQe40dJ3erJ3c9UPLpp2v4LK/DMy5/eRyGpJ5lEr/Fve4 ugCB+NP1i4mrkrnZ8CLY2jRxn1xsfyVbaQ6ZN0jYuXB04mbb4QIDAQABo4IESDCC BEQwHQYDVR0OBBYEFPKzKJwRpGoYmQHPm40kPpfQBBfEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04 ZmI5LTI4MTFlODZiODFiMi80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2 YjgxYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAItWNgDBAItWTADBAItW2wDBAItXBADBANrsjAw DgQCAAIwCAMGBCYC/EgAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwD2xQIDAPdr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKofFlRmOXvXdAOeiHFAglsJu51P4PnyK6YeNwaAZ/aHdJ1FLKs VKxfl+qIcUDQZQRlQTJRRhndOf1T8aa62txRtiA1HZGGTQy2Gxz1OphEEUHlhzrg vRNc5ljxVJaduGxiOwAFVsILnzGL7MbyClfQJLL++RcPFpYgpHpObtM+JE59Ctac 7HQ3x31EStTLnNQeMaJGg4cBQsTI65j+kWYIT32NxMmy7oE5LaGmr3jmM7xJzm2G ltXu6B8clSFlOLAivp3tcvMoLRWvQJTwY6VS82jl7EtqYB04+xtUybX1AVcnmshO 2PlBhyaiz52v4BcX8fVw/L/88JWu6XJYoDg= -----END CERTIFICATE-----Generated at Fri Apr 19 01:57:12 2024 by rpki-client on console-ams.rpki-client.org