$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer File: 5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer (raw, json) Hash identifier: 8JdtQG3Ftune5/MH5OGCuaoPp3q5b97vbLLX4/WXyPM= Subject key identifier: C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584410D6FE9A8F3131F9F6548830 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Dec 2023 01:45:15 +0000 Certificate not after: Thu 05 Mar 2026 01:45:15 +0000 Subordinate resources: AS: 399206 IP: 104.224.3.0/24 IP: 2602:fc84::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:10:d6:fe:9a:8f:31:31:f9:f6:54:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 1 01:45:15 2023 GMT Not After : Mar 5 01:45:15 2026 GMT Subject: CN=5cc1a2c5-2615-4740-8c70-3bc7ed132d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:7b:d8:0e:da:9d:82:79:c0:ae:30:d7:27: 55:81:70:b3:bf:17:3a:93:27:c2:68:18:95:55:e9: 57:c1:9e:3f:31:56:8d:08:e6:79:25:02:d5:1e:11: 19:7d:88:c1:30:77:81:3d:ef:ac:b9:a1:71:73:fd: 2c:3f:4e:b2:ea:75:e5:96:40:a5:9f:d4:88:e1:35: 2e:03:96:54:06:43:82:a1:4f:3c:2f:7b:65:48:bf: a6:63:84:59:55:00:ef:a4:90:db:43:a9:b3:0a:f0: be:4a:37:ea:57:51:b8:07:d6:a1:4a:c8:97:93:98: d7:35:4a:e7:d9:ba:bc:cb:f2:64:c3:d9:dd:a0:0e: 3c:02:e3:76:f2:8e:26:fb:dd:17:a5:47:86:ce:f6: c3:41:f4:62:65:a7:82:38:47:53:e1:49:7b:ff:38: 75:c3:2a:5c:f2:06:2b:c8:2c:99:80:00:5a:26:e1: 4f:f7:95:c8:76:5e:ec:7b:f0:3d:5c:9b:b6:86:9b: 01:5d:93:a6:df:d6:f7:52:1c:c7:94:65:84:ff:57: 71:7a:69:32:cf:53:91:36:d3:18:d6:fd:dc:5f:8e: e7:e3:5c:b9:a2:22:f3:b5:d1:c3:b5:e1:a4:31:32: 2d:7c:8e:ea:a1:cd:c0:8f:cc:fe:a0:f0:64:5f:cd: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.224.3.0/24 IPv6: 2602:fc84::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399206 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:10:3b:9a:0e:7d:21:10:11:23:6a:04:48:cf:e7:3e:ce:5a: 7d:54:d3:3c:8f:c3:e9:f1:d0:3c:20:dd:d5:45:09:be:39:70: f5:aa:69:94:00:c2:7f:be:ee:fb:55:02:ec:38:f7:9f:48:60: a1:a2:b6:5a:ff:81:62:8e:04:01:ac:30:f9:41:f8:46:85:75: 70:0f:ea:c5:1e:4d:fa:04:db:c5:24:a0:94:47:22:fe:37:82: 52:41:69:c0:66:87:16:80:ba:e7:99:a1:79:41:64:bf:51:df: 74:da:92:36:fb:03:b0:46:72:77:00:92:63:74:b5:92:17:60: a3:16:39:47:c5:72:61:bd:9a:29:51:1e:4e:f4:22:2d:c6:19: 1a:de:b0:99:40:3d:83:76:93:c4:2b:38:98:19:6a:6b:f0:01: 59:2e:81:17:84:8d:65:5b:94:03:fe:b0:29:d4:e8:c6:b7:db: b5:d5:a7:a1:69:45:3c:2c:63:5c:f6:20:b8:a6:8e:56:79:91: 41:df:ba:68:09:1d:c1:0e:9a:d6:cf:ab:f6:5b:a2:fc:6a:22: 4a:3f:af:89:ed:1f:0b:b3:23:ad:5c:ca:b4:fe:c3:db:48:4f: 23:b7:e7:d8:b8:93:02:f1:5a:dd:0c:40:27:11:4b:47:cd:12: 4b:b4:fb:5f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEQQ1v6ajzEx+fZUiDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIwMTAxNDUxNVoXDTI2MDMwNTAxNDUxNVowLzEtMCsGA1UEAxMk NWNjMWEyYzUtMjYxNS00NzQwLThjNzAtM2JjN2VkMTMyZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwF72A7anYJ5wK4w1ydVgXCzvxc6kyfCaBiV VelXwZ4/MVaNCOZ5JQLVHhEZfYjBMHeBPe+suaFxc/0sP06y6nXllkCln9SI4TUu A5ZUBkOCoU88L3tlSL+mY4RZVQDvpJDbQ6mzCvC+SjfqV1G4B9ahSsiXk5jXNUrn 2bq8y/Jkw9ndoA48AuN28o4m+90XpUeGzvbDQfRiZaeCOEdT4Ul7/zh1wypc8gYr yCyZgABaJuFP95XIdl7se/A9XJu2hpsBXZOm39b3UhzHlGWE/1dxemkyz1ORNtMY 1v3cX47n41y5oiLztdHDteGkMTItfI7qoc3Aj8z+oPBkX83H9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMV9bttckCDNUbKVnvsuxCrQHSE8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 Y2MxYTJjNS0yNjE1LTQ3NDAtOGM3MC0zYmM3ZWQxMzJkOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVjYzFhMmM1LTI2MTUtNDc0MC04 YzcwLTNiYzdlZDEzMmQ5OC81Y2MxYTJjNS0yNjE1LTQ3NDAtOGM3MC0zYmM3ZWQx MzJkOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABo4AMwDgQCAAIwCAMGBCYC/IQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYXZjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvEDuaDn0hEBEjagRIz+c+zlp9 VNM8j8Pp8dA8IN3VRQm+OXD1qmmUAMJ/vu77VQLsOPefSGChorZa/4FijgQBrDD5 QfhGhXVwD+rFHk36BNvFJKCURyL+N4JSQWnAZocWgLrnmaF5QWS/Ud902pI2+wOw RnJ3AJJjdLWSF2CjFjlHxXJhvZopUR5O9CItxhka3rCZQD2DdpPEKziYGWpr8AFZ LoEXhI1lW5QD/rAp1OjGt9u11aehaUU8LGNc9iC4po5WeZFB37poCR3BDprWz6v2 W6L8aiJKP6+J7R8LsyOtXMq0/sPbSE8jt+fYuJMC8VrdDEAnEUtHzRJLtPtf -----END CERTIFICATE-----Generated at Sat Apr 20 02:52:12 2024 by rpki-client on console-ams.rpki-client.org