$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer File: 63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer (raw, json) Hash identifier: wwdHnaG4QaV/mSZvY7UNSW4uoFfj9AMcAAHAhqDZSyU= Subject key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584362C1FDB9207A59518E815CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Sep 2023 17:12:17 +0000 Certificate not after: Fri 19 Sep 2025 00:45:16 +0000 Subordinate resources: IP: 23.130.136.0/22 IP: 149.112.74.0/24 IP: 172.99.232.0/23 IP: 204.10.192.0/22 IP: 2001:504:132::/48 IP: 2602:fcd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:62:c1:fd:b9:20:7a:59:51:8e:81:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 29 17:12:17 2023 GMT Not After : Sep 19 00:45:16 2025 GMT Subject: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:36:0a:38:5b:cc:00:34:eb:a3:ed:59:27: b4:e8:c2:c3:89:e3:e0:fb:ad:c7:50:b9:84:48:3b: f9:59:a3:74:57:b5:d6:ba:cf:64:87:9c:a1:f3:91: 6a:67:1d:47:92:5e:c6:90:b0:6f:43:70:85:20:f8: fa:d3:bc:63:6d:16:02:b1:32:2a:6e:6e:73:2d:c5: 15:70:81:23:b5:ee:56:92:11:7c:54:e4:3b:2f:2f: 10:85:4a:a2:32:c2:9a:40:fa:56:34:01:73:b2:39: 51:bc:11:90:6e:a0:c3:ba:ab:ad:25:2a:fa:90:d2: 22:86:3e:25:3d:18:ef:9c:6c:11:f5:2a:7b:39:89: 20:86:6e:67:9c:1c:1e:56:e9:16:8e:bf:20:33:b1: 5c:c8:af:c3:4d:f0:30:43:8f:1a:af:a2:b7:e7:42: 09:00:a3:8d:68:b7:37:b9:5a:60:40:0c:7d:2c:c2: a3:ff:17:f2:44:43:03:72:be:d2:36:f8:05:38:b1: 91:f4:b4:ae:cd:c3:78:9e:fd:9d:e8:78:4b:ca:79: e3:52:9b:70:8f:c9:c7:ff:4f:b5:97:68:25:a4:e7: 25:e0:0a:8e:5c:2a:e0:cc:43:74:78:cf:01:48:ee: ae:d9:b0:67:32:33:d7:a7:92:f4:6f:20:34:17:3b: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.130.136.0/22 149.112.74.0/24 172.99.232.0/23 204.10.192.0/22 IPv6: 2001:504:132::/48 2602:fcd3::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f7:e7:e9:a6:81:95:6e:c2:ab:57:25:72:d9:a7:47:ff:e0: 12:6f:f2:f8:65:6e:aa:64:f8:68:ef:8b:e3:9e:cd:27:92:e0: a3:a0:80:4c:6e:60:8e:34:95:13:3b:fe:de:50:d8:7e:80:5a: dd:3a:dc:a0:e0:b3:a1:45:60:7d:91:56:25:aa:73:42:89:36: 29:0b:e5:eb:ae:09:d5:4d:2d:40:18:90:93:8c:c1:6f:30:d6: c0:26:9f:2c:b6:9d:71:8f:5a:5a:9e:7c:6d:15:8b:ef:66:6a: 08:59:14:4b:bd:c1:2e:19:b2:04:03:4a:2e:4b:42:79:8a:21: e0:fc:82:eb:49:27:6d:8c:59:2d:92:46:fa:0c:98:44:e6:bc: e2:f0:1b:4d:89:fe:82:7d:f6:ff:4d:98:47:69:9e:7c:c7:65: 88:6e:80:6b:97:c5:05:a5:bd:a2:e4:01:08:9e:9d:cb:54:e9: 8a:b5:97:58:03:ed:2d:1d:df:ca:bb:eb:ba:9f:d2:e7:dd:e4: af:4a:da:c1:72:54:7c:27:9a:03:48:0f:e7:54:18:12:60:7d: 8a:50:56:28:0e:d9:c7:98:54:8d:21:20:b6:cb:a3:37:5e:50: 16:6f:d8:00:97:68:87:c8:33:3c:9e:39:5c:96:0f:42:94:43: 2d:4c:61:10 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWENiwf25IHpZUY6BXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkyOTE3MTIxN1oXDTI1MDkxOTAwNDUxNlowLzEtMCsGA1UEAxMk NjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLw2CjhbzAA066PtWSe06MLDiePg+63HULmE SDv5WaN0V7XWus9kh5yh85FqZx1Hkl7GkLBvQ3CFIPj607xjbRYCsTIqbm5zLcUV cIEjte5WkhF8VOQ7Ly8QhUqiMsKaQPpWNAFzsjlRvBGQbqDDuqutJSr6kNIihj4l PRjvnGwR9Sp7OYkghm5nnBweVukWjr8gM7FcyK/DTfAwQ48ar6K350IJAKONaLc3 uVpgQAx9LMKj/xfyREMDcr7SNvgFOLGR9LSuzcN4nv2d6HhLynnjUptwj8nH/0+1 l2glpOcl4AqOXCrgzEN0eM8BSO6u2bBnMjPXp5L0byA0FztyAwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDKWuBloAAskortzDiHkKGxHdkvwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1h MWNkLTEyMjZlYTNjNDc5Ny82M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEz YzQ3OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSgYIKwYBBQUH AQcBAf8EOzA5MB4EAgABMBgDBAIXgogDBACVcEoDBAGsY+gDBALMCsAwFwQCAAIw EQMHACABBQQBMgMGBCYC/NMAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAK335+mmgZVuwqtXJXLZp0f/4BJv 8vhlbqpk+Gjvi+OezSeS4KOggExuYI40lRM7/t5Q2H6AWt063KDgs6FFYH2RViWq c0KJNikL5euuCdVNLUAYkJOMwW8w1sAmnyy2nXGPWlqefG0Vi+9maghZFEu9wS4Z sgQDSi5LQnmKIeD8gutJJ22MWS2SRvoMmETmvOLwG02J/oJ99v9NmEdpnnzHZYhu gGuXxQWlvaLkAQienctU6Yq1l1gD7S0d38q767qf0ufd5K9K2sFyVHwnmgNID+dU GBJgfYpQVigO2ceYVI0hILbLozdeUBZv2ACXaIfIMzyeOVyWD0KUQy1MYRA= -----END CERTIFICATE-----Generated at Fri Apr 26 11:15:52 2024 by rpki-client on console-ams.rpki-client.org