$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer File: 6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer (raw, json) Hash identifier: EK4hQwyKjN7rXbckoOI+5s3kX8cRdqnUyRBCDpPTmWM= Subject key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584453D76952EF895CE060FD28A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Dec 2023 01:45:15 +0000 Certificate not after: Sun 29 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 36379 AS: 397270 AS: 400353 IP: 23.160.192.0/22 IP: 64.112.32.0/22 IP: 128.254.172.0/22 IP: 158.51.96.0/22 IP: 208.69.100.0/22 IP: 2602:fea7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:53:d7:69:52:ef:89:5c:e0:60:fd:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 25 01:45:15 2023 GMT Not After : Mar 29 00:45:15 2026 GMT Subject: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7c:2b:b8:d9:41:f4:2e:9b:b9:a6:e1:ff:67: 40:be:8b:cb:a9:ce:37:b5:b5:f6:4b:cc:c2:c5:d3: e2:db:af:81:fb:4c:34:9c:0f:7e:c4:c1:8b:7b:0e: 57:db:ee:0a:83:d8:81:33:ed:65:21:d0:c4:65:ed: e6:20:0e:26:a2:16:9c:9e:4a:ca:9f:23:ad:e6:de: 46:a8:ac:7e:77:51:ff:ae:ff:71:d5:d7:15:be:f2: b1:3d:fb:20:63:1f:12:ef:20:75:51:66:7e:e1:57: e0:8c:10:b6:c2:90:0d:fa:9e:96:fd:14:5f:de:97: 20:08:ec:91:6f:fa:0e:c1:64:91:78:00:64:b7:c1: ab:45:27:92:e6:df:cf:19:c0:e2:28:70:4b:b7:31: 0d:da:39:b8:34:03:4d:0c:70:03:06:eb:46:47:cf: 26:28:cb:4b:3a:ea:69:29:e9:26:4e:32:e0:d3:2e: d9:38:1c:ff:ce:4f:18:19:f9:8d:76:fd:93:4b:fd: 5d:38:8e:ae:44:d2:10:26:be:c2:75:83:46:ee:06: 40:7a:60:66:a7:c3:4c:d4:55:5a:70:7c:f2:37:f2: 42:e3:7e:9e:2a:ae:80:bb:b1:32:66:0e:3d:32:13: 3d:a2:2f:95:6c:5e:f9:8a:2b:71:7e:f9:f4:f8:26: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.160.192.0/22 64.112.32.0/22 128.254.172.0/22 158.51.96.0/22 208.69.100.0/22 IPv6: 2602:fea7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36379 397270 400353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:30:99:e1:6a:9f:b9:fe:96:53:0c:69:7a:18:d9:3b:33:b3: 07:47:3c:1d:50:f8:eb:12:61:85:27:4e:65:90:b4:b8:f6:d3: 79:bb:bc:b3:c0:16:04:0b:3f:9a:8a:f6:bf:be:ec:20:61:14: 44:f8:2a:6c:67:01:60:31:07:f1:71:ec:9a:f7:08:9e:98:18: 3d:3f:19:43:66:81:b8:3f:cd:3f:3d:92:6a:d4:1f:65:46:d0: 4b:6a:db:95:aa:9c:b7:3f:f6:80:27:e1:f0:05:a0:ce:22:c9: 7e:7b:d5:77:9e:fa:c6:35:15:0b:23:df:9a:35:07:f3:41:c2: 8d:c6:d8:13:58:3b:d0:54:50:f6:5c:53:96:99:df:fd:19:4e: 30:d8:84:ab:72:3c:6c:54:29:de:ab:f9:de:d7:c0:cc:46:e7: cf:0e:f4:58:6c:19:f0:bc:89:d3:1c:97:ee:5d:3d:82:68:28: 9a:a6:ec:e0:00:2e:14:30:e8:81:4b:4b:8f:d6:89:4f:a2:4f: d5:9b:01:a1:aa:1e:c6:f9:38:f1:ee:1b:b2:84:26:5f:df:19: 83:6f:b6:a1:e6:4d:b6:90:45:78:43:c2:1f:d1:ef:6e:bc:7a: d1:cd:29:f1:eb:c1:03:c0:93:54:00:f0:4a:21:20:5f:d0:75: c8:3d:80:7f -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWERT12lS74lc4GD9KKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTIyNTAxNDUxNVoXDTI2MDMyOTAwNDUxNVowLzEtMCsGA1UEAxMk NmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1YzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnwruNlB9C6buabh/2dAvovLqc43tbX2S8zC xdPi26+B+0w0nA9+xMGLew5X2+4Kg9iBM+1lIdDEZe3mIA4mohacnkrKnyOt5t5G qKx+d1H/rv9x1dcVvvKxPfsgYx8S7yB1UWZ+4VfgjBC2wpAN+p6W/RRf3pcgCOyR b/oOwWSReABkt8GrRSeS5t/PGcDiKHBLtzEN2jm4NANNDHADButGR88mKMtLOupp KekmTjLg0y7ZOBz/zk8YGfmNdv2TS/1dOI6uRNIQJr7CdYNG7gZAemBmp8NM1FVa cHzyN/JC436eKq6Au7EyZg49MhM9oi+VbF75iitxfvn0+CZF7QIDAQABo4IETTCC BEkwHQYDVR0OBBYEFBx5+YZLnj7HJt1uzJhNq6OD3pyYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZkOWFjOWY3LWVmNGYtNGY1Ni1i ZWMyLTIxYzlhMmIyNWMxMS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJi MjVjMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAIXoMADBAJAcCADBAKA/qwDBAKeM2ADBALQRWQw DgQCAAIwCAMGBCYC/qcAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCOGwIDBg/W AgMGG+EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAiTCZ4Wqfuf6WUwxpehjZOzOzB0c8HVD46xJhhSdOZZC0 uPbTebu8s8AWBAs/mor2v77sIGEURPgqbGcBYDEH8XHsmvcInpgYPT8ZQ2aBuD/N Pz2SatQfZUbQS2rblaqctz/2gCfh8AWgziLJfnvVd576xjUVCyPfmjUH80HCjcbY E1g70FRQ9lxTlpnf/RlOMNiEq3I8bFQp3qv53tfAzEbnzw70WGwZ8LyJ0xyX7l09 gmgomqbs4AAuFDDogUtLj9aJT6JP1ZsBoaoexvk48e4bsoQmX98Zg2+2oeZNtpBF eEPCH9Hvbrx60c0p8evBA8CTVADwSiEgX9B1yD2Afw== -----END CERTIFICATE-----Generated at Fri Apr 19 17:22:22 2024 by rpki-client on console-fra.rpki-client.org