$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/800ce287-a4b4-45a1-8ebc-546bebd2a3c7.cer File: 800ce287-a4b4-45a1-8ebc-546bebd2a3c7.cer (raw, json) Hash identifier: u8IZhdP/Eu5+QSU1yhkoUkaaa3aPAt+8n0vEeed80Pg= Subject key identifier: 37:25:62:5C:DC:3C:53:5A:2C:54:3A:9B:71:D7:68:4B:E1:E1:CA:49 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858433C8D48159FE219E32306A620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/800ce287-a4b4-45a1-8ebc-546bebd2a3c7/800ce287-a4b4-45a1-8ebc-546bebd2a3c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/800ce287-a4b4-45a1-8ebc-546bebd2a3c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 Sep 2023 00:45:22 +0000 Certificate not after: Fri 19 Dec 2025 01:45:22 +0000 Subordinate resources: IP: 23.168.176.0/24 IP: 45.42.188.0/22 IP: 2606:740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:3c:8d:48:15:9f:e2:19:e3:23:06:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 16 00:45:22 2023 GMT Not After : Dec 19 01:45:22 2025 GMT Subject: CN=800ce287-a4b4-45a1-8ebc-546bebd2a3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:ce:64:3b:b1:ab:2f:a2:bc:d0:f6:74:50: 4b:8e:9a:aa:c4:eb:d9:28:d9:98:f3:0e:bc:24:ac: 74:9b:a1:4d:f3:76:f7:f3:50:3b:a4:7f:47:0d:ba: 55:58:1c:3e:c1:98:c7:98:b1:44:f5:5b:ed:2a:c9: a1:f6:dd:04:75:42:72:f7:67:b2:e1:52:ec:ec:f4: 38:cc:f3:29:08:bf:d7:09:f3:da:17:c1:71:17:7e: 29:91:d5:c4:89:91:fc:6a:2d:ee:da:ec:d3:f6:50: 60:a7:1f:ed:3a:bc:71:f2:73:24:e6:6c:aa:6a:96: 4c:19:5e:ea:ae:95:3b:d2:98:f3:b5:47:da:f1:32: dc:9e:bb:b5:1a:24:81:c0:f2:54:00:d2:4d:0a:d2: 3e:a3:bb:c3:68:06:84:75:a4:cb:3d:56:ff:54:19: 07:3e:c7:ce:8b:84:42:ad:47:07:a1:3b:1e:5d:30: 9f:16:7d:0d:33:68:45:c1:2e:dc:67:e2:89:df:3c: 4d:5e:6f:ad:ef:92:a4:ba:64:e3:b6:d5:7a:1b:95: ea:7c:4c:2a:1c:91:7d:12:85:c9:f1:c3:15:6c:2a: 24:7b:e3:e0:1b:40:dd:f3:da:3a:5a:a6:bd:41:43: 63:69:4f:17:cc:0c:10:54:2f:50:e9:76:8e:c1:76: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:25:62:5C:DC:3C:53:5A:2C:54:3A:9B:71:D7:68:4B:E1:E1:CA:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/800ce287-a4b4-45a1-8ebc-546bebd2a3c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/800ce287-a4b4-45a1-8ebc-546bebd2a3c7/800ce287-a4b4-45a1-8ebc-546bebd2a3c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.168.176.0/24 45.42.188.0/22 IPv6: 2606:740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:aa:e3:29:85:87:19:a7:39:b8:22:0b:4f:78:18:3c:dd:e9: 77:5c:0c:58:27:75:88:9e:7a:ab:c8:c5:b1:68:a3:53:57:40: 10:4c:04:19:a6:aa:e0:5c:a0:b6:7a:96:d8:64:f8:83:af:01: e7:15:c6:5a:17:28:f0:5c:f8:78:d6:44:f6:9a:8d:ed:ea:5e: cf:7a:8c:e4:3a:7d:e8:ad:2f:67:65:22:c2:9b:15:bc:6f:42: 23:86:e3:f5:64:9d:09:e4:6f:5f:c0:97:bd:d6:89:0b:49:46: 5e:da:61:03:3b:c0:33:44:b0:af:1d:b7:59:78:b4:bb:9b:c4: 0f:5f:00:31:3b:39:01:29:5e:3a:38:cd:c5:aa:7b:f4:e4:0f: ce:02:40:79:b3:20:0c:75:7c:6f:77:5a:5e:25:dc:bd:bd:99: 88:ea:55:42:3c:b9:f5:92:02:6e:40:d4:d6:d1:a7:0b:03:25: d0:13:2a:15:4d:73:79:29:01:da:ca:0a:99:3a:27:10:15:f3: 90:a1:05:7c:b1:40:36:1a:f3:e8:e2:bd:4d:70:02:82:5c:7d: d5:e1:cb:ef:30:28:c8:ad:ef:e7:d7:91:d8:be:dc:7f:c5:39: 9d:c5:fc:f3:67:eb:8b:61:dc:72:01:74:96:dc:66:b5:e8:35: 92:45:4f:23 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEM8jUgVn+IZ4yMGpiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkxNjAwNDUyMloXDTI1MTIxOTAxNDUyMlowLzEtMCsGA1UEAxMk ODAwY2UyODctYTRiNC00NWExLThlYmMtNTQ2YmViZDJhM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0XOZDuxqy+ivND2dFBLjpqqxOvZKNmY8w68 JKx0m6FN83b381A7pH9HDbpVWBw+wZjHmLFE9VvtKsmh9t0EdUJy92ey4VLs7PQ4 zPMpCL/XCfPaF8FxF34pkdXEiZH8ai3u2uzT9lBgpx/tOrxx8nMk5myqapZMGV7q rpU70pjztUfa8TLcnru1GiSBwPJUANJNCtI+o7vDaAaEdaTLPVb/VBkHPsfOi4RC rUcHoTseXTCfFn0NM2hFwS7cZ+KJ3zxNXm+t75KkumTjttV6G5XqfEwqHJF9EoXJ 8cMVbCoke+PgG0Dd89o6Wqa9QUNjaU8XzAwQVC9Q6XaOwXaZAwIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFDclYlzcPFNaLFQ6m3HXaEvh4cpJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 MDBjZTI4Ny1hNGI0LTQ1YTEtOGViYy01NDZiZWJkMmEzYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzgwMGNlMjg3LWE0YjQtNDVhMS04 ZWJjLTU0NmJlYmQyYTNjNy84MDBjZTI4Ny1hNGI0LTQ1YTEtOGViYy01NDZiZWJk MmEzYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXqLADBAItKrwwDQQCAAIwBwMFACYGB0AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHKrjKYWHGac5uCILT3gYPN3pd1wMWCd1iJ56q8jFsWijU1dAEEwEGaaq 4FygtnqW2GT4g68B5xXGWhco8Fz4eNZE9pqN7epez3qM5Dp96K0vZ2UiwpsVvG9C I4bj9WSdCeRvX8CXvdaJC0lGXtphAzvAM0Swrx23WXi0u5vED18AMTs5ASleOjjN xap79OQPzgJAebMgDHV8b3daXiXcvb2ZiOpVQjy59ZICbkDU1tGnCwMl0BMqFU1z eSkB2soKmTonEBXzkKEFfLFANhrz6OK9TXACglx91eHL7zAoyK3v59eR2L7cf8U5 ncX882fri2HccgF0ltxmteg1kkVPIw== -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:41 2024 by rpki-client on console-fra.rpki-client.org