$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer File: 85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer (raw, json) Hash identifier: Gx3zWLEz3EpaaQFOVTpwgw4lSerI/TgnL4uClpDn3Bk= Subject key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E483534334294F7060FDE500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Tue 29 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 13903 AS: 23342 IP: 64.29.128.0/20 IP: 67.221.160.0/20 IP: 207.7.128.0/19 IP: 209.237.224.0/19 IP: 2607:f3a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:43:34:29:4f:70:60:fd:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 29 19:06:39 2025 GMT Subject: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:81:5c:7d:8c:f0:71:ca:4a:79:00:81:f2: e9:b6:bd:1d:c2:44:2e:5f:72:4a:d0:e0:85:0e:1c: 49:d9:9e:01:4e:b3:95:22:be:a2:22:b1:06:c9:c0: 74:1d:a3:b8:ed:63:5b:81:36:30:a0:e2:1a:de:d3: 48:91:60:a9:e2:be:3a:15:4d:00:4d:77:7d:54:6a: f6:5b:7c:20:2d:7e:98:c7:4c:0c:35:50:86:f7:7e: 2e:2b:56:a0:3e:e6:0f:33:34:24:b1:f8:7b:67:e1: ec:7d:58:87:7f:94:26:3a:85:37:aa:52:6e:28:0c: c5:31:80:44:67:56:be:89:a0:ae:e6:ae:58:60:40: 3f:bf:79:d1:0e:78:1d:5b:51:fe:94:86:e9:16:1a: 4f:f9:e9:4c:88:99:2f:bf:e0:bd:11:18:e7:f8:d7: 6f:b5:27:4c:c8:3b:7a:d8:2a:5e:80:92:cf:fb:58: 68:5d:5e:7c:92:a6:64:00:77:ab:46:e0:d9:e8:b2: 75:f9:8c:ee:bd:53:a6:9d:af:8f:80:09:2c:4b:86: 1c:9e:fc:26:37:4a:97:8c:02:f8:10:b8:26:63:89: 4c:83:a0:4d:73:e5:90:c8:4e:08:fa:bf:1f:fc:70: ad:90:2f:6f:54:23:f0:91:5e:dd:05:5b:0d:1b:6e: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.29.128.0/20 67.221.160.0/20 207.7.128.0/19 209.237.224.0/19 IPv6: 2607:f3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13903 23342 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a4:d1:44:93:77:63:7a:ed:71:ee:fb:5a:6e:8d:bc:99:59: 9e:4f:3a:f3:ab:80:63:5a:7f:72:20:99:2e:4a:20:c8:37:9f: 90:53:5b:bb:2d:c5:4e:2a:15:00:0b:66:46:7c:d4:58:41:f6: c4:ee:9a:50:96:2c:d2:26:c8:0e:7f:89:c4:9d:47:b9:12:f8: 0c:b6:2d:c9:d9:2d:89:eb:54:6e:0c:4e:11:6e:e5:63:cb:91: ea:bd:41:46:14:c7:bc:37:25:9e:0c:38:3f:a3:ce:66:e2:15: 03:32:e5:3f:a6:86:74:bf:dd:86:da:93:18:b2:e3:e8:9b:c5: aa:77:ac:eb:78:4c:c7:02:18:7f:16:31:9f:89:d5:ed:51:da: 8c:03:4e:b2:11:dd:84:b1:67:a0:0e:21:24:62:b0:77:b3:1a: c5:3c:34:a3:b5:de:df:0b:da:77:72:cb:2a:aa:0a:b2:3f:3b: 56:f2:90:0e:b8:59:f1:4c:94:5b:a5:74:4a:0c:fc:f8:b0:8d: 5b:f1:79:03:22:20:49:16:67:11:a8:0d:d2:3d:92:e3:65:87: 9c:e2:6c:5c:8d:b1:76:5f:bd:33:94:8f:18:fe:bb:31:99:fc: a3:fa:72:18:bc:c0:d5:61:4f:76:76:85:e1:8f:8a:b2:a2:20: 2c:f3:21:93 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEHkg1NDNClPcGD95QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyOTE5MDYzOVowLzEtMCsGA1UEAxMk ODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDKBXH2M8HHKSnkAgfLptr0dwkQuX3JK0OCF DhxJ2Z4BTrOVIr6iIrEGycB0HaO47WNbgTYwoOIa3tNIkWCp4r46FU0ATXd9VGr2 W3wgLX6Yx0wMNVCG934uK1agPuYPMzQksfh7Z+HsfViHf5QmOoU3qlJuKAzFMYBE Z1a+iaCu5q5YYEA/v3nRDngdW1H+lIbpFhpP+elMiJkvv+C9ERjn+NdvtSdMyDt6 2CpegJLP+1hoXV58kqZkAHerRuDZ6LJ1+YzuvVOmna+PgAksS4YcnvwmN0qXjAL4 ELgmY4lMg6BNc+WQyE4I+r8f/HCtkC9vVCPwkV7dBVsNG24w5wIDAQABo4IEPzCC BDswHQYDVR0OBBYEFIOaHQH7yQZDkXi+pNPUF6R8lJvUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg1ZjczNWI2LTBhZTItNGMyYS04 MjZiLTdlOGIxMjZhNGI3My84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2 YTRiNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARAHYADBARD3aADBAXPB4ADBAXR7eAwDQQCAAIw BwMFACYH86AwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICNk8CAlsuMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKOk0USTd2N67XHu+1pujbyZWZ5POvOrgGNaf3IgmS5KIMg3n5BTW7stxU4qFQAL ZkZ81FhB9sTumlCWLNImyA5/icSdR7kS+Ay2LcnZLYnrVG4MThFu5WPLkeq9QUYU x7w3JZ4MOD+jzmbiFQMy5T+mhnS/3Ybakxiy4+ibxap3rOt4TMcCGH8WMZ+J1e1R 2owDTrIR3YSxZ6AOISRisHezGsU8NKO13t8L2ndyyyqqCrI/O1bykA64WfFMlFul dEoM/PiwjVvxeQMiIEkWZxGoDdI9kuNlh5zibFyNsXZfvTOUjxj+uzGZ/KP6chi8 wNVhT3Z2heGPirKiICzzIZM= -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:42 2024 by rpki-client on console-fra.rpki-client.org