$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer File: 871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer (raw, json) Hash identifier: Hdgss/LPNrVlCa0uMlAi88iQLt4z01nHSf4umPt+ghw= Subject key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48351F5D0587246F4DB8040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 20 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 399833 IP: 104.250.248.0/22 IP: 204.144.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:51:f5:d0:58:72:46:f4:db:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 20 19:06:39 2025 GMT Subject: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:68:2a:ec:09:69:63:7e:17:46:f5:39:b5: 3e:36:c4:00:d5:54:64:3e:61:45:4b:6d:71:88:22: bc:2c:8d:51:98:72:a5:52:3a:3a:90:df:9a:63:5c: f4:d5:cf:fa:24:3c:9e:35:1d:b4:26:f2:19:b0:1b: 56:ea:db:e4:b2:41:da:30:fa:e5:8e:67:bf:02:86: af:3e:f0:2d:ef:17:7d:a4:f1:9c:21:18:30:04:6c: 52:42:8a:94:b1:b2:f1:ff:76:ba:2e:09:e4:5b:ea: 1b:f2:e4:41:fc:8f:6d:fa:7a:68:79:76:12:63:89: 8c:8a:10:ee:d5:ce:5b:4c:24:77:e5:2d:6a:8d:34: ae:d6:22:6c:e0:77:6e:5e:60:ea:a9:8a:57:d2:f6: 09:8e:58:5d:f9:43:88:d2:e5:fe:6c:c6:49:9c:91: c1:8d:66:45:45:f1:9a:54:c4:a5:d4:b9:78:e1:73: 86:ae:0f:49:1e:92:d0:bc:04:f5:1a:81:07:3a:7b: d4:24:81:13:ea:ad:b1:71:36:f6:ca:1a:e5:6e:08: 3f:d5:e9:7a:98:da:40:45:db:f4:2a:ee:4c:f6:b5: c1:8b:84:91:ce:5c:a7:52:5e:74:d2:76:a0:86:01: e0:7d:80:5e:d4:74:43:39:1c:98:3b:55:68:c6:18: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.250.248.0/22 204.144.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:bb:d5:7d:b0:fa:35:f4:63:c5:60:74:b8:45:b1:b2:bd:b5: e2:6d:11:ae:9f:87:86:e7:8c:cc:9a:79:c2:d1:e6:4d:9b:69: b0:28:b8:1c:78:c4:bc:0c:0b:1f:3c:c9:2c:e0:04:be:49:f6: 8e:a0:3d:eb:be:91:9d:c4:10:5e:1d:ad:2b:d6:aa:ae:1c:96: 16:48:e0:51:49:2b:62:48:ad:54:26:2f:c6:41:74:c1:67:64: 0a:5c:58:52:15:cf:3f:00:7c:43:61:2f:0d:6b:30:5e:37:a9: ac:27:86:ca:a3:71:96:a2:7b:29:93:44:e4:cf:83:e9:b7:65: 9b:35:dd:33:f1:a8:00:59:d4:c3:cc:62:ea:7b:a8:a4:9e:5c: c8:9a:2b:62:c1:82:79:68:44:27:a7:b9:ce:01:e1:ca:dc:83: bb:b5:b8:3f:e7:2d:6a:39:bb:c8:4c:a8:60:1e:62:bf:bf:9c: dd:7d:d2:cd:fb:e8:40:9c:f9:00:35:cb:39:3a:bc:24:e9:ff: cf:4e:dc:bc:b0:80:d9:5f:bb:03:d5:ac:1f:7a:10:10:c8:68: d0:30:79:67:d3:a2:fb:74:fa:3c:ae:cc:57:6b:dd:fc:70:c6: 73:3b:b7:13:9a:eb:85:fe:34:44:9a:0b:b8:ec:a0:4b:3a:2b: 20:b8:df:1a -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEHkg1H10FhyRvTbgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyMDE5MDYzOVowLzEtMCsGA1UEAxMk ODcxY2U2YjAtMTc5MS00NGRkLWI3ZjctZjBiMzhiYjMwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgBoKuwJaWN+F0b1ObU+NsQA1VRkPmFFS21x iCK8LI1RmHKlUjo6kN+aY1z01c/6JDyeNR20JvIZsBtW6tvkskHaMPrljme/Aoav PvAt7xd9pPGcIRgwBGxSQoqUsbLx/3a6LgnkW+ob8uRB/I9t+npoeXYSY4mMihDu 1c5bTCR35S1qjTSu1iJs4HduXmDqqYpX0vYJjlhd+UOI0uX+bMZJnJHBjWZFRfGa VMSl1Ll44XOGrg9JHpLQvAT1GoEHOnvUJIET6q2xcTb2yhrlbgg/1el6mNpARdv0 Ku5M9rXBi4SRzlynUl500naghgHgfYBe1HRDORyYO1Voxhh2cwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFN8/x9dSBCCceyblD37AGNs6jHZ7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJiMzBjMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg3MWNlNmIwLTE3OTEtNDRkZC1i N2Y3LWYwYjM4YmIzMGMwOS84NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJi MzBjMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJo+vgDBALMkHwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhnZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKW71X2w+jX0Y8VgdLhFsbK9teJtEa6fh4bnjMya ecLR5k2babAouBx4xLwMCx88ySzgBL5J9o6gPeu+kZ3EEF4drSvWqq4clhZI4FFJ K2JIrVQmL8ZBdMFnZApcWFIVzz8AfENhLw1rMF43qawnhsqjcZaieymTROTPg+m3 ZZs13TPxqABZ1MPMYup7qKSeXMiaK2LBgnloRCenuc4B4crcg7u1uD/nLWo5u8hM qGAeYr+/nN190s376ECc+QA1yzk6vCTp/89O3LywgNlfuwPVrB96EBDIaNAweWfT ovt0+jyuzFdr3fxwxnM7txOa64X+NESaC7jsoEs6KyC43xo= -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:42 2024 by rpki-client on console-fra.rpki-client.org