$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer File: 8fe40320-74dc-4444-a6ef-bd88d604a876.cer (raw, json) Hash identifier: +nzl4fOa0JulRrARDxpssuAKHCXiFKbaUilS/VaQ67Y= Subject key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842BDC29EDF92945F16E1568820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Aug 2023 14:45:11 +0000 Certificate not after: Mon 20 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 26411 IP: 103.207.40.0/22 IP: 104.224.12.0/22 IP: 2602:2dd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:bd:c2:9e:df:92:94:5f:16:e1:56:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 1 14:45:11 2023 GMT Not After : Oct 20 00:45:16 2025 GMT Subject: CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:31:d2:04:7d:9f:bb:df:98:f5:59:be:59: de:29:75:87:ac:d0:f9:b7:86:c2:8f:da:0f:f8:96: f2:72:3a:6d:9e:64:1b:ee:4c:cd:72:74:f9:b6:75: 97:1f:15:6a:85:bc:f2:45:97:d4:4c:26:6e:0c:bd: 3c:19:2d:9f:74:43:fb:a6:df:4e:50:37:48:26:bf: 84:32:5d:a5:b3:4a:b5:60:6c:73:32:ab:ae:26:d9: 74:f0:31:4c:6e:3a:35:26:99:f3:ce:d6:3e:45:e2: d9:a2:6a:b4:c4:60:a4:7b:85:ee:70:92:11:bc:f1: f7:97:5f:09:23:09:db:6c:d2:51:b5:cf:94:7c:04: 66:ac:66:ab:f1:62:ca:a5:71:66:52:ff:90:0e:e6: dc:fa:b3:19:d5:c5:95:9e:28:a4:de:d8:cc:d7:a0: 61:34:7b:48:b6:79:62:74:ba:7f:4c:3e:50:bc:c9: ab:8f:91:3c:66:67:73:89:40:8b:1b:10:fd:8c:f2: 0e:1f:cf:86:f6:f7:73:57:f2:08:77:04:63:f8:61: a6:34:ed:32:e8:42:64:7e:66:d3:d6:b7:a9:7b:d1: ed:ec:94:fa:b2:1a:82:1a:8e:86:9a:c6:77:68:08: 60:26:3b:e5:99:e0:f4:ef:3a:9f:d1:08:1c:9e:4c: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 103.207.40.0/22 104.224.12.0/22 IPv6: 2602:2dd::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26411 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:03:c7:f6:f8:2d:01:7d:ce:4e:f5:85:4a:d3:d7:a8:c2:7d: da:a6:69:d6:34:78:3c:89:a4:b5:35:64:2b:f1:00:27:59:c0: 1f:d0:6c:81:67:87:e8:56:ce:de:8f:7e:2d:9c:5e:5d:64:b0: 96:26:d1:d0:20:23:33:3d:1f:3f:02:ce:78:45:10:de:18:38: 91:92:49:ac:f7:a1:b3:50:a4:6b:0b:31:a2:d2:85:b7:8a:80: 76:7a:0c:30:ba:fe:e5:f1:c9:20:62:05:b7:0b:62:74:1d:e8: 5c:36:ff:79:5a:ae:75:74:fb:59:47:00:4c:7a:ce:78:9f:3c: d2:d5:00:bf:da:4c:19:e7:fe:b7:26:06:41:61:94:c6:bf:1a: 61:ef:5d:36:bb:eb:8a:aa:11:7f:13:c4:16:08:2a:7a:31:91: 7a:28:6d:41:3a:14:2c:c1:ed:b2:d2:9d:4d:4c:43:aa:9c:0e: 5f:18:64:31:b8:52:49:76:12:94:e9:a1:0d:c3:32:63:cf:b9: b3:b0:5a:d0:67:eb:8a:f2:36:b4:b8:93:28:1a:b6:14:e6:e8: bb:1e:7e:d3:4b:e0:d4:b6:5f:0b:a0:1f:d9:3d:8a:02:14:07: e0:1f:d2:64:ef:17:30:6e:b0:99:9a:e3:44:c6:89:80:7b:b0: ac:dd:2f:3d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEK9wp7fkpRfFuFWiCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDgwMTE0NDUxMVoXDTI1MTAyMDAwNDUxNlowLzEtMCsGA1UEAxMk OGZlNDAzMjAtNzRkYy00NDQ0LWE2ZWYtYmQ4OGQ2MDRhODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnAx0gR9n7vfmPVZvlneKXWHrND5t4bCj9oP +JbycjptnmQb7kzNcnT5tnWXHxVqhbzyRZfUTCZuDL08GS2fdEP7pt9OUDdIJr+E Ml2ls0q1YGxzMquuJtl08DFMbjo1JpnzztY+ReLZomq0xGCke4XucJIRvPH3l18J IwnbbNJRtc+UfARmrGar8WLKpXFmUv+QDubc+rMZ1cWVniik3tjM16BhNHtItnli dLp/TD5QvMmrj5E8ZmdziUCLGxD9jPIOH8+G9vdzV/IIdwRj+GGmNO0y6EJkfmbT 1repe9Ht7JT6shqCGo6GmsZ3aAhgJjvlmeD07zqf0QgcnkyWaQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFAabKZmIfHQ5ScstYxxLUcFL1zJ2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYwNGE4NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhmZTQwMzIwLTc0ZGMtNDQ0NC1h NmVmLWJkODhkNjA0YTg3Ni84ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYw NGE4NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJnzygDBAJo4AwwDgQCAAIwCAMGBCYCAt0AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmcrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACgDx/b4LQF9zk71hUrT 16jCfdqmadY0eDyJpLU1ZCvxACdZwB/QbIFnh+hWzt6Pfi2cXl1ksJYm0dAgIzM9 Hz8CznhFEN4YOJGSSaz3obNQpGsLMaLShbeKgHZ6DDC6/uXxySBiBbcLYnQd6Fw2 /3larnV0+1lHAEx6znifPNLVAL/aTBnn/rcmBkFhlMa/GmHvXTa764qqEX8TxBYI KnoxkXoobUE6FCzB7bLSnU1MQ6qcDl8YZDG4Ukl2EpTpoQ3DMmPPubOwWtBn64ry NrS4kygathTm6LseftNL4NS2XwugH9k9igIUB+Af0mTvFzBusJma40TGiYB7sKzd Lz0= -----END CERTIFICATE-----Generated at Fri Mar 29 02:32:58 2024 by rpki-client on console-ams.rpki-client.org