$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer File: 92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer (raw, json) Hash identifier: g8XbOSrm3NCNXeLkEIuKQEQEeWLNQ5V4NjmohIsGuws= Subject key identifier: 07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845C43BF80CC2C9B454D0CB6800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 May 2024 00:45:20 +0000 Certificate not after: Sat 08 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 63428 IP: 104.255.200.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c4:3b:f8:0c:c2:c9:b4:54:d0:cb:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 5 00:45:20 2024 GMT Not After : Aug 8 00:45:20 2026 GMT Subject: CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:74:bd:b7:6d:ff:d8:30:63:c0:c6:85:aa: d7:f4:4d:6f:4d:b7:e7:88:dc:69:89:d2:57:c9:19: 33:55:57:26:54:9c:19:92:60:5d:98:c0:3e:5b:86: ba:18:72:00:df:96:a9:da:da:6a:aa:b8:11:cb:82: db:dd:98:b6:55:3d:f4:b4:94:4c:b5:40:e0:72:24: 07:6a:ff:bd:c6:5e:7b:91:36:59:a8:c1:08:a1:98: 78:c8:6d:68:00:cc:c3:4b:a0:b2:66:b7:c6:4b:6d: e9:92:94:16:15:41:e7:55:bc:f7:27:fd:0d:5e:de: 45:e5:6c:6e:1f:be:a5:03:6b:66:ca:f0:9e:f7:64: b2:88:62:42:02:a2:fc:60:0d:45:27:13:37:ef:18: 84:36:f7:60:b1:d6:5a:bb:57:24:f8:e7:d7:15:46: b5:41:c0:5c:af:cd:47:3b:dd:05:1a:84:6d:38:ca: 4e:ec:98:c6:84:cd:8f:26:8f:ac:be:38:05:2b:ed: a9:35:a7:de:43:91:d5:43:8d:46:7c:0f:44:d5:93: 02:1a:5a:0e:bf:68:8c:bb:25:58:dd:7f:b0:a4:2d: e3:da:30:2e:75:66:fc:14:c8:cb:8c:ed:04:cf:69: e1:5b:50:d6:9a:be:00:23:b3:d9:3d:61:b8:ec:e1: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.255.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63428 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:9d:a5:8c:25:2a:ff:18:70:7c:45:ce:06:6a:48:95:cf:54: 1f:ca:96:12:41:b8:0b:6f:40:68:56:41:2e:1d:d2:2d:ab:0f: 89:af:4c:29:aa:d3:b1:18:2e:d3:e5:64:e5:13:0f:81:ff:18: 72:52:d5:f0:1f:f1:4c:6e:f6:3e:a9:e5:4b:c5:3e:6b:8b:f4: 6f:c8:9c:ae:69:33:63:1c:07:f5:38:2e:e8:87:74:ee:bb:0c: 9e:f4:67:d4:85:10:66:ba:18:bd:0a:db:93:de:0a:d7:a2:c3: 21:a3:3a:1e:93:cd:40:00:6d:af:ac:bb:8d:0a:a9:61:41:ea: 0a:b0:78:1c:eb:90:f5:5d:07:6a:ac:69:f5:62:fa:73:3e:39: 89:13:30:03:47:b5:15:61:73:a8:b0:ea:99:28:ed:d3:ef:4d: 32:ba:96:d6:15:92:b3:1e:5e:48:75:05:37:20:58:7f:86:43: cc:d6:dc:cb:29:b1:cc:8f:3c:f9:59:4a:d5:83:c7:9e:f7:78: 4d:12:c2:80:a4:59:da:12:fb:e0:c7:4a:de:81:9e:35:59:6f: c6:aa:c1:4b:e0:3c:16:cb:ce:43:93:77:fa:14:35:8a:6d:80: 9a:53:71:a1:32:bd:ef:91:e6:14:a1:a9:d1:b3:10:cb:e9:cd: 56:4c:86:6b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEXEO/gMwsm0VNDLaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDUwNTAwNDUyMFoXDTI2MDgwODAwNDUyMFowLzEtMCsGA1UEAxMk OTJlYmM2ZjktNTY0OS00YzEwLTkxZTYtZTdlNGY0NGQ2ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Z0vbdt/9gwY8DGharX9E1vTbfniNxpidJX yRkzVVcmVJwZkmBdmMA+W4a6GHIA35ap2tpqqrgRy4Lb3Zi2VT30tJRMtUDgciQH av+9xl57kTZZqMEIoZh4yG1oAMzDS6CyZrfGS23pkpQWFUHnVbz3J/0NXt5F5Wxu H76lA2tmyvCe92SyiGJCAqL8YA1FJxM37xiENvdgsdZau1ck+OfXFUa1QcBcr81H O90FGoRtOMpO7JjGhM2PJo+svjgFK+2pNafeQ5HVQ41GfA9E1ZMCGloOv2iMuyVY 3X+wpC3j2jAudWb8FMjLjO0Ez2nhW1DWmr4AI7PZPWG47OGKewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAeH+pKYviqfY/6DcxYw1d6PzkHTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 MmViYzZmOS01NjQ5LTRjMTAtOTFlNi1lN2U0ZjQ0ZDZmZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzkyZWJjNmY5LTU2NDktNGMxMC05 MWU2LWU3ZTRmNDRkNmZkMS85MmViYzZmOS01NjQ5LTRjMTAtOTFlNi1lN2U0ZjQ0 ZDZmZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo/8gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APfEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALSdpYwlKv8YcHxFzgZqSJXPVB/KlhJBuAtvQGhWQS4d0i2r D4mvTCmq07EYLtPlZOUTD4H/GHJS1fAf8Uxu9j6p5UvFPmuL9G/InK5pM2McB/U4 LuiHdO67DJ70Z9SFEGa6GL0K25PeCteiwyGjOh6TzUAAba+su40KqWFB6gqweBzr kPVdB2qsafVi+nM+OYkTMANHtRVhc6iw6pko7dPvTTK6ltYVkrMeXkh1BTcgWH+G Q8zW3MspscyPPPlZStWDx573eE0SwoCkWdoS++DHSt6BnjVZb8aqwUvgPBbLzkOT d/oUNYptgJpTcaEyve+R5hShqdGzEMvpzVZMhms= -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:56 2024 by rpki-client on console-ams.rpki-client.org