$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer File: 95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer (raw, json) Hash identifier: eNiCkLHHQckisyEEXJiSEFgiVQ4a7cJyQoYM8sQDi9E= Subject key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858449C6D4141D47BA456C4104B04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Jan 2024 01:45:22 +0000 Certificate not after: Fri 24 Apr 2026 00:45:22 +0000 Subordinate resources: AS: 22018 IP: 69.64.96.0/20 IP: 209.25.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:9c:6d:41:41:d4:7b:a4:56:c4:10:4b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 20 01:45:22 2024 GMT Not After : Apr 24 00:45:22 2026 GMT Subject: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:1b:2b:95:46:73:d9:f1:38:45:d7:c4:7d: 5b:7b:a5:19:34:c0:7c:8e:53:65:86:d9:89:c5:4b: 72:8e:d7:33:61:a0:c3:fc:87:b5:15:e5:ea:e6:73: 31:20:bd:d6:e2:48:12:f8:96:91:79:0c:80:2f:3b: 5a:28:3c:27:18:ca:d6:2d:26:6e:9a:c8:79:7d:74: bd:e9:28:c5:d7:78:13:d0:ca:8d:10:20:a2:5d:b4: 0c:33:df:b1:f8:64:18:55:70:3c:c1:3a:1d:30:07: a5:2b:14:24:ac:ba:b0:e9:27:93:c2:d7:c8:3e:d2: ab:3b:ce:67:04:cc:13:95:55:07:5e:40:17:2b:b2: fb:37:a0:da:f9:d2:0d:75:4f:5d:23:a8:95:90:24: 7b:c8:e8:14:4f:8b:2f:86:5e:a9:8a:da:23:db:f0: 2b:de:33:a0:cd:b4:d6:c3:0d:4d:36:ff:99:0a:4c: 02:e5:52:51:06:fd:58:42:3e:4e:f9:23:17:2e:dc: 33:63:7e:a6:c1:29:d1:04:0a:9a:27:5d:1a:af:8b: b9:94:bb:c6:bb:86:86:63:c5:2d:d4:b0:6e:ab:7e: a7:da:c4:37:5b:b9:74:25:b5:f6:c7:dc:cb:1d:03: 44:fa:2d:88:de:24:a7:2c:63:67:31:24:9d:b9:9f: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.64.96.0/20 209.25.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22018 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d2:e5:fe:a7:56:c8:37:8c:12:58:0f:4c:7b:b3:04:03:9a: d4:d4:99:76:17:0a:21:35:d8:83:09:4a:d7:35:7f:5b:bc:b6: c0:10:50:6f:11:6c:46:75:df:35:57:ec:1d:48:e2:6a:ca:b7: 76:bd:71:79:8c:eb:72:c7:ef:da:3f:6f:f9:09:d3:49:2f:c1: 01:b3:05:51:71:fc:49:1e:69:03:42:ab:68:93:e8:9d:ed:a9: 72:91:c9:c1:74:19:36:e8:61:e0:83:30:f2:39:e9:d1:c6:ce: a5:ae:85:6f:b6:b1:ec:c3:fe:63:23:a2:d3:55:17:2a:6d:ee: b2:26:5f:ad:3d:2a:43:98:78:e9:ef:f9:fa:7e:65:e5:ef:35: 9b:15:77:40:2e:37:7e:b5:58:7d:00:70:3c:19:77:80:24:d0: f1:c9:a5:d7:39:cd:03:0e:93:7a:47:d0:25:d7:a2:83:ce:b5: bc:1a:f5:57:70:97:2d:27:8e:10:c3:ba:be:2e:9e:e3:7b:b1: dd:63:10:e0:b1:c9:2c:74:b3:b4:49:ce:74:43:6c:ba:fa:34: 2a:4c:00:f9:a9:36:df:e1:16:21:95:f2:24:4a:a0:bc:b1:f4: bb:66:49:b8:33:5d:f2:67:b7:17:ff:b9:25:1b:b5:43:a7:90: 6d:35:07:8e -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEScbUFB1HukVsQQSwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDEyMDAxNDUyMloXDTI2MDQyNDAwNDUyMlowLzEtMCsGA1UEAxMk OTViZjk1ZDUtMWM5Yi00Y2VhLTgxNDItY2MxYTQ2OTljN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTYbK5VGc9nxOEXXxH1be6UZNMB8jlNlhtmJ xUtyjtczYaDD/Ie1FeXq5nMxIL3W4kgS+JaReQyALztaKDwnGMrWLSZumsh5fXS9 6SjF13gT0MqNECCiXbQMM9+x+GQYVXA8wTodMAelKxQkrLqw6SeTwtfIPtKrO85n BMwTlVUHXkAXK7L7N6Da+dINdU9dI6iVkCR7yOgUT4svhl6pitoj2/Ar3jOgzbTW ww1NNv+ZCkwC5VJRBv1YQj5O+SMXLtwzY36mwSnRBAqaJ10ar4u5lLvGu4aGY8Ut 1LBuq36n2sQ3W7l0JbX2x9zLHQNE+i2I3iSnLGNnMSSduZ+k/wIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFC0d2kZpgun4D3W+BbAd1u6DrGKQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5OWM3YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1YmY5NWQ1LTFjOWItNGNlYS04 MTQyLWNjMWE0Njk5YzdhNi85NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5 OWM3YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARFQGADBALRGdAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICVgIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAqdLl/qdWyDeMElgPTHuzBAOa1NSZdhcKITXYgwlK 1zV/W7y2wBBQbxFsRnXfNVfsHUjiasq3dr1xeYzrcsfv2j9v+QnTSS/BAbMFUXH8 SR5pA0KraJPone2pcpHJwXQZNuhh4IMw8jnp0cbOpa6Fb7ax7MP+YyOi01UXKm3u siZfrT0qQ5h46e/5+n5l5e81mxV3QC43frVYfQBwPBl3gCTQ8cml1znNAw6TekfQ Jdeig861vBr1V3CXLSeOEMO6vi6e43ux3WMQ4LHJLHSztEnOdENsuvo0KkwA+ak2 3+EWIZXyJEqgvLH0u2ZJuDNd8me3F/+5JRu1Q6eQbTUHjg== -----END CERTIFICATE-----Generated at Fri Apr 26 08:41:44 2024 by rpki-client on console-ams.rpki-client.org