$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.cer (raw, json) Hash identifier: 0NxtUWY2hsT+dyw4FsKO2VIOVy6C4YPVae3QpJznsrM= Subject key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584347B80571D418945C93CB9C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Sep 2023 00:45:22 +0000 Certificate not after: Tue 23 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 12068 AS: 36329 IP: 64.58.48.0/20 IP: 155.254.144.0/20 IP: 199.36.164.0/22 IP: 2604:7b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:47:b8:05:71:d4:18:94:5c:93:cb:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 20 00:45:22 2023 GMT Not After : Dec 23 01:45:22 2025 GMT Subject: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:62:4e:6f:52:1f:41:01:e6:9e:72:fc:26: 5a:8a:45:5e:bc:2b:c1:5c:52:92:0a:1f:30:2a:b4: 2e:b1:1d:01:2f:ac:d5:13:e5:a6:70:83:7a:99:0b: 3c:2b:22:a4:b9:72:83:d4:ae:f1:1f:7b:d2:52:19: 64:3d:34:40:ae:0c:96:70:48:1a:df:0f:6e:d9:6a: 86:ed:9a:5c:81:0a:44:0b:e6:35:35:66:fd:4e:49: db:50:c2:7e:40:77:ba:3b:3b:92:f3:92:d8:b1:60: f4:55:15:b6:6b:01:1b:a9:cd:79:3d:89:e5:56:c8: c8:c8:36:09:81:f7:72:ce:93:ec:79:05:5d:7e:34: 8a:7f:2d:3d:26:3b:f8:02:29:8c:1f:ee:40:29:db: 2c:b6:51:71:6d:29:7a:08:9f:8a:e9:ea:dd:86:86: e8:c9:f8:d9:d4:a5:4d:3a:fb:a7:f5:25:54:98:7b: 4d:76:cb:bb:cf:b8:41:d7:03:d9:48:50:a0:78:a1: ef:35:4c:29:20:e3:af:6e:c3:94:75:df:be:ef:20: 1f:47:e4:65:bd:f8:2c:60:5d:be:22:db:d7:4d:b4: 54:ad:be:f9:ac:55:09:97:4a:25:e6:4a:66:b3:89: 27:69:45:59:a5:50:59:fb:fb:f2:ba:3b:d1:c0:78: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 155.254.144.0/20 199.36.164.0/22 IPv6: 2604:7b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12068 36329 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:5e:4d:00:2b:6a:4d:3c:70:a9:20:6a:ac:ab:63:51:93:11: 06:81:98:6f:3f:1f:83:14:b8:90:78:de:c1:36:49:cc:cb:e1: b9:67:21:f6:77:1b:6c:11:10:bd:4d:51:a3:6a:ac:44:9f:f6: 3f:95:d5:08:b2:eb:65:53:24:32:40:73:a2:a1:74:c9:61:28: ce:bc:19:76:ef:31:9c:f4:8d:79:0d:e3:1b:23:84:aa:6b:b8: 61:ef:a9:82:0a:4b:0d:65:42:07:8b:a2:ed:b9:6c:aa:61:aa: 2d:3f:c0:5b:c9:11:62:29:63:ac:a5:05:d3:50:4f:48:c9:13: e8:68:ea:70:f1:cd:d5:70:07:38:a9:3b:98:5d:4f:5a:14:f4: 15:ca:b4:84:3a:69:38:5a:23:f3:4f:c0:8d:0c:68:2e:03:7f: 42:75:5a:cd:8f:0e:ac:e4:f8:07:ba:d8:77:5b:f6:3e:09:65: 5f:2e:e7:71:b1:33:3d:61:78:b9:b9:3d:bc:d7:89:e7:ae:e3: 0b:ec:c5:ae:cd:e1:ac:29:86:82:68:a2:1f:85:50:88:d9:a7: 4b:7c:9c:6e:49:13:d2:fc:a0:fc:a2:9b:ca:2b:7f:6b:23:31: 4d:e6:5b:34:14:8b:c8:58:8a:88:86:0b:a6:1f:cf:e4:42:75: f2:d6:2b:f0 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWENHuAVx1BiUXJPLnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkyMDAwNDUyMloXDTI1MTIyMzAxNDUyMlowLzEtMCsGA1UEAxMk OTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpliTm9SH0EB5p5y/CZaikVevCvBXFKSCh8w KrQusR0BL6zVE+WmcIN6mQs8KyKkuXKD1K7xH3vSUhlkPTRArgyWcEga3w9u2WqG 7ZpcgQpEC+Y1NWb9TknbUMJ+QHe6OzuS85LYsWD0VRW2awEbqc15PYnlVsjIyDYJ gfdyzpPseQVdfjSKfy09Jjv4AimMH+5AKdsstlFxbSl6CJ+K6erdhoboyfjZ1KVN Ovun9SVUmHtNdsu7z7hB1wPZSFCgeKHvNUwpIOOvbsOUdd++7yAfR+RlvfgsYF2+ ItvXTbRUrb75rFUJl0ol5kpms4knaUVZpVBZ+/vyujvRwHhqmwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFE26RaqruYdjpeZvswnFbpcwlJqeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1ZTI5Mjg5LTZmMWMtNGMyZi04 NGY0LWM5NDRlOWU1NDk0MC85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTll NTQ5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARAOjADBASb/pADBALHJKQwDQQCAAIwBwMFACYE ewAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICLyQCAwCN6TBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOXk0A K2pNPHCpIGqsq2NRkxEGgZhvPx+DFLiQeN7BNknMy+G5ZyH2dxtsERC9TVGjaqxE n/Y/ldUIsutlUyQyQHOioXTJYSjOvBl27zGc9I15DeMbI4Sqa7hh76mCCksNZUIH i6LtuWyqYaotP8BbyRFiKWOspQXTUE9IyRPoaOpw8c3VcAc4qTuYXU9aFPQVyrSE Omk4WiPzT8CNDGguA39CdVrNjw6s5PgHuth3W/Y+CWVfLudxsTM9YXi5uT2814nn ruML7MWuzeGsKYaCaKIfhVCI2adLfJxuSRPS/KD8opvKK39rIzFN5ls0FIvIWIqI hgumH8/kQnXy1ivw -----END CERTIFICATE-----Generated at Fri Apr 26 06:20:16 2024 by rpki-client on console-ams.rpki-client.org