$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer File: 99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer (raw, json) Hash identifier: w7e2FjkpbZji4T+j9YYgcrl6BvaSCWnEO1JfU3nrYkQ= Subject key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858420975FB79F7A9A28C15107A1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 May 2023 00:45:15 +0000 Certificate not after: Sun 31 Aug 2025 00:45:15 +0000 Subordinate resources: AS: 396279 IP: 23.173.128.0/24 IP: 172.83.3.0/24 IP: 2620:12f:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:09:75:fb:79:f7:a9:a2:8c:15:10:7a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 29 00:45:15 2023 GMT Not After : Aug 31 00:45:15 2025 GMT Subject: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:88:06:09:27:4b:a2:4c:f7:aa:5a:87:4f: e8:83:5b:aa:ce:f0:0b:72:a4:94:fc:9a:83:dc:25: f6:45:d7:36:75:7d:f0:27:63:0c:d1:ce:7d:8a:eb: 92:a0:d2:47:a3:51:f1:b1:36:68:a0:17:9a:89:55: 4a:2c:2e:ee:fd:7d:04:97:54:5b:7f:70:0b:61:b2: d7:10:d4:ed:b0:40:ca:27:85:3b:74:e7:40:ca:6f: 70:7e:07:bb:d4:45:f4:21:10:6e:a8:f6:33:39:89: 50:0c:93:d8:52:c8:08:ab:7f:3b:4a:b3:c4:8a:e9: 0d:ce:84:c3:83:13:d8:cc:d2:66:b9:14:a7:9b:a0: 9e:f1:e7:88:b8:b6:16:0c:08:1d:b9:aa:94:93:78: f0:84:62:4a:ba:8a:47:2b:09:75:47:f4:e5:fa:55: 85:c3:b9:73:b1:f8:bc:ee:c9:01:1b:96:c6:44:bf: 61:8a:c1:e5:81:b6:fd:9d:b1:b5:f7:0b:f7:3c:11: 30:c9:9e:8f:a9:86:94:1f:98:ac:90:22:be:ad:53: 62:70:00:fe:21:f9:c5:64:10:98:77:fa:82:b3:76: 19:b1:15:95:d5:9a:5b:1a:9e:03:7a:1d:63:57:18: c2:97:53:71:f6:2c:97:d8:85:21:19:a5:e0:91:ba: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.173.128.0/24 172.83.3.0/24 IPv6: 2620:12f:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:db:96:ae:5b:34:33:e1:3a:71:70:d1:2c:ce:df:1a:04:1f: 4b:de:4c:89:d1:87:38:3a:bf:f7:57:29:b1:2f:90:bc:30:96: c2:ef:61:45:74:c4:27:41:6f:06:2e:d7:39:eb:bb:8e:a3:44: da:a2:99:0e:6e:56:5e:ef:b7:d1:24:fb:eb:4b:e8:49:43:03: d0:ea:00:1b:38:80:0d:55:d0:f1:24:b3:a8:41:32:07:b9:bd: 19:f3:ce:59:90:b5:47:8f:81:e2:02:5e:78:c7:49:9d:eb:40: 12:53:3f:61:08:f7:0a:e3:84:bc:9b:16:5a:c9:bc:fd:da:1a: 4a:f5:91:e1:67:b1:a1:a5:c5:e4:d5:57:d3:90:84:38:77:3b: bd:15:96:5a:35:80:4f:85:8b:50:1f:7a:f0:fe:a7:14:4f:e4: ac:5e:c8:5f:21:10:9b:71:cd:b3:4d:b7:e0:fa:ea:18:20:32: 0b:6c:ea:7f:8a:20:49:a1:b8:45:48:0e:3a:bb:3c:a3:56:b8: 07:e9:3d:38:bc:d7:b9:8e:80:56:69:99:18:85:f5:3e:66:77: 15:03:6f:2e:72:6e:77:45:00:3c:9d:8d:83:d9:5a:50:e7:fb: 9c:c4:f1:e6:9d:59:20:ef:88:fa:21:2d:02:a4:54:8b:5c:c1: b5:06:f4:a9 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEIJdft596mijBUQeh4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUyOTAwNDUxNVoXDTI1MDgzMTAwNDUxNVowLzEtMCsGA1UEAxMk OTlhMzhhYTktZWVhOS00ZGEzLTljN2EtOWVkMWMyMzQwYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWIBgknS6JM96pah0/og1uqzvALcqSU/JqD 3CX2Rdc2dX3wJ2MM0c59iuuSoNJHo1HxsTZooBeaiVVKLC7u/X0El1Rbf3ALYbLX ENTtsEDKJ4U7dOdAym9wfge71EX0IRBuqPYzOYlQDJPYUsgIq387SrPEiukNzoTD gxPYzNJmuRSnm6Ce8eeIuLYWDAgduaqUk3jwhGJKuopHKwl1R/Tl+lWFw7lzsfi8 7skBG5bGRL9hisHlgbb9nbG19wv3PBEwyZ6PqYaUH5iskCK+rVNicAD+IfnFZBCY d/qCs3YZsRWV1ZpbGp4Deh1jVxjCl1Nx9iyX2IUhGaXgkbrKbwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFKa1/Hm5gCVXJ0CAjZ7T4nkvMXXxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIzNDBiODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk5YTM4YWE5LWVlYTktNGRhMy05 YzdhLTllZDFjMjM0MGI4My85OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIz NDBiODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXrYADBACsUwMwDwQCAAIwCQMHBCYgAS8QADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGC/cwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG9uWrls0M+E6cXDR LM7fGgQfS95MidGHODq/91cpsS+QvDCWwu9hRXTEJ0FvBi7XOeu7jqNE2qKZDm5W Xu+30ST760voSUMD0OoAGziADVXQ8SSzqEEyB7m9GfPOWZC1R4+B4gJeeMdJnetA ElM/YQj3CuOEvJsWWsm8/doaSvWR4WexoaXF5NVX05CEOHc7vRWWWjWAT4WLUB96 8P6nFE/krF7IXyEQm3HNs0234PrqGCAyC2zqf4ogSaG4RUgOOrs8o1a4B+k9OLzX uY6AVmmZGIX1PmZ3FQNvLnJud0UAPJ2Ng9laUOf7nMTx5p1ZIO+I+iEtAqRUi1zB tQb0qQ== -----END CERTIFICATE-----Generated at Sat Apr 20 02:52:19 2024 by rpki-client on console-ams.rpki-client.org