$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer File: 99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer (raw, json) Hash identifier: 71ofogykyEoy40mgCJpyvAsfmQicOw2gUCvjN8rOB70= Subject key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858470DA8BBA36953CDDF2D5B8DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Aug 2024 00:45:26 +0000 Certificate not after: Fri 04 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 396279 IP: 23.173.128.0/24 IP: 172.83.3.0/24 IP: 2620:12f:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:0d:a8:bb:a3:69:53:cd:df:2d:5b:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 31 00:45:26 2024 GMT Not After : Dec 4 01:45:26 2026 GMT Subject: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:88:06:09:27:4b:a2:4c:f7:aa:5a:87:4f: e8:83:5b:aa:ce:f0:0b:72:a4:94:fc:9a:83:dc:25: f6:45:d7:36:75:7d:f0:27:63:0c:d1:ce:7d:8a:eb: 92:a0:d2:47:a3:51:f1:b1:36:68:a0:17:9a:89:55: 4a:2c:2e:ee:fd:7d:04:97:54:5b:7f:70:0b:61:b2: d7:10:d4:ed:b0:40:ca:27:85:3b:74:e7:40:ca:6f: 70:7e:07:bb:d4:45:f4:21:10:6e:a8:f6:33:39:89: 50:0c:93:d8:52:c8:08:ab:7f:3b:4a:b3:c4:8a:e9: 0d:ce:84:c3:83:13:d8:cc:d2:66:b9:14:a7:9b:a0: 9e:f1:e7:88:b8:b6:16:0c:08:1d:b9:aa:94:93:78: f0:84:62:4a:ba:8a:47:2b:09:75:47:f4:e5:fa:55: 85:c3:b9:73:b1:f8:bc:ee:c9:01:1b:96:c6:44:bf: 61:8a:c1:e5:81:b6:fd:9d:b1:b5:f7:0b:f7:3c:11: 30:c9:9e:8f:a9:86:94:1f:98:ac:90:22:be:ad:53: 62:70:00:fe:21:f9:c5:64:10:98:77:fa:82:b3:76: 19:b1:15:95:d5:9a:5b:1a:9e:03:7a:1d:63:57:18: c2:97:53:71:f6:2c:97:d8:85:21:19:a5:e0:91:ba: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.173.128.0/24 172.83.3.0/24 IPv6: 2620:12f:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:06:84:ff:10:c2:d5:31:ee:29:c0:be:15:7e:69:02:3c:33: a7:fb:ea:c8:da:17:3e:aa:e7:18:d6:09:42:bc:5a:87:4e:d1: 91:3c:a3:b6:5c:98:e0:a8:02:fd:81:57:64:6b:48:8b:88:94: 2b:b9:94:f7:1f:e0:4a:31:e9:6d:f9:f7:6b:b4:36:7a:91:62: 82:70:a5:b4:01:e8:d9:b9:cc:c5:84:79:fd:99:7a:ef:82:a6: 1c:63:26:db:1f:89:36:b3:ec:21:d5:59:4e:6b:87:39:62:f2: c9:9f:82:fd:62:9a:40:32:a5:8d:21:89:aa:eb:59:8d:6d:ad: f9:5f:7d:3a:43:20:36:17:a4:0b:0e:03:20:37:f6:f3:4a:d8: 9c:5a:b4:9b:ae:3f:1f:d4:94:b6:6e:22:0b:8f:9f:14:b7:bb: 37:d9:86:56:2b:b7:86:e0:dd:16:f0:eb:fe:9e:ef:22:a0:9a: 2d:dc:91:f5:8b:70:98:6f:38:02:82:a0:e0:59:dd:7f:a1:ac: bc:1a:25:e5:96:c7:19:bd:dd:ea:c4:22:12:4f:5d:2a:25:87: 10:4b:e8:37:e2:bf:cf:dd:ac:e1:06:9d:31:90:a4:50:0f:01: fd:4d:5a:7e:64:e4:a4:a8:bc:0d:fc:5b:1a:48:2e:ca:2e:96: 6f:a7:ad:e7 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEcNqLujaVPN3y1bjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgzMTAwNDUyNloXDTI2MTIwNDAxNDUyNlowLzEtMCsGA1UEAxMk OTlhMzhhYTktZWVhOS00ZGEzLTljN2EtOWVkMWMyMzQwYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWIBgknS6JM96pah0/og1uqzvALcqSU/JqD 3CX2Rdc2dX3wJ2MM0c59iuuSoNJHo1HxsTZooBeaiVVKLC7u/X0El1Rbf3ALYbLX ENTtsEDKJ4U7dOdAym9wfge71EX0IRBuqPYzOYlQDJPYUsgIq387SrPEiukNzoTD gxPYzNJmuRSnm6Ce8eeIuLYWDAgduaqUk3jwhGJKuopHKwl1R/Tl+lWFw7lzsfi8 7skBG5bGRL9hisHlgbb9nbG19wv3PBEwyZ6PqYaUH5iskCK+rVNicAD+IfnFZBCY d/qCs3YZsRWV1ZpbGp4Deh1jVxjCl1Nx9iyX2IUhGaXgkbrKbwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFKa1/Hm5gCVXJ0CAjZ7T4nkvMXXxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIzNDBiODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk5YTM4YWE5LWVlYTktNGRhMy05 YzdhLTllZDFjMjM0MGI4My85OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIz NDBiODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXrYADBACsUwMwDwQCAAIwCQMHBCYgAS8QADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGC/cwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhQaE/xDC1THuKcC+ FX5pAjwzp/vqyNoXPqrnGNYJQrxah07RkTyjtlyY4KgC/YFXZGtIi4iUK7mU9x/g SjHpbfn3a7Q2epFignCltAHo2bnMxYR5/Zl674KmHGMm2x+JNrPsIdVZTmuHOWLy yZ+C/WKaQDKljSGJqutZjW2t+V99OkMgNhekCw4DIDf280rYnFq0m64/H9SUtm4i C4+fFLe7N9mGViu3huDdFvDr/p7vIqCaLdyR9YtwmG84AoKg4Fndf6GsvBol5ZbH Gb3d6sQiEk9dKiWHEEvoN+K/z92s4QadMZCkUA8B/U1afmTkpKi8DfxbGkguyi6W b6et5w== -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:57 2024 by rpki-client on console-ams.rpki-client.org