$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer File: 9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer (raw, json) Hash identifier: HcrqWHeLRCF5IxaqmetTrm3q56/xrnLtOY9iOrE81GE= Subject key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845628607C45619731AF04764A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 Mar 2024 00:45:21 +0000 Certificate not after: Sat 04 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 399141 IP: 45.42.172.0/22 IP: 2602:fcd8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:86:07:c4:56:19:73:1a:f0:47:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 31 00:45:21 2024 GMT Not After : Jul 4 00:45:21 2026 GMT Subject: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:ab:30:cc:69:44:9d:ec:7f:9a:45:f8:5b: 59:ff:f7:e8:6b:79:e8:d6:97:97:fe:a0:03:6e:92: 6a:dd:14:25:33:f2:2f:db:20:88:ea:2c:68:33:3a: f5:3c:4e:ec:f2:80:c0:a9:7d:63:48:6e:54:fc:e4: e8:60:4b:22:b7:27:9d:49:89:33:9c:cd:f0:ef:b7: 67:bb:78:e8:23:e1:41:37:a3:48:d8:2a:8b:1f:0a: cc:a3:ff:8e:d4:33:3b:30:25:71:32:8b:84:78:95: 2d:b4:8f:70:c6:72:12:49:8e:00:a0:22:91:77:4d: 7e:ae:81:1c:7c:18:af:bf:ee:f0:96:72:29:f6:f0: e1:30:27:23:90:d1:1e:a9:ed:59:3c:9a:81:3a:90: c6:06:60:5d:90:f2:14:d1:97:02:51:a6:3c:e5:6b: 03:2d:3f:b9:27:d2:0a:34:fd:d2:9d:07:56:b1:c2: 1d:2c:83:7e:27:f8:74:30:20:4d:eb:8f:05:66:18: 29:07:72:56:eb:b2:0d:6e:f4:37:1c:73:d0:54:20: 9b:04:78:86:a4:92:95:f1:6a:05:8c:13:f4:fe:19: 41:02:5f:91:36:3f:1e:a4:4b:28:e1:69:05:12:fe: fc:7d:63:89:db:16:58:dd:e0:14:1c:1a:53:99:eb: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0/22 IPv6: 2602:fcd8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399141 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b1:d9:40:db:2e:54:4f:bc:ed:24:fe:f7:85:79:f2:47:d9: 3e:87:da:dc:e1:b4:bc:13:c9:84:84:96:48:ef:dc:0f:e5:6f: c1:c9:c2:bd:76:06:8a:81:e7:0f:31:de:57:eb:b5:7d:49:89: d3:53:f0:24:c8:21:41:37:28:08:df:e5:e3:00:be:59:09:ae: d6:7a:b2:1a:3f:c7:81:ae:3e:3d:5f:e3:57:95:cd:34:bc:0e: 84:4e:dd:d8:68:3a:4a:65:f9:ac:86:60:9a:be:f0:d9:62:d5: 38:16:79:6d:03:e1:d7:0b:be:03:cd:9f:0c:9f:fd:4a:92:59: d8:a5:c6:74:09:fd:a3:77:81:d7:5e:a6:3f:56:73:97:a4:5c: 8c:32:7f:6a:46:d6:45:d3:04:cf:f9:57:28:4c:59:60:ca:4c: e2:1c:1c:0e:5c:5e:73:5a:f6:f1:2c:a6:0d:29:72:48:d0:24: 70:9e:fb:bf:c5:c3:8a:38:95:98:28:9a:8c:a5:56:f0:d7:8b: ae:7e:07:f2:9a:30:8d:f4:0c:78:b1:32:ad:28:fe:c9:8d:cc: fd:28:74:2f:13:3e:b8:ec:23:88:78:52:f1:20:bc:a7:3e:38: 82:92:6f:bf:f0:30:74:11:5c:71:6a:70:4e:f3:e2:13:52:f2: dd:d2:64:3c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEVihgfEVhlzGvBHZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDMzMTAwNDUyMVoXDTI2MDcwNDAwNDUyMVowLzEtMCsGA1UEAxMk OWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/qrMMxpRJ3sf5pF+FtZ//foa3no1peX/qAD bpJq3RQlM/Iv2yCI6ixoMzr1PE7s8oDAqX1jSG5U/OToYEsityedSYkznM3w77dn u3joI+FBN6NI2CqLHwrMo/+O1DM7MCVxMouEeJUttI9wxnISSY4AoCKRd01+roEc fBivv+7wlnIp9vDhMCcjkNEeqe1ZPJqBOpDGBmBdkPIU0ZcCUaY85WsDLT+5J9IK NP3SnQdWscIdLIN+J/h0MCBN648FZhgpB3JW67INbvQ3HHPQVCCbBHiGpJKV8WoF jBP0/hlBAl+RNj8epEso4WkFEv78fWOJ2xZY3eAUHBpTmetZwQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCYW24WQfRQPpgiRWvOMSLfc89QfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzllOGVkOTUwLTQ0ODgtNDliMS04 ZDM5LWJiOGM3MWE3NjdkMi85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFh NzY3ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAItKqwwDgQCAAIwCAMGBCYC/NgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYXJTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrsdlA2y5UT7ztJP73hXnyR9k+ h9rc4bS8E8mEhJZI79wP5W/BycK9dgaKgecPMd5X67V9SYnTU/AkyCFBNygI3+Xj AL5ZCa7WerIaP8eBrj49X+NXlc00vA6ETt3YaDpKZfmshmCavvDZYtU4FnltA+HX C74DzZ8Mn/1KklnYpcZ0Cf2jd4HXXqY/VnOXpFyMMn9qRtZF0wTP+VcoTFlgykzi HBwOXF5zWvbxLKYNKXJI0CRwnvu/xcOKOJWYKJqMpVbw14uufgfymjCN9Ax4sTKt KP7Jjcz9KHQvEz647COIeFLxILynPjiCkm+/8DB0EVxxanBO8+ITUvLd0mQ8 -----END CERTIFICATE-----Generated at Fri Apr 19 01:57:20 2024 by rpki-client on console-ams.rpki-client.org