$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer File: b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer (raw, json) Hash identifier: 8taxJgDRE9FDxdvVIFKI+ThEddqBe4JlPbZLDxCVtGw= Subject key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E483544657091CE2BEE3A780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Tue 05 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 399899 IP: 172.98.52.0/22 IP: 2602:fbb7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:54:46:57:09:1c:e2:be:e3:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 5 19:06:39 2025 GMT Subject: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:3f:a5:17:7b:a8:69:e3:4a:28:5b:c1:a2: a0:01:5d:3a:a7:54:5a:4a:26:82:44:12:c4:52:fb: b6:63:c4:f1:95:64:40:34:58:7e:1e:c7:d6:e7:12: a4:ca:da:da:fa:67:7d:b7:ea:ec:ec:15:ce:de:9f: 95:db:de:b9:d8:41:33:c2:85:6c:05:bd:55:d6:7f: e4:83:83:61:90:8d:e7:90:12:f7:3d:a6:93:f9:01: 8b:27:ab:76:73:da:16:19:7c:56:08:f2:70:fa:22: 21:55:06:40:0e:2c:0b:e2:a5:16:6d:42:ac:7a:69: 11:77:a2:dc:94:52:35:24:28:e0:a4:d9:5c:ca:2c: 45:30:32:c9:d6:b3:2e:e8:bf:21:5d:05:b1:09:aa: f5:90:c9:08:a6:7e:d9:cb:3d:70:24:42:f8:cd:08: 40:34:62:ce:dc:dd:7e:1d:a1:cb:44:6e:29:2b:05: 68:d5:6d:c1:04:1c:a6:16:83:b9:41:bb:01:56:b4: e7:14:be:44:99:f0:5f:f0:a2:ba:99:c1:1c:50:5c: 60:a1:fb:bd:d9:ed:f3:a6:f6:81:b7:21:c9:01:39: fa:84:26:fd:3b:b0:55:07:27:9a:b4:ea:3f:69:28: e8:68:e7:30:35:66:19:6e:54:53:fc:2d:e7:c9:2b: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 172.98.52.0/22 IPv6: 2602:fbb7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399899 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8e:57:49:e8:3d:40:cf:7a:c9:62:44:9d:d3:39:3d:2b:d0: f3:88:73:8a:8b:d5:c5:e0:79:8c:f3:3e:91:a1:0f:b6:3f:58: 78:7b:73:c7:c0:9e:29:4a:a5:87:a7:a6:08:d1:11:aa:ed:1c: 2f:e1:9d:d5:9e:a4:f2:b8:b2:25:4d:72:66:b6:6b:50:37:7a: 74:59:8e:d8:4c:26:93:8b:b6:cd:c1:ce:05:ee:f7:c0:be:8c: c8:90:da:0f:d4:d3:27:8b:b7:20:2a:d6:a8:11:4a:86:7f:19: c4:10:ce:31:05:28:4e:97:d4:04:9a:ef:ae:0b:0e:ea:29:27: 2f:c4:6a:f5:49:00:e5:2e:d3:16:44:17:db:87:5b:5c:79:42: b2:f4:20:f7:6f:1e:86:00:07:90:40:6a:79:d8:fb:0f:8f:7b: 21:9e:93:8c:9d:46:7c:46:15:4f:b1:bd:68:1b:6d:ce:e4:16: 70:50:5b:b7:9e:60:2c:55:34:82:5d:bf:37:62:5c:b3:0b:54: ba:76:7e:ec:2e:57:97:98:71:42:03:a9:c5:2d:b3:5a:87:88: 6b:0f:c1:c7:e1:83:ba:9e:f0:00:3f:d7:c8:4c:3d:45:9c:d3: d3:46:a1:02:c5:77:59:ef:6c:3a:01:42:1a:6c:98:69:3e:87: cb:62:72:3c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEHkg1RGVwkc4r7jp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwNTE5MDYzOVowLzEtMCsGA1UEAxMk YjM3Yzg1M2QtZjYxNC00MTdhLTg3ZDktZmVkOWNmOWI2ZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMw/pRd7qGnjSihbwaKgAV06p1RaSiaCRBLE Uvu2Y8TxlWRANFh+HsfW5xKkytra+md9t+rs7BXO3p+V29652EEzwoVsBb1V1n/k g4NhkI3nkBL3PaaT+QGLJ6t2c9oWGXxWCPJw+iIhVQZADiwL4qUWbUKsemkRd6Lc lFI1JCjgpNlcyixFMDLJ1rMu6L8hXQWxCar1kMkIpn7Zyz1wJEL4zQhANGLO3N1+ HaHLRG4pKwVo1W3BBBymFoO5QbsBVrTnFL5EmfBf8KK6mcEcUFxgofu92e3zpvaB tyHJATn6hCb9O7BVByeatOo/aSjoaOcwNWYZblRT/C3nyStnswIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFD6n+QEjYawfeVkj9JFRwZCzAGmqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MzdjODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5Y2Y5YjZlNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IzN2M4NTNkLWY2MTQtNDE3YS04 N2Q5LWZlZDljZjliNmU0YS9iMzdjODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5Y2Y5 YjZlNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKsYjQwDgQCAAIwCAMGBCYC+7cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYaGzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUjldJ6D1Az3rJYkSd0zk9K9Dz iHOKi9XF4HmM8z6RoQ+2P1h4e3PHwJ4pSqWHp6YI0RGq7Rwv4Z3VnqTyuLIlTXJm tmtQN3p0WY7YTCaTi7bNwc4F7vfAvozIkNoP1NMni7cgKtaoEUqGfxnEEM4xBShO l9QEmu+uCw7qKScvxGr1SQDlLtMWRBfbh1tceUKy9CD3bx6GAAeQQGp52PsPj3sh npOMnUZ8RhVPsb1oG23O5BZwUFu3nmAsVTSCXb83YlyzC1S6dn7sLleXmHFCA6nF LbNah4hrD8HH4YO6nvAAP9fITD1FnNPTRqECxXdZ72w6AUIabJhpPofLYnI8 -----END CERTIFICATE-----Generated at Sat Apr 20 01:58:30 2024 by rpki-client on console-fra.rpki-client.org