$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1.cer File: b9176e2a-57c3-493e-acd0-2507f77918d1.cer (raw, json) Hash identifier: MgDP1bKvnirXKnvZ/gx9A40lpfs4c5BRA+bH5wxGOFQ= Subject key identifier: 31:F7:86:5A:8B:81:14:FA:25:4F:84:22:C3:6F:E2:81:5A:3B:58:74 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285844834D13849401AD6AFE19E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/b9176e2a-57c3-493e-acd0-2507f77918d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jan 2024 01:45:20 +0000 Certificate not after: Wed 15 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 398481 IP: 23.156.112.0/24 IP: 136.175.100.0/22 IP: 2605:c240::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:83:4d:13:84:94:01:ad:6a:fe:19:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 11 01:45:20 2024 GMT Not After : Apr 15 00:45:20 2026 GMT Subject: CN=b9176e2a-57c3-493e-acd0-2507f77918d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:e0:3f:80:42:48:c4:e1:a1:1a:07:06:8e: f5:97:49:0c:b1:af:90:b7:9d:0e:ca:21:78:bd:c9: 37:24:5f:13:1c:54:c7:c2:21:5d:a8:27:c4:f5:26: 73:36:24:64:94:b1:db:5c:16:50:ff:ab:66:22:93: 6e:5f:b7:40:bd:e0:56:d7:b9:1b:19:f2:dc:81:4c: 75:2c:6e:04:3b:9c:17:86:45:61:68:35:00:cb:c3: 21:2b:2d:4c:60:93:39:d5:24:08:ae:3e:6b:41:57: 62:1a:be:7c:87:80:4b:53:e9:dd:99:6b:e7:d5:6b: 0f:88:4a:a6:95:2e:d6:96:2e:07:1f:92:d8:ba:f4: 1c:99:b8:8a:00:0b:f1:38:0d:40:26:f4:57:73:1a: 59:bb:e7:de:31:b0:71:94:db:80:50:9e:4c:89:16: a5:52:66:3a:d4:ad:6c:5c:89:9b:4b:63:78:7e:f4: 7b:85:53:5d:7d:a3:c5:6d:5c:6a:25:d7:57:ee:55: ce:1e:d2:9a:29:f1:2d:8b:40:59:d7:92:90:60:22: 55:c9:98:38:8c:a6:c5:63:80:da:3d:fd:82:14:ce: 69:e9:df:45:fd:05:ba:da:aa:60:a8:aa:e8:25:da: 3b:e8:e0:dd:6b:3a:da:d3:03:4d:8c:94:6b:e8:22: 65:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F7:86:5A:8B:81:14:FA:25:4F:84:22:C3:6F:E2:81:5A:3B:58:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/b9176e2a-57c3-493e-acd0-2507f77918d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.156.112.0/24 136.175.100.0/22 IPv6: 2605:c240::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398481 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e6:2b:84:04:e7:ba:f8:ad:ea:d7:01:ce:a8:e3:dd:e5:f5: 45:7a:7e:9a:01:9c:73:b1:12:77:aa:3b:74:96:d3:3a:71:4e: ad:84:ac:c3:49:b7:8b:82:44:44:c2:27:c5:e8:c8:6e:0f:47: 79:16:a0:99:b6:de:c5:13:35:fa:ae:0f:ae:82:11:65:d4:80: 95:d8:9e:ec:42:a0:f6:05:07:b0:ea:59:30:ff:69:2f:ad:96: 8b:a7:d9:c7:8b:bf:11:05:4c:e5:77:c4:66:17:97:3f:ba:d1: 10:22:a5:17:60:09:c1:73:86:77:6a:ec:e5:27:de:7f:d4:64: a7:1b:94:5d:de:d7:b1:68:38:18:e4:4b:31:65:3f:4c:fd:62: 7a:9d:a3:c2:63:1b:8b:7d:ec:e3:66:49:a1:e0:c6:4e:32:cc: 5d:3f:b5:78:60:b4:c7:9d:ba:e3:ce:df:2c:1f:43:58:3b:6a: 5d:40:db:69:a9:c6:3d:ae:13:0e:e6:2f:74:3a:28:c8:26:3f: a8:73:0c:56:08:e7:a3:ee:ba:7d:48:24:4d:26:a1:e7:8c:5c: 89:a3:73:6c:ae:1d:02:a6:44:66:ee:1a:8a:46:9c:91:13:61: bc:79:21:c4:b0:3b:ef:30:17:ab:1c:20:c9:eb:28:14:22:07: 2f:68:cb:77 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWESDTROElAGtav4Z4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDExMTAxNDUyMFoXDTI2MDQxNTAwNDUyMFowLzEtMCsGA1UEAxMk YjkxNzZlMmEtNTdjMy00OTNlLWFjZDAtMjUwN2Y3NzkxOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLfgP4BCSMThoRoHBo71l0kMsa+Qt50OyiF4 vck3JF8THFTHwiFdqCfE9SZzNiRklLHbXBZQ/6tmIpNuX7dAveBW17kbGfLcgUx1 LG4EO5wXhkVhaDUAy8MhKy1MYJM51SQIrj5rQVdiGr58h4BLU+ndmWvn1WsPiEqm lS7Wli4HH5LYuvQcmbiKAAvxOA1AJvRXcxpZu+feMbBxlNuAUJ5MiRalUmY61K1s XImbS2N4fvR7hVNdfaPFbVxqJddX7lXOHtKaKfEti0BZ15KQYCJVyZg4jKbFY4Da Pf2CFM5p6d9F/QW62qpgqKroJdo76ODdazra0wNNjJRr6CJlGQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDH3hlqLgRT6JU+EIsNv4oFaO1h0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i OTE3NmUyYS01N2MzLTQ5M2UtYWNkMC0yNTA3Zjc3OTE4ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I5MTc2ZTJhLTU3YzMtNDkzZS1h Y2QwLTI1MDdmNzc5MThkMS9iOTE3NmUyYS01N2MzLTQ5M2UtYWNkMC0yNTA3Zjc3 OTE4ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXnHADBAKIr2QwDQQCAAIwBwMFBCYFwkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhSRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA7mK4QE57r4rerXAc6o 493l9UV6fpoBnHOxEneqO3SW0zpxTq2ErMNJt4uCRETCJ8XoyG4PR3kWoJm23sUT NfquD66CEWXUgJXYnuxCoPYFB7DqWTD/aS+tloun2ceLvxEFTOV3xGYXlz+60RAi pRdgCcFzhndq7OUn3n/UZKcblF3e17FoOBjkSzFlP0z9Ynqdo8JjG4t97ONmSaHg xk4yzF0/tXhgtMeduuPO3ywfQ1g7al1A22mpxj2uEw7mL3Q6KMgmP6hzDFYI56Pu un1IJE0moeeMXImjc2yuHQKmRGbuGopGnJETYbx5IcSwO+8wF6scIMnrKBQiBy9o y3c= -----END CERTIFICATE-----Generated at Thu Apr 25 02:16:03 2024 by rpki-client on console-ams.rpki-client.org