$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer File: bfc0b168-b834-4192-acf1-30565a4b3e0c.cer (raw, json) Hash identifier: jpwE+8vQDNWZFJYA3DVnswkgvgZha6jNIZab6AGdIj8= Subject key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858469867F6FEE7A690C97A4481C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Jul 2024 00:45:21 +0000 Certificate not after: Fri 23 Oct 2026 00:45:21 +0000 Subordinate resources: AS: 399868 IP: 23.183.48.0/24 IP: 173.249.176.0/22 IP: 2602:fc5c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:98:67:f6:fe:e7:a6:90:c9:7a:44:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 20 00:45:21 2024 GMT Not After : Oct 23 00:45:21 2026 GMT Subject: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:7d:49:b3:17:43:33:05:9c:3f:a0:a6:6a: 37:f4:25:85:fd:df:9a:60:94:db:9d:4e:7d:85:f0: 97:24:8e:d1:38:85:74:b9:d8:f1:25:b2:ed:de:e3: 10:cc:18:61:f8:79:10:27:dd:93:df:52:bb:66:d4: 77:8d:33:75:19:cf:0a:70:01:31:08:45:0e:23:ae: ea:be:36:d5:4e:11:6a:f9:56:73:d1:f1:c7:c1:0e: 83:30:6e:38:b3:22:94:84:a3:94:02:91:0d:d6:35: 1e:81:60:59:95:7f:42:84:a8:21:a0:7d:c7:a9:fb: 7d:40:6e:33:73:09:ce:26:2f:23:a5:f5:76:6f:f0: 5c:b1:01:cb:3e:15:fd:e6:44:d8:14:36:9d:96:e0: ba:6c:c7:16:4c:8b:b2:78:c1:29:cf:e1:4b:1b:8a: d7:63:d8:57:7d:2d:83:9d:d1:35:18:2b:ee:81:d5: 62:40:d8:c6:4c:8d:09:2f:58:65:34:21:fe:cd:c6: dd:5c:6c:0b:29:53:9f:4f:2a:78:c9:68:f0:a8:17: 6c:50:21:81:39:c4:de:cf:c0:3b:fa:cd:9b:fe:29: b3:30:4b:60:79:1d:93:ed:2f:22:0f:f6:7d:9f:69: bb:27:dd:38:13:b3:43:93:a7:dc:8b:f4:83:3f:68: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.183.48.0/24 173.249.176.0/22 IPv6: 2602:fc5c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6b:1e:ff:a0:ad:16:97:cc:06:12:19:ac:51:a9:a0:32:2c: b7:f7:3f:d6:a8:55:41:eb:6f:71:19:83:79:3d:af:dd:2b:9a: 83:7a:1e:86:ff:ef:75:50:ee:25:60:a8:57:69:66:43:47:cc: cd:06:c1:ae:81:dd:c5:20:d6:46:29:7b:07:89:ff:3f:2e:07: 34:9f:6d:ee:73:93:86:91:c7:cf:2d:00:15:2c:fc:01:b1:a5: 78:bd:64:b2:b4:42:9e:9b:7c:b1:26:34:f2:d2:1a:a7:97:63: 4a:2b:14:c3:55:dd:aa:cc:27:e6:c5:d9:24:24:3a:73:0b:e9: 85:df:17:9d:15:f0:33:d9:d7:c4:2e:df:5c:fa:9e:e7:d3:4a: 26:fa:06:f6:61:b3:1c:0c:4d:9c:b2:20:dc:d0:f3:17:c8:cb: a7:fd:0a:9f:5e:f9:84:73:6a:ba:eb:30:85:b6:9d:38:f2:01: 09:37:74:85:a5:a8:ad:35:c8:0d:b8:c1:56:c8:1d:e9:c4:3c: cc:1a:d0:d0:33:5f:42:83:bf:75:93:2e:19:63:04:03:76:01: 00:87:1e:71:a6:51:c0:84:c0:d3:33:cc:b9:2f:d4:57:41:ee: 0e:5a:c8:76:9e:23:3f:7a:c0:43:94:a3:8a:cc:ce:b2:41:39: 65:ae:24:70 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEaYZ/b+56aQyXpEgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDcyMDAwNDUyMVoXDTI2MTAyMzAwNDUyMVowLzEtMCsGA1UEAxMk YmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIzZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWN9SbMXQzMFnD+gpmo39CWF/d+aYJTbnU59 hfCXJI7ROIV0udjxJbLt3uMQzBhh+HkQJ92T31K7ZtR3jTN1Gc8KcAExCEUOI67q vjbVThFq+VZz0fHHwQ6DMG44syKUhKOUApEN1jUegWBZlX9ChKghoH3Hqft9QG4z cwnOJi8jpfV2b/BcsQHLPhX95kTYFDadluC6bMcWTIuyeMEpz+FLG4rXY9hXfS2D ndE1GCvugdViQNjGTI0JL1hlNCH+zcbdXGwLKVOfTyp4yWjwqBdsUCGBOcTez8A7 +s2b/imzMEtgeR2T7S8iD/Z9n2m7J904E7NDk6fci/SDP2hfxwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAtfaEJ4it+jsBqrmuE9xrkeD9GhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i ZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JmYzBiMTY4LWI4MzQtNDE5Mi1h Y2YxLTMwNTY1YTRiM2UwYy9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0 YjNlMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXtzADBAKt+bAwDgQCAAIwCAMGBCYC/FwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZ/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6ax7/oK0Wl8wGEhms UamgMiy39z/WqFVB629xGYN5Pa/dK5qDeh6G/+91UO4lYKhXaWZDR8zNBsGugd3F INZGKXsHif8/Lgc0n23uc5OGkcfPLQAVLPwBsaV4vWSytEKem3yxJjTy0hqnl2NK KxTDVd2qzCfmxdkkJDpzC+mF3xedFfAz2dfELt9c+p7n00om+gb2YbMcDE2csiDc 0PMXyMun/QqfXvmEc2q66zCFtp048gEJN3SFpaitNcgNuMFWyB3pxDzMGtDQM19C g791ky4ZYwQDdgEAhx5xplHAhMDTM8y5L9RXQe4OWsh2niM/esBDlKOKzM6yQTll riRw -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:01 2024 by rpki-client on console-ams.rpki-client.org