$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer File: c52a3659-4578-49f3-9ef2-ea8640fc6339.cer (raw, json) Hash identifier: S2xswUIoJtOJi+LkZq+Lsv7ONfiO6VVcY5gAZ/uC7EY= Subject key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858456F36CFF8A5C90B284C40ED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 13:51:15 +0000 Certificate not after: Mon 20 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 399321 IP: 104.224.42.0/24 IP: 167.253.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:36:cf:f8:a5:c9:0b:28:4c:40:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 4 13:51:15 2024 GMT Not After : Apr 20 00:45:20 2026 GMT Subject: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:91:08:cd:de:4c:7b:31:cb:de:e7:0c:e2: c7:26:0e:59:3f:8e:50:83:81:16:d5:b1:b9:8c:c5: 0c:39:3e:90:ee:3a:1d:fe:d1:0f:23:d9:79:03:41: aa:99:d7:76:5c:76:80:f2:4e:e7:31:1a:b8:2c:4b: af:72:51:3e:3b:01:9e:1c:2b:63:af:53:63:41:8c: 3c:69:ff:8e:ee:b4:12:9a:1e:9a:94:ad:94:a5:97: a5:a4:aa:b1:63:ce:44:14:f9:32:46:95:09:45:8e: c3:5c:c2:45:05:09:a9:4e:af:8b:0b:ee:d1:97:ab: 90:78:3d:ec:f2:d0:41:c8:11:43:65:99:6f:b0:7c: 86:67:6f:da:d7:13:94:23:49:db:be:03:cf:f4:7c: 0e:e3:27:eb:47:55:33:bd:1b:98:02:36:24:d2:cf: 49:38:91:45:ff:a6:d2:06:41:9f:c5:5d:0e:d3:25: d9:ca:50:80:18:87:fd:fb:85:ed:d9:7f:3a:cd:52: eb:d2:6a:49:79:19:32:fd:0a:9c:ca:79:a2:63:ca: 34:0b:5e:00:80:0e:b7:7b:27:50:d0:13:fc:9b:46: bc:d5:a0:73:8e:51:99:90:a4:29:28:2d:ec:40:26: 20:28:e5:5c:b2:8f:f1:7d:8b:3c:1f:63:da:0c:b8: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.224.42.0/24 167.253.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399321 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:dc:21:27:85:91:a8:31:7f:fb:13:0b:1b:7e:eb:3b:29:b1: 27:08:f4:8c:b1:c0:9a:9f:28:69:7a:22:4c:f7:e3:2d:f2:7e: d4:12:25:a2:f2:6c:9f:0f:02:5c:87:1d:e6:97:89:ff:79:fd: 34:39:73:85:c6:90:09:83:7f:b8:c8:ba:8f:19:d3:68:05:fb: 31:d1:6b:f9:44:b6:90:64:83:0d:4c:79:af:05:3a:a0:3e:44: 08:3c:a8:5e:3b:2f:c9:d3:ff:98:e6:00:c3:c1:3b:2e:bd:44: 71:58:72:52:1e:85:ea:33:65:e9:fa:2a:a6:38:f4:58:0d:82: b6:2b:67:b4:60:6a:c7:0b:f3:7f:55:39:46:50:ed:06:41:50: 17:ed:77:02:a5:4a:19:2b:4b:a0:d4:ca:c2:e3:4a:71:a7:24: 0d:dc:28:f9:d5:bf:72:67:fe:d8:6f:16:a7:e5:70:cb:75:7b: f1:14:43:ef:5a:cc:59:c2:fd:35:f0:af:a8:e0:f3:45:60:f6: a8:62:db:a4:04:78:fa:22:04:4f:5e:27:92:f8:fe:82:fb:99: 46:82:cb:86:55:17:77:db:72:0a:50:94:eb:29:38:7e:64:9e: 1d:b1:ea:21:a7:89:df:e4:91:51:f9:34:9b:3a:1a:fd:4d:91: 56:aa:fe:32 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEVvNs/4pckLKExA7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDQwNDEzNTExNVoXDTI2MDQyMDAwNDUyMFowLzEtMCsGA1UEAxMk YzUyYTM2NTktNDU3OC00OWYzLTllZjItZWE4NjQwZmM2MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dWRCM3eTHsxy97nDOLHJg5ZP45Qg4EW1bG5 jMUMOT6Q7jod/tEPI9l5A0Gqmdd2XHaA8k7nMRq4LEuvclE+OwGeHCtjr1NjQYw8 af+O7rQSmh6alK2UpZelpKqxY85EFPkyRpUJRY7DXMJFBQmpTq+LC+7Rl6uQeD3s 8tBByBFDZZlvsHyGZ2/a1xOUI0nbvgPP9HwO4yfrR1UzvRuYAjYk0s9JOJFF/6bS BkGfxV0O0yXZylCAGIf9+4Xt2X86zVLr0mpJeRky/QqcynmiY8o0C14AgA63eydQ 0BP8m0a81aBzjlGZkKQpKC3sQCYgKOVcso/xfYs8H2PaDLi0ZQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPUaNvyGonbzux9tbzsYOf3P2Zj6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBmYzYzMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M1MmEzNjU5LTQ1NzgtNDlmMy05 ZWYyLWVhODY0MGZjNjMzOS9jNTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBm YzYzMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo4CoDBAKn/QwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhfZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHLcISeFkagxf/sTCxt+6zspsScI9IyxwJqfKGl6 Ikz34y3yftQSJaLybJ8PAlyHHeaXif95/TQ5c4XGkAmDf7jIuo8Z02gF+zHRa/lE tpBkgw1Mea8FOqA+RAg8qF47L8nT/5jmAMPBOy69RHFYclIeheozZen6KqY49FgN grYrZ7RgascL839VOUZQ7QZBUBftdwKlShkrS6DUysLjSnGnJA3cKPnVv3Jn/thv FqflcMt1e/EUQ+9azFnC/TXwr6jg80Vg9qhi26QEePoiBE9eJ5L4/oL7mUaCy4ZV F3fbcgpQlOspOH5knh2x6iGnid/kkVH5NJs6Gv1NkVaq/jI= -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:20 2024 by rpki-client on console-fra.rpki-client.org