$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer File: c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer (raw, json) Hash identifier: /0ZPdC+ZYQU0svIlB6uIvJSMLJGEik6u7trwuY8nUTY= Subject key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48349CDA1C0A1EF2069EFE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 25 May 2025 19:06:39 +0000 Subordinate resources: AS: 25945 IP: 162.253.80.0/21 IP: 198.252.202.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:49:cd:a1:c0:a1:ef:20:69:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 25 19:06:39 2025 GMT Subject: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b6:11:6a:65:26:f9:c9:13:cc:82:d4:98:29: 9a:44:83:67:40:9d:b8:15:fe:64:64:33:cb:fa:7a: 50:63:cb:89:e2:0d:47:d4:b6:b7:72:0d:89:4f:5f: f2:4a:00:3e:a4:6a:84:f2:53:00:c7:e8:96:7c:1c: ce:e5:60:77:09:1a:17:3a:3b:df:d2:74:82:78:03: 78:16:37:2e:a2:69:ee:e0:9b:b4:53:a3:20:67:4c: 11:a5:c0:b1:c3:dc:80:9e:8d:db:c1:a9:66:ba:1d: 24:01:7e:d2:71:7e:e9:cd:17:09:4e:27:ab:08:e8: 68:13:eb:f8:e1:73:e5:23:75:1a:5b:85:ea:c8:35: 3d:e8:b1:46:a5:e3:ac:22:4e:07:0a:c5:5f:8d:9a: 93:5b:4c:16:69:86:af:53:78:a6:13:36:49:16:4a: a4:8e:f5:b3:76:94:07:56:b8:d0:f1:47:32:76:7d: b6:15:cb:87:da:a4:53:22:31:0c:1e:f1:a7:d6:c6: f3:7d:6a:4d:e5:f6:0b:e2:76:31:28:3f:a7:bd:1b: ca:9d:36:3f:ef:1c:79:71:e9:01:b5:8c:df:a0:d6: 24:c8:0c:6a:2c:4f:7f:43:8a:71:8f:76:19:a2:3a: 6a:34:6f:bc:b7:77:eb:d2:e0:8b:82:9e:65:95:70: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.253.80.0/21 198.252.202.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25945 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:14:00:93:90:9b:6e:74:0b:f2:43:b6:e7:ac:9e:c3:d6:14: 0f:68:59:63:37:68:83:59:33:c1:e9:4b:10:67:f0:9b:0c:9b: 22:97:68:a7:a8:8c:c4:67:4c:ff:61:2b:c1:c7:11:15:d5:a6: f8:21:35:19:9a:4e:f7:ee:60:85:a2:02:a1:f4:93:f8:2c:09: 74:b9:76:fe:28:c4:29:95:25:79:78:ce:20:44:fd:5a:cd:6b: 18:5d:4a:1e:06:17:7b:00:49:a0:01:99:5c:54:f5:c5:6d:c4: 1f:c9:d7:a7:ca:ac:d9:82:1a:2b:8d:de:3f:59:17:4f:b0:69: 9e:13:ff:44:42:9e:56:b4:ed:e6:12:4a:bf:56:19:e9:ef:96: b5:73:f0:dc:16:bf:80:a5:10:45:4d:a1:0f:cd:85:b6:ec:ce: 6e:cb:04:9b:73:49:b0:69:d5:37:30:2b:6e:95:38:8a:94:20: e4:b9:d2:db:cb:7e:a9:48:f7:ea:11:32:57:9e:49:07:9d:14: de:2b:03:74:70:c2:00:84:e4:55:31:59:27:ca:bb:5b:f2:33: a0:fd:9f:9b:80:7c:40:1b:6f:f0:cd:96:9d:70:34:48:30:6b: 39:10:e4:68:eb:be:93:96:c4:bd:c7:6f:86:1f:27:9b:45:47: 22:a5:4e:e1 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEHkg0nNocCh7yBp7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNTE5MDYzOVowLzEtMCsGA1UEAxMk YzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgyZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rYRamUm+ckTzILUmCmaRINnQJ24Ff5kZDPL +npQY8uJ4g1H1La3cg2JT1/ySgA+pGqE8lMAx+iWfBzO5WB3CRoXOjvf0nSCeAN4 Fjcuomnu4Ju0U6MgZ0wRpcCxw9yAno3bwalmuh0kAX7ScX7pzRcJTierCOhoE+v4 4XPlI3UaW4XqyDU96LFGpeOsIk4HCsVfjZqTW0wWaYavU3imEzZJFkqkjvWzdpQH VrjQ8Ucydn22FcuH2qRTIjEMHvGn1sbzfWpN5fYL4nYxKD+nvRvKnTY/7xx5cekB tYzfoNYkyAxqLE9/Q4pxj3YZojpqNG+8t3fr0uCLgp5llXBLvwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBsT/MholTtTqPzouUuLBCOXSlLRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j OGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M4YzMwMWFiLTdkMjItNDZjMy04 MjExLWY2MzczZWM4MmQ1YS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2Vj ODJkNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOi/VADBAHG/MowGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZVkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAWRQAk5CbbnQL8kO256yew9YUD2hZYzdog1kzwelL EGfwmwybIpdop6iMxGdM/2ErwccRFdWm+CE1GZpO9+5ghaICofST+CwJdLl2/ijE KZUleXjOIET9Ws1rGF1KHgYXewBJoAGZXFT1xW3EH8nXp8qs2YIaK43eP1kXT7Bp nhP/REKeVrTt5hJKv1YZ6e+WtXPw3Ba/gKUQRU2hD82FtuzObssEm3NJsGnVNzAr bpU4ipQg5LnS28t+qUj36hEyV55JB50U3isDdHDCAITkVTFZJ8q7W/IzoP2fm4B8 QBtv8M2WnXA0SDBrORDkaOu+k5bEvcdvhh8nm0VHIqVO4Q== -----END CERTIFICATE-----Generated at Fri Apr 19 16:27:07 2024 by rpki-client on console-ams.rpki-client.org