$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer File: d25f3fa9-8b52-4f17-8aca-6740ded73683.cer (raw, json) Hash identifier: cWvGfAG54dGkOccK0drZX2ig+Gtq99xKN9MsKzOeCJY= Subject key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858458C664BCFE513063BE0827680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Apr 2024 00:45:21 +0000 Certificate not after: Sun 19 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 399487 IP: 104.166.109.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8c:66:4b:cf:e5:13:06:3b:e0:82:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 15 00:45:21 2024 GMT Not After : Jul 19 00:45:21 2026 GMT Subject: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:fb:b3:c3:8f:94:a8:1d:9b:a3:e5:62:35: 67:ba:0c:88:38:36:24:58:59:d8:f4:52:e8:e8:10: b1:aa:cc:61:73:5c:4e:06:0a:a4:9c:44:b4:b2:40: ad:0c:6b:fe:d8:11:8e:a5:19:f2:4d:95:79:fd:b7: 63:6d:0d:fe:b0:70:24:71:00:92:e9:1a:62:e5:14: a4:ad:9d:a3:69:21:43:22:22:a0:ca:7e:f8:9b:69: e9:4e:08:95:53:e7:bd:45:5c:90:f0:74:8f:e3:78: 6b:db:19:99:ac:59:c1:54:8e:6e:c8:2c:e5:47:ea: b3:19:8f:33:4d:e4:93:fb:f8:be:2a:59:0d:0e:40: 07:22:bf:fe:32:49:6a:9a:f9:21:80:39:ab:60:c4: 6a:2d:ca:3d:54:b1:e1:b8:b3:69:ad:2e:59:bc:9f: d1:d6:9d:70:0e:d6:ab:39:39:37:b5:1e:cb:e8:0f: 1f:9e:45:c2:72:ac:12:c8:d6:30:cf:3b:b1:a7:70: fb:2c:16:7a:90:5c:5f:5d:ce:3e:47:f9:87:43:5c: f8:97:00:86:86:23:e1:b3:d5:68:43:80:e3:4f:dd: de:f7:ca:6f:4e:a6:0c:fb:bb:45:57:e8:f6:09:d2: 60:a4:11:40:3a:93:af:1c:da:5f:08:98:bc:cb:3f: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4a:39:2e:fa:7f:c2:e0:48:ba:23:27:01:b3:28:ff:2c:4c: 80:4e:7a:1d:a2:ab:73:1d:72:39:b6:ee:c2:b1:bd:68:de:03: 16:03:d3:4d:39:5e:6f:4a:e3:a2:54:ba:d5:77:08:50:00:fc: 82:d8:a4:96:87:b0:2b:94:1b:15:30:7d:64:bb:41:31:35:0d: 60:b8:4a:53:c0:1e:4c:df:18:f9:1e:70:e2:54:7d:f2:54:57: a5:96:a9:51:ec:32:4d:ac:72:47:03:e8:82:d2:96:3b:36:ee: 10:84:45:9f:61:9b:78:9d:68:5d:02:1f:28:2f:65:73:76:1b: d0:29:86:94:3c:d1:f1:ac:4b:db:eb:16:73:7a:b6:40:23:1c: 58:27:2c:c1:b4:2d:7d:26:18:3f:3b:3a:21:1c:ac:94:bd:dc: 9f:a6:df:ba:c6:fc:e5:6b:39:ca:a2:7b:43:d4:e0:da:4b:9e: 2a:ed:ed:ed:9d:53:ca:d8:06:9b:e3:55:21:20:1f:da:7d:1a: 69:ef:40:29:20:6a:e5:31:0f:d0:75:36:cd:b1:ea:08:93:65: 6a:82:0b:a1:75:d1:e4:9e:69:79:ed:2e:ac:e8:6b:00:64:dc: 6b:a5:6c:13:a2:0e:4a:77:2a:84:32:38:b4:7c:a3:f8:8e:27: d8:66:22:20 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEWMZkvP5RMGO+CCdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDQxNTAwNDUyMVoXDTI2MDcxOTAwNDUyMVowLzEtMCsGA1UEAxMk ZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDczNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyun7s8OPlKgdm6PlYjVnugyIODYkWFnY9FLo 6BCxqsxhc1xOBgqknES0skCtDGv+2BGOpRnyTZV5/bdjbQ3+sHAkcQCS6Rpi5RSk rZ2jaSFDIiKgyn74m2npTgiVU+e9RVyQ8HSP43hr2xmZrFnBVI5uyCzlR+qzGY8z TeST+/i+KlkNDkAHIr/+MklqmvkhgDmrYMRqLco9VLHhuLNprS5ZvJ/R1p1wDtar OTk3tR7L6A8fnkXCcqwSyNYwzzuxp3D7LBZ6kFxfXc4+R/mHQ1z4lwCGhiPhs9Vo Q4DjT93e98pvTqYM+7tFV+j2CdJgpBFAOpOvHNpfCJi8yz/tIQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFI61hJpwThGwRmutndNbe/wR8LE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QyNWYzZmE5LThiNTItNGYxNy04 YWNhLTY3NDBkZWQ3MzY4My9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVk NzM2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABopm0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhh/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHRKOS76f8LgSLojJwGzKP8sTIBOeh2iq3Mdcjm27sKxvWje AxYD0005Xm9K46JUutV3CFAA/ILYpJaHsCuUGxUwfWS7QTE1DWC4SlPAHkzfGPke cOJUffJUV6WWqVHsMk2sckcD6ILSljs27hCERZ9hm3idaF0CHygvZXN2G9AphpQ8 0fGsS9vrFnN6tkAjHFgnLMG0LX0mGD87OiEcrJS93J+m37rG/OVrOcqie0PU4NpL nirt7e2dU8rYBpvjVSEgH9p9GmnvQCkgauUxD9B1Ns2x6giTZWqCC6F10eSeaXnt LqzoawBk3GulbBOiDkp3KoQyOLR8o/iOJ9hmIiA= -----END CERTIFICATE-----Generated at Tue Apr 16 15:01:54 2024 by rpki-client on console-ams.rpki-client.org