$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer File: d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer (raw, json) Hash identifier: judapoCOTmBHZuL43rgTaUiaxPB3Up24sQj+ghtJScU= Subject key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841F8B5E14531C6EC5D07F0B600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 May 2023 00:45:15 +0000 Certificate not after: Mon 25 Aug 2025 00:45:15 +0000 Subordinate resources: AS: 393444 IP: 72.46.112.0/20 IP: 207.162.208.0/20 IP: 2605:e8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:f8:b5:e1:45:31:c6:ec:5d:07:f0:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 23 00:45:15 2023 GMT Not After : Aug 25 00:45:15 2025 GMT Subject: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:a0:51:35:df:7c:a8:90:14:df:e0:41:12: 15:47:6a:31:4a:cb:13:1b:8c:fb:38:c3:8f:2e:b7: bb:e2:bb:d5:0c:33:59:31:4c:fd:ea:47:f7:f0:85: 73:b9:8a:2a:8b:b3:ab:2b:45:00:9c:2a:a9:b5:7d: df:25:dc:cc:92:37:92:53:ef:84:56:1d:59:f7:dd: d4:7f:2d:19:cc:8f:5f:3a:a1:8a:bb:a6:ac:ba:68: ea:48:db:e5:4d:58:cf:23:87:23:cf:46:f7:a5:a5: da:8a:b2:d7:2d:d1:a7:7d:3d:a4:87:ab:3b:b7:04: f5:67:56:f0:9d:7a:e7:64:29:cc:66:5b:16:21:66: fe:6e:ac:2d:d6:f4:2a:2d:10:64:98:3e:db:97:88: a1:a1:75:27:f8:83:7b:e1:3b:d5:09:76:10:23:0d: 65:d9:29:00:bb:49:af:7b:78:65:6b:d5:0b:0f:cd: fd:fb:3f:7d:b2:c2:bf:2f:42:e9:21:40:3d:df:29: 05:25:76:a7:78:88:4c:d0:a4:1b:80:ca:be:c4:ac: 48:c3:e5:7b:02:cf:cb:87:94:36:2f:1b:11:68:7e: 18:90:3f:27:0f:ca:51:95:dd:01:6d:e5:20:a8:4d: ff:d8:bc:32:20:21:af:b3:67:95:f5:45:53:83:96: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 72.46.112.0/20 207.162.208.0/20 IPv6: 2605:e8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393444 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:90:95:b8:47:33:26:a6:43:96:1d:6d:a7:81:20:52:da:13: 70:91:2d:35:ea:0a:ba:0b:77:aa:20:8a:ce:22:7e:dd:40:eb: b5:f2:e3:2f:7b:f8:4e:88:7c:11:77:5e:8f:f2:ec:84:50:23: 62:48:a4:10:30:96:f8:2a:a9:59:58:05:30:3c:0c:f8:cd:30: 22:f1:97:ad:dc:29:b9:66:dd:71:54:a2:d9:4a:7e:00:92:ce: 7e:41:8b:6e:3a:85:8a:47:2c:13:09:6e:c9:0e:e1:c7:3e:34: e8:57:87:10:8b:e4:29:ce:fa:21:5e:f9:58:da:8a:c0:a7:c8: a8:48:6b:a0:a5:d9:a7:ce:2c:94:7b:99:24:6f:c6:b4:08:a9: 98:2b:50:32:65:3a:9b:f1:15:13:13:8f:a3:e0:94:93:3a:ff: a7:75:fd:90:a5:d1:97:0f:c9:14:86:cb:50:77:f4:f5:b4:e4: 0c:a9:33:df:0d:e2:7c:fe:13:95:b3:8e:6b:45:89:39:20:2e: a8:33:13:0c:99:0b:31:62:f5:16:f5:3d:98:77:d0:ec:36:28: 54:a5:43:69:a4:0c:76:82:2f:68:9c:3a:d8:ae:d1:e0:44:7a: ae:be:52:26:bc:00:9e:14:d4:d5:c7:1d:52:db:9f:e3:22:b7: 39:3b:2b:2d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEH4teFFMcbsXQfwtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUyMzAwNDUxNVoXDTI1MDgyNTAwNDUxNVowLzEtMCsGA1UEAxMk ZDNiNzA3YWItYjRhNi00MmRlLWE3YmMtNjExNWNhNGIzYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKgUTXffKiQFN/gQRIVR2oxSssTG4z7OMOP Lre74rvVDDNZMUz96kf38IVzuYoqi7OrK0UAnCqptX3fJdzMkjeSU++EVh1Z993U fy0ZzI9fOqGKu6asumjqSNvlTVjPI4cjz0b3paXairLXLdGnfT2kh6s7twT1Z1bw nXrnZCnMZlsWIWb+bqwt1vQqLRBkmD7bl4ihoXUn+IN74TvVCXYQIw1l2SkAu0mv e3hla9ULD839+z99ssK/L0LpIUA93ykFJXaneIhM0KQbgMq+xKxIw+V7As/Lh5Q2 LxsRaH4YkD8nD8pRld0BbeUgqE3/2LwyICGvs2eV9UVTg5bk5wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFHyRxn8bR75s+zIyUO8HUmn0Va7AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k M2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0YjNiM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QzYjcwN2FiLWI0YTYtNDJkZS1h N2JjLTYxMTVjYTRiM2IzZS9kM2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0 YjNiM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARILnADBATPotAwDQQCAAIwBwMFACYF6MAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgDkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFqQlbhHMyamQ5YdbaeB IFLaE3CRLTXqCroLd6ogis4ift1A67Xy4y97+E6IfBF3Xo/y7IRQI2JIpBAwlvgq qVlYBTA8DPjNMCLxl63cKblm3XFUotlKfgCSzn5Bi246hYpHLBMJbskO4cc+NOhX hxCL5CnO+iFe+VjaisCnyKhIa6Cl2afOLJR7mSRvxrQIqZgrUDJlOpvxFRMTj6Pg lJM6/6d1/ZCl0ZcPyRSGy1B39PW05AypM98N4nz+E5WzjmtFiTkgLqgzEwyZCzFi 9Rb1PZh30Ow2KFSlQ2mkDHaCL2icOtiu0eBEeq6+Uia8AJ4U1NXHHVLbn+Mitzk7 Ky0= -----END CERTIFICATE-----Generated at Fri Apr 26 11:16:08 2024 by rpki-client on console-ams.rpki-client.org