$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer File: d90d18d1-dead-4d11-bed3-243759e40831.cer (raw, json) Hash identifier: JFIoOUJcB3ZBa1/lwmqp7hUb/awZCpZRVAV1tIWoHZs= Subject key identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285843BFC362169B8F739A86D43700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Nov 2023 00:45:16 +0000 Certificate not after: Wed 04 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 16668 IP: 168.245.132.0/23 IP: 168.245.232.0/23 IP: 208.72.84.0/22 IP: 216.41.142.0/24 IP: 2610:178::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:bf:c3:62:16:9b:8f:73:9a:86:d4:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 2 00:45:16 2023 GMT Not After : Feb 4 01:45:16 2026 GMT Subject: CN=d90d18d1-dead-4d11-bed3-243759e40831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:f5:c4:c0:c4:09:af:da:93:e3:58:15:7c: 66:2a:a3:d3:22:bc:79:06:f3:f7:eb:66:c2:bb:20: f9:16:5a:8f:51:ba:e8:72:88:88:50:da:30:29:5c: f6:96:22:6a:69:24:ef:1d:ca:4b:be:81:89:65:62: d0:00:8d:3a:eb:ad:71:71:b6:40:59:79:01:b8:ae: 0f:e2:47:33:94:8d:cd:38:7d:21:d9:0d:9b:c9:89: a7:20:f0:a2:a1:b3:37:8e:63:48:78:70:86:41:40: db:a9:c4:54:c2:bd:c9:a1:2b:03:8c:32:35:1a:b7: 66:3d:df:c1:ab:c9:10:61:c9:83:7a:53:49:13:2a: a0:01:08:6a:a9:df:8a:17:ce:bc:13:10:b9:ec:c0: 03:05:e6:10:1e:9e:0f:01:d0:a1:64:14:f9:aa:b2: 73:5c:d0:c2:a0:cd:a3:5e:94:b1:48:5c:ce:94:63: b9:44:1e:98:53:0f:50:bd:94:c8:ed:6a:f7:95:f1: 40:65:25:2b:ee:27:09:6b:1d:55:7f:70:8e:89:c1: bb:d4:cd:de:b2:d9:21:ab:2d:5a:7b:36:cf:44:29: 62:f8:48:6a:90:83:7d:08:fe:7d:29:47:9a:b3:5f: b4:f3:23:d9:70:ab:84:13:c2:36:8e:f1:39:25:d9: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 168.245.132.0/23 168.245.232.0/23 208.72.84.0/22 216.41.142.0/24 IPv6: 2610:178::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16668 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f3:24:05:d2:62:f4:ab:8f:e7:b7:6f:51:e4:25:00:ab:bb: 18:dd:f7:0e:d9:df:68:bf:93:63:6d:3c:60:0d:e5:f5:dc:c7: 2a:8e:c7:96:81:04:90:34:b1:1d:7c:5e:a1:2e:e4:31:07:1c: 40:ab:3d:2e:bd:a5:a4:6a:86:6d:86:12:9b:69:1a:f4:38:3d: 35:9f:c6:1c:a7:14:1f:f4:4c:9f:f1:03:c4:66:71:08:b8:46: c4:47:4f:61:4b:0b:0a:bb:f1:99:fd:69:39:70:87:28:ee:35: 98:6f:30:f8:2a:ef:1e:49:2f:be:4b:ef:e2:b2:09:de:34:fa: c0:6c:cb:de:7d:db:52:d5:b6:53:24:dd:4c:88:ea:95:63:0f: 1c:b4:c2:c8:ff:7b:93:ba:f8:18:99:88:d9:3a:3d:be:72:7f: a2:16:ff:94:bb:0f:b2:e6:50:8d:06:a4:69:a7:eb:ea:1b:38: df:a8:3e:0e:05:d1:8f:90:9c:8d:94:0d:41:c0:91:02:ab:a3: 23:c1:35:64:33:7e:4c:10:c7:f8:ed:3d:c6:79:c2:1f:09:5d: b6:3b:8a:3c:eb:bc:b8:8b:97:f8:9d:9a:de:bd:9e:f6:4d:f4: 63:a1:41:3a:2f:ce:98:ac:f9:31:24:01:85:42:77:ed:3d:36: 5a:1d:45:d0 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEO/w2IWm49zmobUNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMTEwMjAwNDUxNloXDTI2MDIwNDAxNDUxNlowLzEtMCsGA1UEAxMk ZDkwZDE4ZDEtZGVhZC00ZDExLWJlZDMtMjQzNzU5ZTQwODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUP1xMDECa/ak+NYFXxmKqPTIrx5BvP362bC uyD5FlqPUbrocoiIUNowKVz2liJqaSTvHcpLvoGJZWLQAI06661xcbZAWXkBuK4P 4kczlI3NOH0h2Q2byYmnIPCiobM3jmNIeHCGQUDbqcRUwr3JoSsDjDI1GrdmPd/B q8kQYcmDelNJEyqgAQhqqd+KF868ExC57MADBeYQHp4PAdChZBT5qrJzXNDCoM2j XpSxSFzOlGO5RB6YUw9QvZTI7Wr3lfFAZSUr7icJax1Vf3COicG71M3estkhqy1a ezbPRCli+EhqkIN9CP59KUeas1+08yPZcKuEE8I2jvE5JdnQPwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFGEyVS8R8CYFK/VfrsrKxKeacFm4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k OTBkMThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3NTllNDA4MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q5MGQxOGQxLWRlYWQtNGQxMS1i ZWQzLTI0Mzc1OWU0MDgzMS9kOTBkMThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3NTll NDA4MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAGo9YQDBAGo9egDBALQSFQDBADYKY4wDQQCAAIw BwMFACYQAXgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICQRwwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAivMk BdJi9KuP57dvUeQlAKu7GN33DtnfaL+TY208YA3l9dzHKo7HloEEkDSxHXxeoS7k MQccQKs9Lr2lpGqGbYYSm2ka9Dg9NZ/GHKcUH/RMn/EDxGZxCLhGxEdPYUsLCrvx mf1pOXCHKO41mG8w+CrvHkkvvkvv4rIJ3jT6wGzL3n3bUtW2UyTdTIjqlWMPHLTC yP97k7r4GJmI2To9vnJ/ohb/lLsPsuZQjQakaafr6hs436g+DgXRj5CcjZQNQcCR AqujI8E1ZDN+TBDH+O09xnnCHwldtjuKPOu8uIuX+J2a3r2e9k30Y6FBOi/OmKz5 MSQBhUJ37T02Wh1F0A== -----END CERTIFICATE-----Generated at Thu Apr 18 22:04:51 2024 by rpki-client on console-fra.rpki-client.org