$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer File: de0cc6bd-e920-421b-822f-9be354b0d759.cer (raw, json) Hash identifier: uqrr9mckkfiQzKRGtSivgoLckWWT9bDwzktCRWmvl9s= Subject key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858456725AF39773F605299A55500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Apr 2024 16:30:16 +0000 Certificate not after: Sat 07 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 399888 IP: 45.45.224.0/22 IP: 208.75.128.0/22 IP: 2602:fc52::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:25:af:39:77:3f:60:52:99:a5:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 1 16:30:16 2024 GMT Not After : Feb 7 01:45:16 2026 GMT Subject: CN=de0cc6bd-e920-421b-822f-9be354b0d759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:e7:43:15:57:d2:37:45:77:66:95:99:31: dc:f8:21:64:06:df:51:b5:f2:c1:a9:bf:f3:bb:d1: fd:5a:7b:9f:45:05:9e:d2:69:b5:6b:ed:1b:94:59: 26:f1:5d:13:f0:21:64:db:09:67:fd:23:44:09:43: ea:1c:a3:f4:db:7c:ad:22:a4:45:39:65:ce:ef:e1: 26:05:b2:7b:86:42:fd:7b:01:a6:29:64:b0:70:96: e1:1f:a4:71:2d:64:33:62:fc:a9:85:2a:cf:da:1b: bd:25:ee:cf:67:ca:9f:cc:96:86:0c:c8:a7:82:13: 58:6a:cd:7c:8f:ed:93:16:8e:ec:cf:d6:96:58:df: 8f:45:21:c3:34:4d:df:85:47:a2:0c:53:1c:cf:c9: 83:32:3f:0b:03:4a:53:02:fb:1d:02:93:70:77:f4: f0:b9:41:44:48:2b:f5:d8:07:f4:c3:b3:b3:23:77: 6d:00:22:f4:26:6f:fb:ec:05:0b:bc:0a:9f:9d:b5: 14:84:ee:06:b3:d7:dc:c3:f8:1e:7a:71:b2:df:cb: f3:5a:16:0f:cb:9c:e4:31:ee:69:f6:25:82:77:78: e6:ce:07:5f:9b:a2:15:ec:39:21:54:cc:67:55:ab: ae:f2:c3:37:02:02:58:ac:a1:40:ab:c3:68:5f:38: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.45.224.0/22 208.75.128.0/22 IPv6: 2602:fc52::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:db:45:17:3d:b2:33:96:2a:5f:9a:31:e3:ef:38:09:f6:df: b5:74:15:18:70:46:71:56:89:99:44:e6:24:16:57:be:03:80: c3:ac:dd:78:4a:b9:84:34:15:ee:87:86:6b:b4:3e:ab:d6:7c: 92:7b:40:00:1a:5f:bc:40:46:24:ab:53:6a:c3:16:e0:d1:3e: d2:88:ec:40:2e:6d:3a:10:13:2f:c0:08:ce:e6:51:cb:87:4f: 1c:e1:4a:aa:de:56:9f:df:e1:8f:09:10:ab:f5:ce:e6:58:67: 85:1d:a4:4c:49:fb:96:a4:ee:1a:81:8b:ef:f5:60:f4:19:14: 98:75:45:12:06:6f:d7:c7:a1:98:05:4d:e7:0a:e8:39:50:43: 26:d6:da:fa:4c:05:99:32:5b:5d:72:9d:f8:68:f8:dc:c8:98: a6:68:55:bf:de:a5:6a:fb:db:ad:e4:eb:5a:3c:dc:47:15:f5: f1:6b:ee:9e:1d:c3:ba:9e:df:90:c5:e6:ce:d0:95:6c:74:5e: c1:04:b4:07:dd:cb:66:e6:e3:04:ca:84:f8:59:76:fc:7c:36: f1:de:d3:e5:09:d5:5d:a1:b4:11:f8:d8:2b:00:bf:36:4c:fd: 81:4d:dc:f7:72:48:1d:67:5f:60:fa:d8:87:63:0d:a4:e7:6a: a2:e2:69:1e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEVnJa85dz9gUpmlVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDQwMTE2MzAxNloXDTI2MDIwNzAxNDUxNlowLzEtMCsGA1UEAxMk ZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBkNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiXnQxVX0jdFd2aVmTHc+CFkBt9RtfLBqb/z u9H9WnufRQWe0mm1a+0blFkm8V0T8CFk2wln/SNECUPqHKP023ytIqRFOWXO7+Em BbJ7hkL9ewGmKWSwcJbhH6RxLWQzYvyphSrP2hu9Je7PZ8qfzJaGDMinghNYas18 j+2TFo7sz9aWWN+PRSHDNE3fhUeiDFMcz8mDMj8LA0pTAvsdApNwd/TwuUFESCv1 2Af0w7OzI3dtACL0Jm/77AULvAqfnbUUhO4Gs9fcw/geenGy38vzWhYPy5zkMe5p 9iWCd3jmzgdfm6IV7DkhVMxnVauu8sM3AgJYrKFAq8NoXzj5IQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFNDfBfrp24o3UnNqSGZ0U8ZoEHBYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k ZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RlMGNjNmJkLWU5MjAtNDIxYi04 MjJmLTliZTM1NGIwZDc1OS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRi MGQ3NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAItLeADBALQS4AwDgQCAAIwCAMGBCYC/FIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYaEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAc20UXPbIzlipfmjHj 7zgJ9t+1dBUYcEZxVomZROYkFle+A4DDrN14SrmENBXuh4ZrtD6r1nySe0AAGl+8 QEYkq1Nqwxbg0T7SiOxALm06EBMvwAjO5lHLh08c4Uqq3laf3+GPCRCr9c7mWGeF HaRMSfuWpO4agYvv9WD0GRSYdUUSBm/Xx6GYBU3nCug5UEMm1tr6TAWZMltdcp34 aPjcyJimaFW/3qVq+9ut5OtaPNxHFfXxa+6eHcO6nt+QxebO0JVsdF7BBLQH3ctm 5uMEyoT4WXb8fDbx3tPlCdVdobQR+NgrAL82TP2BTdz3ckgdZ19g+tiHYw2k52qi 4mke -----END CERTIFICATE-----Generated at Fri Apr 19 01:57:24 2024 by rpki-client on console-ams.rpki-client.org