$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer File: f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer (raw, json) Hash identifier: ac2LaHcgO015ryPL0KeifZ4OIp5vdYIreSML78SWdiI= Subject key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858456DB0C5F1C3387A81E4745C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 00:45:21 +0000 Certificate not after: Wed 08 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 62827 IP: 158.51.232.0/22 IP: 198.17.211.0/24 IP: 198.96.5.0/24 IP: 209.209.108.0/22 IP: 2620:7f:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6d:b0:c5:f1:c3:38:7a:81:e4:74:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 4 00:45:21 2024 GMT Not After : Jul 8 00:45:21 2026 GMT Subject: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:62:f2:c6:a9:e2:42:78:66:37:31:cb:2d: 23:84:0c:ec:5d:15:4a:19:7e:ab:8f:14:49:31:1a: dd:38:b5:6f:04:1d:d4:2e:bd:dc:b6:33:78:7e:75: 54:f6:ec:f8:1c:05:4e:fb:eb:7e:85:8e:68:03:2c: 8b:a6:1c:37:59:f4:21:4e:c7:f1:28:89:44:7c:c3: 7a:d6:58:5d:63:92:f9:7e:ff:69:a3:15:e9:30:63: 22:cc:0d:db:0f:e4:6d:3b:b7:49:f1:06:b2:25:b4: 71:30:41:0f:97:eb:7a:40:17:e1:f8:6a:45:45:68: 33:f0:74:e1:2e:bd:34:53:b0:23:b8:cc:60:1f:fd: ef:cd:2c:9c:3e:4b:16:63:9f:b8:40:f3:75:58:4d: 3b:af:b7:dd:4c:07:56:8b:e1:42:a3:9b:8e:ea:08: 6f:e9:0f:25:62:e6:e6:34:8d:0e:45:e2:ff:b7:a4: 21:7c:c7:53:2a:13:57:a3:a5:f6:08:31:a9:86:53: 1b:e4:4d:12:e6:0a:e7:2a:de:3e:40:37:e1:12:86: 78:31:60:77:4f:59:b8:0e:2a:79:0e:79:4d:d2:df: 71:70:3e:8f:2b:eb:a5:1d:a7:4d:a4:57:72:df:19: 2a:de:37:c2:2e:b2:3b:16:63:f3:37:2c:25:0a:23: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 158.51.232.0/22 198.17.211.0/24 198.96.5.0/24 209.209.108.0/22 IPv6: 2620:7f:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62827 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b7:e0:57:cc:63:d3:a8:ad:0f:e9:ef:38:90:c9:62:8a:b5: bc:52:cf:3f:14:70:91:af:05:e2:ca:f6:12:98:5c:96:f6:10: 07:46:c9:06:19:3c:7e:a9:fd:94:43:17:0a:70:75:64:44:ce: 4d:e0:de:81:72:67:3a:84:38:a3:0f:2d:ec:41:20:5b:90:10: 21:0c:55:e9:d7:53:69:b5:94:88:87:97:73:b4:2a:ba:c6:90: ed:5f:3d:96:8a:47:41:ae:ca:0e:f9:2c:ea:22:1e:08:37:d6: 62:13:02:a5:9a:54:22:08:9b:f6:9f:e7:7b:0d:0d:56:b3:2a: 54:85:4b:28:54:6a:f5:a4:97:83:cd:10:45:33:0d:1a:4d:e5: 97:24:87:be:06:98:1e:62:27:cd:94:73:e0:de:50:58:10:5a: 65:0d:06:d9:18:67:bd:5e:d4:de:e6:f6:06:9c:90:fb:3a:b3: d8:49:95:ed:9b:7e:d8:f6:42:32:b4:d2:40:38:a6:6a:e6:68: 55:07:31:34:b1:23:50:9f:61:33:3f:47:b7:44:2a:16:8a:2a: 22:28:9b:a5:62:71:84:c6:72:4d:3c:27:84:07:2e:63:2a:2a: 3a:ee:cc:c6:25:c3:a5:84:fc:7c:f1:77:1a:78:25:61:c0:69: b0:e3:50:a5 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEVtsMXxwzh6geR0XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDQwNDAwNDUyMVoXDTI2MDcwODAwNDUyMVowLzEtMCsGA1UEAxMk ZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2FkNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVti8sap4kJ4Zjcxyy0jhAzsXRVKGX6rjxRJ MRrdOLVvBB3ULr3ctjN4fnVU9uz4HAVO++t+hY5oAyyLphw3WfQhTsfxKIlEfMN6 1lhdY5L5fv9poxXpMGMizA3bD+RtO7dJ8QayJbRxMEEPl+t6QBfh+GpFRWgz8HTh Lr00U7AjuMxgH/3vzSycPksWY5+4QPN1WE07r7fdTAdWi+FCo5uO6ghv6Q8lYubm NI0OReL/t6QhfMdTKhNXo6X2CDGphlMb5E0S5grnKt4+QDfhEoZ4MWB3T1m4Dip5 DnlN0t9xcD6PK+ulHadNpFdy3xkq3jfCLrI7FmPzNywlCiMOHQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFHtgFv0iea3sTtSg59vcjeOFc6cGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m MDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2YwNGJjN2ZkLTUzMzQtNDVlZS05 YTQ4LTNmZmIxMTdhZDRmMy9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3 YWQ0ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMB4EAgABMBgDBAKeM+gDBADGEdMDBADGYAUDBALR0WwwDwQCAAIw CQMHACYgAH+gADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9WswVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA mrfgV8xj06itD+nvOJDJYoq1vFLPPxRwka8F4sr2EphclvYQB0bJBhk8fqn9lEMX CnB1ZETOTeDegXJnOoQ4ow8t7EEgW5AQIQxV6ddTabWUiIeXc7QqusaQ7V89lopH Qa7KDvks6iIeCDfWYhMCpZpUIgib9p/new0NVrMqVIVLKFRq9aSXg80QRTMNGk3l lySHvgaYHmInzZRz4N5QWBBaZQ0G2RhnvV7U3ub2BpyQ+zqz2EmV7Zt+2PZCMrTS QDimauZoVQcxNLEjUJ9hMz9Ht0QqFooqIiibpWJxhMZyTTwnhAcuYyoqOu7MxiXD pYT8fPF3GnglYcBpsONQpQ== -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:47 2024 by rpki-client on console-fra.rpki-client.org