$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer File: 576b0633-e844-4e36-85eb-6148d6321883.cer (raw, json) Hash identifier: Q4QS0/RscOK2B8KbEJ0lbyvZ73W+9IGQPdDzMtuh0Cc= Subject key identifier: 2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584863AD46BD60DA17120F4FD700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 13:01:03 +0000 Certificate not after: Tue 19 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 6296 AS: 11986 AS: 36012 IP: 66.178.160.0/20 IP: 69.9.128.0/19 IP: 74.51.16.0/20 IP: 139.60.24.0/21 IP: 162.244.36.0/22 IP: 162.247.40.0/21 IP: 216.115.0.0/20 IP: 2605:e00::/32 IP: 2606:c800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:ad:46:bd:60:da:17:12:0f:4f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 31 13:01:03 2024 GMT Not After : Jan 19 01:45:26 2027 GMT Subject: CN=576b0633-e844-4e36-85eb-6148d6321883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:54:c5:d5:c6:f1:bf:8f:5e:08:df:1c:aa: fe:fd:f9:97:1e:94:ce:c2:ef:42:ce:02:98:9b:32: 03:cf:3c:11:86:1f:82:e1:bf:8e:d4:cd:79:03:69: a9:d0:d0:7c:8d:7e:69:28:64:04:6a:ca:83:83:37: 03:d1:e8:dd:1b:6e:60:63:6d:f2:b8:f8:b8:19:de: 6b:c8:79:b1:2d:40:23:01:bc:01:1a:00:6f:af:b4: 76:82:16:d2:2d:ad:67:b3:20:28:f1:7c:de:e1:90: b2:5d:42:c0:eb:99:24:4a:5a:ca:f7:1d:fb:ac:d7: 92:3d:34:27:88:24:21:56:b2:d9:55:9e:c9:d8:9b: 9c:08:2c:9f:b9:68:0b:2d:8d:c7:5c:02:b0:dd:56: 93:db:b9:fc:29:6e:99:83:23:ae:6a:48:44:04:e7: ee:4d:c3:e7:b1:cb:dc:63:dd:39:8f:bb:4d:1a:d9: b3:83:44:c2:d0:27:07:ee:99:73:99:46:a1:1e:c1: d2:0a:14:7c:a3:11:2f:d1:6f:8f:7c:f8:b8:5d:f5: e4:bf:11:2b:f0:9d:b4:92:31:ff:41:22:ee:dc:f6: fd:9b:60:5b:ee:fc:70:81:7d:01:1d:99:56:04:1d: 82:92:2d:67:19:36:a8:74:64:b3:a1:36:a8:ed:9e: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 66.178.160.0/20 69.9.128.0/19 74.51.16.0/20 139.60.24.0/21 162.244.36.0/22 162.247.40.0/21 216.115.0.0/20 IPv6: 2605:e00::/32 2606:c800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6296 11986 36012 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:85:8f:c5:b1:96:24:91:dc:db:83:03:fe:02:da:b7:53:93: 44:b9:74:cd:42:7a:be:a3:85:2b:03:33:0a:76:fc:f2:1c:3c: 6a:4a:38:ac:83:8b:36:ea:37:93:31:e2:ea:9b:ff:b2:35:bc: 2c:ed:e5:9e:2f:af:39:ea:77:00:94:e0:32:e6:a8:6b:40:40: 3b:99:ae:b1:23:ca:1f:ee:31:86:29:29:9c:ac:2e:68:80:1e: 6f:d3:26:f6:78:a2:f4:7e:de:49:88:3f:ca:5a:d9:af:46:9f: 49:96:db:f9:a8:ed:a0:c2:91:e2:47:f2:57:9f:1d:e0:ab:bf: 09:32:ad:52:cf:1d:4b:00:45:7c:31:b8:49:36:22:0d:32:a8: 1e:72:73:d1:2f:38:9e:8e:91:9c:22:a7:57:62:d2:89:b6:f5: 05:54:23:dc:aa:ba:f7:3f:73:44:3c:a4:cc:3c:0e:f2:a7:87: 47:b4:b9:93:62:3d:50:da:18:19:fe:d7:2e:68:5e:af:17:8f: ae:53:6c:a7:7f:62:bf:aa:1c:c3:2f:70:b3:54:96:8e:2e:07: df:68:c0:db:20:22:bd:1e:31:1b:2e:e8:bc:39:28:bb:60:14: 82:5e:25:52:09:1c:ef:ed:05:7b:e4:03:d0:b7:cf:7d:47:fb: ce:77:4b:f0 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUAQ0Mn0MoWEhjrUa9YNoXEg9P1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIzMTEzMDEwM1oXDTI3MDExOTAxNDUyNlowLzEtMCsGA1UEAxMk NTc2YjA2MzMtZTg0NC00ZTM2LTg1ZWItNjE0OGQ2MzIxODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkFUxdXG8b+PXgjfHKr+/fmXHpTOwu9CzgKY mzIDzzwRhh+C4b+O1M15A2mp0NB8jX5pKGQEasqDgzcD0ejdG25gY23yuPi4Gd5r yHmxLUAjAbwBGgBvr7R2ghbSLa1nsyAo8Xze4ZCyXULA65kkSlrK9x37rNeSPTQn iCQhVrLZVZ7J2JucCCyfuWgLLY3HXAKw3VaT27n8KW6ZgyOuakhEBOfuTcPnscvc Y905j7tNGtmzg0TC0CcH7plzmUahHsHSChR8oxEv0W+PfPi4XfXkvxEr8J20kjH/ QSLu3Pb9m2Bb7vxwgX0BHZlWBB2Cki1nGTaodGSzoTao7Z5PNwIDAQABo4IEXTCC BFkwHQYDVR0OBBYEFCy13FU2V6vEgXgzRmBJhdm9cRtzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 NzZiMDYzMy1lODQ0LTRlMzYtODVlYi02MTQ4ZDYzMjE4ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU3NmIwNjMzLWU4NDQtNGUzNi04 NWViLTYxNDhkNjMyMTg4My81NzZiMDYzMy1lODQ0LTRlMzYtODVlYi02MTQ4ZDYz MjE4ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwWQYIKwYBBQUH AQcBAf8ESjBIMDAEAgABMCoDBARCsqADBAVFCYADBARKMxADBAOLPBgDBAKi9CQD BAOi9ygDBATYcwAwFAQCAAIwDgMFACYFDgADBQAmBsgAMCIGCCsGAQUFBwEIAQH/ BBMwEaAPMA0CAhiYAgIu0gIDAIysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABCFj8WxliSR3NuDA/4C2rdT k0S5dM1Cer6jhSsDMwp2/PIcPGpKOKyDizbqN5Mx4uqb/7I1vCzt5Z4vrznqdwCU 4DLmqGtAQDuZrrEjyh/uMYYpKZysLmiAHm/TJvZ4ovR+3kmIP8pa2a9Gn0mW2/mo 7aDCkeJH8lefHeCrvwkyrVLPHUsARXwxuEk2Ig0yqB5yc9EvOJ6OkZwip1di0om2 9QVUI9yquvc/c0Q8pMw8DvKnh0e0uZNiPVDaGBn+1y5oXq8Xj65TbKd/Yr+qHMMv cLNUlo4uB99owNsgIr0eMRsu6Lw5KLtgFIJeJVIJHO/tBXvkA9C3z31H+853S/A= -----END CERTIFICATE-----Generated at Sat Apr 5 10:02:15 2025 by rpki-client