$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer File: 07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer (raw, json) Hash identifier: DtLwyZENFkALFOwzrpRJ2snevRyus8/FJWSPKNwkThk= Subject key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858488973998005837BE27591F500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 01:45:33 +0000 Certificate not after: Mon 19 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 46723 IP: 23.178.80.0/24 IP: 199.83.26.0/23 IP: 2602:fc8b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:73:99:80:05:83:7b:e2:75:91:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 14 01:45:33 2025 GMT Not After : Apr 19 00:45:33 2027 GMT Subject: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:3f:aa:5a:5c:d1:37:47:b1:0d:8a:20:47: 5e:4e:24:66:92:d0:b0:c8:fa:6d:98:c8:27:2c:07: 6b:0e:3e:1f:52:f8:90:d6:64:11:6e:f2:4c:5e:04: 54:b0:e8:92:c9:fa:f6:a5:c9:97:4f:28:65:f2:ce: e2:0c:0b:8f:61:d3:92:ae:b6:be:53:ef:bb:df:c5: 89:0f:dd:d6:aa:ba:ac:3f:36:c1:75:8e:d4:fa:9f: dc:bf:06:e4:72:df:e5:39:fa:84:47:27:19:8c:1e: 89:7f:19:48:9f:b4:09:ae:e3:d9:9c:ee:fb:cc:f0: da:6f:27:c3:8e:bd:db:d8:6b:a6:1b:1f:63:02:dc: ab:f0:27:dc:ee:6e:1b:b7:2a:32:43:2b:99:59:5c: a9:01:af:b0:d9:a1:b9:b3:6c:4f:71:22:38:15:8b: 73:4e:66:26:a4:be:27:f4:7a:f6:7b:58:c3:b8:bd: fa:63:92:7f:04:48:83:a0:54:38:5b:b2:79:c6:dc: 8e:bf:c0:c8:63:e2:4e:4f:28:4d:fc:b9:8f:bb:da: 96:88:ef:00:af:d9:fa:8a:c5:d4:be:a5:c8:5c:60: 84:27:ca:6f:44:d0:d1:29:7f:db:4f:39:61:7f:f7: 97:af:ba:53:8b:56:7f:77:3f:1e:06:fe:61:67:e5: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.178.80.0/24 199.83.26.0/23 IPv6: 2602:fc8b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46723 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1c:47:e7:d4:98:6a:f2:68:6b:5c:8a:8a:be:cf:d7:5a:40: 97:bf:55:ba:15:da:55:8f:d1:86:15:07:d0:f6:89:17:92:a3: 6c:f5:e4:7f:85:bd:bc:5b:68:fe:92:16:df:d4:9f:f3:0e:5b: 9e:7e:42:c7:25:74:4e:5c:9d:0e:ab:a0:a1:65:16:6a:d9:39: e5:97:80:e6:94:7a:9e:5e:05:20:06:22:ca:b2:39:3b:25:07: 1e:6a:72:4a:33:1f:19:a7:b9:89:3d:14:8e:6f:bc:b3:bf:20: ad:a8:0e:bb:ce:80:d8:a9:fa:d4:e5:bb:1b:6e:3b:24:6d:b2: cd:ce:b1:e5:77:af:23:83:2c:38:31:b6:3d:48:bf:2e:9c:b5: e6:c9:49:31:d2:52:a7:23:89:af:0e:75:75:8d:54:6d:05:51: bf:85:29:0b:4e:af:0b:f3:a0:38:36:f6:c1:ca:69:50:89:6d: 1c:1c:4b:53:ee:24:27:39:0e:e1:d9:6f:46:71:30:00:8c:5a: f1:f0:71:e9:0f:e8:c8:f5:a4:ea:55:29:1d:f0:7d:a3:a3:47: 45:33:6f:c8:d1:3d:c5:f1:76:fa:fb:f2:c1:9e:21:ca:09:45: 62:37:2b:e6:ee:ce:fc:f9:95:81:86:bd:a7:cf:1f:24:4f:2a: e0:a7:9a:31 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEiJc5mABYN74nWR9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDExNDAxNDUzM1oXDTI3MDQxOTAwNDUzM1owLzEtMCsGA1UEAxMk MDdjYjE3ZDQtOTUwMi00ZDM4LWI1MWEtMDJhZTdiZjMxMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lc/qlpc0TdHsQ2KIEdeTiRmktCwyPptmMgn LAdrDj4fUviQ1mQRbvJMXgRUsOiSyfr2pcmXTyhl8s7iDAuPYdOSrra+U++738WJ D93WqrqsPzbBdY7U+p/cvwbkct/lOfqERycZjB6JfxlIn7QJruPZnO77zPDabyfD jr3b2GumGx9jAtyr8Cfc7m4btyoyQyuZWVypAa+w2aG5s2xPcSI4FYtzTmYmpL4n 9Hr2e1jDuL36Y5J/BEiDoFQ4W7J5xtyOv8DIY+JOTyhN/LmPu9qWiO8Ar9n6isXU vqXIXGCEJ8pvRNDRKX/bTzlhf/eXr7pTi1Z/dz8eBv5hZ+VRewIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMB98ykakY3N+jdjGe4oIs61iDQOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w N2NiMTdkNC05NTAyLTRkMzgtYjUxYS0wMmFlN2JmMzEzN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA3Y2IxN2Q0LTk1MDItNGQzOC1i NTFhLTAyYWU3YmYzMTM3Yi8wN2NiMTdkNC05NTAyLTRkMzgtYjUxYS0wMmFlN2Jm MzEzN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXslADBAHHUxowDgQCAAIwCAMGBCYC/IsAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC2gzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeHEfn1Jhq8mhrXIqK vs/XWkCXv1W6FdpVj9GGFQfQ9okXkqNs9eR/hb28W2j+khbf1J/zDluefkLHJXRO XJ0Oq6ChZRZq2Tnll4DmlHqeXgUgBiLKsjk7JQceanJKMx8Zp7mJPRSOb7yzvyCt qA67zoDYqfrU5bsbbjskbbLNzrHld68jgyw4MbY9SL8unLXmyUkx0lKnI4mvDnV1 jVRtBVG/hSkLTq8L86A4NvbBymlQiW0cHEtT7iQnOQ7h2W9GcTAAjFrx8HHpD+jI 9aTqVSkd8H2jo0dFM2/I0T3F8Xb6+/LBniHKCUViNyvm7s78+ZWBhr2nzx8kTyrg p5ox -----END CERTIFICATE-----Generated at Fri Apr 4 18:49:41 2025 by rpki-client