$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer File: 17499469-12e7-4915-9db8-02bba626b87d.cer (raw, json) Hash identifier: 0Gsz7uZG0tdIaYmEjD/AY9q5eZKP3m8x/1NBpoEvG2Q= Subject key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A5E58C51DB695C48884AE7780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 00:45:36 +0000 Certificate not after: Mon 04 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 396432 IP: 147.185.148.0/22 IP: 194.107.70.0/23 IP: 202.36.180.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:58:c5:1d:b6:95:c4:88:84:ae:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 1 00:45:36 2025 GMT Not After : Oct 4 00:45:36 2027 GMT Subject: CN=17499469-12e7-4915-9db8-02bba626b87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:e5:8e:30:08:b8:cc:a0:25:26:e3:84:61: 64:db:ac:59:1c:91:be:77:0e:eb:72:78:d5:4b:46: 71:61:a3:2e:5f:7e:63:db:60:03:d5:bb:28:65:32: 68:e7:9b:d4:45:64:81:3c:56:0e:7b:01:41:24:f8: 31:d2:05:58:fa:f8:8c:8e:af:dd:7a:ba:9a:f0:f9: 80:87:b8:a2:75:63:1c:b1:4b:d3:a6:3f:10:e0:a1: 98:70:d3:c6:63:c2:a3:8b:24:7c:72:33:d6:57:57: a0:88:ed:06:99:91:c0:48:36:fc:47:30:d4:80:f7: b2:35:fe:7e:b0:51:53:7c:b6:ac:ae:97:16:14:bd: 13:6a:b5:cd:bf:7d:cd:45:9d:b1:4f:ef:76:50:2c: 8b:fe:6d:c0:17:c7:99:ae:96:f1:92:65:b6:32:83: 87:d6:0b:4b:02:e1:9e:75:d1:7d:30:d5:ef:8b:5e: 2f:fd:f1:86:b1:c5:b2:50:84:ee:8f:0b:95:1d:96: 66:04:b9:d4:a5:bf:7e:79:7e:ad:7c:d4:ef:c5:9f: 6b:02:c0:16:27:7e:7d:e2:7a:25:73:34:63:53:29: b8:8f:22:0f:3c:8d:36:36:ae:e3:27:69:31:64:8d: e8:e6:1d:c6:ce:ee:6c:6b:4d:bd:56:ed:c1:01:ee: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 147.185.148.0/22 194.107.70.0/23 202.36.180.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d7:4b:3d:c0:a5:39:02:b9:ac:e2:4b:dc:af:68:45:10:96: 49:34:40:2b:34:96:40:aa:a2:8c:d1:68:bd:65:cd:9a:06:40: 51:b6:84:bb:39:f3:59:0e:e4:32:35:0a:4a:b3:8c:c9:77:f0: f0:41:68:6a:2f:38:eb:a0:e5:c7:81:27:30:49:7b:f5:0a:86: 62:38:50:ca:68:86:f4:64:a5:b2:37:08:e9:32:1c:08:f5:d8: 09:e6:a8:00:c9:8b:b0:2f:fc:6b:b7:5d:f1:ea:7a:5c:c2:a7: e4:9c:15:9e:30:0a:73:51:62:30:eb:69:e2:6d:c9:f5:7c:96: ce:90:3c:54:1a:0f:d2:b2:51:82:79:e6:47:d1:55:c7:99:d3: 40:57:98:f6:d6:88:5d:df:14:d4:22:c5:a4:04:3e:73:81:73: df:81:29:43:c4:e3:a8:a1:6d:f5:6a:04:c1:33:62:61:73:26: 41:ae:59:f1:ef:aa:d9:d0:f6:4e:5d:57:b0:29:cd:df:a2:90: 26:89:b7:46:ea:4e:78:1e:cc:60:bf:6c:85:e6:dc:da:25:d0: 3b:61:9c:3c:02:65:14:f7:d4:21:84:1b:22:6e:f3:e8:dd:bd: 08:cd:6c:10:b7:45:92:e0:69:6e:19:d4:31:3d:cf:d9:d5:ec: 41:30:47:5b -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEpeWMUdtpXEiISud4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcwMTAwNDUzNloXDTI3MTAwNDAwNDUzNlowLzEtMCsGA1UEAxMk MTc0OTk0NjktMTJlNy00OTE1LTlkYjgtMDJiYmE2MjZiODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7ljjAIuMygJSbjhGFk26xZHJG+dw7rcnjV S0ZxYaMuX35j22AD1bsoZTJo55vURWSBPFYOewFBJPgx0gVY+viMjq/derqa8PmA h7iidWMcsUvTpj8Q4KGYcNPGY8KjiyR8cjPWV1egiO0GmZHASDb8RzDUgPeyNf5+ sFFTfLasrpcWFL0TarXNv33NRZ2xT+92UCyL/m3AF8eZrpbxkmW2MoOH1gtLAuGe ddF9MNXvi14v/fGGscWyUITujwuVHZZmBLnUpb9+eX6tfNTvxZ9rAsAWJ3594nol czRjUym4jyIPPI02Nq7jJ2kxZI3o5h3Gzu5sa029Vu3BAe7XLQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFG6JCORDOJZNSnnR7fxsgnFjPCYZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x NzQ5OTQ2OS0xMmU3LTQ5MTUtOWRiOC0wMmJiYTYyNmI4N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE3NDk5NDY5LTEyZTctNDkxNS05 ZGI4LTAyYmJhNjI2Yjg3ZC8xNzQ5OTQ2OS0xMmU3LTQ5MTUtOWRiOC0wMmJiYTYy NmI4N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKTuZQDBAHCa0YDBADKJLQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBgyQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGjXSz3ApTkCuaziS9yvaEUQlkk0QCs0 lkCqoozRaL1lzZoGQFG2hLs581kO5DI1CkqzjMl38PBBaGovOOug5ceBJzBJe/UK hmI4UMpohvRkpbI3COkyHAj12AnmqADJi7Av/Gu3XfHqelzCp+ScFZ4wCnNRYjDr aeJtyfV8ls6QPFQaD9KyUYJ55kfRVceZ00BXmPbWiF3fFNQixaQEPnOBc9+BKUPE 46ihbfVqBMEzYmFzJkGuWfHvqtnQ9k5dV7Apzd+ikCaJt0bqTngezGC/bIXm3Nol 0DthnDwCZRT31CGEGyJu8+jdvQjNbBC3RZLgaW4Z1DE9z9nV7EEwR1s= -----END CERTIFICATE-----Generated at Wed Jul 9 06:02:50 2025 by rpki-client