$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer File: 1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer (raw, json) Hash identifier: nY88HoZU1jSNZSBqkGGoc+DN2m1oiZ6GmVZOxQyQTQg= Subject key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848949E574CEF38B9FEC538F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Jan 2025 01:45:33 +0000 Certificate not after: Fri 23 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 26055 AS: 36776 IP: 66.234.2.0/23 IP: 74.114.192.0/22 IP: 139.138.108.0/22 IP: 147.124.160.0/19 IP: 162.213.152.0/22 IP: 198.105.200.0/21 IP: 205.196.0.0/24 IP: 208.69.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:9e:57:4c:ef:38:b9:fe:c5:38:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 18 01:45:33 2025 GMT Not After : Apr 23 00:45:33 2027 GMT Subject: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:17:6d:1b:d5:5c:91:2b:ec:65:c1:b5:de:16: 4b:fd:46:8e:78:ca:89:68:f3:d6:6b:3d:25:ed:8d: ff:a8:d6:2f:fe:ba:b3:a1:51:7a:84:0a:b5:2f:55: 4b:3d:ba:97:b6:7b:6a:02:d7:eb:b0:0a:6e:3d:d5: 12:cb:00:7f:da:8c:4c:f8:5c:40:b8:fb:54:40:78: 14:bf:38:00:95:e1:4a:e9:cc:7d:fa:84:0d:06:7a: b3:01:b2:ea:97:a5:88:c0:9d:cd:a7:b3:eb:33:eb: 53:bb:10:28:5e:f0:0b:ab:9b:3f:15:3c:12:73:6c: 58:e3:4a:f0:a5:90:25:c5:5a:ec:e4:b8:70:37:58: 88:92:24:b4:52:ca:e1:57:d8:48:34:67:51:26:f8: d1:81:9f:a7:05:30:7c:17:33:e2:d2:67:eb:23:24: e9:a2:a5:ba:06:08:ae:e9:a9:53:64:bf:23:14:54: ad:4b:22:2b:77:f2:3a:bc:d6:f4:31:bb:ea:5b:5b: 2d:35:62:ca:89:49:ed:6d:f8:af:ba:ef:e2:7e:f1: f2:eb:d9:a2:c2:17:87:b9:96:86:01:92:b3:04:c6: 10:ff:7c:a1:73:bb:03:dd:55:72:cf:2b:08:d2:9c: 18:5f:15:09:60:d2:da:c2:69:d1:00:f5:1d:91:14: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.234.2.0/23 74.114.192.0/22 139.138.108.0/22 147.124.160.0/19 162.213.152.0/22 198.105.200.0/21 205.196.0.0/24 208.69.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26055 36776 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a3:9e:6d:ba:e6:74:2e:27:c5:68:b0:cb:74:33:4a:97:e1: 83:6f:90:26:95:25:04:db:92:1a:5a:4c:bb:48:97:2a:8f:9f: 92:b0:52:75:63:66:1b:72:db:19:8a:cd:0f:5b:c8:d3:ff:c3: 65:60:da:04:e8:a6:b0:a4:40:09:2b:2d:c6:d6:67:50:42:1b: 9d:63:e5:c2:c5:11:cb:37:dc:98:1e:ae:6c:20:f4:cf:a2:70: 0d:d6:62:a3:1b:be:5c:96:ee:fe:10:41:e2:82:f4:32:4b:11: 58:25:6b:22:05:3c:62:7f:84:f6:f5:aa:13:b1:47:24:11:ae: e6:45:a4:f4:85:8f:6e:b6:55:c4:e8:18:ab:a3:d5:e3:34:43: 98:77:a9:25:c3:f5:93:52:2e:0b:15:79:9c:f5:c9:a6:d5:03: c2:a9:8b:55:0a:10:0c:8f:d3:7b:25:ba:7d:27:e4:fb:43:1e: f0:03:dc:01:8c:af:6d:b8:12:1a:fd:d1:e4:58:9d:69:92:ef: 2d:2b:44:c7:80:0e:06:b7:fb:8d:bc:67:3e:f8:3c:7e:0c:e3: f4:c8:e2:95:68:dd:5b:2b:b8:dd:47:29:b5:be:07:0a:d3:bf: 36:31:19:50:18:aa:8a:b0:59:c6:c8:07:1a:b1:43:14:3f:f7: 98:fb:52:4f -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEiUnldM7zi5/sU48wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDExODAxNDUzM1oXDTI3MDQyMzAwNDUzM1owLzEtMCsGA1UEAxMk MWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZkZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRdtG9VckSvsZcG13hZL/UaOeMqJaPPWaz0l 7Y3/qNYv/rqzoVF6hAq1L1VLPbqXtntqAtfrsApuPdUSywB/2oxM+FxAuPtUQHgU vzgAleFK6cx9+oQNBnqzAbLql6WIwJ3Np7PrM+tTuxAoXvALq5s/FTwSc2xY40rw pZAlxVrs5LhwN1iIkiS0UsrhV9hINGdRJvjRgZ+nBTB8FzPi0mfrIyTpoqW6Bgiu 6alTZL8jFFStSyIrd/I6vNb0MbvqW1stNWLKiUntbfivuu/ifvHy69miwheHuZaG AZKzBMYQ/3yhc7sD3VVyzysI0pwYXxUJYNLawmnRAPUdkRRRlQIDAQABo4IESTCC BEUwHQYDVR0OBBYEFBajATu1XwfqSPaX8kb5bMU1KmsaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x YWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04 YzFhLTZmODg2YmY2ZGYwNi8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJm NmRmMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBAFC6gIDBAJKcsADBAKLimwDBAWTfKADBAKi1ZgD BAPGacgDBADNxAADBALQRRwwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICZccCAwCP qDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB+o55tuuZ0LifFaLDLdDNKl+GDb5AmlSUE25IaWky7SJcqj5+S sFJ1Y2YbctsZis0PW8jT/8NlYNoE6KawpEAJKy3G1mdQQhudY+XCxRHLN9yYHq5s IPTPonAN1mKjG75clu7+EEHigvQySxFYJWsiBTxif4T29aoTsUckEa7mRaT0hY9u tlXE6Biro9XjNEOYd6klw/WTUi4LFXmc9cmm1QPCqYtVChAMj9N7Jbp9J+T7Qx7w A9wBjK9tuBIa/dHkWJ1pku8tK0THgA4Gt/uNvGc++Dx+DOP0yOKVaN1bK7jdRym1 vgcK0782MRlQGKqKsFnGyAcasUMUP/eY+1JP -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:51 2025 by rpki-client