$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer File: 211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer (raw, json) Hash identifier: lmKWFwJvzHxQmTeItf8dgiwlS5lX1GnYjCSrIfyfv94= Subject key identifier: 7D:2F:41:96:29:85:4C:DF:5B:A6:BC:AC:E3:96:FC:EC:D1:26:31:10 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848C6DEA6936179F1DC31AE9380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Feb 2025 01:45:33 +0000 Certificate not after: Tue 11 May 2027 00:45:33 +0000 Subordinate resources: IP: 204.239.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:de:a6:93:61:79:f1:dc:31:ae:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 5 01:45:33 2025 GMT Not After : May 11 00:45:33 2027 GMT Subject: CN=211939ae-b8ba-4aba-a3aa-2491062ac9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:6b:e8:99:1e:ce:19:2b:65:94:8a:ce:13: b2:9d:5c:a5:ef:0e:7c:72:9a:af:fa:13:3a:ab:07: c1:9f:9f:1b:ff:57:92:bb:0e:57:00:7a:79:af:a3: d3:25:b5:85:1a:3d:b4:2f:f2:28:ce:60:b2:24:cb: f9:97:76:ce:01:55:94:e2:97:55:02:4b:e3:9e:18: e3:fb:c0:2f:ef:d0:9c:ee:c9:93:a0:d8:e1:af:90: e7:e8:53:b1:34:f3:2b:d7:da:d6:2e:46:50:b0:42: 7b:55:3c:cf:0b:a5:64:58:9f:bd:9d:ee:e7:cb:da: d9:81:e5:75:79:3d:cb:97:b4:40:74:60:e8:d1:dd: 3e:f8:a4:17:64:3b:8e:75:60:6f:36:dc:b3:21:48: 45:47:42:b5:6f:bc:9f:ee:a0:02:05:9f:cb:25:b5: ea:6c:2e:dd:9e:62:bd:78:56:9a:46:dc:fe:2d:4a: 32:a7:a1:e8:c3:19:d9:cc:d8:aa:6d:f1:5f:5e:bc: 03:cc:ec:08:2c:9b:3e:e1:1d:5e:39:ce:ec:80:be: 5d:ed:29:0e:e2:20:f4:aa:b5:6b:ff:89:4b:4b:03: d8:69:c7:c1:52:be:98:4c:ea:f7:48:4e:98:52:7a: dc:5b:4d:8a:70:ab:16:87:f1:50:fb:bc:1a:e7:8e: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:41:96:29:85:4C:DF:5B:A6:BC:AC:E3:96:FC:EC:D1:26:31:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 204.239.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e9:5a:6c:27:b5:b0:17:5f:a5:c8:b9:c7:ed:b1:b6:79:34: a3:77:92:83:38:36:9c:3b:06:6a:1d:48:51:b9:d4:fe:32:a7: 9f:16:ba:48:ac:0f:4c:2b:39:af:ca:3d:9c:b8:0b:04:89:ed: 9e:7f:0b:8e:2a:74:4d:a9:91:b2:b2:5b:64:59:10:11:83:99: 6c:b1:53:54:ad:34:c1:81:71:c6:3c:4c:ce:bd:9e:da:10:85: 07:72:94:17:ae:63:f4:f8:cb:e5:fb:41:93:f3:0e:67:64:d4: d2:32:5b:4a:de:eb:8c:dc:6b:08:8e:02:2c:df:ab:a0:7b:53: 17:bd:e5:df:fd:0e:1a:08:f8:fe:24:6e:a2:33:3b:37:1a:f1: b1:0c:e8:23:41:a0:a3:72:9e:94:b8:3b:5a:d0:10:a5:7c:d5: a5:52:be:92:6d:60:ce:b7:76:fd:68:a9:4e:1e:06:31:6e:04: 95:ff:3c:cd:9f:84:5e:92:1d:ff:4f:10:de:2d:d2:e6:cf:f9: 0c:ab:f9:e5:22:a7:81:eb:1d:07:75:25:fb:b0:2d:71:3e:99: 30:48:55:ea:cc:21:ec:22:1c:ed:10:56:67:ef:1f:1e:50:5f: b9:97:4c:03:d8:35:16:10:e2:65:d7:95:1f:b5:0a:a9:41:7e: be:d9:ba:8c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjG3qaTYXnx3DGuk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIwNTAxNDUzM1oXDTI3MDUxMTAwNDUzM1owLzEtMCsGA1UEAxMk MjExOTM5YWUtYjhiYS00YWJhLWEzYWEtMjQ5MTA2MmFjOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTJr6JkezhkrZZSKzhOynVyl7w58cpqv+hM6 qwfBn58b/1eSuw5XAHp5r6PTJbWFGj20L/IozmCyJMv5l3bOAVWU4pdVAkvjnhjj +8Av79Cc7smToNjhr5Dn6FOxNPMr19rWLkZQsEJ7VTzPC6VkWJ+9ne7ny9rZgeV1 eT3Ll7RAdGDo0d0++KQXZDuOdWBvNtyzIUhFR0K1b7yf7qACBZ/LJbXqbC7dnmK9 eFaaRtz+LUoyp6HowxnZzNiqbfFfXrwDzOwILJs+4R1eOc7sgL5d7SkO4iD0qrVr /4lLSwPYacfBUr6YTOr3SE6YUnrcW02KcKsWh/FQ+7wa546A+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH0vQZYphUzfW6a8rOOW/OzRJjEQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MTE5MzlhZS1iOGJhLTRhYmEtYTNhYS0yNDkxMDYyYWM5YjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIxMTkzOWFlLWI4YmEtNGFiYS1h M2FhLTI0OTEwNjJhYzliNS8yMTE5MzlhZS1iOGJhLTRhYmEtYTNhYS0yNDkxMDYy YWM5YjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATM7zAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAn+labCe1sBdfpci5x+2x tnk0o3eSgzg2nDsGah1IUbnU/jKnnxa6SKwPTCs5r8o9nLgLBIntnn8Ljip0TamR srJbZFkQEYOZbLFTVK00wYFxxjxMzr2e2hCFB3KUF65j9PjL5ftBk/MOZ2TU0jJb St7rjNxrCI4CLN+roHtTF73l3/0OGgj4/iRuojM7NxrxsQzoI0Ggo3KelLg7WtAQ pXzVpVK+km1gzrd2/WipTh4GMW4Elf88zZ+EXpId/08Q3i3S5s/5DKv55SKngesd B3Ul+7AtcT6ZMEhV6swh7CIc7RBWZ+8fHlBfuZdMA9g1FhDiZdeVH7UKqUF+vtm6 jA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:37 2025 by rpki-client