$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33.cer File: 22f9befa-18c5-4079-9648-a9c8d05adb33.cer (raw, json) Hash identifier: hAruJfTWa7lXKd5FS1zMXuFpcVMgfIJqIoyAeUVQE1I= Subject key identifier: F9:EE:A2:92:98:5E:20:0E:D2:7E:B5:31:6F:7F:FB:A5:49:8C:4D:18 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847FB12B764D04B6946DD4F4280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 Nov 2024 01:45:33 +0000 Certificate not after: Sat 27 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 20272 IP: 24.235.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fb:12:b7:64:d0:4b:69:46:dd:4f:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 24 01:45:33 2024 GMT Not After : Feb 27 01:45:33 2027 GMT Subject: CN=22f9befa-18c5-4079-9648-a9c8d05adb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:b4:30:b0:73:a3:dd:89:95:6b:90:a7:0c: 94:85:50:9c:3e:36:e2:01:62:af:cc:56:1e:08:d1: bd:14:42:41:dd:df:e5:0f:d9:c7:c3:4d:4f:03:6a: 76:d7:05:20:4d:38:85:75:e4:ab:bf:14:d1:61:77: fa:5f:86:f5:37:78:18:95:a2:dd:e8:b2:46:e5:e8: 72:5c:11:f4:27:5f:13:93:ec:cf:96:7d:59:a1:37: ac:bb:7e:39:26:00:e7:51:1d:84:ac:f7:b8:84:5f: 2d:86:8e:3b:56:5a:e0:a7:64:26:47:78:e9:d0:56: a1:0e:64:17:86:04:14:ba:3b:24:d6:af:62:3a:a6: 19:f9:aa:d0:b9:08:17:72:f3:4c:e7:b1:31:d2:c2: 4f:73:55:dc:be:c8:12:48:75:e7:0a:97:71:f0:d1: 4b:26:f7:1c:e4:35:6e:7e:f9:ba:df:97:e6:07:f4: 3e:a5:8a:df:ab:a5:3e:75:75:d6:a8:42:8a:37:df: 59:ed:32:3d:ae:7e:de:2f:67:35:cb:10:5c:dd:5a: fd:82:8f:2f:4b:42:7d:da:94:dc:0f:a0:fc:ee:d0: 3f:1b:27:12:6e:cf:01:0c:1c:9d:f9:9f:86:f3:f4: 66:87:05:47:1d:f4:cd:d7:65:10:6c:22:05:84:22: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:A2:92:98:5E:20:0E:D2:7E:B5:31:6F:7F:FB:A5:49:8C:4D:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 24.235.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20272 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:22:99:af:ed:08:c4:d9:0d:09:94:f9:c9:5a:14:d0:88:4c: 55:83:02:37:ec:48:e6:4a:c8:21:59:f1:2f:0a:0f:84:d0:33: 2a:17:50:03:9b:90:b2:d4:21:15:a0:c8:37:02:38:7d:dc:6c: 0f:08:fe:0c:5d:76:f8:b1:6f:ad:df:a4:97:e4:cf:86:cd:10: ad:0f:9e:cf:6c:de:3e:2f:8d:0d:de:7c:68:8d:b0:57:51:95: 77:74:d8:30:3a:38:2b:31:dd:87:0c:e7:77:52:a4:d5:c2:5b: cd:f8:75:67:68:a5:e1:44:94:97:97:ac:5d:91:85:68:6c:cf: 20:04:2a:f9:c1:c5:ed:e5:46:55:c2:41:79:01:0b:44:d9:01: 90:81:35:c5:30:ec:f1:48:10:ef:fb:74:d2:9b:ed:28:32:bb: a7:78:82:c1:3e:cd:b4:d5:09:6a:48:a1:04:99:5e:d7:94:66: 4b:cf:8f:fe:34:fd:53:50:4e:1f:7c:1a:8f:a1:ee:88:77:34: 88:45:25:c1:90:43:b9:55:34:bd:ca:a5:48:f5:9c:08:69:e1: eb:79:8c:77:38:29:f0:8c:26:ff:2f:d9:4f:2c:bc:47:e2:de: d9:f9:0c:a6:89:41:f6:a9:00:21:86:f2:cd:de:58:17:0e:22: eb:95:f7:94 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEf7Erdk0EtpRt1PQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTEyNDAxNDUzM1oXDTI3MDIyNzAxNDUzM1owLzEtMCsGA1UEAxMk MjJmOWJlZmEtMThjNS00MDc5LTk2NDgtYTljOGQwNWFkYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm320MLBzo92JlWuQpwyUhVCcPjbiAWKvzFYe CNG9FEJB3d/lD9nHw01PA2p21wUgTTiFdeSrvxTRYXf6X4b1N3gYlaLd6LJG5ehy XBH0J18Tk+zPln1ZoTesu345JgDnUR2ErPe4hF8tho47Vlrgp2QmR3jp0FahDmQX hgQUujsk1q9iOqYZ+arQuQgXcvNM57Ex0sJPc1XcvsgSSHXnCpdx8NFLJvcc5DVu fvm635fmB/Q+pYrfq6U+dXXWqEKKN99Z7TI9rn7eL2c1yxBc3Vr9go8vS0J92pTc D6D87tA/GycSbs8BDByd+Z+G8/RmhwVHHfTN12UQbCIFhCLnHwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPnuopKYXiAO0n61MW9/+6VJjE0YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MmY5YmVmYS0xOGM1LTQwNzktOTY0OC1hOWM4ZDA1YWRiMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyZjliZWZhLTE4YzUtNDA3OS05 NjQ4LWE5YzhkMDVhZGIzMy8yMmY5YmVmYS0xOGM1LTQwNzktOTY0OC1hOWM4ZDA1 YWRiMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAUY6yAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjSKZr+0IxNkNCZT5yVoU0IhMVYMCN+xI5krIIVnxLwoPhNAz KhdQA5uQstQhFaDINwI4fdxsDwj+DF12+LFvrd+kl+TPhs0QrQ+ez2zePi+NDd58 aI2wV1GVd3TYMDo4KzHdhwznd1Kk1cJbzfh1Z2il4USUl5esXZGFaGzPIAQq+cHF 7eVGVcJBeQELRNkBkIE1xTDs8UgQ7/t00pvtKDK7p3iCwT7NtNUJakihBJle15Rm S8+P/jT9U1BOH3waj6HuiHc0iEUlwZBDuVU0vcqlSPWcCGnh63mMdzgp8Iwm/y/Z Tyy8R+Le2fkMpolB9qkAIYbyzd5YFw4i65X3lA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:09:17 2025 by rpki-client