$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer File: 32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer (raw, json) Hash identifier: sBz3MW+3iO9TKOsJCLWJE/Rv+nBvOhV82LrByKkqX7U= Subject key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858492E0C2EAA68ACCCA273215200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 00:45:33 +0000 Certificate not after: Thu 17 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 54105 IP: 52.144.58.0/24 IP: 168.245.151.0/24 IP: 192.139.134.0/24 IP: 199.19.88.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:0c:2e:aa:68:ac:cc:a2:73:21:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 14 00:45:33 2025 GMT Not After : Jun 17 00:45:33 2027 GMT Subject: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:57:b0:df:4c:66:f6:9c:b3:80:fe:35:10: d1:4c:06:ba:97:cb:92:8b:01:0b:1d:0e:8c:34:4f: fe:42:19:a0:c8:f3:fc:1d:77:6d:23:96:9b:c2:0d: ee:b4:29:2b:f3:f4:1e:fa:98:81:05:86:fa:5e:9d: 9a:af:8f:fb:8b:a6:f3:97:2b:62:a4:d6:f6:d6:15: 81:38:3b:18:99:8e:f5:5c:99:5a:ae:eb:74:b5:eb: 46:61:f9:d9:52:81:95:09:c4:24:31:38:55:e7:b6: e9:f3:95:69:a2:0c:8d:b5:71:7f:ed:4d:bc:5b:a9: 37:3c:b6:cb:1e:aa:05:66:de:e6:f8:b9:cd:32:b9: af:40:1c:dd:95:05:14:7a:9c:08:61:d7:ce:07:38: 31:e7:b1:d0:1c:46:27:04:4a:e5:ef:44:f6:d8:72: 3f:e3:d7:a1:99:50:21:a5:00:27:a2:03:f2:be:c3: 5a:d1:48:9a:9c:78:bb:82:97:46:71:a6:1a:7c:56: 47:df:f4:cc:a9:90:15:4c:59:bc:a5:0c:a3:bd:f1: ad:b4:5b:74:e0:4f:3e:75:8f:69:c5:87:96:d6:11: 9e:9c:ad:d6:e9:0c:3a:d1:45:fb:25:b3:6d:5c:d5: 73:e6:b6:b3:2a:f1:42:06:61:11:b5:cc:54:82:30: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.88.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54105 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:99:03:4e:6b:cb:67:e0:df:b1:8b:43:c4:70:2a:df:a0:a2: 7b:30:c4:d5:96:9e:d7:89:36:f4:9c:de:f8:5e:2a:72:e7:12: a4:0a:63:2e:93:a6:64:53:62:4f:76:59:bc:b9:7c:04:c2:8f: dc:06:8e:96:67:ca:6f:de:e8:b0:9d:36:9b:fa:d9:aa:00:6c: fb:29:f4:f5:cd:d4:03:c2:1a:37:70:fd:fc:bc:7a:74:23:2b: 58:27:60:63:5f:84:68:aa:21:bb:fe:b9:bc:fd:12:09:85:2f: 12:01:32:c7:52:69:50:39:ab:a5:92:d2:66:9b:fb:8d:20:c7: 17:0b:de:7c:8f:9d:c7:28:e8:dc:cc:b0:20:3e:26:79:50:df: 34:5f:54:3d:f9:66:19:41:37:be:b6:96:a8:42:c9:1e:ea:4f: b5:46:80:2c:7e:10:32:bf:4c:a0:a5:fd:0d:de:f8:d6:14:a9: d4:e8:6a:91:dd:ff:6d:ad:44:ef:1c:3f:b1:47:b9:4a:8b:7e: ba:7f:29:ae:43:68:74:8a:1c:12:a2:aa:fd:bc:c5:1f:c0:aa: 64:c0:0a:a3:d3:0c:ba:f7:9e:61:30:e2:9c:b5:fd:47:f2:58: 1d:f2:d8:fe:5b:c5:f9:da:b4:4e:fe:99:d7:99:9a:c3:23:50: 66:86:30:20 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEkuDC6qaKzMonMhUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxNDAwNDUzM1oXDTI3MDYxNzAwNDUzM1owLzEtMCsGA1UEAxMk MzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZjYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyVXsN9MZvacs4D+NRDRTAa6l8uSiwELHQ6M NE/+QhmgyPP8HXdtI5abwg3utCkr8/Qe+piBBYb6Xp2ar4/7i6bzlytipNb21hWB ODsYmY71XJlarut0tetGYfnZUoGVCcQkMThV57bp85VpogyNtXF/7U28W6k3PLbL HqoFZt7m+LnNMrmvQBzdlQUUepwIYdfOBzgx57HQHEYnBErl70T22HI/49ehmVAh pQAnogPyvsNa0UianHi7gpdGcaYafFZH3/TMqZAVTFm8pQyjvfGttFt04E8+dY9p xYeW1hGenK3W6Qw60UX7JbNtXNVz5razKvFCBmERtcxUgjCOawIDAQABo4IELTCC BCkwHQYDVR0OBBYEFMmVVHs59XftC+OKcHv2d0P6rMl9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMyZTNhM2FkLWIxYWMtNDEzZC04 Zjk4LWE2OTQyOWE2Y2E5OC8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0Mjlh NmNhOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAA0kDoDBACo9ZcDBADAi4YDBALHE1gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDANNZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADyZA05ry2fg37GLQ8RwKt+g onswxNWWnteJNvSc3vheKnLnEqQKYy6TpmRTYk92Wby5fATCj9wGjpZnym/e6LCd Npv62aoAbPsp9PXN1APCGjdw/fy8enQjK1gnYGNfhGiqIbv+ubz9EgmFLxIBMsdS aVA5q6WS0mab+40gxxcL3nyPncco6NzMsCA+JnlQ3zRfVD35ZhlBN762lqhCyR7q T7VGgCx+EDK/TKCl/Q3e+NYUqdToapHd/22tRO8cP7FHuUqLfrp/Ka5DaHSKHBKi qv28xR/AqmTACqPTDLr3nmEw4py1/UfyWB3y2P5bxfnatE7+mdeZmsMjUGaGMCA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:09:14 2025 by rpki-client