$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer File: 39695c91-50ed-402c-b896-6056bbde88df.cer (raw, json) Hash identifier: Zp4DlQ50Iz3evDKVAAkh/YIcJfgohS3j6heGKsEtjoE= Subject key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847133E1C654E33E09BF9321C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Sep 2024 00:45:27 +0000 Certificate not after: Sun 06 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 14445 AS: 399448 AS: 399516 AS: 400891 IP: 23.136.184.0/24 IP: 23.137.136.0/22 IP: 23.170.240.0/20 IP: 45.42.176.0/22 IP: 199.127.152.0/22 IP: 216.73.148.0/22 IP: 2606:18c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:13:3e:1c:65:4e:33:e0:9b:f9:32:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 2 00:45:27 2024 GMT Not After : Dec 6 01:45:27 2026 GMT Subject: CN=39695c91-50ed-402c-b896-6056bbde88df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:55:63:94:a1:02:3f:aa:2c:95:5d:53:64: da:1f:d6:f6:17:02:a4:a6:dd:b5:57:41:c0:e5:a1: fd:36:f2:9e:4e:2e:5f:36:37:46:30:45:94:7d:06: 15:86:72:4e:22:38:77:24:c7:cc:fe:df:93:5d:bb: 59:29:29:a0:dc:67:a4:07:3c:9d:59:bb:75:e9:27: bf:c2:4c:a4:c5:71:14:13:83:92:bb:1b:2a:a1:50: 87:62:bb:80:b2:df:de:d2:6b:b5:6c:0d:5b:2b:00: 02:2e:91:c7:e9:b4:e3:01:70:ce:da:30:fa:13:5a: 25:5a:e7:57:04:96:19:e6:d9:db:04:95:e2:2c:b9: 11:4f:ee:19:ea:e0:af:0c:81:a7:d9:7a:02:24:7f: b7:36:a2:59:f8:22:79:01:4d:1a:90:9b:c4:d7:69: fe:87:ee:fc:5b:87:c8:c1:8b:af:8c:9c:97:46:a8: 03:64:24:10:69:24:2b:d3:b1:a1:12:bf:61:1c:82: a4:6b:46:59:48:5f:5f:61:2b:ca:71:30:1a:03:54: 18:df:c4:13:10:20:77:f4:90:fe:06:ac:ac:cb:32: f3:3a:39:e2:b4:a6:96:db:ba:c9:11:f9:57:1d:a0: 61:35:b2:94:d5:dc:e4:94:a1:e2:09:85:ce:61:f2: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.136.184.0/24 23.137.136.0/22 23.170.240.0/20 45.42.176.0/22 199.127.152.0/22 216.73.148.0/22 IPv6: 2606:18c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14445 399448 399516 400891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:74:29:4c:22:48:4b:80:7e:d1:bf:c8:1e:56:53:94:76:5b: 91:35:22:d2:12:80:41:81:52:f5:8c:96:dd:95:1d:a7:96:98: a5:3c:3c:78:43:08:86:6a:0a:d9:8e:1b:3c:2a:04:08:59:cd: c4:a8:19:2d:e2:ab:5e:03:87:55:0c:40:56:04:23:4e:7c:5b: 4a:83:d8:7e:22:ad:18:6e:22:e9:fa:ce:3c:14:63:23:7f:c0: bd:16:04:16:6e:d4:eb:4e:1b:83:7f:e1:66:d4:eb:92:01:55: 78:e7:c1:2c:96:81:0f:37:34:36:18:e3:10:29:b4:ad:6c:4c: fb:3f:22:8b:9d:0b:aa:82:74:21:ff:72:c2:b3:82:e3:2b:6b: e6:e2:51:37:3e:d9:10:fe:4c:d3:83:0f:e0:61:3d:24:15:82: 81:5c:ff:40:1a:10:a4:15:42:0a:18:e1:77:29:c5:25:f0:d2: b2:b5:59:bb:1e:05:fc:61:a0:42:d2:92:fd:ae:e4:07:6f:20: 7b:5c:48:5d:ec:7c:0b:73:70:cb:8e:e9:7a:1f:37:12:ed:0a: 7d:61:1a:5f:e1:c0:b1:5a:b3:1a:0e:da:d4:ba:46:46:85:9c: 87:f3:69:2a:7a:92:1f:63:ba:c4:9f:c6:0c:63:30:5a:42:7a: 3b:44:a0:61 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEcTPhxlTjPgm/kyHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkwMjAwNDUyN1oXDTI2MTIwNjAxNDUyN1owLzEtMCsGA1UEAxMk Mzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwxVY5ShAj+qLJVdU2TaH9b2FwKkpt21V0HA 5aH9NvKeTi5fNjdGMEWUfQYVhnJOIjh3JMfM/t+TXbtZKSmg3GekBzydWbt16Se/ wkykxXEUE4OSuxsqoVCHYruAst/e0mu1bA1bKwACLpHH6bTjAXDO2jD6E1olWudX BJYZ5tnbBJXiLLkRT+4Z6uCvDIGn2XoCJH+3NqJZ+CJ5AU0akJvE12n+h+78W4fI wYuvjJyXRqgDZCQQaSQr07GhEr9hHIKka0ZZSF9fYSvKcTAaA1QY38QTECB39JD+ BqysyzLzOjnitKaW27rJEflXHaBhNbKU1dzklKHiCYXOYfK9WQIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFPr1OhEeAF28nGFnsZdr1Q3pHYG0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z OTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM5Njk1YzkxLTUwZWQtNDAyYy1i ODk2LTYwNTZiYmRlODhkZi8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJk ZTg4ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXiLgDBAIXiYgDBAQXqvADBAItKrADBALHf5gD BALYSZQwDQQCAAIwBwMFACYGGMAwKAYIKwYBBQUHAQgBAf8EGTAXoBUwEwICOG0C AwYYWAIDBhicAgMGHfswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE3QpTCJIS4B+0b/IHlZTlHZbkTUi0hKA QYFS9YyW3ZUdp5aYpTw8eEMIhmoK2Y4bPCoECFnNxKgZLeKrXgOHVQxAVgQjTnxb SoPYfiKtGG4i6frOPBRjI3/AvRYEFm7U604bg3/hZtTrkgFVeOfBLJaBDzc0Nhjj ECm0rWxM+z8ii50LqoJ0If9ywrOC4ytr5uJRNz7ZEP5M04MP4GE9JBWCgVz/QBoQ pBVCChjhdynFJfDSsrVZux4F/GGgQtKS/a7kB28ge1xIXex8C3Nwy47peh83Eu0K fWEaX+HAsVqzGg7a1LpGRoWch/NpKnqSH2O6xJ/GDGMwWkJ6O0SgYQ== -----END CERTIFICATE-----Generated at Sat Jul 5 23:57:57 2025 by rpki-client