$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer File: 4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer (raw, json) Hash identifier: jesKgzcw93j3xDEYabnM4z2bl8N3SRN3jROKOTpgg2c= Subject key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584835B31540D46AC356153367C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Dec 2024 01:45:33 +0000 Certificate not after: Sat 20 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 63072 IP: 23.135.176.0/24 IP: 162.253.244.0/22 IP: 2605:1740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:b3:15:40:d4:6a:c3:56:15:33:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 15 01:45:33 2024 GMT Not After : Mar 20 00:45:33 2027 GMT Subject: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:30:10:1d:6c:30:dd:7f:c7:86:bc:77:77: f6:3f:ae:d5:30:07:43:c7:ab:8b:bc:b8:22:e8:3c: 41:c8:6d:3b:eb:0d:bf:ea:47:a5:1c:1e:f6:c8:f0: 99:49:f3:6a:fb:c0:0a:de:16:9e:52:5a:c1:4d:b2: da:bc:fa:0d:d4:86:be:e0:1e:d3:96:02:39:b3:16: 74:56:c5:0c:60:0a:79:d6:0a:7c:63:b9:15:7c:ce: 66:97:72:95:11:3d:3d:50:10:4b:6e:34:68:ed:6d: 82:fa:40:92:e6:37:6d:4b:90:6c:1d:28:7e:63:e7: c8:98:3a:ab:e7:03:56:5b:b6:a0:f1:7b:06:1a:66: 30:19:7f:99:38:4c:51:12:0c:e7:eb:5e:bd:b8:3c: e5:b5:80:ab:c5:fe:e1:fb:e3:8c:ec:cc:0e:d6:86: 06:3d:a7:ba:78:cc:e6:75:21:1d:7e:85:5d:d8:ac: cd:30:d9:17:4f:fc:64:48:34:47:e5:a5:ed:84:59: 93:52:38:5f:4c:3f:b6:85:04:4c:ba:bf:7b:f6:02: 68:04:ca:53:99:d2:5f:e1:49:9a:0d:40:6e:17:bb: 2e:08:e5:5e:61:4d:b3:84:a8:7f:29:41:02:13:87: 64:60:f5:52:d6:fc:29:47:b4:8a:9c:b2:68:72:7d: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 162.253.244.0/22 IPv6: 2605:1740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8c:a2:17:e3:0c:b8:2b:60:53:fe:a4:15:18:c5:f2:b0:c5: 30:13:ff:61:e9:9c:4c:e3:3b:92:2b:5c:bf:06:95:db:9e:4f: 42:a1:61:eb:b9:cf:a5:fc:ff:54:90:5b:10:ed:7e:b7:cb:de: 4d:05:a3:84:4c:ee:58:e1:e8:2a:90:cf:b8:c1:61:f4:15:29: 53:71:59:c6:e2:b1:e3:4d:72:11:76:b2:56:68:ad:a0:66:38: 4f:2d:73:49:ed:1a:26:83:84:ba:59:f3:f9:72:18:79:0b:16: 28:0f:c7:d9:71:69:f7:c8:be:1a:8c:70:4f:c3:9f:14:7a:0f: 57:62:9e:f2:4c:a4:7b:91:3e:dd:99:ca:52:dd:45:e8:0a:d7: 87:cf:58:f6:0f:67:e1:a7:5a:ac:87:1d:b1:e6:1f:60:11:e8: 66:f0:46:ee:a9:15:3c:fb:06:f9:8d:02:ec:d7:d3:6b:f5:bd: c3:f3:67:22:50:14:9a:f0:43:f4:ee:f7:a1:6c:62:4e:25:21: f7:23:2b:4d:08:f2:5f:5f:63:77:12:a5:38:8d:5b:fa:72:b1: 72:38:8d:c1:86:1d:ba:12:ad:f7:c0:70:06:58:b2:ee:1f:ab: 5c:1d:3d:cc:e2:f1:d1:7a:ad:b2:6e:e2:1d:b3:a1:10:0e:1c: 5f:b8:7a:45 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEg1sxVA1GrDVhUzZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIxNTAxNDUzM1oXDTI3MDMyMDAwNDUzM1owLzEtMCsGA1UEAxMk NDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0wEB1sMN1/x4a8d3f2P67VMAdDx6uLvLgi 6DxByG076w2/6kelHB72yPCZSfNq+8AK3haeUlrBTbLavPoN1Ia+4B7TlgI5sxZ0 VsUMYAp51gp8Y7kVfM5ml3KVET09UBBLbjRo7W2C+kCS5jdtS5BsHSh+Y+fImDqr 5wNWW7ag8XsGGmYwGX+ZOExREgzn6169uDzltYCrxf7h++OM7MwO1oYGPae6eMzm dSEdfoVd2KzNMNkXT/xkSDRH5aXthFmTUjhfTD+2hQRMur979gJoBMpTmdJf4Uma DUBuF7suCOVeYU2zhKh/KUECE4dkYPVS1vwpR7SKnLJocn10RwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNkpuObM1CNDRkeJM5dKJHaZjKtyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMDlkOTNhLWQ5ZTctNGViNy05 NGNkLWZmZWMwNjE4YzNlYy80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYx OGMzZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXh7ADBAKi/fQwDQQCAAIwBwMFACYFF0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPZgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIGMohfjDLgrYFP+pBUY xfKwxTAT/2HpnEzjO5IrXL8GldueT0KhYeu5z6X8/1SQWxDtfrfL3k0Fo4RM7ljh 6CqQz7jBYfQVKVNxWcbiseNNchF2slZoraBmOE8tc0ntGiaDhLpZ8/lyGHkLFigP x9lxaffIvhqMcE/DnxR6D1dinvJMpHuRPt2ZylLdRegK14fPWPYPZ+GnWqyHHbHm H2AR6GbwRu6pFTz7BvmNAuzX02v1vcPzZyJQFJrwQ/Tu96FsYk4lIfcjK00I8l9f Y3cSpTiNW/pysXI4jcGGHboSrffAcAZYsu4fq1wdPczi8dF6rbJu4h2zoRAOHF+4 ekU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:02 2025 by rpki-client