$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer File: 4b9027e9-0517-4775-a6c4-35522e65e4ad.cer (raw, json) Hash identifier: +OOnFSFPMsvn0CPKTgojswqf2Pofdyw/3n/8DfqNwao= Subject key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584886A8EB85426AED30F2ACE800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 01:45:33 +0000 Certificate not after: Sun 18 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 398697 IP: 161.199.203.0/24 IP: 161.199.230.0/24 IP: 2602:fcdd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:a8:eb:85:42:6a:ed:30:f2:ac:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 13 01:45:33 2025 GMT Not After : Apr 18 00:45:33 2027 GMT Subject: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:8e:2e:09:d8:af:f4:9d:30:bf:61:99:4c: 1b:9b:21:cf:f0:08:e1:60:64:d6:89:a4:05:c6:12: 36:a5:f4:ac:33:56:cf:74:ae:7d:1e:34:19:24:a0: c6:86:e5:03:d4:d1:42:80:81:c7:71:a9:92:a9:06: c3:78:69:47:00:79:84:d7:bf:a0:00:50:c9:b4:de: 37:83:51:57:b0:13:fa:85:24:8d:33:cf:a4:63:bf: 05:d6:d4:07:ee:3d:c0:48:95:8f:17:7f:4d:0a:c6: b3:d5:f4:51:f0:67:b5:5e:15:1c:b3:bf:24:11:b7: e7:3c:93:18:14:8e:ba:16:59:96:e7:4b:a6:6d:1f: a9:65:6d:99:09:20:35:9e:cb:a4:c5:4c:9d:f7:f9: 31:55:43:41:18:0a:3f:50:da:ed:fd:44:8d:d2:b4: 93:a2:45:f5:01:72:a7:5b:6e:63:65:92:15:cf:dd: f6:23:6c:01:74:82:30:cb:53:24:29:2a:dd:bf:f2: 33:b7:c7:47:6c:b1:01:bf:72:b1:26:fe:36:02:99: d0:73:5d:c5:c3:3a:36:e6:45:1c:65:6d:7b:2d:9f: 04:9d:c1:91:30:66:da:02:d2:46:9b:02:28:58:a6: a8:64:cc:28:13:79:3e:6c:c6:e8:02:21:e8:66:73: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 161.199.203.0/24 161.199.230.0/24 IPv6: 2602:fcdd::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398697 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2e:91:34:8d:31:06:c5:0e:b0:06:ab:48:75:e1:3f:de:65: b6:d2:7a:5b:bc:04:8f:6e:a5:ab:53:76:ca:f1:dd:12:1c:5f: bd:f8:0a:36:3e:bd:07:f8:5e:3d:3d:e7:47:05:1a:77:70:a1: 43:d5:9d:10:74:89:27:57:d4:7e:54:98:c8:af:96:07:05:92: db:f0:01:67:26:6e:28:f1:b2:ba:2c:0f:40:31:f2:e7:26:1b: 51:36:47:03:ca:de:e8:1a:84:b7:90:1e:92:74:f9:77:ec:6a: e6:c3:b3:31:d7:51:78:61:4e:b8:05:31:99:6c:67:6b:da:88: 7c:c9:6f:c5:1f:0b:bf:77:f8:49:88:ff:af:4a:2f:a2:a3:e0: a4:02:c7:0f:b1:54:fb:23:98:47:d7:71:1e:01:9d:7f:4d:5c: 50:4d:77:a1:ae:ad:81:71:1c:6c:74:ba:0f:b5:74:20:c9:64: 81:3b:b7:f4:db:6a:68:e2:38:19:da:92:49:19:b9:9b:00:d9: 4a:37:c6:5e:b3:47:61:8a:27:d7:bf:c0:64:4d:85:fb:c1:74: a3:15:87:63:b1:fe:fb:01:2f:bc:aa:ee:83:f3:e1:0a:c4:8a: 2b:88:16:d9:fc:c3:e3:1d:9a:a8:2a:61:26:48:0a:47:26:88: d2:6f:36:d9 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEiGqOuFQmrtMPKs6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDExMzAxNDUzM1oXDTI3MDQxODAwNDUzM1owLzEtMCsGA1UEAxMk NGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVlNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOeOLgnYr/SdML9hmUwbmyHP8AjhYGTWiaQF xhI2pfSsM1bPdK59HjQZJKDGhuUD1NFCgIHHcamSqQbDeGlHAHmE17+gAFDJtN43 g1FXsBP6hSSNM8+kY78F1tQH7j3ASJWPF39NCsaz1fRR8Ge1XhUcs78kEbfnPJMY FI66FlmW50umbR+pZW2ZCSA1nsukxUyd9/kxVUNBGAo/UNrt/USN0rSTokX1AXKn W25jZZIVz932I2wBdIIwy1MkKSrdv/Izt8dHbLEBv3KxJv42ApnQc13Fwzo25kUc ZW17LZ8EncGRMGbaAtJGmwIoWKaoZMwoE3k+bMboAiHoZnPzGwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGgGl8zBC28xTtsxNfotB/MwaU8KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRiOTAyN2U5LTA1MTctNDc3NS1h NmM0LTM1NTIyZTY1ZTRhZC80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2 NWU0YWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAChx8sDBAChx+YwDgQCAAIwCAMGBCYC/N0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYVaTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfLpE0jTEGxQ6wBqtI deE/3mW20npbvASPbqWrU3bK8d0SHF+9+Ao2Pr0H+F49PedHBRp3cKFD1Z0QdIkn V9R+VJjIr5YHBZLb8AFnJm4o8bK6LA9AMfLnJhtRNkcDyt7oGoS3kB6SdPl37Grm w7Mx11F4YU64BTGZbGdr2oh8yW/FHwu/d/hJiP+vSi+io+CkAscPsVT7I5hH13Ee AZ1/TVxQTXehrq2BcRxsdLoPtXQgyWSBO7f022po4jgZ2pJJGbmbANlKN8Zes0dh iifXv8BkTYX7wXSjFYdjsf77AS+8qu6D8+EKxIoriBbZ/MPjHZqoKmEmSApHJojS bzbZ -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:28 2025 by rpki-client