$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer File: 4dfb879f-7966-496a-b35e-d766981846ee.cer (raw, json) Hash identifier: M9Nsrg40GjCGIUo/rcMHT5MUZCJqjvS8JtrB2XYpD9E= Subject key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849366C3C50F1868AC275BC9C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 00:45:33 +0000 Certificate not after: Sun 20 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 199.60.119.0 -- 199.60.120.255 IP: 199.60.226.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:6c:3c:50:f1:86:8a:c2:75:bc:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 17 00:45:33 2025 GMT Not After : Jun 20 00:45:33 2027 GMT Subject: CN=4dfb879f-7966-496a-b35e-d766981846ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:b6:b3:27:c9:ab:9b:54:1d:15:7c:c7:08: 69:a0:ce:f9:be:9d:4b:28:be:55:f9:ac:f9:30:d7: 95:14:40:01:47:a4:11:79:9b:7a:a3:6b:62:f9:11: a7:72:f8:ae:20:85:24:85:74:f5:a9:0f:df:9e:6e: 90:64:7c:86:ed:c1:04:b2:09:c1:3e:85:b4:11:07: b6:19:f8:2c:da:a6:0c:c9:b3:b6:27:4a:29:24:11: c4:a7:72:fd:fc:2c:3c:aa:f8:37:f6:7c:00:ec:41: d9:1e:b0:93:8c:be:dc:52:05:19:c0:97:ef:83:73: 3b:8a:91:d6:f2:39:0f:7f:80:22:40:b8:16:f0:63: da:4a:23:84:16:de:59:e6:f8:ef:a1:75:6a:35:60: be:df:3b:63:ec:06:6a:22:96:ca:cc:6e:c5:aa:e9: a5:a2:c3:f9:51:1c:7f:5a:5c:5b:79:57:cc:dc:e1: 06:6e:c0:b7:f2:c1:9b:b7:e1:a3:6b:f4:b7:45:b8: 86:9e:b0:3c:f6:01:59:57:f2:ad:2a:c3:5a:e1:1b: 10:d3:f0:67:cc:92:4b:61:5d:93:0a:03:e6:c4:59: 09:4b:4a:52:f8:af:f5:c4:4e:07:19:9f:e6:4e:3d: ed:ca:e4:20:23:e5:b2:8c:4e:6c:c3:91:31:14:d9: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.60.119.0-199.60.120.255 199.60.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ef:a6:36:7b:b2:e7:05:33:57:b1:04:37:19:fb:58:65:c3: 6c:61:9f:a4:b9:10:f1:ac:ae:b0:39:00:07:db:18:98:b4:aa: 14:28:b1:6d:bd:f7:35:7d:36:75:6c:46:fc:da:51:a5:2c:f0: 64:cd:20:65:9e:60:cd:95:4e:ea:7d:8c:3c:d3:4c:d0:e9:aa: 01:92:fb:87:fc:2b:03:31:4a:3d:b6:db:3d:92:f6:b9:86:f6: 63:5c:d6:9f:3f:3f:50:06:0d:14:32:0f:2e:78:e9:4c:28:65: a5:08:82:fa:43:6e:60:79:af:44:82:a8:23:26:3a:4b:37:8f: 69:62:33:ea:c7:40:b6:3e:b6:42:d4:40:bb:98:47:4e:c1:85: 69:1d:1d:85:11:b5:20:7a:8a:f1:62:4e:f6:59:66:9a:04:e5: 25:e9:6b:90:aa:37:5f:3e:15:9e:f5:52:34:4e:a4:ed:c9:9e: 63:cd:44:92:3f:7a:ed:4d:a4:f5:e1:1e:0f:c3:4b:6a:26:e6: c6:9a:0a:a4:da:1e:0e:ff:ff:a4:b1:0c:ae:b2:81:1b:4d:d6: 16:09:3b:b1:43:2f:3d:fb:38:08:c9:db:d2:52:c5:55:73:e6: da:73:91:13:a5:35:bf:ac:04:75:36:18:fd:55:1a:98:e3:59: 22:38:73:65 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEk2bDxQ8YaKwnW8nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxNzAwNDUzM1oXDTI3MDYyMDAwNDUzM1owLzEtMCsGA1UEAxMk NGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RC2syfJq5tUHRV8xwhpoM75vp1LKL5V+az5 MNeVFEABR6QReZt6o2ti+RGncviuIIUkhXT1qQ/fnm6QZHyG7cEEsgnBPoW0EQe2 Gfgs2qYMybO2J0opJBHEp3L9/Cw8qvg39nwA7EHZHrCTjL7cUgUZwJfvg3M7ipHW 8jkPf4AiQLgW8GPaSiOEFt5Z5vjvoXVqNWC+3ztj7AZqIpbKzG7FqumlosP5URx/ WlxbeVfM3OEGbsC38sGbt+Gja/S3RbiGnrA89gFZV/KtKsNa4RsQ0/BnzJJLYV2T CgPmxFkJS0pS+K/1xE4HGZ/mTj3tyuQgI+WyjE5sw5ExFNnrBQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFEegiZFsf0dT+7go/0NNlsUPAqUdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRkZmI4NzlmLTc5NjYtNDk2YS1i MzVlLWQ3NjY5ODE4NDZlZS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgx ODQ2ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMc8dwMEAMc8eAMEAcc84jBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE 76Y2e7LnBTNXsQQ3GftYZcNsYZ+kuRDxrK6wOQAH2xiYtKoUKLFtvfc1fTZ1bEb8 2lGlLPBkzSBlnmDNlU7qfYw800zQ6aoBkvuH/CsDMUo9tts9kva5hvZjXNafPz9Q Bg0UMg8ueOlMKGWlCIL6Q25gea9EgqgjJjpLN49pYjPqx0C2PrZC1EC7mEdOwYVp HR2FEbUgeorxYk72WWaaBOUl6WuQqjdfPhWe9VI0TqTtyZ5jzUSSP3rtTaT14R4P w0tqJubGmgqk2h4O//+ksQyusoEbTdYWCTuxQy89+zgIydvSUsVVc+bac5ETpTW/ rAR1Nhj9VRqY41kiOHNl -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:41 2025 by rpki-client