$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer File: 50554af3-8108-491d-84e4-240f4874833a.cer (raw, json) Hash identifier: fmGsaJvNndKnvKHEBw76HnB/PHGitaXSCDtpVvdGCUw= Subject key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584965E1E1CC60F3D33B59D89600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Apr 2025 00:45:35 +0000 Certificate not after: Wed 07 Jul 2027 00:45:35 +0000 Subordinate resources: AS: 398217 IP: 149.19.156.0/22 IP: 185.113.180.0/22 IP: 185.123.144.0/22 IP: 185.123.152.0/22 IP: 185.124.56.0/21 IP: 185.186.60.0/22 IP: 185.200.236.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e1:e1:cc:60:f3:d3:3b:59:d8:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 3 00:45:35 2025 GMT Not After : Jul 7 00:45:35 2027 GMT Subject: CN=50554af3-8108-491d-84e4-240f4874833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:53:6c:62:e0:6c:02:49:a2:6c:5b:de:04: 7e:94:2d:ff:40:85:12:1f:c0:3e:16:a5:01:0b:78: c0:2f:d5:82:dd:6a:bc:40:45:ff:93:60:f6:4a:34: 8e:4f:89:97:b7:ba:ab:4c:3d:3a:06:3a:12:c0:70: 66:d0:5c:aa:ea:b1:c5:42:3e:39:64:4c:9e:35:ac: d3:e3:b1:b6:fa:22:36:d9:ff:a4:fa:be:ef:79:2a: d2:63:eb:93:c1:b9:1e:94:d1:3a:25:90:51:4f:85: 51:57:c2:68:29:30:04:8e:93:91:c2:f7:a4:36:eb: 27:bc:92:4a:c0:99:75:68:e4:68:66:ac:c2:c3:1c: 0a:3f:8e:a2:86:f7:34:15:9b:43:ad:f6:30:70:3e: 3e:9d:aa:75:bf:39:55:85:89:b8:f1:d2:a0:31:5a: a9:a3:3f:3c:97:4b:37:37:89:67:15:8c:8c:fe:4f: d0:d4:c8:13:44:50:b9:ff:8a:9b:5c:fc:63:8c:56: a3:0a:31:46:84:fa:28:ec:c9:f9:28:27:58:82:9b: 83:1a:e6:29:e5:4e:61:85:66:61:df:26:1a:c4:ea: cd:28:a2:84:7a:8d:0d:5e:74:8f:cf:7e:50:29:a8: 2a:36:1d:9b:d5:5a:47:0f:3f:ea:dd:8d:b8:18:c9: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 149.19.156.0/22 185.113.180.0/22 185.123.144.0/22 185.123.152.0/22 185.124.56.0/21 185.186.60.0/22 185.200.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398217 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:36:60:20:4b:4d:90:30:68:de:98:53:0c:42:e1:e9:51:2c: 44:03:4e:d7:42:71:9e:79:ef:4e:2a:1e:43:bb:47:00:d4:e5: 17:b9:4b:db:ca:86:88:66:1a:b4:34:4d:0f:25:6c:22:25:ca: e3:c3:d3:fc:2b:90:1e:82:26:27:2d:d2:6c:c3:f7:f8:eb:1e: 25:ea:e0:e0:57:3a:96:bf:f0:c5:3a:55:82:1f:81:41:25:33: 25:6c:ef:34:6b:c2:e4:cb:0c:c6:83:60:e1:88:e2:79:13:b5: ab:ef:1b:17:19:84:1f:2b:9e:6b:cc:6d:08:76:b2:98:17:95: b4:78:0f:0b:a2:66:81:b4:61:9b:6e:69:84:a2:52:25:8c:83: e9:08:64:8c:ef:b0:2f:1e:22:8e:0d:4f:a6:4d:36:d4:9b:96: cd:e8:f8:68:71:60:ec:38:d5:68:8a:7c:e2:53:f7:b0:a4:5b: c6:06:92:bb:ae:e9:52:f8:fa:73:21:44:74:ff:36:ed:60:de: 9f:37:0d:a1:7c:35:07:cf:77:df:50:ca:6d:f5:2c:99:66:55: c9:cb:2b:3a:4e:93:5e:c1:ce:95:08:05:99:98:9f:1c:4a:44: 90:7d:e0:ea:fe:95:13:53:cd:99:4f:f8:33:ea:c9:e5:19:8a: 0f:a5:8e:5a -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEll4eHMYPPTO1nYlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQwMzAwNDUzNVoXDTI3MDcwNzAwNDUzNVowLzEtMCsGA1UEAxMk NTA1NTRhZjMtODEwOC00OTFkLTg0ZTQtMjQwZjQ4NzQ4MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnshTbGLgbAJJomxb3gR+lC3/QIUSH8A+FqUB C3jAL9WC3Wq8QEX/k2D2SjSOT4mXt7qrTD06BjoSwHBm0Fyq6rHFQj45ZEyeNazT 47G2+iI22f+k+r7veSrSY+uTwbkelNE6JZBRT4VRV8JoKTAEjpORwvekNusnvJJK wJl1aORoZqzCwxwKP46ihvc0FZtDrfYwcD4+nap1vzlVhYm48dKgMVqpoz88l0s3 N4lnFYyM/k/Q1MgTRFC5/4qbXPxjjFajCjFGhPoo7Mn5KCdYgpuDGuYp5U5hhWZh 3yYaxOrNKKKEeo0NXnSPz35QKagqNh2b1VpHDz/q3Y24GMkyeQIDAQABo4IEPzCC BDswHQYDVR0OBBYEFGL5nkuEFKfUrSISTNvjWXeRb7oMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 MDU1NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBmNDg3NDgzM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzUwNTU0YWYzLTgxMDgtNDkxZC04 NGU0LTI0MGY0ODc0ODMzYS81MDU1NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBmNDg3 NDgzM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBAKVE5wDBAK5cbQDBAK5e5ADBAK5e5gDBAO5fDgD BAK5ujwDBAK5yOwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhOJMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJU2YCBLTZAwaN6YUwxC4elRLEQDTtdCcZ55704qHkO7RwDU5Re5S9vKhohmGrQ0 TQ8lbCIlyuPD0/wrkB6CJict0mzD9/jrHiXq4OBXOpa/8MU6VYIfgUElMyVs7zRr wuTLDMaDYOGI4nkTtavvGxcZhB8rnmvMbQh2spgXlbR4DwuiZoG0YZtuaYSiUiWM g+kIZIzvsC8eIo4NT6ZNNtSbls3o+GhxYOw41WiKfOJT97CkW8YGkruu6VL4+nMh RHT/Nu1g3p83DaF8NQfPd99Qym31LJlmVcnLKzpOk17BzpUIBZmYnxxKRJB94Or+ lRNTzZlP+DPqyeUZig+ljlo= -----END CERTIFICATE-----Generated at Fri Apr 4 20:16:50 2025 by rpki-client