$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer File: 5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer (raw, json) Hash identifier: rPdYeyS6OIMnOfFP+YtkSLo2YA3oOg4klOlmTGy7tuE= Subject key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847F753C652A71915B7DBC57580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Nov 2024 17:33:24 +0000 Certificate not after: Sun 20 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 33083 IP: 23.129.196.0/24 IP: 69.166.8.0/23 IP: 192.34.80.0/21 IP: 199.217.104.0/22 IP: 208.89.60.0/22 IP: 2602:ff65::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f7:53:c6:52:a7:19:15:b7:db:c5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 22 17:33:24 2024 GMT Not After : Dec 20 01:45:27 2026 GMT Subject: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:69:e6:f4:7b:57:5d:1e:81:29:8a:99:80: df:40:6b:fe:23:47:c6:fb:fb:b5:31:52:67:30:34: 3b:f4:09:71:39:d8:68:df:44:84:83:25:c0:94:72: 4f:6f:43:c0:88:0d:cc:a6:8f:5c:c6:5f:f8:0d:32: f9:0f:52:30:5f:11:93:57:2d:05:94:cb:b3:e0:61: e5:39:54:6b:1d:0b:bb:be:02:ce:fd:4c:67:8d:8f: ad:e6:2b:f1:b2:0b:4d:bb:bf:b4:d7:56:e4:39:11: 48:4d:56:c9:62:33:d3:26:93:95:82:08:1f:bd:e2: 63:1e:f3:f2:07:42:d1:99:fb:5f:ae:7d:2f:33:1f: c0:f4:14:36:75:ea:11:bf:5f:d3:ba:7e:6a:1f:6a: dd:9e:4c:ca:6d:89:bf:04:ab:04:8a:1e:38:41:5c: 81:06:4d:e2:16:18:4e:fa:b0:4d:6a:b6:e4:88:1f: 5f:d1:cc:00:0b:c5:ef:72:44:6e:26:13:b5:3d:3b: 19:3e:43:03:4d:50:f3:b0:c3:a7:a8:93:4a:af:fc: f8:f3:a3:f3:42:aa:b4:3e:0f:11:a9:5b:ef:81:bc: bd:95:25:89:f6:52:78:e4:40:de:e0:40:cf:a0:8a: 04:14:5f:80:5f:1b:64:5e:49:f2:93:1a:70:cb:04: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.129.196.0/24 69.166.8.0/23 192.34.80.0/21 199.217.104.0/22 208.89.60.0/22 IPv6: 2602:ff65::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33083 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8f:4f:f9:69:4f:b4:43:71:a0:0d:98:37:c1:cd:a6:b9:93: 9e:a1:c8:1d:b0:69:90:b4:fd:11:dc:cd:9f:2d:cd:ec:3f:d3: 33:13:a3:9c:d2:11:98:b2:ce:2e:ad:db:7b:e5:85:ec:89:0d: 40:ad:3c:9f:f2:17:67:7a:cf:5c:a2:92:4d:c0:dc:a8:e0:06: 9f:5d:65:ac:eb:e6:e5:3b:b1:ca:d5:14:4e:3e:68:9a:11:b4: e2:92:b2:95:e1:96:ab:e9:91:1e:83:ab:20:76:d1:3c:29:44: 42:04:d4:97:d0:f8:2a:ba:43:42:82:73:00:40:99:c7:47:ff: ff:06:1e:77:1b:cc:0a:9c:9c:08:8d:aa:09:ee:46:c4:37:3b: bb:2e:2b:f5:2b:a6:5e:15:98:99:f2:e9:d8:c8:7d:36:54:3e: e2:ce:da:e7:4c:e2:30:2e:d1:5a:e4:cf:1b:41:69:69:a7:94: 78:a8:11:fa:71:9a:2d:8b:93:84:c5:f6:98:5a:8c:d2:1b:64: b0:3d:ae:e4:45:7b:f9:17:e9:35:c7:70:15:17:4c:b2:47:16: 3a:7f:e6:11:0e:79:14:40:67:33:3c:f4:66:11:53:d5:e0:db: 37:7e:02:4f:43:27:72:8b:1a:15:26:53:30:00:e5:23:3d:e3: 8d:28:cf:f4 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEf3U8ZSpxkVt9vFdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTEyMjE3MzMyNFoXDTI2MTIyMDAxNDUyN1owLzEtMCsGA1UEAxMk NWM0OTQ0YzQtMDQ1Ni00YzNjLTliYTctOTBlM2JjYmU0N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZNp5vR7V10egSmKmYDfQGv+I0fG+/u1MVJn MDQ79AlxOdho30SEgyXAlHJPb0PAiA3Mpo9cxl/4DTL5D1IwXxGTVy0FlMuz4GHl OVRrHQu7vgLO/UxnjY+t5ivxsgtNu7+011bkORFITVbJYjPTJpOVgggfveJjHvPy B0LRmftfrn0vMx/A9BQ2deoRv1/Tun5qH2rdnkzKbYm/BKsEih44QVyBBk3iFhhO +rBNarbkiB9f0cwAC8XvckRuJhO1PTsZPkMDTVDzsMOnqJNKr/z486PzQqq0Pg8R qVvvgby9lSWJ9lJ45EDe4EDPoIoEFF+AXxtkXknykxpwywT9vwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFLNyBL1XwkH5O426W2Gyy4anPyk1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 YzQ5NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUzYmNiZTQ3YjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVjNDk0NGM0LTA0NTYtNGMzYy05 YmE3LTkwZTNiY2JlNDdiOC81YzQ5NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUzYmNi ZTQ3YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAAXgcQDBAFFpggDBAPAIlADBALH2WgDBALQWTww DgQCAAIwCAMGBCYC/2UAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCBOzBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBFj0/5aU+0Q3GgDZg3wc2muZOeocgdsGmQtP0R3M2fLc3sP9MzE6Oc0hGY ss4urdt75YXsiQ1ArTyf8hdnes9copJNwNyo4AafXWWs6+blO7HK1RROPmiaEbTi krKV4Zar6ZEeg6sgdtE8KURCBNSX0PgqukNCgnMAQJnHR///Bh53G8wKnJwIjaoJ 7kbENzu7Liv1K6ZeFZiZ8unYyH02VD7iztrnTOIwLtFa5M8bQWlpp5R4qBH6cZot i5OExfaYWozSG2SwPa7kRXv5F+k1x3AVF0yyRxY6f+YRDnkUQGczPPRmEVPV4Ns3 fgJPQydyixoVJlMwAOUjPeONKM/0 -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:03 2025 by rpki-client