$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer File: 5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer (raw, json) Hash identifier: fo6PVrfjtuygLVwDJGnTY0ZYWkw55HtSZWZv0lwea6o= Subject key identifier: C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858491509D144516E46A586F385E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 399206 IP: 104.224.3.0/24 IP: 2602:fc84::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d1:44:51:6e:46:a5:86:f3:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=5cc1a2c5-2615-4740-8c70-3bc7ed132d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:7b:d8:0e:da:9d:82:79:c0:ae:30:d7:27: 55:81:70:b3:bf:17:3a:93:27:c2:68:18:95:55:e9: 57:c1:9e:3f:31:56:8d:08:e6:79:25:02:d5:1e:11: 19:7d:88:c1:30:77:81:3d:ef:ac:b9:a1:71:73:fd: 2c:3f:4e:b2:ea:75:e5:96:40:a5:9f:d4:88:e1:35: 2e:03:96:54:06:43:82:a1:4f:3c:2f:7b:65:48:bf: a6:63:84:59:55:00:ef:a4:90:db:43:a9:b3:0a:f0: be:4a:37:ea:57:51:b8:07:d6:a1:4a:c8:97:93:98: d7:35:4a:e7:d9:ba:bc:cb:f2:64:c3:d9:dd:a0:0e: 3c:02:e3:76:f2:8e:26:fb:dd:17:a5:47:86:ce:f6: c3:41:f4:62:65:a7:82:38:47:53:e1:49:7b:ff:38: 75:c3:2a:5c:f2:06:2b:c8:2c:99:80:00:5a:26:e1: 4f:f7:95:c8:76:5e:ec:7b:f0:3d:5c:9b:b6:86:9b: 01:5d:93:a6:df:d6:f7:52:1c:c7:94:65:84:ff:57: 71:7a:69:32:cf:53:91:36:d3:18:d6:fd:dc:5f:8e: e7:e3:5c:b9:a2:22:f3:b5:d1:c3:b5:e1:a4:31:32: 2d:7c:8e:ea:a1:cd:c0:8f:cc:fe:a0:f0:64:5f:cd: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.224.3.0/24 IPv6: 2602:fc84::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399206 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:78:3f:e7:73:9b:77:26:f8:13:f0:59:33:fd:fd:cb:0f:f4: 99:79:7c:a8:b9:ee:8d:55:2f:0c:e3:b4:52:ab:2a:9a:11:3e: b3:eb:cc:79:66:8c:ac:11:13:a9:8f:d4:67:79:b9:1c:74:b8: 14:87:4e:1a:6b:95:47:95:2a:4f:73:01:4e:d8:ad:e4:9b:85: 71:38:ba:43:46:fd:9b:8d:f4:4e:c3:73:94:35:55:ce:8d:84: 5c:eb:e6:a6:8a:30:33:b7:65:6f:4e:d8:35:ee:52:f2:65:cf: 0b:86:c6:d9:67:9e:39:48:87:97:01:d9:6a:bd:02:51:43:6e: 64:b2:c5:f9:4f:57:28:51:5f:c3:19:f9:15:67:33:a0:48:f1: 9f:13:44:31:cf:93:4f:1b:30:75:87:cc:50:31:06:d5:2b:35: ba:f8:ce:0b:0a:a3:00:8d:98:a2:2e:b6:2d:e8:0e:b4:95:69: a3:4d:c0:c8:37:92:5e:3b:91:a3:be:5d:60:72:2f:89:cf:05: 7a:21:b4:99:24:0b:d6:83:86:80:c1:42:5e:bc:82:c0:f9:a0: 74:9e:00:1b:4e:93:8a:0a:e8:f6:19:f6:22:4c:a3:b0:c3:db: 80:2f:b4:58:c6:57:03:08:38:3d:8f:04:83:88:df:03:17:67: f4:05:c9:e8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkVCdFEUW5GpYbzheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk NWNjMWEyYzUtMjYxNS00NzQwLThjNzAtM2JjN2VkMTMyZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwF72A7anYJ5wK4w1ydVgXCzvxc6kyfCaBiV VelXwZ4/MVaNCOZ5JQLVHhEZfYjBMHeBPe+suaFxc/0sP06y6nXllkCln9SI4TUu A5ZUBkOCoU88L3tlSL+mY4RZVQDvpJDbQ6mzCvC+SjfqV1G4B9ahSsiXk5jXNUrn 2bq8y/Jkw9ndoA48AuN28o4m+90XpUeGzvbDQfRiZaeCOEdT4Ul7/zh1wypc8gYr yCyZgABaJuFP95XIdl7se/A9XJu2hpsBXZOm39b3UhzHlGWE/1dxemkyz1ORNtMY 1v3cX47n41y5oiLztdHDteGkMTItfI7qoc3Aj8z+oPBkX83H9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMV9bttckCDNUbKVnvsuxCrQHSE8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 Y2MxYTJjNS0yNjE1LTQ3NDAtOGM3MC0zYmM3ZWQxMzJkOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVjYzFhMmM1LTI2MTUtNDc0MC04 YzcwLTNiYzdlZDEzMmQ5OC81Y2MxYTJjNS0yNjE1LTQ3NDAtOGM3MC0zYmM3ZWQx MzJkOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABo4AMwDgQCAAIwCAMGBCYC/IQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYXZjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxeD/nc5t3JvgT8Fkz/f3LD/SZ eXyoue6NVS8M47RSqyqaET6z68x5ZoysEROpj9RnebkcdLgUh04aa5VHlSpPcwFO 2K3km4VxOLpDRv2bjfROw3OUNVXOjYRc6+amijAzt2VvTtg17lLyZc8LhsbZZ545 SIeXAdlqvQJRQ25kssX5T1coUV/DGfkVZzOgSPGfE0Qxz5NPGzB1h8xQMQbVKzW6 +M4LCqMAjZiiLrYt6A60lWmjTcDIN5JeO5Gjvl1gci+JzwV6IbSZJAvWg4aAwUJe vILA+aB0ngAbTpOKCuj2GfYiTKOww9uAL7RYxlcDCDg9jwSDiN8DF2f0Bcno -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:30 2025 by rpki-client