$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer File: 63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer (raw, json) Hash identifier: ZkBXx93i2Bz0JhwMP2EekuxelDWpz5MpukPO/OgTGtY= Subject key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858482ECD2548F3D6B017C10F6D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Dec 2024 14:27:25 +0000 Certificate not after: Wed 23 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 52210 AS: 401038 IP: 23.130.136.0/22 IP: 149.112.74.0/24 IP: 172.99.232.0/23 IP: 192.67.32.0/22 IP: 204.10.192.0/22 IP: 2001:504:132::/48 IP: 2602:fcd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:cd:25:48:f3:d6:b0:17:c1:0f:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 12 14:27:25 2024 GMT Not After : Dec 23 01:45:26 2026 GMT Subject: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:36:0a:38:5b:cc:00:34:eb:a3:ed:59:27: b4:e8:c2:c3:89:e3:e0:fb:ad:c7:50:b9:84:48:3b: f9:59:a3:74:57:b5:d6:ba:cf:64:87:9c:a1:f3:91: 6a:67:1d:47:92:5e:c6:90:b0:6f:43:70:85:20:f8: fa:d3:bc:63:6d:16:02:b1:32:2a:6e:6e:73:2d:c5: 15:70:81:23:b5:ee:56:92:11:7c:54:e4:3b:2f:2f: 10:85:4a:a2:32:c2:9a:40:fa:56:34:01:73:b2:39: 51:bc:11:90:6e:a0:c3:ba:ab:ad:25:2a:fa:90:d2: 22:86:3e:25:3d:18:ef:9c:6c:11:f5:2a:7b:39:89: 20:86:6e:67:9c:1c:1e:56:e9:16:8e:bf:20:33:b1: 5c:c8:af:c3:4d:f0:30:43:8f:1a:af:a2:b7:e7:42: 09:00:a3:8d:68:b7:37:b9:5a:60:40:0c:7d:2c:c2: a3:ff:17:f2:44:43:03:72:be:d2:36:f8:05:38:b1: 91:f4:b4:ae:cd:c3:78:9e:fd:9d:e8:78:4b:ca:79: e3:52:9b:70:8f:c9:c7:ff:4f:b5:97:68:25:a4:e7: 25:e0:0a:8e:5c:2a:e0:cc:43:74:78:cf:01:48:ee: ae:d9:b0:67:32:33:d7:a7:92:f4:6f:20:34:17:3b: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.130.136.0/22 149.112.74.0/24 172.99.232.0/23 192.67.32.0/22 204.10.192.0/22 IPv6: 2001:504:132::/48 2602:fcd3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52210 401038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f0:1a:3b:24:7f:fb:ef:5a:81:fb:47:99:89:2e:a0:cf:13: 8f:2b:ab:44:82:2d:ad:74:66:ba:1a:3d:8f:f0:68:d3:f9:22: d5:8d:75:70:ba:87:22:df:9b:ff:f9:04:5b:c4:1c:f3:b3:2a: 02:e3:4b:61:b6:9d:12:8e:e1:45:ef:f4:49:02:7c:9e:5f:81: 7a:b5:01:f8:a4:60:b5:f1:a7:73:41:77:83:20:c3:42:b0:33: ca:cb:8e:ca:03:ab:31:6f:4d:9a:72:b9:4e:fe:c7:ff:13:d7: df:26:e1:fd:f5:e7:b8:18:37:44:23:b3:3d:0c:19:68:04:5a: f3:37:d8:a0:1d:61:2c:76:bc:ba:c8:3c:a9:ee:6c:a9:23:7e: e8:0d:95:29:2b:98:11:20:17:67:04:6d:9c:8b:4c:75:4a:3d: fc:8b:3f:53:12:31:0e:f1:3b:bb:d2:7f:80:ec:36:15:a1:0a: ac:7f:c9:2b:aa:93:63:f7:8c:ea:7a:e9:65:5c:74:5a:74:7a: 57:e1:2e:39:db:e5:e0:17:4e:22:74:08:1b:22:b1:e6:4f:f1: 8e:1b:d5:bf:81:d7:ea:5a:c4:dd:a1:ff:8e:d7:82:17:6c:5b: b3:cb:9d:ba:dd:d6:c6:f5:63:cd:41:8e:28:66:be:d1:76:70: 14:cb:32:47 -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWEguzSVI89awF8EPbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIxMjE0MjcyNVoXDTI2MTIyMzAxNDUyNlowLzEtMCsGA1UEAxMk NjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLw2CjhbzAA066PtWSe06MLDiePg+63HULmE SDv5WaN0V7XWus9kh5yh85FqZx1Hkl7GkLBvQ3CFIPj607xjbRYCsTIqbm5zLcUV cIEjte5WkhF8VOQ7Ly8QhUqiMsKaQPpWNAFzsjlRvBGQbqDDuqutJSr6kNIihj4l PRjvnGwR9Sp7OYkghm5nnBweVukWjr8gM7FcyK/DTfAwQ48ar6K350IJAKONaLc3 uVpgQAx9LMKj/xfyREMDcr7SNvgFOLGR9LSuzcN4nv2d6HhLynnjUptwj8nH/0+1 l2glpOcl4AqOXCrgzEN0eM8BSO6u2bBnMjPXp5L0byA0FztyAwIDAQABo4IEUTCC BE0wHQYDVR0OBBYEFDKWuBloAAskortzDiHkKGxHdkvwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1h MWNkLTEyMjZlYTNjNDc5Ny82M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEz YzQ3OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MCQEAgABMB4DBAIXgogDBACVcEoDBAGsY+gDBALAQyADBALMCsAw FwQCAAIwEQMHACABBQQBMgMGBCYC/NMAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwDL8gIDBh6OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACLwGjskf/vvWoH7R5mJLqDPE48rq0SCLa10Zroa PY/waNP5ItWNdXC6hyLfm//5BFvEHPOzKgLjS2G2nRKO4UXv9EkCfJ5fgXq1Afik YLXxp3NBd4Mgw0KwM8rLjsoDqzFvTZpyuU7+x/8T198m4f3157gYN0Qjsz0MGWgE WvM32KAdYSx2vLrIPKnubKkjfugNlSkrmBEgF2cEbZyLTHVKPfyLP1MSMQ7xO7vS f4DsNhWhCqx/ySuqk2P3jOp66WVcdFp0elfhLjnb5eAXTiJ0CBsiseZP8Y4b1b+B 1+paxN2h/47XghdsW7PLnbrd1sb1Y81BjihmvtF2cBTLMkc= -----END CERTIFICATE-----Generated at Sat Apr 5 08:42:35 2025 by rpki-client