$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer File: 6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer (raw, json) Hash identifier: 9VP2sPQj4Gzogru7J4UYuEiKtbXr4WRkai/GwIIUE18= Subject key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584822284AC0C2D0544E58841400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Dec 2024 01:45:33 +0000 Certificate not after: Sat 13 Mar 2027 01:45:33 +0000 Subordinate resources: AS: 19248 AS: 398068 AS: 398071 AS: 400625 -- 400626 AS: 400628 IP: 206.227.64.0/18 IP: 2620:19e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:28:4a:c0:c2:d0:54:4e:58:84:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 8 01:45:33 2024 GMT Not After : Mar 13 01:45:33 2027 GMT Subject: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:53:e9:c5:18:e4:47:cd:55:ac:74:54:ab:0c: cd:21:b0:91:1f:cb:cb:31:65:7f:da:e6:67:54:ce: c6:44:31:db:6b:1d:66:2b:33:b1:78:fb:51:60:68: fa:df:5d:c6:dd:2f:75:0b:5f:72:67:bb:6f:6b:c2: 2b:2a:03:89:32:8c:70:2e:3f:c5:73:6a:56:86:9c: dc:e9:48:e7:61:d7:fc:c9:f1:97:04:a2:cf:c0:04: 32:74:fc:ef:6b:fd:4d:72:58:25:71:b0:ad:09:1c: 03:9a:6a:47:f3:8f:57:46:f4:99:e1:10:1a:ad:84: 6f:c0:1c:99:a3:8b:17:f0:d3:17:ba:eb:aa:02:0d: 9b:32:a8:14:93:ba:a9:74:84:20:b2:65:5b:65:b5: da:30:5e:43:0c:c9:69:f1:90:8e:16:43:74:2d:8e: b8:07:49:85:38:96:69:2a:a9:5c:92:d3:f4:44:f5: f4:ac:4f:2e:98:6f:47:b1:49:7c:0e:4c:7a:e6:4b: eb:3a:75:c7:9a:2c:c6:53:d3:02:13:19:b1:fd:fc: 2c:81:4b:ad:4a:ac:4f:58:23:e6:83:6f:b9:9e:e9: 9d:19:7a:cd:3f:aa:08:76:78:3e:41:1a:f8:23:f9: 8a:c8:83:fb:27:38:98:03:81:97:5d:5a:75:a0:44: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 206.227.64.0/18 IPv6: 2620:19e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19248 398068 398071 400625-400626 400628 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c9:92:30:bd:12:69:b4:56:8a:68:87:a6:c0:e8:99:67:7d: 7e:23:ff:43:e0:7a:97:81:f8:22:da:84:7a:e8:32:7f:9e:fc: cd:3c:a7:87:2a:64:89:cf:a7:e5:20:8f:f7:dd:94:5a:d4:60: 38:69:6c:46:1a:42:6d:62:8b:ae:7f:2f:62:4f:b0:e5:ee:c1: b3:5f:41:8f:de:9c:db:2c:a4:2b:b1:57:34:ab:1f:f3:fa:01: 87:95:d4:73:dd:34:df:f9:2c:72:b7:2f:95:7e:25:21:ca:88: 40:44:f2:1e:af:64:73:33:8e:8b:8b:23:2f:e6:74:5f:83:cf: 8f:5a:77:bc:91:bb:62:8e:ba:f6:e5:99:1c:35:7b:11:b1:33: 62:e2:9c:c7:4e:ec:14:af:e4:33:3d:10:65:92:a8:2c:63:78: 0f:d5:97:7a:ac:e4:bf:4d:ec:e4:ec:c0:58:5f:67:71:53:d4: 1c:30:86:e2:6f:9b:fe:cb:2d:f6:d6:21:45:3a:a6:e5:d0:7d: f6:22:85:27:cd:1e:9a:c3:07:ba:a3:06:6c:f7:98:b2:37:b6: 1d:b9:c6:72:63:fc:e4:30:a3:94:87:de:1f:39:41:d5:85:bd: 0e:9e:94:bf:52:d7:7c:d0:a2:9d:d2:80:2a:37:9a:3f:7e:57: 25:e3:db:a9 -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWEgiKErAwtBUTliEFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIwODAxNDUzM1oXDTI3MDMxMzAxNDUzM1owLzEtMCsGA1UEAxMk NjQwNmFiNTAtNDcwYS00ZjBmLWJhNWUtNzUwMGE4Yjk3Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVPpxRjkR81VrHRUqwzNIbCRH8vLMWV/2uZn VM7GRDHbax1mKzOxePtRYGj6313G3S91C19yZ7tva8IrKgOJMoxwLj/Fc2pWhpzc 6UjnYdf8yfGXBKLPwAQydPzva/1NclglcbCtCRwDmmpH849XRvSZ4RAarYRvwByZ o4sX8NMXuuuqAg2bMqgUk7qpdIQgsmVbZbXaMF5DDMlp8ZCOFkN0LY64B0mFOJZp KqlcktP0RPX0rE8umG9HsUl8Dkx65kvrOnXHmizGU9MCExmx/fwsgUutSqxPWCPm g2+5numdGXrNP6oIdng+QRr4I/mKyIP7JziYA4GXXVp1oETYgwIDAQABo4IERTCC BEEwHQYDVR0OBBYEFLcOWIntq8iDBCVgihbR3E09EEK9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 NDA2YWI1MC00NzBhLTRmMGYtYmE1ZS03NTAwYThiOTdjZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzY0MDZhYjUwLTQ3MGEtNGYwZi1i YTVlLTc1MDBhOGI5N2NkNC82NDA2YWI1MC00NzBhLTRmMGYtYmE1ZS03NTAwYThi OTdjZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAbO40AwDgQCAAIwCAMGBCYgAZ4AMDQGCCsGAQUF BwEIAQH/BCUwI6AhMB8CAkswAgMGEvQCAwYS9zAKAgMGHPECAwYc8gIDBhz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7JkjC9Emm0Vopoh6bA6JlnfX4j/0PgepeB+CLahHroMn+e/M08p4cq ZInPp+Ugj/fdlFrUYDhpbEYaQm1ii65/L2JPsOXuwbNfQY/enNsspCuxVzSrH/P6 AYeV1HPdNN/5LHK3L5V+JSHKiEBE8h6vZHMzjouLIy/mdF+Dz49ad7yRu2KOuvbl mRw1exGxM2LinMdO7BSv5DM9EGWSqCxjeA/Vl3qs5L9N7OTswFhfZ3FT1BwwhuJv m/7LLfbWIUU6puXQffYihSfNHprDB7qjBmz3mLI3th25xnJj/OQwo5SH3h85QdWF vQ6elL9S13zQop3SgCo3mj9+VyXj26k= -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:39 2025 by rpki-client