$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer File: 6f927dec-349c-478b-a1ac-2b628f2bc585.cer (raw, json) Hash identifier: 68svUDlrawqvpdZ91UWhugJsVidcUKY6PdxMsddmwvc= Subject key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858493936ECA340AD5BEBA3540180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 00:45:33 +0000 Certificate not after: Mon 21 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 136.22.12.0 -- 136.22.31.255 IP: 136.23.0.0/18 IP: 162.120.128.0/17 IP: 2606:40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:36:ec:a3:40:ad:5b:eb:a3:54:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 18 00:45:33 2025 GMT Not After : Jun 21 00:45:33 2027 GMT Subject: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:59:82:63:99:22:f2:d0:a8:db:1a:ef:1c: d5:81:e3:21:ce:56:28:a6:a3:b9:af:54:88:b8:30: b9:d1:b3:f6:07:83:0c:68:31:95:dc:2e:c4:5f:1f: a5:0f:1f:c0:ef:22:47:3d:f2:1a:19:36:d4:27:7d: df:50:d9:e3:c8:ee:a9:73:6b:8d:6a:8f:66:8b:08: bc:48:c9:aa:0a:4b:96:2e:55:19:ca:7e:8f:c7:db: 30:f8:60:b9:de:e1:21:1e:40:da:af:f3:49:ff:af: 49:09:70:ad:42:63:8b:40:dc:e5:4b:04:29:9c:4c: fd:a8:1e:7b:2f:20:da:c8:65:4e:ee:35:5c:13:9b: e1:f6:e8:09:b7:65:b4:67:99:9b:4c:66:eb:62:32: 79:25:0c:f2:e2:53:16:cf:c1:29:e4:d3:25:ff:94: c0:21:42:6a:9c:47:7c:99:ca:ae:58:cb:bf:99:da: 47:e3:e1:36:fb:90:7e:4f:12:f2:77:fa:ef:55:9c: 8c:24:bc:10:4b:6b:1f:94:4c:a9:9d:9c:3c:bf:7d: 84:b1:c9:0c:cf:58:21:c4:9b:6c:bd:39:fb:66:b6: fb:d0:c5:54:b5:fd:1e:68:93:d9:c8:3f:25:e2:05: 0a:f9:a1:2b:4c:4a:db:17:46:5e:58:d8:5c:31:70: 0a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 136.22.12.0-136.22.31.255 136.23.0.0/18 162.120.128.0/17 IPv6: 2606:40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:37:63:6a:0a:10:88:ea:ba:ab:71:e0:30:e5:38:0b:01:6c: 68:b4:32:f3:88:e2:b0:65:7d:e6:df:d9:41:49:64:5c:0e:34: f5:d1:ad:17:78:6c:ac:08:50:a9:4f:f0:3a:60:5b:be:35:6c: 01:18:10:9c:eb:97:8f:d6:27:ea:12:a0:27:d5:47:7a:f6:6c: 8e:89:ea:77:c7:e2:08:f5:c4:2a:5c:3c:bc:58:58:96:80:17: 40:17:f9:e6:82:74:0d:1e:7e:f3:65:7d:94:f9:16:87:fe:28: 88:42:6a:5a:f2:d9:d6:7a:40:57:65:32:a4:9b:6d:84:34:c4: a3:fc:fd:06:ef:8c:70:8f:fb:04:5a:95:2b:ff:8b:b4:09:23: 74:aa:f4:4a:36:20:fb:ab:ef:79:f2:d6:d6:33:f0:73:80:3f: bc:78:d9:4b:95:57:9d:42:c3:29:28:0e:1f:90:71:ad:11:bc: d5:4e:c5:86:3f:07:19:5a:e5:2d:39:b4:59:55:8e:cb:6c:0d: 16:ee:7d:1c:67:9d:a7:c1:4f:ee:dc:32:5a:b8:47:94:db:a9: fd:48:3a:fd:5f:81:e7:ed:a6:7a:c6:f5:0a:1f:23:91:fc:d7: d4:cf:70:17:3f:72:ab:49:7c:d8:34:e7:1a:70:3e:6f:da:59: 83:93:da:ab -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEk5NuyjQK1b66NUAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxODAwNDUzM1oXDTI3MDYyMTAwNDUzM1owLzEtMCsGA1UEAxMk NmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJjNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hZZgmOZIvLQqNsa7xzVgeMhzlYopqO5r1SI uDC50bP2B4MMaDGV3C7EXx+lDx/A7yJHPfIaGTbUJ33fUNnjyO6pc2uNao9miwi8 SMmqCkuWLlUZyn6Px9sw+GC53uEhHkDar/NJ/69JCXCtQmOLQNzlSwQpnEz9qB57 LyDayGVO7jVcE5vh9ugJt2W0Z5mbTGbrYjJ5JQzy4lMWz8Ep5NMl/5TAIUJqnEd8 mcquWMu/mdpH4+E2+5B+TxLyd/rvVZyMJLwQS2sflEypnZw8v32EsckMz1ghxJts vTn7Zrb70MVUtf0eaJPZyD8l4gUK+aErTErbF0ZeWNhcMXAKjQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFP2BYlJHvKzxuQlQURndbz8WR9l3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1h MWFjLTJiNjI4ZjJiYzU4NS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYy YmM1ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBowDAMEAogWDAMEBYgWAAMEBogXAAMEB6J4gDANBAIA AjAHAwUAJgYAQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEN2NqChCI6rqrceAw5TgLAWxotDLziOKwZX3m 39lBSWRcDjT10a0XeGysCFCpT/A6YFu+NWwBGBCc65eP1ifqEqAn1Ud69myOiep3 x+II9cQqXDy8WFiWgBdAF/nmgnQNHn7zZX2U+RaH/iiIQmpa8tnWekBXZTKkm22E NMSj/P0G74xwj/sEWpUr/4u0CSN0qvRKNiD7q+958tbWM/BzgD+8eNlLlVedQsMp KA4fkHGtEbzVTsWGPwcZWuUtObRZVY7LbA0W7n0cZ52nwU/u3DJauEeU26n9SDr9 X4Hn7aZ6xvUKHyOR/NfUz3AXP3KrSXzYNOcacD5v2lmDk9qr -----END CERTIFICATE-----Generated at Fri Apr 4 18:54:51 2025 by rpki-client