$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer File: 721773b3-ff70-4a20-99dc-aaba81c23ebf.cer (raw, json) Hash identifier: pxZjHV+8BMIN3byndeuE+pjl6qqnW+jEEAvrf1I+js8= Subject key identifier: 86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584891D3A61FA11CABBBCB06CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jan 2025 01:45:32 +0000 Certificate not after: Thu 22 Apr 2027 00:45:32 +0000 Subordinate resources: IP: 149.112.13.0/24 IP: 2001:504:105::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:d3:a6:1f:a1:1c:ab:bb:cb:06:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 17 01:45:32 2025 GMT Not After : Apr 22 00:45:32 2027 GMT Subject: CN=721773b3-ff70-4a20-99dc-aaba81c23ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:cf:f4:bf:ca:f8:ba:ec:ec:6f:48:00:bc: 93:e5:10:10:d1:e8:3c:6c:7d:20:0f:48:33:03:68: 66:ce:aa:2b:53:5b:b7:fa:f1:a2:21:07:c8:79:e4: 08:d2:35:37:0d:e9:ec:db:8a:2f:d1:ae:18:a8:d4: 1d:84:e1:3a:16:22:c9:97:10:3e:c9:69:73:4e:e2: 69:fa:75:e7:f6:8a:94:88:49:86:ef:20:dc:86:61: 97:1b:36:4a:bd:34:e7:48:c2:0a:7f:a8:8e:5b:0a: 0b:dd:10:12:b8:51:ed:cc:d8:04:ab:ac:fc:70:6a: e1:06:76:eb:bf:00:1c:15:d4:f3:86:ee:39:ad:57: 41:06:34:2f:22:3a:96:05:64:9b:f9:df:0d:50:3a: bb:21:05:a1:75:3b:59:bc:49:52:53:ce:60:b5:e8: fe:89:0b:9a:0e:e4:7c:9d:ab:64:d7:59:cc:58:9a: bc:06:5f:3d:ad:46:5f:b5:aa:01:47:c2:e5:ec:e4: e7:7b:f2:8f:13:74:39:ae:41:0b:e3:bf:91:69:29: 18:4f:51:5a:af:6f:3e:ea:a4:c1:56:cc:5d:ff:46: 87:32:70:b8:8b:e5:9e:98:06:96:0c:85:8b:85:09: c9:1c:6d:ce:04:c0:92:c8:8a:32:24:a6:af:03:b4: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 149.112.13.0/24 IPv6: 2001:504:105::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a7:96:8f:ee:04:9e:68:93:11:c9:a9:13:46:f3:20:a4:38: e8:7d:54:5a:a2:fe:42:0d:b9:c2:c6:fc:a6:1b:da:c5:2e:93: ce:6e:ca:b1:f4:30:1d:6b:11:29:6a:7d:db:db:0c:b3:13:13: c0:8f:6b:79:e1:ac:40:ab:8a:91:81:29:5e:d6:ac:9b:73:f0: fb:04:5f:1b:d9:91:3a:58:a5:82:4c:55:a5:bd:d2:e5:0b:a7: e3:3c:df:47:5b:62:1a:01:da:37:58:79:30:47:3a:60:b1:8b: 31:f4:31:d9:35:60:bc:c8:ff:3e:42:05:7b:4d:38:3b:1f:2c: 5f:51:d0:f8:c7:67:90:a1:d6:50:7d:f8:56:d8:b8:14:0b:04: f8:16:aa:df:75:20:8f:5c:f2:ec:2b:ab:02:42:8d:59:8b:03: d9:f7:25:4b:a6:c5:76:23:5e:c0:d8:bb:c9:8e:68:f4:93:07: d7:83:9f:fd:bc:88:b7:27:66:9c:d4:3c:6f:6b:29:07:5e:11: 0e:0a:d4:e2:d0:87:98:ab:d3:02:b1:47:f1:3e:87:9a:32:4b: a3:67:ec:43:37:20:f3:ec:3c:d1:d2:2a:9c:6e:79:aa:1a:56: a7:19:81:70:e4:46:4b:b8:2b:51:85:a3:01:20:25:d9:37:4e: a5:f0:c6:e8 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEiR06YfoRyru8sGy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDExNzAxNDUzMloXDTI3MDQyMjAwNDUzMlowLzEtMCsGA1UEAxMk NzIxNzczYjMtZmY3MC00YTIwLTk5ZGMtYWFiYTgxYzIzZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz3P9L/K+Lrs7G9IALyT5RAQ0eg8bH0gD0gz A2hmzqorU1u3+vGiIQfIeeQI0jU3Dens24ov0a4YqNQdhOE6FiLJlxA+yWlzTuJp +nXn9oqUiEmG7yDchmGXGzZKvTTnSMIKf6iOWwoL3RASuFHtzNgEq6z8cGrhBnbr vwAcFdTzhu45rVdBBjQvIjqWBWSb+d8NUDq7IQWhdTtZvElSU85gtej+iQuaDuR8 natk11nMWJq8Bl89rUZftaoBR8Ll7OTne/KPE3Q5rkEL47+RaSkYT1Far28+6qTB Vsxd/0aHMnC4i+WemAaWDIWLhQnJHG3OBMCSyIoyJKavA7S0NwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFIZc74ILWExVG6UOnq7msxedcMn+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 MjE3NzNiMy1mZjcwLTRhMjAtOTlkYy1hYWJhODFjMjNlYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzcyMTc3M2IzLWZmNzAtNGEyMC05 OWRjLWFhYmE4MWMyM2ViZi83MjE3NzNiMy1mZjcwLTRhMjAtOTlkYy1hYWJhODFj MjNlYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACVcA0wDwQCAAIwCQMHACABBQQBBTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBdp5aP7gSeaJMRyakTRvMgpDjofVRaov5CDbnCxvymG9rFLpPObsqx9DAdaxEp an3b2wyzExPAj2t54axAq4qRgSle1qybc/D7BF8b2ZE6WKWCTFWlvdLlC6fjPN9H W2IaAdo3WHkwRzpgsYsx9DHZNWC8yP8+QgV7TTg7HyxfUdD4x2eQodZQffhW2LgU CwT4FqrfdSCPXPLsK6sCQo1ZiwPZ9yVLpsV2I17A2LvJjmj0kwfXg5/9vIi3J2ac 1DxvaykHXhEOCtTi0IeYq9MCsUfxPoeaMkujZ+xDNyDz7DzR0iqcbnmqGlanGYFw 5EZLuCtRhaMBICXZN06l8Mbo -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:28 2025 by rpki-client