$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer File: b8624cbb-ba19-47a6-b5ac-d0747149714c.cer (raw, json) Hash identifier: nxnJpGG/Atp6R0LsEzJhEeh/4LqoYxch4rHj+VElrAE= Subject key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858491A9F2CDEC4CFD97D669CE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 01:45:33 +0000 Certificate not after: Thu 10 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 11269 IP: 69.17.192.0/19 IP: 199.193.228.0/22 IP: 200.1.160.0/24 IP: 200.10.166.0/24 IP: 207.2.96.0/21 IP: 2605:e80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:9f:2c:de:c4:cf:d9:7d:66:9c:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 7 01:45:33 2025 GMT Not After : Jun 10 00:45:33 2027 GMT Subject: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:be:e5:30:f2:97:47:3d:57:3e:37:60:36: 40:bc:8b:00:56:1e:7f:6e:83:85:56:93:57:1d:96: 80:5f:99:cd:47:49:d2:00:d0:55:c1:29:d6:16:45: a0:13:47:80:69:13:86:91:82:d9:a3:cd:30:04:a3: d3:ad:68:4f:d7:88:e7:e2:61:e9:4b:a3:5b:d2:c7: 2d:89:c6:ae:a2:0c:f7:36:e5:e6:6b:c6:80:14:03: da:37:46:d6:b0:a9:eb:7d:33:8b:88:c2:9d:2c:d4: a5:16:10:33:12:d1:38:c9:7b:ff:63:89:97:18:1a: e2:99:21:cc:c7:19:89:0e:ec:03:e0:d2:26:ce:31: 7d:23:ea:a5:cf:a9:7f:ae:02:f1:08:7a:d2:7d:a7: db:05:32:e0:ff:32:fb:ce:86:65:53:f0:10:c4:92: 91:b1:84:ae:5e:b2:80:ed:2a:97:c6:dd:fb:12:50: 4e:2e:85:7f:c0:70:77:77:eb:be:b1:a6:99:46:00: af:b1:fc:ef:00:24:42:56:dc:83:34:2a:71:03:51: e2:85:6e:ef:34:ce:d5:37:c0:9a:70:05:30:4c:f4: 63:fd:55:59:82:44:3a:da:a0:fa:01:14:33:4b:37: 3d:b1:f7:77:e2:a2:6a:3d:0e:6b:d4:9b:96:90:c4: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.17.192.0/19 199.193.228.0/22 200.1.160.0/24 200.10.166.0/24 207.2.96.0/21 IPv6: 2605:e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11269 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a4:79:8f:90:cb:7e:67:83:52:14:f2:6e:52:1a:4d:9d:7c: b8:7e:84:d2:de:3a:d6:53:c9:26:64:44:ac:2e:5b:b2:b4:eb: 29:25:ec:a5:b5:7d:e8:59:e7:98:36:6c:93:0b:80:4c:02:04: 3c:86:17:12:19:cc:7f:15:74:ad:3f:58:05:33:b2:5b:44:b1: d0:95:33:2f:01:8c:c3:5c:f7:02:d2:75:91:c1:04:f0:8c:d4: 05:ff:d0:88:2e:d9:fd:6f:1f:ef:09:78:fd:1a:49:4e:11:82: d1:1e:0f:8f:c8:d5:c4:96:7d:be:b1:2c:44:d4:1c:65:e8:5b: 9d:bd:81:f8:0c:68:82:24:63:48:20:7d:4d:03:9f:29:63:08: e9:9d:f5:9c:63:ce:e0:27:35:6a:c9:ef:41:4c:fd:ea:06:21: 1b:a7:df:99:09:1f:4f:51:6e:5a:60:d5:17:ef:73:d3:b2:c2: 7d:56:26:ac:b1:14:d4:84:6e:85:10:ce:8a:24:e1:24:7c:54: 4e:4e:5e:81:c6:fc:83:8e:d0:37:e8:38:67:cf:4e:bf:bc:f5: 0c:c1:d9:62:15:a5:a0:33:11:f6:34:bf:fd:d7:ba:bc:2f:16: 33:8b:c9:69:9e:a1:9b:a5:b4:dc:16:75:74:d3:6c:e3:01:08: 6c:69:36:74 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEkanyzexM/ZfWac4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMwNzAxNDUzM1oXDTI3MDYxMDAwNDUzM1owLzEtMCsGA1UEAxMk Yjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaC+5TDyl0c9Vz43YDZAvIsAVh5/boOFVpNX HZaAX5nNR0nSANBVwSnWFkWgE0eAaROGkYLZo80wBKPTrWhP14jn4mHpS6Nb0sct icauogz3NuXma8aAFAPaN0bWsKnrfTOLiMKdLNSlFhAzEtE4yXv/Y4mXGBrimSHM xxmJDuwD4NImzjF9I+qlz6l/rgLxCHrSfafbBTLg/zL7zoZlU/AQxJKRsYSuXrKA 7SqXxt37ElBOLoV/wHB3d+u+saaZRgCvsfzvACRCVtyDNCpxA1HihW7vNM7VN8Ca cAUwTPRj/VVZgkQ62qD6ARQzSzc9sfd34qJqPQ5r1JuWkMR9RQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFHFqWiHuZiucEGfw4jgHeMsSjIynMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i ODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I4NjI0Y2JiLWJhMTktNDdhNi1i NWFjLWQwNzQ3MTQ5NzE0Yy9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0 OTcxNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAVFEcADBALHweQDBADIAaADBADICqYDBAPPAmAw DQQCAAIwBwMFACYFDoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLAUwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAAaR5j5DLfmeDUhTyblIaTZ18uH6E0t461lPJJmRErC5bsrTrKSXspbV96Fnn mDZskwuATAIEPIYXEhnMfxV0rT9YBTOyW0Sx0JUzLwGMw1z3AtJ1kcEE8IzUBf/Q iC7Z/W8f7wl4/RpJThGC0R4Pj8jVxJZ9vrEsRNQcZehbnb2B+AxogiRjSCB9TQOf KWMI6Z31nGPO4Cc1asnvQUz96gYhG6ffmQkfT1FuWmDVF+9z07LCfVYmrLEU1IRu hRDOiiThJHxUTk5egcb8g47QN+g4Z89Ov7z1DMHZYhWloDMR9jS//de6vC8WM4vJ aZ6hm6W03BZ1dNNs4wEIbGk2dA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:59:26 2025 by rpki-client