$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bc8e0482-b378-4634-af85-cc2d718469f8.cer File: bc8e0482-b378-4634-af85-cc2d718469f8.cer (raw, json) Hash identifier: kVNf8lzAakxIc25p+KJbVyQl6L1H0MKqB/cW1veDyKU= Subject key identifier: B9:E2:62:8F:C5:D0:1B:52:0D:38:A0:6D:EC:75:5E:A7:F6:2C:E6:3E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848731E204806B291712786F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bc8e0482-b378-4634-af85-cc2d718469f8/bc8e0482-b378-4634-af85-cc2d718469f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bc8e0482-b378-4634-af85-cc2d718469f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jan 2025 01:45:33 +0000 Certificate not after: Sun 11 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 399201 IP: 169.197.133.0/24 IP: 2602:809:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:1e:20:48:06:b2:91:71:27:86:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 6 01:45:33 2025 GMT Not After : Apr 11 00:45:33 2027 GMT Subject: CN=bc8e0482-b378-4634-af85-cc2d718469f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:ec:45:6b:33:95:8a:9c:57:40:36:9f:14: 28:91:8c:04:15:50:a0:ab:a2:c5:b0:38:35:a2:f6: 70:43:51:4b:cb:96:bc:1b:c6:ac:01:d4:cc:35:a6: 14:59:c1:3f:37:72:93:90:74:9c:7a:e2:fe:db:7a: 97:8e:84:49:c5:78:12:cc:74:25:45:c4:60:6a:21: 12:ed:7e:27:0d:ec:0a:4e:0f:a2:bf:b4:bf:00:94: 00:ba:62:da:8d:b0:18:7d:ba:9d:44:7a:39:ef:78: da:06:c6:c4:a9:ff:e1:b0:65:cf:5d:9f:a2:9a:f2: 76:6d:78:e8:af:c0:0a:65:3f:e0:3d:d7:43:ba:43: e2:ae:4a:2a:f8:bf:26:97:db:a2:e7:a0:b6:31:4f: 65:36:f2:10:b4:dc:1a:cf:0f:1b:27:ab:f2:66:c1: d1:a9:0b:c2:5f:21:7f:d1:11:67:56:47:cc:79:df: 93:f1:48:ad:71:4b:4a:ed:06:d7:4e:94:f3:70:0d: aa:6d:4f:12:7f:bb:10:70:23:44:34:ed:dc:2b:e5: 73:50:42:74:f1:d3:1f:2d:cf:1f:3f:9b:d5:2d:78: e6:65:c2:af:15:02:9e:64:4c:9f:9a:2c:1d:22:b2: 04:b6:de:ea:bd:cc:2d:8b:fc:cf:e7:f5:e9:42:18: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:62:8F:C5:D0:1B:52:0D:38:A0:6D:EC:75:5E:A7:F6:2C:E6:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bc8e0482-b378-4634-af85-cc2d718469f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bc8e0482-b378-4634-af85-cc2d718469f8/bc8e0482-b378-4634-af85-cc2d718469f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 169.197.133.0/24 IPv6: 2602:809:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:26:9c:50:a8:cc:27:62:e4:4d:0e:4f:99:89:46:76:5b:38: ce:5d:2b:18:09:ee:13:5a:76:1a:3d:91:12:4a:62:ee:a7:2b: 42:45:e9:6f:16:f9:21:e4:9d:a0:14:e1:7c:60:af:80:ff:2c: 79:d7:38:a3:17:d7:aa:33:cc:82:75:ee:b8:52:93:72:c2:bc: 45:aa:d6:68:1a:c0:7e:85:cd:db:ad:56:a0:48:f3:33:57:82: 79:43:3d:23:0a:63:d6:7e:0b:d6:6d:9f:90:e0:a8:d4:99:12: 15:5f:92:1f:f9:70:d0:e7:47:6b:4b:20:13:3f:3a:77:de:2c: 83:10:a8:b6:57:85:d9:ca:9e:60:9e:bb:ae:88:3e:ff:8b:af: 2b:fc:6a:16:4c:14:9a:b5:ca:83:a1:67:4e:c8:b5:ce:b8:bd: c9:b8:2f:6a:35:32:9c:87:ac:d4:4b:f1:2d:3a:ed:4e:b9:5e: 58:3b:73:d6:98:d7:62:10:71:78:fb:50:af:ac:8f:2e:51:ce: d5:01:f5:a2:53:13:02:dc:4c:0c:dd:9e:90:2f:0e:1d:11:ea: 94:1b:12:3e:6e:d3:5e:fe:9d:fe:2c:60:dd:fa:2d:47:f6:d8: 35:9f:37:38:37:f7:fd:dd:73:db:66:d8:f7:5d:84:3a:d2:f9: 68:b9:5e:46 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEhzHiBIBrKRcSeG8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDEwNjAxNDUzM1oXDTI3MDQxMTAwNDUzM1owLzEtMCsGA1UEAxMk YmM4ZTA0ODItYjM3OC00NjM0LWFmODUtY2MyZDcxODQ2OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgbsRWszlYqcV0A2nxQokYwEFVCgq6LFsDg1 ovZwQ1FLy5a8G8asAdTMNaYUWcE/N3KTkHSceuL+23qXjoRJxXgSzHQlRcRgaiES 7X4nDewKTg+iv7S/AJQAumLajbAYfbqdRHo573jaBsbEqf/hsGXPXZ+imvJ2bXjo r8AKZT/gPddDukPirkoq+L8ml9ui56C2MU9lNvIQtNwazw8bJ6vyZsHRqQvCXyF/ 0RFnVkfMed+T8UitcUtK7QbXTpTzcA2qbU8Sf7sQcCNENO3cK+VzUEJ08dMfLc8f P5vVLXjmZcKvFQKeZEyfmiwdIrIEtt7qvcwti/zP5/XpQhg8NQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFLniYo/F0BtSDTigbex1Xqf2LOY+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i YzhlMDQ4Mi1iMzc4LTQ2MzQtYWY4NS1jYzJkNzE4NDY5ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JjOGUwNDgyLWIzNzgtNDYzNC1h Zjg1LWNjMmQ3MTg0NjlmOC9iYzhlMDQ4Mi1iMzc4LTQ2MzQtYWY4NS1jYzJkNzE4 NDY5ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACpxYUwDwQCAAIwCQMHBCYCCAmQADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGF2EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALSacUKjMJ2LkTQ5PmYlGdls4 zl0rGAnuE1p2Gj2REkpi7qcrQkXpbxb5IeSdoBThfGCvgP8sedc4oxfXqjPMgnXu uFKTcsK8RarWaBrAfoXN261WoEjzM1eCeUM9Iwpj1n4L1m2fkOCo1JkSFV+SH/lw 0OdHa0sgEz86d94sgxCotleF2cqeYJ67rog+/4uvK/xqFkwUmrXKg6FnTsi1zri9 ybgvajUynIes1EvxLTrtTrleWDtz1pjXYhBxePtQr6yPLlHO1QH1olMTAtxMDN2e kC8OHRHqlBsSPm7TXv6d/ixg3fotR/bYNZ83ODf3/d1z22bY912EOtL5aLleRg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:38 2025 by rpki-client