$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer File: bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer (raw, json) Hash identifier: 3FGW7PpebW7FVHj7AkmifN3z45kU2jDaV3Ckq08jrgw= Subject key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858494CC1B4A17034A2773AEF4380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 00:45:33 +0000 Certificate not after: Mon 28 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 67.58.192.0/19 IP: 67.213.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c1:b4:a1:70:34:a2:77:3a:ef:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 25 00:45:33 2025 GMT Not After : Jun 28 00:45:33 2027 GMT Subject: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:f7:37:f2:fc:c9:e3:37:cc:4c:45:68:cd: 36:56:00:f1:7f:c8:37:e0:68:0a:58:cc:74:f4:0a: 4b:23:72:7d:f0:01:34:3e:85:09:88:a0:fe:2b:6b: 82:8a:ac:56:dd:04:a2:cb:2a:12:fd:fa:7a:f0:15: 7c:43:75:e5:fc:5d:df:11:5b:c8:1b:c1:4b:c5:4c: d3:d0:8d:da:94:e0:65:e5:69:04:e5:38:da:59:4f: 06:3e:13:ee:1d:78:e5:3d:2f:2c:06:33:30:a2:97: 65:50:40:14:17:84:64:d2:8d:87:6d:7b:40:49:1b: c5:a1:55:c5:63:dc:ad:bc:3e:c0:28:8d:d7:1c:66: ec:c6:64:dd:a4:d5:78:21:f1:93:7f:9b:f9:27:34: 2d:da:43:c0:ed:f6:e8:4c:d7:47:c5:3e:b4:38:46: 4c:46:d5:d2:42:59:c9:51:f5:cc:e8:13:c9:a5:5f: c4:72:0d:42:9d:05:71:21:c2:8f:20:0c:1f:52:96: 81:44:1a:86:7d:18:05:b4:fb:07:fe:85:f5:93:9b: da:55:42:60:12:92:cb:0a:ac:8b:93:27:eb:cb:c9: 59:d4:87:a7:3e:79:a3:95:d8:fc:08:39:65:e9:e7: 2a:e6:2c:76:bc:f4:2e:f1:9a:fe:31:3d:56:55:ea: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 67.58.192.0/19 67.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:fe:b5:a9:d6:e0:a8:4b:fe:0c:c8:be:09:16:a6:96:a1:49: fb:e9:1d:2f:54:19:04:4f:82:d6:b0:4c:59:bb:b5:7d:3e:8e: 60:58:9a:98:2d:67:f3:dd:30:2d:2f:f3:39:5f:0d:18:1c:dd: 62:92:3c:4e:2f:d1:53:2d:7d:a2:58:32:a9:ad:b2:fc:9d:8f: 88:2b:4f:c6:9f:88:60:0c:3e:36:b0:c7:32:49:ff:2e:c9:12: 31:ce:1c:c1:79:02:f2:fd:a3:cc:f5:24:dd:5c:ae:2a:88:e1: 3a:08:f4:48:78:3d:2c:2c:ad:62:17:56:e2:71:ae:58:76:59: 5a:6c:ed:ac:f2:ea:bb:96:f8:b4:c2:c0:6e:b9:a9:91:af:0e: 25:57:6e:ff:4c:b7:ab:d7:29:40:57:c9:6e:54:02:d2:70:4b: 5f:35:64:18:18:ac:4b:26:b5:bd:41:39:32:80:8c:a3:4a:fa: da:70:f5:b1:25:00:23:47:43:45:c3:1b:ed:68:e5:ba:01:09: ea:a0:88:ec:6a:05:73:ad:a8:48:9a:14:6b:9d:45:41:f5:c0: b4:c2:03:30:a3:01:2d:54:1d:09:fc:5b:ea:7c:43:3f:f3:4c: da:11:7a:88:47:b6:9c:a8:53:49:b8:38:eb:40:99:a5:07:35: 45:4d:26:b0 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWElMwbShcDSidzrvQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMyNTAwNDUzM1oXDTI3MDYyODAwNDUzM1owLzEtMCsGA1UEAxMk YmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVhYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUv3N/L8yeM3zExFaM02VgDxf8g34GgKWMx0 9ApLI3J98AE0PoUJiKD+K2uCiqxW3QSiyyoS/fp68BV8Q3Xl/F3fEVvIG8FLxUzT 0I3alOBl5WkE5TjaWU8GPhPuHXjlPS8sBjMwopdlUEAUF4Rk0o2HbXtASRvFoVXF Y9ytvD7AKI3XHGbsxmTdpNV4IfGTf5v5JzQt2kPA7fboTNdHxT60OEZMRtXSQlnJ UfXM6BPJpV/Ecg1CnQVxIcKPIAwfUpaBRBqGfRgFtPsH/oX1k5vaVUJgEpLLCqyL kyfry8lZ1IenPnmjldj8CDll6ecq5ix2vPQu8Zr+MT1WVepbRwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJVbUz1OqqPp4OdF/fzmSFknSy0SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i Y2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JjYTQ4YWQwLWY2MTMtNGM2Ni1i MDdhLTY0NzNkOGE1YWEyNi9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhh NWFhMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAVDOsADBARD1WAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYv61qdbgqEv+ DMi+CRamlqFJ++kdL1QZBE+C1rBMWbu1fT6OYFiamC1n890wLS/zOV8NGBzdYpI8 Ti/RUy19olgyqa2y/J2PiCtPxp+IYAw+NrDHMkn/LskSMc4cwXkC8v2jzPUk3Vyu KojhOgj0SHg9LCytYhdW4nGuWHZZWmztrPLqu5b4tMLAbrmpka8OJVdu/0y3q9cp QFfJblQC0nBLXzVkGBisSya1vUE5MoCMo0r62nD1sSUAI0dDRcMb7WjlugEJ6qCI 7GoFc62oSJoUa51FQfXAtMIDMKMBLVQdCfxb6nxDP/NM2hF6iEe2nKhTSbg460CZ pQc1RU0msA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:20 2025 by rpki-client