$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer File: d0a791ca-4569-43e8-b02a-989f79143fe4.cer (raw, json) Hash identifier: FmTUGHlu6h07spEbqlCG3aSFhV2nhlJAixiIupgA4C0= Subject key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848F0BEEB1493E3043F995E3F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 01:45:34 +0000 Certificate not after: Wed 26 May 2027 00:45:34 +0000 Subordinate resources: IP: 96.47.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:be:eb:14:93:e3:04:3f:99:5e:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 20 01:45:34 2025 GMT Not After : May 26 00:45:34 2027 GMT Subject: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:59:54:d1:18:cc:ab:78:96:99:7f:5c:64: b0:a9:fc:fb:18:c4:79:b6:4a:6a:18:98:38:ef:90: 04:46:34:eb:18:60:18:c1:18:04:49:b6:38:05:89: 43:58:b0:c4:e9:1b:a0:a0:49:9b:e4:33:03:f2:97: 3d:53:a1:ad:56:a2:99:7e:7a:81:aa:b5:87:48:ba: 00:3a:d5:ec:ef:dd:e3:63:09:82:1d:57:c8:e9:86: 03:62:1a:36:8f:01:b1:61:4c:d2:75:b7:c7:d9:3e: e9:b0:cf:fa:76:e7:f7:cc:6f:ff:16:0a:f9:4f:e9: bd:0b:d9:74:35:ee:5d:e8:34:55:d6:1f:72:b6:6e: a3:21:6f:4b:fd:bd:98:32:7d:0c:19:ab:d2:b2:7e: d4:82:18:e9:48:2f:6d:b8:b1:f3:a7:6a:b4:90:02: 3a:36:0b:e2:96:7c:cf:46:06:1b:8b:65:b5:0a:cc: e8:66:b8:62:c6:49:7c:37:05:e3:9a:0a:ea:89:63: 81:91:37:71:b6:a0:94:68:1f:fe:be:07:5f:d2:f5: 10:26:3c:3e:c7:5d:4b:37:93:28:52:1a:43:ef:03: 45:9a:12:5b:4d:46:3f:6c:b2:41:f8:b7:dc:dd:c0: 11:0a:ae:7b:f1:e0:cf:e4:9f:c4:d0:cd:56:19:ab: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 96.47.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:03:91:82:a7:8c:88:f8:b6:5b:55:09:d8:59:24:37:db:96: 34:8e:7b:3c:1a:b4:73:e7:a6:8c:b5:c0:eb:58:23:2d:2f:5e: d3:5d:2e:17:1a:ff:50:41:c9:50:c9:d4:bd:9c:12:6c:5a:f6: 28:a0:34:93:b9:6b:b8:06:5b:e1:ff:85:85:94:45:d8:57:ef: 97:0f:a1:3d:61:aa:02:0f:34:53:11:83:56:82:84:41:3b:24: db:ce:1b:80:6a:fd:7e:39:17:32:a1:98:5e:8b:fe:d6:09:92: 85:b1:f3:be:aa:ff:6b:95:10:89:4d:1d:52:3a:d2:f2:9d:94: 6c:6e:03:6b:c5:7a:5f:a3:cc:39:15:44:d1:4e:a3:d7:e6:7f: 6b:81:ad:07:39:19:47:8f:09:a1:24:e6:91:22:39:12:f0:f5: 88:d6:51:b5:29:38:39:01:8b:c1:95:d6:0b:67:94:08:7d:b2: bd:2e:58:7a:d6:7d:00:de:e8:79:72:c3:a7:4a:fa:30:37:02: 9d:28:3b:cb:b8:77:b6:1f:f2:bc:5a:89:7a:bf:56:6b:ed:6a: 9b:71:d9:72:d6:d1:31:14:7a:60:9d:bc:0f:15:ba:f4:34:f4: c1:da:c2:90:1f:91:65:e4:9d:b1:f1:81:aa:1f:61:01:5a:f2: 42:82:37:29 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjwvusUk+MEP5leP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIyMDAxNDUzNFoXDTI3MDUyNjAwNDUzNFowLzEtMCsGA1UEAxMk ZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQzZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUtZVNEYzKt4lpl/XGSwqfz7GMR5tkpqGJg4 75AERjTrGGAYwRgESbY4BYlDWLDE6RugoEmb5DMD8pc9U6GtVqKZfnqBqrWHSLoA OtXs793jYwmCHVfI6YYDYho2jwGxYUzSdbfH2T7psM/6duf3zG//Fgr5T+m9C9l0 Ne5d6DRV1h9ytm6jIW9L/b2YMn0MGavSsn7UghjpSC9tuLHzp2q0kAI6NgvilnzP RgYbi2W1CszoZrhixkl8NwXjmgrqiWOBkTdxtqCUaB/+vgdf0vUQJjw+x11LN5Mo UhpD7wNFmhJbTUY/bLJB+Lfc3cARCq578eDP5J/E0M1WGavN/wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF1kTQs+VGZOB4gWMvGLyB7HoYETMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QwYTc5MWNhLTQ1NjktNDNlOC1i MDJhLTk4OWY3OTE0M2ZlNC9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkx NDNmZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARgLyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApgORgqeMiPi2W1UJ2Fkk N9uWNI57PBq0c+emjLXA61gjLS9e010uFxr/UEHJUMnUvZwSbFr2KKA0k7lruAZb 4f+FhZRF2Ffvlw+hPWGqAg80UxGDVoKEQTsk284bgGr9fjkXMqGYXov+1gmShbHz vqr/a5UQiU0dUjrS8p2UbG4Da8V6X6PMORVE0U6j1+Z/a4GtBzkZR48JoSTmkSI5 EvD1iNZRtSk4OQGLwZXWC2eUCH2yvS5YetZ9AN7oeXLDp0r6MDcCnSg7y7h3th/y vFqJer9Wa+1qm3HZctbRMRR6YJ28DxW69DT0wdrCkB+RZeSdsfGBqh9hAVryQoI3 KQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:47 2025 by rpki-client