$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer File: d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer (raw, json) Hash identifier: c60SDajbI47jpMn0fTiejJ5s7zKCDnXyl8HW2CxoK3c= Subject key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584843A880A0F42B85ADB0DC15C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 01:45:33 +0000 Certificate not after: Thu 25 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 22302 IP: 64.22.32.0/19 IP: 64.246.128.0/19 IP: 72.10.192.0/19 IP: 96.43.64.0/20 IP: 2607:f058::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:a8:80:a0:f4:2b:85:ad:b0:dc:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 20 01:45:33 2024 GMT Not After : Mar 25 00:45:33 2027 GMT Subject: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:31:e3:c3:9c:70:f9:28:ff:46:d9:50:55: 34:a9:c3:fc:98:0b:0e:28:f2:52:19:01:07:4d:4d: 8d:56:16:9e:4f:17:be:cf:31:b9:64:9b:4e:57:46: ad:c4:8b:c9:6b:29:21:0d:0f:88:79:2c:ba:2a:70: 2d:51:26:e5:9c:a7:38:1b:ee:d9:42:e5:7b:15:d1: 77:66:b0:5c:85:29:98:70:df:4d:2f:af:fd:55:83: 24:04:8d:47:41:8a:68:e4:0a:ac:5d:1b:35:90:c4: c3:83:0c:66:23:79:87:f9:7f:bd:82:ea:39:f3:d9: 08:a2:f2:38:6a:ff:37:3f:65:08:aa:d8:2e:a2:57: 32:43:d7:a2:29:f7:ca:4c:f7:0c:b9:1a:ac:ef:bf: 85:82:fa:dd:36:e9:55:4f:8e:97:46:dd:a0:b1:06: aa:ab:e5:af:03:60:89:7f:02:d8:6a:f2:40:8c:68: 4b:f8:b4:38:53:df:ed:99:44:56:b5:6c:97:f3:0a: a9:2c:e2:1e:03:e3:46:ee:df:7a:77:95:e2:b5:e0: d0:f8:0d:ec:c6:ee:09:bb:ac:b3:fc:29:6a:1c:c8: 46:7c:45:b0:8e:6c:8d:48:e3:eb:91:a8:cd:26:97: 99:d6:da:d2:70:3e:4c:b8:3e:f8:13:9f:87:8b:ec: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.22.32.0/19 64.246.128.0/19 72.10.192.0/19 96.43.64.0/20 IPv6: 2607:f058::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22302 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:82:ad:01:96:1e:b5:5c:3b:55:8f:b4:41:73:03:29:37:94: 32:76:82:0c:6e:33:ae:f5:a2:94:99:04:38:aa:22:2d:1b:5d: ea:18:a5:7a:84:8e:71:ff:5d:f3:33:dd:ae:58:a9:ae:09:f1: 3f:d0:fd:bd:f5:ed:59:12:4f:8d:57:d1:73:df:da:fc:75:9d: db:92:04:30:f6:f0:14:0b:10:17:2a:6a:46:95:a0:2d:bb:f3: 01:db:4f:c4:ab:22:af:ef:c0:74:97:5c:aa:fb:b6:d1:54:65: 18:e4:a7:e4:3f:26:f5:fd:84:0b:48:bb:9a:d6:a0:0a:40:a8: 3d:8c:9a:cb:ec:c2:26:34:ac:84:e0:ba:23:a0:df:aa:6a:3d: d6:33:fd:19:38:e6:4e:b6:87:41:a4:f3:8e:0c:6a:5c:8a:d5: d2:94:89:4a:6a:63:72:78:65:36:7d:b8:56:f2:0d:1c:48:16: a2:4a:0e:82:10:a4:99:da:c3:4b:d0:37:35:58:23:4b:a1:62: f7:a6:3f:ec:50:59:b5:f0:fd:4e:0d:6d:42:d9:37:bd:86:bf: 68:a9:38:bc:a6:96:5e:74:c2:a9:b8:a9:e3:34:71:11:dd:82: d3:d6:72:88:30:40:fb:22:45:7e:df:a6:d9:84:1f:5c:96:75: f5:70:16:d9 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEhDqICg9CuFrbDcFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIyMDAxNDUzM1oXDTI3MDMyNTAwNDUzM1owLzEtMCsGA1UEAxMk ZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVjYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg60x48OccPko/0bZUFU0qcP8mAsOKPJSGQEH TU2NVhaeTxe+zzG5ZJtOV0atxIvJaykhDQ+IeSy6KnAtUSblnKc4G+7ZQuV7FdF3 ZrBchSmYcN9NL6/9VYMkBI1HQYpo5AqsXRs1kMTDgwxmI3mH+X+9guo589kIovI4 av83P2UIqtguolcyQ9eiKffKTPcMuRqs77+FgvrdNulVT46XRt2gsQaqq+WvA2CJ fwLYavJAjGhL+LQ4U9/tmURWtWyX8wqpLOIeA+NG7t96d5XiteDQ+A3sxu4Ju6yz /ClqHMhGfEWwjmyNSOPrkajNJpeZ1trScD5MuD74E5+Hi+ythQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFGp3y7uAfa/gwWdD4rDWuAulRTl7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QxYjAwNWY1LWEzMTItNGNiNS04 MWQ4LWE1YzBiZWQ1Y2E0ZC9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVk NWNhNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVAFiADBAVA9oADBAVICsADBARgK0AwDQQCAAIw BwMFACYH8FgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVx4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJYKt AZYetVw7VY+0QXMDKTeUMnaCDG4zrvWilJkEOKoiLRtd6hileoSOcf9d8zPdrlip rgnxP9D9vfXtWRJPjVfRc9/a/HWd25IEMPbwFAsQFypqRpWgLbvzAdtPxKsir+/A dJdcqvu20VRlGOSn5D8m9f2EC0i7mtagCkCoPYyay+zCJjSshOC6I6Dfqmo91jP9 GTjmTraHQaTzjgxqXIrV0pSJSmpjcnhlNn24VvINHEgWokoOghCkmdrDS9A3NVgj S6Fi96Y/7FBZtfD9Tg1tQtk3vYa/aKk4vKaWXnTCqbip4zRxEd2C09ZyiDBA+yJF ft+m2YQfXJZ19XAW2Q== -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:46 2025 by rpki-client