$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer File: d90d18d1-dead-4d11-bed3-243759e40831.cer (raw, json) Hash identifier: JDm5VUuIXdRQLLLUdkSvkfJnK8XRrLvDUYAUl7aIvg4= Subject key identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848C413F934C31F46C638CE6DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 01:45:34 +0000 Certificate not after: Mon 10 May 2027 00:45:34 +0000 Subordinate resources: AS: 16668 IP: 168.245.132.0/23 IP: 168.245.232.0/23 IP: 208.72.84.0/22 IP: 216.41.142.0/24 IP: 2610:178::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:13:f9:34:c3:1f:46:c6:38:ce:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 4 01:45:34 2025 GMT Not After : May 10 00:45:34 2027 GMT Subject: CN=d90d18d1-dead-4d11-bed3-243759e40831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:f5:c4:c0:c4:09:af:da:93:e3:58:15:7c: 66:2a:a3:d3:22:bc:79:06:f3:f7:eb:66:c2:bb:20: f9:16:5a:8f:51:ba:e8:72:88:88:50:da:30:29:5c: f6:96:22:6a:69:24:ef:1d:ca:4b:be:81:89:65:62: d0:00:8d:3a:eb:ad:71:71:b6:40:59:79:01:b8:ae: 0f:e2:47:33:94:8d:cd:38:7d:21:d9:0d:9b:c9:89: a7:20:f0:a2:a1:b3:37:8e:63:48:78:70:86:41:40: db:a9:c4:54:c2:bd:c9:a1:2b:03:8c:32:35:1a:b7: 66:3d:df:c1:ab:c9:10:61:c9:83:7a:53:49:13:2a: a0:01:08:6a:a9:df:8a:17:ce:bc:13:10:b9:ec:c0: 03:05:e6:10:1e:9e:0f:01:d0:a1:64:14:f9:aa:b2: 73:5c:d0:c2:a0:cd:a3:5e:94:b1:48:5c:ce:94:63: b9:44:1e:98:53:0f:50:bd:94:c8:ed:6a:f7:95:f1: 40:65:25:2b:ee:27:09:6b:1d:55:7f:70:8e:89:c1: bb:d4:cd:de:b2:d9:21:ab:2d:5a:7b:36:cf:44:29: 62:f8:48:6a:90:83:7d:08:fe:7d:29:47:9a:b3:5f: b4:f3:23:d9:70:ab:84:13:c2:36:8e:f1:39:25:d9: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 168.245.132.0/23 168.245.232.0/23 208.72.84.0/22 216.41.142.0/24 IPv6: 2610:178::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16668 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a3:db:f1:1c:7c:ca:60:e5:6d:97:04:9d:36:4a:17:d1:a8: cb:e5:a6:2d:82:e5:76:68:19:91:11:42:dc:99:26:77:67:fb: 3b:b4:77:ca:ce:b3:c4:1e:3c:07:83:97:89:21:c8:37:a7:95: 2d:10:59:83:4f:17:0a:35:38:3a:b8:25:6e:4b:7d:40:b8:b7: b7:53:86:a5:f1:d3:0d:93:f3:c1:0a:55:eb:b2:53:7f:58:4f: ec:b0:f3:7d:bf:e2:ff:4c:7f:d0:e2:84:26:d9:d9:de:bc:c1: 78:5a:c4:2f:d6:86:65:6f:10:98:d0:28:c4:ae:e3:f7:0d:02: 7b:76:34:ae:3b:be:cb:00:f8:a0:3d:b1:c0:a0:04:8b:ae:5d: dd:1f:0e:d4:55:db:06:b4:65:3f:0a:c2:21:4e:4a:50:1e:ad: 81:86:c1:05:80:7d:0f:07:6a:eb:4b:64:1e:d3:6b:5c:3c:6f: 6c:23:7d:e9:ff:c3:30:f1:54:71:a8:96:77:f5:29:00:fb:6d: b2:94:8f:ee:6d:49:9e:11:3a:1c:b3:01:ce:f6:db:c4:d9:5f: ab:8b:d4:7c:dd:b0:d9:10:94:a8:5a:03:8a:98:dc:cf:fb:61: a9:dc:49:ed:87:ab:fa:99:37:58:7e:42:a4:7a:fa:1d:ee:c7: 04:4f:97:bc -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEjEE/k0wx9GxjjObcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIwNDAxNDUzNFoXDTI3MDUxMDAwNDUzNFowLzEtMCsGA1UEAxMk ZDkwZDE4ZDEtZGVhZC00ZDExLWJlZDMtMjQzNzU5ZTQwODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUP1xMDECa/ak+NYFXxmKqPTIrx5BvP362bC uyD5FlqPUbrocoiIUNowKVz2liJqaSTvHcpLvoGJZWLQAI06661xcbZAWXkBuK4P 4kczlI3NOH0h2Q2byYmnIPCiobM3jmNIeHCGQUDbqcRUwr3JoSsDjDI1GrdmPd/B q8kQYcmDelNJEyqgAQhqqd+KF868ExC57MADBeYQHp4PAdChZBT5qrJzXNDCoM2j XpSxSFzOlGO5RB6YUw9QvZTI7Wr3lfFAZSUr7icJax1Vf3COicG71M3estkhqy1a ezbPRCli+EhqkIN9CP59KUeas1+08yPZcKuEE8I2jvE5JdnQPwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFGEyVS8R8CYFK/VfrsrKxKeacFm4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k OTBkMThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3NTllNDA4MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q5MGQxOGQxLWRlYWQtNGQxMS1i ZWQzLTI0Mzc1OWU0MDgzMS9kOTBkMThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3NTll NDA4MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAGo9YQDBAGo9egDBALQSFQDBADYKY4wDQQCAAIw BwMFACYQAXgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICQRwwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeaPb 8Rx8ymDlbZcEnTZKF9Goy+WmLYLldmgZkRFC3Jkmd2f7O7R3ys6zxB48B4OXiSHI N6eVLRBZg08XCjU4Orglbkt9QLi3t1OGpfHTDZPzwQpV67JTf1hP7LDzfb/i/0x/ 0OKEJtnZ3rzBeFrEL9aGZW8QmNAoxK7j9w0Ce3Y0rju+ywD4oD2xwKAEi65d3R8O 1FXbBrRlPwrCIU5KUB6tgYbBBYB9Dwdq60tkHtNrXDxvbCN96f/DMPFUcaiWd/Up APttspSP7m1JnhE6HLMBzvbbxNlfq4vUfN2w2RCUqFoDipjcz/thqdxJ7Yer+pk3 WH5CpHr6He7HBE+XvA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:02 2025 by rpki-client