$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer File: e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer (raw, json) Hash identifier: 1rfysLEde9C7ncgTBJMctLpd3MpCIONTGPwHnB8klQE= Subject key identifier: 07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848519DEC18656C2A7F82C9B6A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Dec 2024 01:45:33 +0000 Certificate not after: Tue 30 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 27027 IP: 162.222.232.0/21 IP: 2607:8280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:9d:ec:18:65:6c:2a:7f:82:c9:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 25 01:45:33 2024 GMT Not After : Mar 30 00:45:33 2027 GMT Subject: CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:52:4c:41:3b:09:04:44:66:f3:61:1c:5f: 04:b4:e6:ae:39:af:48:f3:21:7c:a4:a1:50:ac:d1: b2:a8:73:db:50:c7:3c:6c:07:c2:a5:b9:d3:68:71: 15:1f:b6:85:b6:eb:33:c3:68:e0:48:7a:da:65:3b: 8f:73:dd:ad:85:76:93:2e:db:87:90:9f:87:85:22: 2c:66:14:ab:50:c0:82:eb:bd:a3:0c:a4:e2:22:ed: e1:b8:4c:bb:90:c2:a5:ba:e8:16:02:22:39:1b:aa: 77:e3:2c:c0:01:cd:4c:c9:60:c5:e3:cd:83:5f:ee: 01:a0:7e:80:20:64:5c:3b:8a:01:73:e9:9b:53:37: 58:89:74:a3:98:6c:d5:f5:00:29:da:49:b4:33:cf: bb:5c:e3:eb:54:d6:ce:6a:6b:8f:5f:53:de:b7:0d: b1:37:d5:0e:62:d2:b5:04:d7:0e:3e:24:00:c4:f0: 89:af:9f:5b:89:3c:6c:71:17:2b:af:07:14:c3:91: 7d:12:3e:3a:b5:d5:06:fd:b3:29:86:2b:74:00:e8: f6:80:78:c0:cb:b8:39:c7:82:94:a8:2c:21:03:44: 89:5d:f8:cf:1c:a9:04:1a:d0:58:28:70:66:e5:84: 21:f5:40:c3:16:de:d5:2d:84:e5:f5:11:ab:6a:35: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.222.232.0/21 IPv6: 2607:8280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27027 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:35:c2:9d:ec:a4:ab:b9:88:da:4a:ce:b8:02:3c:58:77:cb: e1:b7:1a:17:b9:16:e9:89:b7:8b:31:0b:61:7b:d1:5c:c8:67: 44:1c:98:8b:88:11:76:d2:2a:38:a6:16:8f:6a:8f:ca:3c:b9: 3f:e3:43:e5:04:ef:a4:2f:09:54:62:54:d9:6c:e4:87:e2:35: 65:07:1d:88:a5:46:99:06:3c:fe:9f:66:c9:cc:a2:e1:81:79: 6f:3c:af:55:64:02:6a:83:d2:dd:63:52:c0:10:90:9c:0f:6b: eb:ca:17:48:9b:80:52:d9:63:2a:2c:a3:1e:4f:42:d6:be:38: fa:44:c5:29:7f:8f:7b:98:70:84:a2:e3:4a:03:fd:88:bc:c9: 18:5d:ab:3d:dd:8c:fb:3b:96:3d:a8:e7:62:2d:9e:29:21:56: fb:6a:95:f7:4b:27:6e:34:5b:1a:f0:1e:73:1b:96:90:d0:56: 44:b2:a7:ef:d8:6d:11:8b:ef:1a:d0:7f:33:f3:e3:48:4a:75: 74:e5:44:8f:22:c5:61:72:4f:5d:99:e6:b5:37:e0:df:b7:28: 02:8e:cf:5c:b3:fb:22:72:a6:2c:4f:f0:8c:28:32:10:17:e0: 99:fa:0c:48:f0:53:05:29:d6:0a:fb:c9:ab:7c:ea:1d:f1:d4: f4:a1:19:9e -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEhRnewYZWwqf4LJtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIyNTAxNDUzM1oXDTI3MDMzMDAwNDUzM1owLzEtMCsGA1UEAxMk ZTYxMmNiZWItNzQ1Ni00MWNlLTliZjUtYzk2MzRmYTEyNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp5STEE7CQREZvNhHF8EtOauOa9I8yF8pKFQ rNGyqHPbUMc8bAfCpbnTaHEVH7aFtuszw2jgSHraZTuPc92thXaTLtuHkJ+HhSIs ZhSrUMCC672jDKTiIu3huEy7kMKluugWAiI5G6p34yzAAc1MyWDF482DX+4BoH6A IGRcO4oBc+mbUzdYiXSjmGzV9QAp2km0M8+7XOPrVNbOamuPX1Petw2xN9UOYtK1 BNcOPiQAxPCJr59biTxscRcrrwcUw5F9Ej46tdUG/bMphit0AOj2gHjAy7g5x4KU qCwhA0SJXfjPHKkEGtBYKHBm5YQh9UDDFt7VLYTl9RGrajUAiQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFAfcvmYn/6Cc3/VL7GrMWvRB66tDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l NjEyY2JlYi03NDU2LTQxY2UtOWJmNS1jOTYzNGZhMTI1NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U2MTJjYmViLTc0NTYtNDFjZS05 YmY1LWM5NjM0ZmExMjU0Yy9lNjEyY2JlYi03NDU2LTQxY2UtOWJmNS1jOTYzNGZh MTI1NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOi3ugwDQQCAAIwBwMFACYHgoAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaZMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjzXCneykq7mI2krOuAI8WHfL4bca F7kW6Ym3izELYXvRXMhnRByYi4gRdtIqOKYWj2qPyjy5P+ND5QTvpC8JVGJU2Wzk h+I1ZQcdiKVGmQY8/p9mycyi4YF5bzyvVWQCaoPS3WNSwBCQnA9r68oXSJuAUtlj KiyjHk9C1r44+kTFKX+Pe5hwhKLjSgP9iLzJGF2rPd2M+zuWPajnYi2eKSFW+2qV 90snbjRbGvAecxuWkNBWRLKn79htEYvvGtB/M/PjSEp1dOVEjyLFYXJPXZnmtTfg 37coAo7PXLP7InKmLE/wjCgyEBfgmfoMSPBTBSnWCvvJq3zqHfHU9KEZng== -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:13 2025 by rpki-client