$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer File: 762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer (raw, json) Hash identifier: jmAxQ3gVuMpjpOgk7U0QalywLs5QilO32qDpfb7K8oA= Subject key identifier: 98:20:A3:61:27:44:13:15:E7:23:D9:AB:DC:B2:18:12:C7:2C:68:0C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584951D9A6FC34387B7806AE7F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 20:32:51 +0000 Certificate not after: Tue 29 Jun 2027 20:32:51 +0000 Subordinate resources: IP: 205.236.76.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:d9:a6:fc:34:38:7b:78:06:ae:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 26 20:32:51 2025 GMT Not After : Jun 29 20:32:51 2027 GMT Subject: CN=762fb9da-1e64-46dd-8f1f-dd257fd1cc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:b2:03:e3:31:54:30:31:0f:8d:e5:bb:ae: 6d:b6:a4:71:4d:29:11:7a:ca:87:99:5b:a2:40:a7: 50:d5:d5:6b:08:40:fe:7b:01:56:c7:a6:c6:c9:cf: a0:68:da:8e:07:14:5b:59:c3:73:e6:d5:7c:64:6b: c2:72:35:7d:e5:d6:81:74:53:43:a7:52:4b:d0:89: c5:c9:10:6c:63:28:67:10:70:e9:d6:c1:18:57:65: a3:0f:a0:61:92:47:43:61:61:3a:12:a7:e9:cc:f8: 86:92:f7:f2:78:3f:72:f1:0e:d1:b0:56:9c:0a:05: 67:c1:cc:d1:07:79:d1:e4:02:56:b7:d3:7b:5b:b8: 7c:38:42:35:de:c3:28:c7:24:39:03:30:73:ed:c2: 36:6e:94:08:e1:eb:4e:03:fc:70:5c:92:a7:a3:31: 9e:cc:8d:1c:ca:46:b2:a6:54:e8:2f:71:48:50:9c: 05:de:c2:43:d0:3c:e4:d9:5e:cf:f7:22:bc:97:a9: 11:2f:55:c3:b1:62:8c:44:ae:4e:a8:79:32:62:b9: fd:bc:a4:62:d7:b4:14:e6:03:5a:14:e4:e8:ad:1e: d2:02:ed:36:13:c1:fe:e3:5f:30:2b:6e:8e:7c:a7: 8b:90:b9:e9:f0:3d:2f:79:15:50:d5:63:9c:09:e0: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:A3:61:27:44:13:15:E7:23:D9:AB:DC:B2:18:12:C7:2C:68:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 205.236.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e1:4f:7e:5a:61:1f:db:56:5a:09:89:7b:45:c1:e3:a3:2e: 36:e3:20:a8:05:03:b0:a7:d5:ab:ec:f1:46:22:1d:71:0c:11: f0:11:0a:79:73:d9:33:ab:e3:1d:52:f0:ea:60:78:6b:41:6d: 59:7b:9b:2e:3b:fd:2f:ee:26:dc:4e:4b:4c:2a:f8:82:5e:28: 64:9e:28:b4:0c:7f:5f:47:34:df:1d:a3:80:63:06:1a:a5:ff: 0c:ca:01:3b:fb:2f:2b:c4:c7:03:27:41:d8:92:0d:b3:3e:f0: 4a:25:eb:62:75:6b:d9:55:5e:a5:14:d4:ce:e2:e3:ce:84:65: 2a:ae:c4:fc:bc:a5:ec:70:a2:09:fa:40:71:f6:b2:1a:f6:0d: 1d:9d:88:a1:2f:51:86:d2:ef:55:7b:cb:dc:d8:12:c3:df:0a: 07:39:86:c0:07:f1:e7:1f:89:2f:5e:7c:77:d9:47:77:5a:73: 3d:2f:ee:eb:bb:04:8d:c9:f6:91:44:18:bf:73:fa:5e:a8:63: 6b:83:3a:88:54:87:64:02:8b:d8:70:72:99:90:28:52:f6:43: a0:6d:28:1b:7f:24:e8:b8:2d:46:0f:65:f9:cc:9c:0b:13:29: 80:72:a1:fe:40:7d:49:33:cf:d6:69:e5:60:f8:35:61:3c:68: 9a:25:a2:6f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElR2ab8NDh7eAaufwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNjIwMzI1MVoXDTI3MDYyOTIwMzI1MVowLzEtMCsGA1UEAxMk NzYyZmI5ZGEtMWU2NC00NmRkLThmMWYtZGQyNTdmZDFjYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MuyA+MxVDAxD43lu65ttqRxTSkResqHmVui QKdQ1dVrCED+ewFWx6bGyc+gaNqOBxRbWcNz5tV8ZGvCcjV95daBdFNDp1JL0InF yRBsYyhnEHDp1sEYV2WjD6BhkkdDYWE6EqfpzPiGkvfyeD9y8Q7RsFacCgVnwczR B3nR5AJWt9N7W7h8OEI13sMoxyQ5AzBz7cI2bpQI4etOA/xwXJKnozGezI0cykay plToL3FIUJwF3sJD0Dzk2V7P9yK8l6kRL1XDsWKMRK5OqHkyYrn9vKRi17QU5gNa FOTorR7SAu02E8H+418wK26OfKeLkLnp8D0veRVQ1WOcCeB1qwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJggo2EnRBMV5yPZq9yyGBLHLGgMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 NjJmYjlkYS0xZTY0LTQ2ZGQtOGYxZi1kZDI1N2ZkMWNjOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzc2MmZiOWRhLTFlNjQtNDZkZC04 ZjFmLWRkMjU3ZmQxY2M5Yy83NjJmYjlkYS0xZTY0LTQ2ZGQtOGYxZi1kZDI1N2Zk MWNjOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7EwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB+FPflphH9tWWgmJe0XB 46MuNuMgqAUDsKfVq+zxRiIdcQwR8BEKeXPZM6vjHVLw6mB4a0FtWXubLjv9L+4m 3E5LTCr4gl4oZJ4otAx/X0c03x2jgGMGGqX/DMoBO/svK8THAydB2JINsz7wSiXr YnVr2VVepRTUzuLjzoRlKq7E/Lyl7HCiCfpAcfayGvYNHZ2IoS9RhtLvVXvL3NgS w98KBzmGwAfx5x+JL158d9lHd1pzPS/u67sEjcn2kUQYv3P6Xqhja4M6iFSHZAKL 2HBymZAoUvZDoG0oG38k6LgtRg9l+cycCxMpgHKh/kB9STPP1mnlYPg1YTxomiWi bw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:02 2025 by rpki-client