$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0.cer File: 0d810a50-f853-4d35-a6cd-a6ec483a37d0.cer (raw, json) Hash identifier: /KHZjo7b9Y24HXMHTI6uETr+7+bV7kD9RyUipFPt5M8= Subject key identifier: 1A:5C:D1:C5:20:BB:F6:4F:1F:2E:0D:62:6F:1B:18:69:6C:04:0E:B8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584967E1FAA9B700F3B1CD1E1DE1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/0d810a50-f853-4d35-a6cd-a6ec483a37d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Apr 2025 17:57:24 +0000 Certificate not after: Fri 28 May 2027 00:45:33 +0000 Subordinate resources: AS: 953 AS: 1020 AS: 13347 IP: 199.7.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:e1:fa:a9:b7:00:f3:b1:cd:1e:1d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 3 17:57:24 2025 GMT Not After : May 28 00:45:33 2027 GMT Subject: CN=0d810a50-f853-4d35-a6cd-a6ec483a37d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:84:18:19:67:67:dc:f5:66:ca:fd:25:e3: cb:96:e3:ec:d1:e8:a5:79:1f:f1:39:e5:c0:4d:c5: 5a:4e:7e:4c:cd:1c:92:44:26:81:b3:8e:d9:25:7a: ee:8e:08:83:17:24:00:81:a1:fa:9e:bf:49:04:12: c7:3a:8b:cd:e3:1a:23:18:69:91:00:9c:3c:bd:a4: d3:c3:b8:cd:b3:e4:70:94:d8:1c:41:6c:12:50:f8: f2:d0:6b:c2:b5:bc:fd:af:c0:bb:03:7c:ca:27:75: d2:53:15:7c:82:0a:25:c5:24:dc:59:8c:e2:1c:83: f4:53:cc:3f:95:8c:66:ec:7d:29:a5:de:62:3b:a4: 7e:7f:63:23:c3:a8:1a:29:a6:ab:b2:c7:1c:0a:43: f1:70:2a:d9:62:9c:86:8e:73:d7:5f:a5:2f:f8:5c: e1:25:fc:de:80:39:6e:f6:fd:88:04:63:51:8e:a5: 88:0d:06:2c:a9:0f:a3:7b:fc:e0:8d:ed:f5:11:1d: 5f:e8:64:d0:79:db:df:9d:ae:38:09:3a:24:cc:2e: 37:b9:43:ff:e2:52:c4:88:3d:8d:80:8e:27:a6:ce: 08:03:7e:84:e1:35:bc:5e:cf:0b:76:a3:a0:40:77: be:e5:da:59:f3:26:f9:6c:02:02:65:84:05:01:cc: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:D1:C5:20:BB:F6:4F:1F:2E:0D:62:6F:1B:18:69:6C:04:0E:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/0d810a50-f853-4d35-a6cd-a6ec483a37d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.7.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 953 1020 13347 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a2:57:50:a6:8a:c3:3c:c8:f4:59:38:01:28:f9:c8:07:2d: 13:1d:c3:a5:f0:dc:c9:af:9a:93:48:51:29:85:ea:93:0c:b4: d1:45:83:5b:9a:e0:c2:1d:92:d5:3e:c3:ba:d7:a1:f9:25:62: 35:37:df:7e:fb:1e:72:2d:bb:2f:02:f8:85:97:98:9a:11:7c: 32:77:c6:7c:7e:d2:12:7a:40:59:f1:30:dd:7c:32:f4:5e:ac: 1e:a1:70:80:62:f1:11:cf:c1:12:fe:98:d7:32:f5:f0:2e:61: 3f:dc:ec:5e:91:0a:36:f2:6c:17:68:46:01:7d:05:aa:be:d6: 69:9d:43:5c:f4:bc:f8:df:8e:af:3f:fd:7b:0a:b3:b0:84:83: 19:8b:9f:b9:fd:5e:60:8f:2d:a3:5c:18:a3:9c:5c:4f:14:ef: 61:00:aa:2a:1f:b4:7c:b5:5e:f7:54:98:7c:80:7d:39:38:94: 94:99:62:8b:28:ca:e9:65:34:68:87:18:86:9b:e4:60:30:b2: 1b:78:dc:5e:90:d6:d3:9c:d1:c1:6b:b8:32:44:b8:19:02:03: 39:79:77:69:19:cd:5f:3d:04:7a:5b:81:e0:83:49:64:81:a7: f3:80:f4:33:39:07:6c:7f:64:31:2f:a4:18:17:3b:b1:3b:32: 75:1e:d0:1d -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEln4fqptwDzsc0eHeEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQwMzE3NTcyNFoXDTI3MDUyODAwNDUzM1owLzEtMCsGA1UEAxMk MGQ4MTBhNTAtZjg1My00ZDM1LWE2Y2QtYTZlYzQ4M2EzN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUaEGBlnZ9z1Zsr9JePLluPs0eileR/xOeXA TcVaTn5MzRySRCaBs47ZJXrujgiDFyQAgaH6nr9JBBLHOovN4xojGGmRAJw8vaTT w7jNs+RwlNgcQWwSUPjy0GvCtbz9r8C7A3zKJ3XSUxV8ggolxSTcWYziHIP0U8w/ lYxm7H0ppd5iO6R+f2Mjw6gaKaarssccCkPxcCrZYpyGjnPXX6Uv+FzhJfzegDlu 9v2IBGNRjqWIDQYsqQ+je/zgje31ER1f6GTQedvfna44CTokzC43uUP/4lLEiD2N gI4nps4IA36E4TW8Xs8LdqOgQHe+5dpZ8yb5bAICZYQFAcwCHQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFBpc0cUgu/ZPHy4NYm8bGGlsBA64MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZDgxMGE1MC1mODUzLTRkMzUtYTZjZC1hNmVjNDgzYTM3ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBkODEwYTUwLWY4NTMtNGQzNS1h NmNkLWE2ZWM0ODNhMzdkMC8wZDgxMGE1MC1mODUzLTRkMzUtYTZjZC1hNmVjNDgz YTM3ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHB/gwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAIC A7kCAgP8AgI0IzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnoldQporDPMj0WTgBKPnIBy0THcOl8NzJr5qT SFEpheqTDLTRRYNbmuDCHZLVPsO616H5JWI1N99++x5yLbsvAviFl5iaEXwyd8Z8 ftISekBZ8TDdfDL0XqweoXCAYvERz8ES/pjXMvXwLmE/3OxekQo28mwXaEYBfQWq vtZpnUNc9Lz4346vP/17CrOwhIMZi5+5/V5gjy2jXBijnFxPFO9hAKoqH7R8tV73 VJh8gH05OJSUmWKLKMrpZTRohxiGm+RgMLIbeNxekNbTnNHBa7gyRLgZAgM5eXdp Gc1fPQR6W4Hgg0lkgafzgPQzOQdsf2QxL6QYFzuxOzJ1HtAd -----END CERTIFICATE-----Generated at Sun Apr 27 21:11:44 2025 by rpki-client