$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e.cer File: 1644c04f-894c-44d1-90ce-41d05dc9483e.cer (raw, json) Hash identifier: BvWDeakPTke1iMjZuNk7dZ9kIF2makLEnlvsRslarYU= Subject key identifier: 5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849FF6D8584D05EF8FD79906160 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/1644c04f-894c-44d1-90ce-41d05dc9483e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 00:45:37 +0000 Certificate not after: Tue 31 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 25885 AS: 46981 IP: 74.123.200.0/21 IP: 208.85.64.0/21 IP: 2607:f8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:6d:85:84:d0:5e:f8:fd:79:90:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 28 00:45:37 2025 GMT Not After : Aug 31 00:45:37 2027 GMT Subject: CN=1644c04f-894c-44d1-90ce-41d05dc9483e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:d1:b7:3b:c7:f7:4e:30:37:29:b2:71:36: ac:ff:58:e9:c1:d4:30:b6:41:0f:22:4b:0c:ad:65: 64:e6:ac:49:ec:59:41:f1:9b:79:2d:ab:d9:cd:92: 05:48:ed:aa:05:50:0e:de:72:66:20:bd:94:1b:91: 3b:62:d0:ec:d5:48:38:7a:98:65:81:0f:b3:bd:81: 04:d5:6b:1f:99:bc:81:97:6e:da:57:df:96:8c:42: 5f:2e:c0:5c:18:58:0b:48:12:a2:09:47:e5:18:45: d0:cf:ed:ad:84:0f:a1:97:98:d2:69:75:a8:95:e4: f4:27:2e:00:38:69:a8:51:53:6a:11:8d:55:ac:9c: bf:ea:ab:46:79:d1:10:c6:4e:0c:10:3a:c3:43:48: 83:e2:bf:39:c7:12:08:b4:9d:a2:6d:c6:bd:6f:64: 9c:75:0e:38:43:c5:b9:fb:40:4a:48:f9:82:c3:a9: fb:a8:97:bd:9e:5c:ec:5b:fe:08:6d:4b:6a:dc:e5: 4c:4a:23:70:38:32:eb:40:bb:ee:f5:65:42:e8:99: 65:8d:f3:8f:44:cd:35:5f:1d:66:e1:6a:c8:87:32: 07:b9:5b:18:fb:35:ca:ef:fd:bf:36:3c:88:a3:f2: 57:83:72:b4:b5:b2:dd:00:23:6e:02:ca:87:f8:a6: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/1644c04f-894c-44d1-90ce-41d05dc9483e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.123.200.0/21 208.85.64.0/21 IPv6: 2607:f8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25885 46981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:04:4b:b1:b4:fb:a8:98:8c:c6:1c:ba:85:23:f1:1f:89:c8: 70:61:a9:f2:bc:49:43:b5:df:77:80:a2:9b:37:d3:04:1d:0e: 6c:b7:64:aa:47:cb:c0:0f:2f:6a:a6:76:2c:3f:9c:a0:bd:4f: e5:c0:63:0b:96:b4:8a:a1:e2:26:d7:aa:e0:08:c8:a3:89:83: 0c:75:fa:1b:07:e3:1d:e3:79:5c:8b:9a:b5:04:c0:9b:cb:05: c3:14:52:72:65:39:d2:46:0d:b7:01:1e:d5:13:30:f5:36:0c: 93:4a:f8:21:c8:e3:f3:94:6c:93:e1:38:b7:8d:a7:d7:02:52: 41:7b:ba:82:12:eb:c9:db:4d:73:9f:dc:e4:ef:77:79:c6:17: 7d:54:da:3e:2d:dd:1f:d6:9a:b7:b1:77:0b:9a:81:c3:c3:05: 3c:15:cb:29:61:f9:d1:b8:bc:13:48:81:57:be:bf:0b:7d:39: 41:2a:1f:19:35:5b:b2:c2:78:cc:f9:b8:d5:97:93:e6:80:5f: 7d:7a:8e:2e:b2:42:ba:b8:33:46:79:d3:50:00:03:7e:75:ff: f7:82:be:da:17:9d:93:9e:6d:54:15:b9:be:f3:7a:b5:6e:e9: 77:b3:64:0a:6a:a6:99:10:1e:67:85:bb:44:07:3d:28:d5:c8: 8b:94:a8:56 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEn/bYWE0F74/XmQYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk MTY0NGMwNGYtODk0Yy00NGQxLTkwY2UtNDFkMDVkYzk0ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvvRtzvH904wNymycTas/1jpwdQwtkEPIksM rWVk5qxJ7FlB8Zt5LavZzZIFSO2qBVAO3nJmIL2UG5E7YtDs1Ug4ephlgQ+zvYEE 1WsfmbyBl27aV9+WjEJfLsBcGFgLSBKiCUflGEXQz+2thA+hl5jSaXWoleT0Jy4A OGmoUVNqEY1VrJy/6qtGedEQxk4MEDrDQ0iD4r85xxIItJ2ibca9b2ScdQ44Q8W5 +0BKSPmCw6n7qJe9nlzsW/4IbUtq3OVMSiNwODLrQLvu9WVC6JlljfOPRM01Xx1m 4WrIhzIHuVsY+zXK7/2/NjyIo/JXg3K0tbLdACNuAsqH+KZSvwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFF2lWuqpHeSLdUeViSOiygQb23RtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x NjQ0YzA0Zi04OTRjLTQ0ZDEtOTBjZS00MWQwNWRjOTQ4M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE2NDRjMDRmLTg5NGMtNDRkMS05 MGNlLTQxZDA1ZGM5NDgzZS8xNjQ0YzA0Zi04OTRjLTQ0ZDEtOTBjZS00MWQwNWRj OTQ4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANKe8gDBAPQVUAwDQQCAAIwBwMFACYH+MAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICZR0CAwC3hTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkBEuxtPuomIzG HLqFI/EfichwYanyvElDtd93gKKbN9MEHQ5st2SqR8vADy9qpnYsP5ygvU/lwGML lrSKoeIm16rgCMijiYMMdfobB+Md43lci5q1BMCbywXDFFJyZTnSRg23AR7VEzD1 NgyTSvghyOPzlGyT4Ti3jafXAlJBe7qCEuvJ201zn9zk73d5xhd9VNo+Ld0f1pq3 sXcLmoHDwwU8FcspYfnRuLwTSIFXvr8LfTlBKh8ZNVuywnjM+bjVl5PmgF99eo4u skK6uDNGedNQAAN+df/3gr7aF52Tnm1UFbm+83q1bul3s2QKaqaZEB5nhbtEBz0o 1ciLlKhW -----END CERTIFICATE-----Generated at Sun Jun 15 05:00:15 2025 by rpki-client