$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer File: 28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer (raw, json) Hash identifier: 6dKLRnIJwFdGi5INnwV/d7brc6Nulzw2tY/tUbVos8k= Subject key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858492876D1F7BC667CC7AB23BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Mar 2025 00:45:34 +0000 Certificate not after: Tue 15 Jun 2027 00:45:34 +0000 Subordinate resources: IP: 216.150.64.0/19 IP: 216.169.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:76:d1:f7:bc:66:7c:c7:ab:23:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 12 00:45:34 2025 GMT Not After : Jun 15 00:45:34 2027 GMT Subject: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:1a:c8:29:64:04:c9:55:34:2d:4b:82:22: 06:25:8d:67:1e:87:8a:e9:9d:fb:af:06:a9:69:d6: 91:ce:74:10:67:10:82:91:66:b5:02:b3:5b:db:77: 59:98:6a:c7:df:07:cd:9f:52:5b:fa:e0:07:13:de: 98:e0:84:94:73:7e:ec:66:7e:d6:45:09:22:a0:29: 71:fb:bd:4e:ca:d2:dc:da:61:60:d4:02:97:d7:c5: c0:c5:df:8c:aa:7c:12:1b:85:ff:5e:a9:a5:61:1a: af:55:00:fd:65:1b:6f:5c:bb:a1:32:3b:f6:0c:d2: b1:ef:39:88:dd:25:7c:cb:5d:4f:b6:2b:ec:20:31: 9e:c5:75:db:60:8b:69:bd:6c:ef:04:20:eb:20:6c: 63:67:6c:7c:58:87:f3:c1:48:7f:43:58:1b:ab:b3: 34:5d:e7:bf:c7:99:1a:a1:1a:f4:17:61:ad:cd:6d: 47:dc:6d:3e:4f:aa:97:cc:15:eb:2b:39:13:96:24: d1:95:2b:02:1f:6f:7f:53:cf:29:db:9a:61:7e:9d: 23:f1:82:e0:25:56:32:70:4a:b5:f7:19:36:cb:85: a3:08:28:bd:00:89:c5:b6:e5:88:2e:d3:66:45:0f: 5c:fe:33:10:d8:ac:29:ba:b5:64:00:c6:fc:7b:80: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.150.64.0/19 216.169.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:19:50:cf:7c:40:00:d8:42:30:55:0f:5c:b0:ba:c5:98:59: 5f:a1:f5:b1:cd:de:86:57:6e:28:ac:39:45:57:26:f2:17:de: c8:b1:a1:ca:2d:40:ee:d4:6a:8e:d9:5c:9c:4b:cf:d5:0e:5e: 22:30:25:25:68:4e:b8:cd:e8:ad:fd:e0:60:20:b8:14:54:9b: 64:1f:ed:73:27:8e:31:8f:9e:aa:85:d0:7a:55:76:ea:1d:57: cf:45:2c:a3:20:64:21:6f:e4:ef:10:ce:14:a6:19:6f:b1:88: 6d:9c:90:f5:44:7e:4d:04:25:fd:bd:0d:23:b6:51:e6:53:0e: c3:f3:a5:72:68:a9:40:07:03:1c:27:f6:4c:3e:9e:54:00:08: e5:cf:1f:54:a1:11:c1:98:b6:3b:70:76:dc:0d:24:b0:c0:cb: d6:3c:06:cb:95:62:65:b2:5e:cd:59:88:9b:d0:c8:05:20:4b: 5c:3a:57:d6:3e:5f:8f:3a:91:6b:1d:6c:52:99:f3:43:f2:f0: 92:e3:82:78:5a:32:0d:e3:f8:93:e0:a2:eb:fa:a8:2f:4e:b4: 8d:63:ea:c1:67:38:20:b5:bb:79:df:87:7a:e8:13:c2:aa:76: 08:18:53:71:e2:cd:e6:a2:ac:5b:94:32:12:e8:1e:cd:29:cb: 1f:d6:81:63 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEkodtH3vGZ8x6sjvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxMjAwNDUzNFoXDTI3MDYxNTAwNDUzNFowLzEtMCsGA1UEAxMk MjhkMGMyNjItOGVhMi00NDRhLWFiMWUtNmQwN2MzNDgzZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkYayClkBMlVNC1LgiIGJY1nHoeK6Z37rwap adaRznQQZxCCkWa1ArNb23dZmGrH3wfNn1Jb+uAHE96Y4ISUc37sZn7WRQkioClx +71OytLc2mFg1AKX18XAxd+MqnwSG4X/XqmlYRqvVQD9ZRtvXLuhMjv2DNKx7zmI 3SV8y11PtivsIDGexXXbYItpvWzvBCDrIGxjZ2x8WIfzwUh/Q1gbq7M0Xee/x5ka oRr0F2GtzW1H3G0+T6qXzBXrKzkTliTRlSsCH29/U88p25phfp0j8YLgJVYycEq1 9xk2y4WjCCi9AInFtuWILtNmRQ9c/jMQ2KwpurVkAMb8e4CdHQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFHv9IcPzoF/8dMvepo/ZNATsiwjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y OGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0ODNlNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzI4ZDBjMjYyLThlYTItNDQ0YS1h YjFlLTZkMDdjMzQ4M2U0NS8yOGQwYzI2Mi04ZWEyLTQ0NGEtYWIxZS02ZDA3YzM0 ODNlNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAXYlkADBAXYqWAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdRlQz3xAANhC MFUPXLC6xZhZX6H1sc3ehlduKKw5RVcm8hfeyLGhyi1A7tRqjtlcnEvP1Q5eIjAl JWhOuM3orf3gYCC4FFSbZB/tcyeOMY+eqoXQelV26h1Xz0UsoyBkIW/k7xDOFKYZ b7GIbZyQ9UR+TQQl/b0NI7ZR5lMOw/OlcmipQAcDHCf2TD6eVAAI5c8fVKERwZi2 O3B23A0ksMDL1jwGy5ViZbJezVmIm9DIBSBLXDpX1j5fjzqRax1sUpnzQ/LwkuOC eFoyDeP4k+Ci6/qoL060jWPqwWc4ILW7ed+HeugTwqp2CBhTceLN5qKsW5QyEuge zSnLH9aBYw== -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:15 2025 by rpki-client