$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer File: 3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer (raw, json) Hash identifier: tAnFUCpIbA4Hhjsv/zre5oR7xgHGZCqQvfYrTannE9c= Subject key identifier: 1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849017F03B2365D90297DB7A160 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 30407 IP: 98.142.240.0/20 IP: 104.234.0.0/16 IP: 206.53.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:03:b2:36:5d:90:29:7d:b7:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:4a:d5:1c:64:df:ee:63:a5:23:9a:e0:7f: 43:84:6b:27:82:4c:53:e5:20:99:a3:78:59:f9:9c: ef:d0:ce:b2:7d:c7:07:ab:bd:19:59:5c:d7:cc:04: ad:27:9b:d1:20:46:5c:89:2c:a3:2a:0d:e5:dd:ae: a4:20:3b:a1:ab:80:c1:f6:c2:29:c1:33:ec:a5:2d: b9:fd:55:b7:62:71:af:74:71:25:5d:f6:ca:b1:49: e5:f4:a1:e7:15:2b:65:a5:4e:9d:e5:9e:c7:d8:53: 88:e7:b7:0a:7e:c7:90:72:39:a5:52:99:53:1a:a5: a7:66:69:e3:17:b8:0b:e3:a9:17:c4:7a:2f:c1:5e: d3:6c:4f:fa:22:59:de:05:1c:91:de:f6:9a:dc:65: 88:81:94:8b:44:1e:c1:40:18:25:d9:70:b9:00:ae: 35:fb:e5:d0:9c:f5:05:09:74:86:0d:77:1e:c0:a6: 19:d3:c5:57:34:ab:6c:ee:66:c4:16:6e:46:7e:d0: 49:35:ed:4d:19:e7:b1:57:c2:9d:0e:33:3a:6a:f9: 12:af:92:a2:5a:62:6e:52:4f:6a:7b:e1:59:bb:26: a0:bf:ee:d1:dc:bd:cc:72:5d:03:38:38:47:6d:24: 47:a2:83:f3:2b:7a:98:af:6b:7d:36:f3:cf:bb:bc: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 98.142.240.0/20 104.234.0.0/16 206.53.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30407 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cd:01:0b:8a:df:e5:ed:1b:39:4a:14:ed:a5:87:eb:2e:0b: 09:a2:62:dd:d8:77:60:1c:51:19:e7:e6:8a:d2:5d:30:ab:e9: bc:a3:81:da:21:73:d1:80:dd:8a:c8:49:ac:1d:30:1d:b2:dd: 1b:44:08:ae:20:51:17:a4:6a:2b:7c:55:66:48:5d:d2:df:ba: 40:13:e8:f7:0a:40:a5:18:0c:50:a9:a5:89:e0:c9:06:ac:08: b0:cc:8c:dd:d2:7a:2d:8b:37:b4:2b:80:f7:7b:ef:14:dc:03: 1f:26:18:31:d9:68:24:04:c4:ea:c9:e9:d2:39:7f:39:32:a8: 59:37:78:77:43:80:6c:0f:0a:de:a2:24:33:7b:f1:e6:f6:91: d1:1d:7a:5a:92:1a:e4:99:83:53:75:24:f7:7e:42:80:28:49: 34:da:1b:4b:89:15:b9:7d:ad:43:67:6d:30:76:96:82:69:cb: 9c:dd:12:06:3d:fb:b8:73:e3:29:8d:42:e8:a9:e1:3b:cd:62: 9c:42:1b:3f:20:c5:71:14:b7:02:5f:77:be:dc:78:52:8b:c4: e8:4a:7c:ef:92:72:4a:ed:d1:fc:08:66:62:8d:b6:b8:86:47: f4:6e:ee:46:69:98:d4:16:6a:54:f6:3b:00:03:a1:f8:18:dc: 5d:7b:8f:ed -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEkBfwOyNl2QKX23oWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk M2Y1ZTJlNWItYzczMS00ZGI4LTliODctYWY5ZjhlNThhMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hK1Rxk3+5jpSOa4H9DhGsngkxT5SCZo3hZ +Zzv0M6yfccHq70ZWVzXzAStJ5vRIEZciSyjKg3l3a6kIDuhq4DB9sIpwTPspS25 /VW3YnGvdHElXfbKsUnl9KHnFStlpU6d5Z7H2FOI57cKfseQcjmlUplTGqWnZmnj F7gL46kXxHovwV7TbE/6IlneBRyR3vaa3GWIgZSLRB7BQBgl2XC5AK41++XQnPUF CXSGDXcewKYZ08VXNKts7mbEFm5GftBJNe1NGeexV8KdDjM6avkSr5KiWmJuUk9q e+FZuyagv+7R3L3Mcl0DODhHbSRHooPzK3qYr2t9NvPPu7wwRwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFB4f+QSH23ZIOj3Q78E2bSCwPEJLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZjVlMmU1Yi1jNzMxLTRkYjgtOWI4Ny1hZjlmOGU1OGExYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05 Yjg3LWFmOWY4ZTU4YTFjNi8zZjVlMmU1Yi1jNzMxLTRkYjgtOWI4Ny1hZjlmOGU1 OGExYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDBARijvADAwBo6gMEBM41MDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgJ2xzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1zQELit/l7Rs5ShTtpYfrLgsJomLd2Hdg HFEZ5+aK0l0wq+m8o4HaIXPRgN2KyEmsHTAdst0bRAiuIFEXpGorfFVmSF3S37pA E+j3CkClGAxQqaWJ4MkGrAiwzIzd0notize0K4D3e+8U3AMfJhgx2WgkBMTqyenS OX85MqhZN3h3Q4BsDwreoiQze/Hm9pHRHXpakhrkmYNTdST3fkKAKEk02htLiRW5 fa1DZ20wdpaCacuc3RIGPfu4c+MpjULoqeE7zWKcQhs/IMVxFLcCX3e+3HhSi8To SnzvknJK7dH8CGZijba4hkf0bu5GaZjUFmpU9jsAA6H4GNxde4/t -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:06 2025 by rpki-client