$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer File: 6d91ccc1-4217-4cde-9687-260a5f00361b.cer (raw, json) Hash identifier: vnQr2h9ifklOR2/I7oLYioOnMOoPcfoZutX2ioYuPhI= Subject key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849A34CEB9CE87647234B483700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Apr 2025 00:45:34 +0000 Certificate not after: Thu 29 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 64.255.224.0/22 IP: 66.43.4.0 -- 66.43.11.255 IP: 69.30.64.0/20 IP: 69.30.84.0/22 IP: 72.46.136.0/22 IP: 104.238.248.0/22 IP: 198.145.48.0/20 IP: 198.145.66.0 -- 198.145.111.255 IP: 198.145.128.0 -- 198.145.175.255 IP: 198.145.224.0/20 IP: 207.32.128.0/19 IP: 208.66.72.0/21 IP: 209.20.132.0/22 IP: 209.20.192.0/18 IP: 216.65.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:4c:eb:9c:e8:76:47:23:4b:48:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 25 00:45:34 2025 GMT Not After : Jul 29 00:45:34 2027 GMT Subject: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:26:08:a2:ee:ce:d5:3b:8c:4e:2b:8d:df: 7a:7f:29:02:f1:12:04:fb:f9:cb:72:95:f9:40:fc: 23:88:9d:a1:e5:b2:3a:6c:60:c2:31:29:7b:e2:4c: 5e:b2:17:e9:ab:65:a5:ba:a1:09:55:b0:b7:94:8b: 45:7d:da:2a:c2:58:15:75:aa:ad:5e:31:7b:bf:12: 23:c4:95:92:b6:ca:6d:ee:f4:59:8b:65:c4:9a:44: 65:f1:63:ce:f8:3c:79:e2:91:d7:b0:2f:60:36:62: ef:17:7f:16:06:dd:02:c8:46:dd:45:4d:e7:1b:b1: eb:54:bf:b0:32:b2:39:45:68:d2:15:6d:8d:21:c3: f7:10:b7:5e:9a:aa:86:19:81:b9:e7:35:cc:1d:08: d5:64:1f:88:21:c8:6f:53:62:9b:45:11:e0:d2:f4: 4b:b6:48:6d:7e:e4:0a:60:20:0c:9b:39:1e:0c:e2: 66:80:03:16:54:26:55:b7:e3:89:c9:71:6b:91:64: 1f:89:2f:c4:b2:b8:0d:fa:45:54:05:06:5a:52:dc: 9f:96:fe:c7:0b:8d:f5:e2:95:cc:bd:85:d4:0b:d6: f1:52:ec:b5:de:39:81:cd:58:ed:e8:2b:fe:23:87: 40:0a:fe:50:25:87:af:98:9e:f6:3e:81:31:8e:25: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.255.224.0/22 66.43.4.0-66.43.11.255 69.30.64.0/20 69.30.84.0/22 72.46.136.0/22 104.238.248.0/22 198.145.48.0/20 198.145.66.0-198.145.111.255 198.145.128.0-198.145.175.255 198.145.224.0/20 207.32.128.0/19 208.66.72.0/21 209.20.132.0/22 209.20.192.0/18 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:99:00:f4:ec:10:c2:2f:7c:12:18:54:e1:9e:17:58:2b:0c: 67:0b:92:60:64:04:14:4a:af:55:1d:9f:13:b0:dd:7c:32:f1: 20:32:5f:be:a6:e7:ac:03:af:18:6e:9a:64:8a:58:a8:6a:fb: 61:9a:4f:67:42:ae:46:f8:09:15:f5:60:50:d8:f0:59:29:8a: ce:d2:cb:5c:a6:d2:6c:e8:6f:00:57:c0:1f:0d:e6:40:5b:1e: 8f:69:71:74:41:94:cd:46:89:68:a2:b0:65:98:d3:0c:46:84: 62:0c:1d:3d:dd:ea:71:92:5f:80:6c:75:84:6d:91:79:be:22: 28:04:ec:54:43:dd:8a:d0:ac:bd:77:eb:7f:31:05:9b:91:1a: c4:a1:ba:d7:b4:d6:03:c6:21:7d:7f:ce:88:92:87:66:1e:64: d1:35:6c:64:9d:9e:b2:93:69:7a:b9:06:a4:9a:6e:82:83:4f: 35:f4:cc:4c:58:c1:cf:84:87:6a:b9:97:8f:d7:7e:ed:b2:eb: 7e:45:a1:cf:de:d0:dc:f5:d6:be:bb:55:9a:58:7a:1e:4c:2e: 6e:f0:05:08:b9:5e:a1:c7:a6:6b:d8:38:e3:b4:2e:e4:62:c4: 1c:05:6f:7b:42:78:bb:d6:ab:a7:6e:fc:88:2f:c7:ed:4c:de: 1d:b6:ae:48 -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEmjTOuc6HZHI0tINwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQyNTAwNDUzNFoXDTI3MDcyOTAwNDUzNFowLzEtMCsGA1UEAxMk NmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAzNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5msmCKLuztU7jE4rjd96fykC8RIE+/nLcpX5 QPwjiJ2h5bI6bGDCMSl74kxeshfpq2WluqEJVbC3lItFfdoqwlgVdaqtXjF7vxIj xJWStspt7vRZi2XEmkRl8WPO+Dx54pHXsC9gNmLvF38WBt0CyEbdRU3nG7HrVL+w MrI5RWjSFW2NIcP3ELdemqqGGYG55zXMHQjVZB+IIchvU2KbRRHg0vRLtkhtfuQK YCAMmzkeDOJmgAMWVCZVt+OJyXFrkWQfiS/EsrgN+kVUBQZaUtyflv7HC4314pXM vYXUC9bxUuy13jmBzVjt6Cv+I4dACv5QJYevmJ72PoExjiVLZwIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFHZsb3wo7DYmlFG/0np+mVYpIpr8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZkOTFjY2MxLTQyMTctNGNkZS05 Njg3LTI2MGE1ZjAwMzYxYi82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYw MDM2MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejB4BAIAATByAwQCQP/gMAwDBAJCKwQDBAJCKwgDBARFHkADBAJF HlQDBAJILogDBAJo7vgDBATGkTAwDAMEAcaRQgMEBMaRYDAMAwQHxpGAAwQExpGg AwQExpHgAwQFzyCAAwQD0EJIAwQC0RSEAwQG0RTAAwQF2EGAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHiZ APTsEMIvfBIYVOGeF1grDGcLkmBkBBRKr1UdnxOw3Xwy8SAyX76m56wDrxhummSK WKhq+2GaT2dCrkb4CRX1YFDY8Fkpis7Sy1ym0mzobwBXwB8N5kBbHo9pcXRBlM1G iWiisGWY0wxGhGIMHT3d6nGSX4BsdYRtkXm+IigE7FRD3YrQrL13638xBZuRGsSh ute01gPGIX1/zoiSh2YeZNE1bGSdnrKTaXq5BqSaboKDTzX0zExYwc+Eh2q5l4/X fu2y635Foc/e0Nz11r67VZpYeh5MLm7wBQi5XqHHpmvYOOO0LuRixBwFb3tCeLvW q6du/Igvx+1M3h22rkg= -----END CERTIFICATE-----Generated at Sun Jun 15 05:51:38 2025 by rpki-client