$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488.cer File: 76de56ab-2af2-47e5-a9d0-8975ba26a488.cer (raw, json) Hash identifier: f2OukE91rcH2FKhIKgSDkBjX7N1o7a8PZFbNV0U+fQU= Subject key identifier: D7:BF:91:DF:76:04:E5:86:98:DD:4E:59:22:C8:EC:FF:3A:15:17:47 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849EEAD6B75732890C89C6FD180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/76de56ab-2af2-47e5-a9d0-8975ba26a488.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 00:45:37 +0000 Certificate not after: Wed 25 Aug 2027 00:45:37 +0000 Subordinate resources: IP: 144.37.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:ad:6b:75:73:28:90:c8:9c:6f:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 22 00:45:37 2025 GMT Not After : Aug 25 00:45:37 2027 GMT Subject: CN=76de56ab-2af2-47e5-a9d0-8975ba26a488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:52:6d:a1:5c:9b:83:fb:89:20:2f:36:69: 78:76:6d:4c:f7:4f:06:c3:07:b1:d4:c6:ad:a1:e1: 23:85:86:ed:78:91:9b:6f:71:d3:70:b7:2e:79:12: bf:40:75:db:83:ea:52:7a:04:f2:43:4e:b0:64:4e: f2:9d:40:89:2e:1b:2e:40:95:50:be:9e:27:91:e9: 85:28:33:26:0c:7a:05:5b:cb:5f:8f:49:51:c0:99: b1:82:25:3e:29:c5:41:e7:e7:85:43:a2:e8:00:99: 79:e2:05:60:17:65:56:c0:69:1b:bd:cb:66:38:11: a9:51:f5:95:d2:93:6a:7a:80:64:58:bb:31:25:29: e8:46:bb:2f:67:b8:95:12:7b:c1:cc:1a:cc:3e:19: ab:f2:f9:f2:26:ba:72:fa:82:bd:76:e8:4e:2b:35: 58:c6:2f:36:ce:3a:e0:97:45:97:b9:db:33:78:f8: 46:c8:9a:5a:3c:5a:a9:00:c3:90:b2:93:7c:72:72: 42:f4:22:c5:01:69:7e:24:23:e1:fc:fe:3b:c1:8c: 2d:59:57:4e:ea:f8:9c:bf:5b:3a:ad:15:82:77:ae: b5:20:f7:05:d3:aa:34:93:24:5e:e6:05:da:46:20: 4c:66:df:50:e4:c8:8c:71:4d:3a:1f:56:41:c2:0e: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:91:DF:76:04:E5:86:98:DD:4E:59:22:C8:EC:FF:3A:15:17:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/76de56ab-2af2-47e5-a9d0-8975ba26a488.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 144.37.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6a:3e:2f:cb:ad:54:4f:c9:9f:16:87:51:c3:2d:25:b7:9b: c1:50:80:77:23:d4:55:c3:a7:7d:29:f7:1c:9c:55:40:9d:3c: a5:03:e3:aa:6b:b1:3a:26:af:3f:22:0a:73:f0:e3:94:d6:97: 11:01:05:a0:77:db:d1:82:47:96:3a:b5:22:04:ab:3e:dd:48: f7:fc:ea:a0:11:a9:c7:1c:d8:2c:ee:23:25:15:63:7e:30:4c: 54:22:3e:5e:30:f4:36:aa:99:89:b2:49:57:51:5f:a4:e6:5b: ed:ad:52:62:15:a3:d5:a7:95:8a:55:2c:4e:e6:9a:66:2b:d1: 2b:20:ae:04:13:cb:f8:6a:e7:61:1f:29:aa:2a:3d:b9:a3:2f: 46:c3:b4:6e:21:d8:a0:3d:95:37:0b:27:38:ab:97:ac:e1:34: bb:a8:a3:8b:1b:46:7b:37:a4:9c:a2:36:37:cf:eb:dc:f2:f5: 44:cc:a9:fb:cb:87:9e:8f:3c:80:99:b9:5b:9a:5e:21:56:d6: 6c:51:87:28:d9:af:d9:bc:08:38:f3:3d:f3:2c:9b:ea:99:44: 07:ef:d2:e7:18:f2:ad:02:6b:43:73:80:3a:6e:b8:5b:f6:25: 4b:75:41:6d:68:99:6a:b1:cc:7d:f6:c9:2e:d9:aa:d7:bd:8a: 96:f0:97:98 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEnurWt1cyiQyJxv0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUyMjAwNDUzN1oXDTI3MDgyNTAwNDUzN1owLzEtMCsGA1UEAxMk NzZkZTU2YWItMmFmMi00N2U1LWE5ZDAtODk3NWJhMjZhNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFRSbaFcm4P7iSAvNml4dm1M908Gwwex1Mat oeEjhYbteJGbb3HTcLcueRK/QHXbg+pSegTyQ06wZE7ynUCJLhsuQJVQvp4nkemF KDMmDHoFW8tfj0lRwJmxgiU+KcVB5+eFQ6LoAJl54gVgF2VWwGkbvctmOBGpUfWV 0pNqeoBkWLsxJSnoRrsvZ7iVEnvBzBrMPhmr8vnyJrpy+oK9duhOKzVYxi82zjrg l0WXudszePhGyJpaPFqpAMOQspN8cnJC9CLFAWl+JCPh/P47wYwtWVdO6vicv1s6 rRWCd661IPcF06o0kyRe5gXaRiBMZt9Q5MiMcU06H1ZBwg6pSQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFNe/kd92BOWGmN1OWSLI7P86FRdHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 NmRlNTZhYi0yYWYyLTQ3ZTUtYTlkMC04OTc1YmEyNmE0ODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzc2ZGU1NmFiLTJhZjItNDdlNS1h OWQwLTg5NzViYTI2YTQ4OC83NmRlNTZhYi0yYWYyLTQ3ZTUtYTlkMC04OTc1YmEy NmE0ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCQJTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqaj4vy61UT8mfFodRwy0l t5vBUIB3I9RVw6d9KfccnFVAnTylA+Oqa7E6Jq8/Igpz8OOU1pcRAQWgd9vRgkeW OrUiBKs+3Uj3/OqgEanHHNgs7iMlFWN+MExUIj5eMPQ2qpmJsklXUV+k5lvtrVJi FaPVp5WKVSxO5ppmK9ErIK4EE8v4audhHymqKj25oy9Gw7RuIdigPZU3Cyc4q5es 4TS7qKOLG0Z7N6ScojY3z+vc8vVEzKn7y4eejzyAmblbml4hVtZsUYco2a/ZvAg4 8z3zLJvqmUQH79LnGPKtAmtDc4A6brhb9iVLdUFtaJlqscx99sku2arXvYqW8JeY -----END CERTIFICATE-----Generated at Mon Jun 16 05:33:07 2025 by rpki-client