$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer File: 95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer (raw, json) Hash identifier: hmjy6DNQAhJLCL60J/tCNtegh+QQnZr8073nC3+uYUQ= Subject key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849A0823C2D3992047246318480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Apr 2025 00:45:34 +0000 Certificate not after: Wed 28 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 22018 IP: 69.64.96.0/20 IP: 209.25.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:82:3c:2d:39:92:04:72:46:31:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 24 00:45:34 2025 GMT Not After : Jul 28 00:45:34 2027 GMT Subject: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:1b:2b:95:46:73:d9:f1:38:45:d7:c4:7d: 5b:7b:a5:19:34:c0:7c:8e:53:65:86:d9:89:c5:4b: 72:8e:d7:33:61:a0:c3:fc:87:b5:15:e5:ea:e6:73: 31:20:bd:d6:e2:48:12:f8:96:91:79:0c:80:2f:3b: 5a:28:3c:27:18:ca:d6:2d:26:6e:9a:c8:79:7d:74: bd:e9:28:c5:d7:78:13:d0:ca:8d:10:20:a2:5d:b4: 0c:33:df:b1:f8:64:18:55:70:3c:c1:3a:1d:30:07: a5:2b:14:24:ac:ba:b0:e9:27:93:c2:d7:c8:3e:d2: ab:3b:ce:67:04:cc:13:95:55:07:5e:40:17:2b:b2: fb:37:a0:da:f9:d2:0d:75:4f:5d:23:a8:95:90:24: 7b:c8:e8:14:4f:8b:2f:86:5e:a9:8a:da:23:db:f0: 2b:de:33:a0:cd:b4:d6:c3:0d:4d:36:ff:99:0a:4c: 02:e5:52:51:06:fd:58:42:3e:4e:f9:23:17:2e:dc: 33:63:7e:a6:c1:29:d1:04:0a:9a:27:5d:1a:af:8b: b9:94:bb:c6:bb:86:86:63:c5:2d:d4:b0:6e:ab:7e: a7:da:c4:37:5b:b9:74:25:b5:f6:c7:dc:cb:1d:03: 44:fa:2d:88:de:24:a7:2c:63:67:31:24:9d:b9:9f: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.64.96.0/20 209.25.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22018 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3b:e6:d2:c0:66:fe:e0:02:e0:3e:98:ef:12:b1:da:d1:0e: a3:74:16:b5:53:8c:62:1a:7f:fa:7c:92:6a:85:a9:95:51:d6: dc:a5:5b:96:f8:e6:a7:25:5c:c4:78:c9:55:ec:2f:aa:ca:15: 74:aa:28:da:90:ce:3e:0c:d5:c4:da:a0:56:e5:d4:58:39:f1: 5c:2a:5b:7d:39:0c:77:e1:e9:f7:bc:c8:ff:c0:a0:d2:7f:52: 25:66:3d:ab:30:24:69:da:9d:d6:cf:b9:0c:74:96:4e:c7:39: 43:14:b2:75:9f:9e:e7:bb:6d:3e:89:74:eb:6f:a7:6f:31:87: 65:f9:02:41:e6:44:55:a7:a9:41:00:4b:b9:20:eb:81:e8:22: ef:86:de:24:68:7f:5b:3b:73:80:57:0d:05:1c:e9:c1:3b:69: fa:7a:89:ce:0b:78:89:58:d2:c8:26:81:bf:1c:3d:09:3c:be: cf:6e:5a:f8:f3:4c:c7:65:1a:4d:65:77:91:65:8e:3b:3b:9e: eb:33:2d:c8:f7:2d:25:b1:81:06:10:e2:67:c6:2a:6a:0c:cd: 04:4c:78:4d:f6:74:16:64:85:32:69:bf:ac:73:ee:d1:57:1a: 25:25:30:b1:47:91:48:7d:b7:7b:22:3e:4c:b1:e9:be:5e:4e: c8:df:bc:cc -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEmggjwtOZIEckYxhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQyNDAwNDUzNFoXDTI3MDcyODAwNDUzNFowLzEtMCsGA1UEAxMk OTViZjk1ZDUtMWM5Yi00Y2VhLTgxNDItY2MxYTQ2OTljN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTYbK5VGc9nxOEXXxH1be6UZNMB8jlNlhtmJ xUtyjtczYaDD/Ie1FeXq5nMxIL3W4kgS+JaReQyALztaKDwnGMrWLSZumsh5fXS9 6SjF13gT0MqNECCiXbQMM9+x+GQYVXA8wTodMAelKxQkrLqw6SeTwtfIPtKrO85n BMwTlVUHXkAXK7L7N6Da+dINdU9dI6iVkCR7yOgUT4svhl6pitoj2/Ar3jOgzbTW ww1NNv+ZCkwC5VJRBv1YQj5O+SMXLtwzY36mwSnRBAqaJ10ar4u5lLvGu4aGY8Ut 1LBuq36n2sQ3W7l0JbX2x9zLHQNE+i2I3iSnLGNnMSSduZ+k/wIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFC0d2kZpgun4D3W+BbAd1u6DrGKQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5OWM3YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1YmY5NWQ1LTFjOWItNGNlYS04 MTQyLWNjMWE0Njk5YzdhNi85NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5 OWM3YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARFQGADBALRGdAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICVgIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAhjvm0sBm/uAC4D6Y7xKx2tEOo3QWtVOMYhp/+nyS aoWplVHW3KVblvjmpyVcxHjJVewvqsoVdKoo2pDOPgzVxNqgVuXUWDnxXCpbfTkM d+Hp97zI/8Cg0n9SJWY9qzAkadqd1s+5DHSWTsc5QxSydZ+e57ttPol062+nbzGH ZfkCQeZEVaepQQBLuSDrgegi74beJGh/WztzgFcNBRzpwTtp+nqJzgt4iVjSyCaB vxw9CTy+z25a+PNMx2UaTWV3kWWOOzue6zMtyPctJbGBBhDiZ8YqagzNBEx4TfZ0 FmSFMmm/rHPu0VcaJSUwsUeRSH23eyI+TLHpvl5OyN+8zA== -----END CERTIFICATE-----Generated at Sun Apr 27 23:06:17 2025 by rpki-client