$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.cer (raw, json) Hash identifier: S5UZMqhGBWH8PMZjjX8mraT1++VTqe9ld+P0uke8/OE= Subject key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858484C088D471CBD41619CCA8F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Dec 2024 01:45:33 +0000 Certificate not after: Sun 28 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 12068 AS: 36329 IP: 64.58.48.0/20 IP: 155.254.144.0/20 IP: 199.36.164.0/22 IP: 2604:7b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:08:8d:47:1c:bd:41:61:9c:ca:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 23 01:45:33 2024 GMT Not After : Mar 28 00:45:33 2027 GMT Subject: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:62:4e:6f:52:1f:41:01:e6:9e:72:fc:26: 5a:8a:45:5e:bc:2b:c1:5c:52:92:0a:1f:30:2a:b4: 2e:b1:1d:01:2f:ac:d5:13:e5:a6:70:83:7a:99:0b: 3c:2b:22:a4:b9:72:83:d4:ae:f1:1f:7b:d2:52:19: 64:3d:34:40:ae:0c:96:70:48:1a:df:0f:6e:d9:6a: 86:ed:9a:5c:81:0a:44:0b:e6:35:35:66:fd:4e:49: db:50:c2:7e:40:77:ba:3b:3b:92:f3:92:d8:b1:60: f4:55:15:b6:6b:01:1b:a9:cd:79:3d:89:e5:56:c8: c8:c8:36:09:81:f7:72:ce:93:ec:79:05:5d:7e:34: 8a:7f:2d:3d:26:3b:f8:02:29:8c:1f:ee:40:29:db: 2c:b6:51:71:6d:29:7a:08:9f:8a:e9:ea:dd:86:86: e8:c9:f8:d9:d4:a5:4d:3a:fb:a7:f5:25:54:98:7b: 4d:76:cb:bb:cf:b8:41:d7:03:d9:48:50:a0:78:a1: ef:35:4c:29:20:e3:af:6e:c3:94:75:df:be:ef:20: 1f:47:e4:65:bd:f8:2c:60:5d:be:22:db:d7:4d:b4: 54:ad:be:f9:ac:55:09:97:4a:25:e6:4a:66:b3:89: 27:69:45:59:a5:50:59:fb:fb:f2:ba:3b:d1:c0:78: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 155.254.144.0/20 199.36.164.0/22 IPv6: 2604:7b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12068 36329 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:8e:e8:aa:1d:68:94:83:f9:51:19:d0:77:8f:12:c5:3c:ce: 67:b3:e4:59:9c:7e:cb:c8:35:8d:fa:f5:56:cc:c4:95:46:30: 76:c1:5d:7d:21:e1:82:f8:65:e6:c2:5a:f3:52:89:f0:73:22: 4a:b8:ef:ff:06:3c:c1:d9:cf:0e:33:fa:94:d5:ca:5f:28:6b: 2f:e3:4d:84:c9:9e:fd:25:21:fc:4e:70:c5:b6:a5:88:09:a4: b3:bd:55:db:a3:47:cf:1f:82:a7:f7:75:a1:a6:03:b2:f0:c9: f7:ec:ed:9e:4b:a0:eb:37:11:7e:b3:b1:6a:0f:7a:8a:26:65: 11:f3:31:5e:42:6d:0d:1c:dc:75:a1:a2:25:34:5a:f2:61:fb: ee:95:ae:62:b9:c3:09:d6:77:50:56:b7:5f:26:0b:ef:1e:02: 27:c2:11:18:ef:39:96:e9:0f:14:e0:3c:59:12:a4:0a:56:da: 89:ec:d3:5e:0a:ed:e3:ad:f2:e5:cc:6f:44:cf:7f:12:38:28: d2:21:a9:19:28:5b:4c:e6:fc:ff:02:b1:a2:85:1f:19:20:a3: c3:aa:7d:df:11:9e:a8:c0:76:82:cf:df:63:cf:23:18:a1:bd: 1d:f6:6f:67:c5:a3:8d:11:eb:0d:cc:55:84:d4:08:6f:3c:fc: 3f:64:d2:5d -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEhMCI1HHL1BYZzKjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIyMzAxNDUzM1oXDTI3MDMyODAwNDUzM1owLzEtMCsGA1UEAxMk OTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpliTm9SH0EB5p5y/CZaikVevCvBXFKSCh8w KrQusR0BL6zVE+WmcIN6mQs8KyKkuXKD1K7xH3vSUhlkPTRArgyWcEga3w9u2WqG 7ZpcgQpEC+Y1NWb9TknbUMJ+QHe6OzuS85LYsWD0VRW2awEbqc15PYnlVsjIyDYJ gfdyzpPseQVdfjSKfy09Jjv4AimMH+5AKdsstlFxbSl6CJ+K6erdhoboyfjZ1KVN Ovun9SVUmHtNdsu7z7hB1wPZSFCgeKHvNUwpIOOvbsOUdd++7yAfR+RlvfgsYF2+ ItvXTbRUrb75rFUJl0ol5kpms4knaUVZpVBZ+/vyujvRwHhqmwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFE26RaqruYdjpeZvswnFbpcwlJqeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1ZTI5Mjg5LTZmMWMtNGMyZi04 NGY0LWM5NDRlOWU1NDk0MC85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTll NTQ5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARAOjADBASb/pADBALHJKQwDQQCAAIwBwMFACYE ewAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICLyQCAwCN6TBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzjuiq HWiUg/lRGdB3jxLFPM5ns+RZnH7LyDWN+vVWzMSVRjB2wV19IeGC+GXmwlrzUonw cyJKuO//BjzB2c8OM/qU1cpfKGsv402EyZ79JSH8TnDFtqWICaSzvVXbo0fPH4Kn 93WhpgOy8Mn37O2eS6DrNxF+s7FqD3qKJmUR8zFeQm0NHNx1oaIlNFryYfvula5i ucMJ1ndQVrdfJgvvHgInwhEY7zmW6Q8U4DxZEqQKVtqJ7NNeCu3jrfLlzG9Ez38S OCjSIakZKFtM5vz/ArGihR8ZIKPDqn3fEZ6owHaCz99jzyMYob0d9m9nxaONEesN zFWE1AhvPPw/ZNJd -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:28 2025 by rpki-client