$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer File: 9ff9bceb-e14b-4417-b9b7-c51352d95416.cer (raw, json) Hash identifier: bWGxOITej1PF6g2a9WxybadGQ5BJ/MpoJMxV5Wj1vyE= Subject key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584875E8CF75986A05A10B084400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 01:45:33 +0000 Certificate not after: Mon 12 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 192.206.9.0 -- 192.206.11.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:e8:cf:75:98:6a:05:a1:0b:08:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 7 01:45:33 2025 GMT Not After : Apr 12 00:45:33 2027 GMT Subject: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:5e:da:63:e9:3b:f3:ff:32:0c:e1:a1:58: 7a:f4:cb:5d:1e:1b:5f:fe:bb:f6:75:c0:4c:96:e2: 6d:fc:20:79:d7:1c:34:da:c3:89:3b:f1:29:72:0d: fb:a1:2b:92:3e:d2:93:ab:99:40:e5:33:54:f0:57: d5:65:02:0d:1e:4a:cb:25:b6:01:67:fd:79:09:81: 3d:c6:80:06:ae:86:c1:1f:ee:b6:96:aa:df:65:97: 89:22:a6:a4:1a:31:e6:99:a5:a0:10:5a:f3:1f:d3: 5e:81:04:9b:d6:95:2c:bf:db:e3:64:c8:57:f9:23: fa:2f:b7:90:70:2d:bc:d7:0c:1a:ed:05:c2:d0:a0: db:61:18:f1:70:be:ef:b2:c7:7a:3f:b6:0f:e9:4f: e9:46:d0:3b:b2:e9:ea:e0:03:28:13:17:84:05:7a: 28:50:a8:50:d7:9b:24:67:0f:d9:f6:be:19:ff:3f: d2:91:25:3f:2b:5a:20:ec:75:3e:31:be:5e:a7:e2: 26:1c:62:7b:8c:bf:7c:7e:90:de:09:e1:f8:95:d5: b1:a6:76:e3:4c:7a:a5:9f:cc:59:1c:9b:c7:17:33: 7d:6f:6b:85:1a:80:c9:5c:c3:7e:fb:e3:a6:4c:59: f3:93:5a:32:da:6f:7f:d1:d3:f9:45:94:7e:50:f9: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.206.9.0-192.206.11.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:eb:49:b9:ea:10:f9:a0:a6:cd:1c:0b:c5:9d:66:76:6f:11: 5f:d0:c8:cf:9f:85:ac:b5:ba:e8:8d:3c:f6:00:9f:7b:f5:6f: e6:39:96:6b:bb:05:f5:93:7e:21:c1:a5:69:36:18:9f:61:2e: 29:d4:a9:b2:49:db:4e:63:a7:7d:3b:9b:2b:a1:a6:fd:79:62: 5a:e3:5f:34:33:6e:d1:b8:df:5f:b4:e3:37:e8:ac:19:e6:18: f7:d4:87:63:39:16:d0:07:92:bd:91:1e:b4:44:1b:84:1c:07: e7:a2:3e:5b:8d:30:ca:62:52:02:4f:ee:a6:cc:4b:7a:e7:2d: 38:71:83:3e:09:4f:9f:2a:43:4d:7f:81:b9:f1:e6:ff:57:63: 8c:d4:8a:e3:d9:ae:70:f1:db:e3:1c:c7:1c:ca:df:1b:bf:2b: 59:91:7f:74:5a:67:45:60:37:3c:97:19:4b:fc:a7:08:9e:5c: da:09:e0:94:86:7a:64:56:3f:37:71:ef:82:f0:67:e6:fb:08: ee:58:fb:43:d9:d6:f4:66:23:43:09:54:9e:c4:85:cd:9d:35: 86:6a:e1:a3:8c:1a:98:d0:9d:3b:4a:cb:86:8c:df:27:c8:f2: 5a:45:ef:1c:cc:aa:9a:92:f5:88:e2:23:e8:85:b1:00:bc:df: 51:db:9c:61 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEh16M91mGoFoQsIRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDEwNzAxNDUzM1oXDTI3MDQxMjAwNDUzM1owLzEtMCsGA1UEAxMk OWZmOWJjZWItZTE0Yi00NDE3LWI5YjctYzUxMzUyZDk1NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHNe2mPpO/P/MgzhoVh69MtdHhtf/rv2dcBM luJt/CB51xw02sOJO/Epcg37oSuSPtKTq5lA5TNU8FfVZQINHkrLJbYBZ/15CYE9 xoAGrobBH+62lqrfZZeJIqakGjHmmaWgEFrzH9NegQSb1pUsv9vjZMhX+SP6L7eQ cC281wwa7QXC0KDbYRjxcL7vssd6P7YP6U/pRtA7sunq4AMoExeEBXooUKhQ15sk Zw/Z9r4Z/z/SkSU/K1og7HU+Mb5ep+ImHGJ7jL98fpDeCeH4ldWxpnbjTHqln8xZ HJvHFzN9b2uFGoDJXMN+++OmTFnzk1oy2m9/0dP5RZR+UPmsfwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFAAOT1FBWW04u/oA66UkxmiMX6DfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJkOTU0MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlmZjliY2ViLWUxNGItNDQxNy1i OWI3LWM1MTM1MmQ5NTQxNi85ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJk OTU0MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMDOCQMEAsDOCDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs60m56hD5 oKbNHAvFnWZ2bxFf0MjPn4WstbrojTz2AJ979W/mOZZruwX1k34hwaVpNhifYS4p 1KmySdtOY6d9O5sroab9eWJa4180M27RuN9ftOM36KwZ5hj31IdjORbQB5K9kR60 RBuEHAfnoj5bjTDKYlICT+6mzEt65y04cYM+CU+fKkNNf4G58eb/V2OM1Irj2a5w 8dvjHMccyt8bvytZkX90WmdFYDc8lxlL/KcInlzaCeCUhnpkVj83ce+C8Gfm+wju WPtD2db0ZiNDCVSexIXNnTWGauGjjBqY0J07SsuGjN8nyPJaRe8czKqakvWI4iPo hbEAvN9R25xh -----END CERTIFICATE-----Generated at Mon Apr 28 06:29:13 2025 by rpki-client