$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer File: a521f5ee-89d2-4088-abb9-f69291655e39.cer (raw, json) Hash identifier: S+y8akfYQswkDt1PDGVrPqBvk8c0v/hAQ59aivgx6xY= Subject key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849DDED4702805E86255CDB2800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 May 2025 00:45:33 +0000 Certificate not after: Thu 19 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 25820 AS: 400981 IP: 23.105.192.0/19 IP: 23.106.128.0/19 IP: 23.252.96.0/20 IP: 45.62.96.0/19 IP: 45.78.0.0/18 IP: 66.112.208.0/20 IP: 67.209.176.0/20 IP: 74.121.148.0/22 IP: 104.128.80.0/20 IP: 104.160.32.0/20 IP: 104.194.64.0/19 IP: 104.224.128.0/18 IP: 107.182.176.0/20 IP: 138.128.192.0/19 IP: 144.168.56.0/21 IP: 162.211.224.0/21 IP: 192.243.112.0/20 IP: 198.35.44.0/22 IP: 2607:8700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:ed:47:02:80:5e:86:25:5c:db:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 16 00:45:33 2025 GMT Not After : Aug 19 00:45:33 2027 GMT Subject: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:c3:c2:90:d7:9d:94:94:a3:04:ca:85:3a: a7:6d:cb:cc:0a:1d:a2:95:22:86:02:48:a4:0d:aa: e3:cd:3c:43:0c:da:f5:8d:50:4c:d5:7b:62:c7:70: ad:4c:e2:e2:92:4d:a9:8c:61:8b:bf:0f:46:12:fb: a5:e7:e5:61:16:e3:80:d1:df:09:7b:35:44:61:01: 51:b5:92:56:cd:b9:5a:07:7d:d8:89:c2:b1:9b:5a: 93:79:e0:27:47:74:60:b6:c7:85:a4:85:d2:2f:f3: 28:3a:e8:8d:1b:2d:7b:a4:29:3b:23:17:da:06:a0: eb:a0:a4:a2:40:dd:dd:76:77:bd:28:29:8d:7f:70: af:fd:f4:4e:8d:d2:35:d8:e5:c4:64:fd:01:d2:c6: b6:2e:d4:4d:29:c5:a6:60:06:08:e9:d8:27:8b:60: 6a:62:10:b0:09:60:24:93:3c:e5:12:29:a9:dd:1d: 2d:be:c7:39:06:ba:55:cd:d8:13:7a:a0:16:70:f5: 74:bc:3e:a3:39:86:5f:38:13:ee:92:46:d1:39:41: 66:15:dc:d2:e4:cf:26:a8:ef:bd:6d:7b:6a:a2:0c: 6b:b3:74:a7:ef:28:17:3b:d2:cb:38:0f:a4:90:87: e4:f7:8a:ae:ab:9a:54:68:35:31:1d:5e:f9:4e:c5: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.105.192.0/19 23.106.128.0/19 23.252.96.0/20 45.62.96.0/19 45.78.0.0/18 66.112.208.0/20 67.209.176.0/20 74.121.148.0/22 104.128.80.0/20 104.160.32.0/20 104.194.64.0/19 104.224.128.0/18 107.182.176.0/20 138.128.192.0/19 144.168.56.0/21 162.211.224.0/21 192.243.112.0/20 198.35.44.0/22 IPv6: 2607:8700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25820 400981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:84:0e:01:61:01:9f:05:d7:8d:41:1c:7f:72:8f:75:4c:ed: 4a:51:0f:8d:a3:34:bd:46:9f:7b:8e:c3:55:b8:30:01:61:08: 28:5e:ed:0a:c7:5f:5f:7e:ec:33:d1:d4:af:49:b8:22:d4:8e: ab:fd:9b:e9:40:ff:32:fa:8b:65:45:d9:78:76:88:2a:4b:dd: 38:99:a2:17:9d:a1:98:31:48:59:a0:f4:9f:d0:00:d0:ef:e2: 11:4b:34:37:03:4c:10:e3:6d:28:df:4e:66:fc:1a:1c:d7:6b: 23:e6:07:e7:4b:53:e5:e7:ca:6d:4a:4d:1b:ea:4a:c8:2e:af: b0:a5:31:6e:2d:90:80:96:1b:7e:9e:fe:eb:e9:af:b0:a7:aa: dc:3f:3a:e8:be:62:ce:00:2e:19:e1:4f:b5:9d:26:bd:ae:9d: fa:6f:21:70:03:cc:dd:bd:10:a8:65:1a:df:27:a4:c1:39:7a: cf:dd:91:13:b0:8b:83:a6:9b:f2:04:28:98:d3:92:98:b7:64: 26:bf:f4:42:7c:f9:01:33:50:a1:f8:c0:bc:6b:f4:ba:a8:02: 5d:71:37:7f:83:08:b9:23:64:9b:24:86:15:ec:24:2f:46:ba: ec:f3:3e:3d:b1:77:c8:12:1b:69:92:20:f9:7c:95:e4:c1:a6: c4:d0:c4:eb -----BEGIN CERTIFICATE----- MIIHhTCCBm2gAwIBAgIUAQ0Mn0MoWEnd7UcCgF6GJVzbKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUxNjAwNDUzM1oXDTI3MDgxOTAwNDUzM1owLzEtMCsGA1UEAxMk YTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR/DwpDXnZSUowTKhTqnbcvMCh2ilSKGAkik DarjzTxDDNr1jVBM1Xtix3CtTOLikk2pjGGLvw9GEvul5+VhFuOA0d8JezVEYQFR tZJWzblaB33YicKxm1qTeeAnR3RgtseFpIXSL/MoOuiNGy17pCk7IxfaBqDroKSi QN3ddne9KCmNf3Cv/fROjdI12OXEZP0B0sa2LtRNKcWmYAYI6dgni2BqYhCwCWAk kzzlEimp3R0tvsc5BrpVzdgTeqAWcPV0vD6jOYZfOBPukkbROUFmFdzS5M8mqO+9 bXtqogxrs3Sn7ygXO9LLOA+kkIfk94quq5pUaDUxHV75TsUr7wIDAQABo4IElzCC BJMwHQYDVR0OBBYEFBTuDbx4WG9Jak98LjBKThGp/ptzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h NTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E1MjFmNWVlLTg5ZDItNDA4OC1h YmI5LWY2OTI5MTY1NWUzOS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2 NTVlMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgZYGCCsGAQUF BwEHAQH/BIGGMIGDMHIEAgABMGwDBAUXacADBAUXaoADBAQX/GADBAUtPmADBAYt TgADBARCcNADBARD0bADBAJKeZQDBARogFADBARooCADBAVowkADBAZo4IADBARr trADBAWKgMADBAOQqDgDBAOi0+ADBATA83ADBALGIywwDQQCAAIwBwMFACYHhwAw HgYIKwYBBQUHAQgBAf8EDzANoAswCQICZNwCAwYeVTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALhA4BYQGf BdeNQRx/co91TO1KUQ+NozS9Rp97jsNVuDABYQgoXu0Kx19ffuwz0dSvSbgi1I6r /ZvpQP8y+otlRdl4dogqS904maIXnaGYMUhZoPSf0ADQ7+IRSzQ3A0wQ420o305m /Boc12sj5gfnS1Pl58ptSk0b6krILq+wpTFuLZCAlht+nv7r6a+wp6rcPzrovmLO AC4Z4U+1nSa9rp36byFwA8zdvRCoZRrfJ6TBOXrP3ZETsIuDppvyBCiY05KYt2Qm v/RCfPkBM1Ch+MC8a/S6qAJdcTd/gwi5I2SbJIYV7CQvRrrs8z49sXfIEhtpkiD5 fJXkwabE0MTr -----END CERTIFICATE-----Generated at Sun Jun 15 22:03:09 2025 by rpki-client