$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer File: a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer (raw, json) Hash identifier: Yn52Bwt5mSipYHVnHiObsgPBgmaFEnCWN7bRNfAPnHU= Subject key identifier: 09:34:4F:22:0E:7B:21:C1:CA:04:08:C6:2A:83:C0:09:FE:63:B4:41 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584922E1745C7E86AA7DD992C400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 00:45:33 +0000 Certificate not after: Sun 13 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 54110 IP: 199.182.132.0/22 IP: 206.168.36.0/23 IP: 2605:3880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:22:e1:74:5c:7e:86:aa:7d:d9:92:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 10 00:45:33 2025 GMT Not After : Jun 13 00:45:33 2027 GMT Subject: CN=a816e8ad-9bcc-46da-afd8-70dd97bd0232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:0c:f0:00:6f:09:3e:ef:39:9a:7e:80:2e: 25:f0:af:18:8b:07:89:aa:59:33:73:a8:cf:60:87: c2:d0:77:78:d9:d8:8d:1d:ff:ed:be:3c:cb:b0:99: 6a:5d:da:53:fe:d2:49:c6:db:82:af:e2:3e:a6:c6: 34:f6:60:bb:dd:90:6f:e7:06:3c:a8:0b:82:ec:c4: 4b:8e:4d:d4:28:38:de:11:38:60:54:3a:03:83:39: 9e:6f:f5:fa:2a:7a:01:96:32:5f:d8:16:bf:88:2f: 8e:52:f5:4c:c2:87:c6:a3:c2:4a:df:dc:7c:17:65: 11:c6:1d:e9:e3:3d:2b:d0:36:88:1d:f8:3e:44:9a: 40:c0:b4:bb:40:1f:28:02:21:e9:0c:18:7f:00:41: f1:9c:f8:06:b6:73:b6:73:cf:60:d9:8e:98:72:e9: 18:6b:ff:85:c5:d9:07:a2:d2:0b:b8:53:1c:68:1f: 52:0a:39:ad:68:73:0b:ec:ae:78:a8:dd:12:34:b1: a1:9d:68:18:4e:66:7e:6b:5d:37:53:d6:92:64:e5: d1:a4:a1:97:bf:96:65:59:2f:80:2f:97:84:90:5a: cc:c0:88:e8:86:a9:26:1e:d1:8a:42:84:48:78:94: ca:99:f6:58:0d:8f:92:a5:d7:7d:92:7f:3c:82:c9: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:4F:22:0E:7B:21:C1:CA:04:08:C6:2A:83:C0:09:FE:63:B4:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.182.132.0/22 206.168.36.0/23 IPv6: 2605:3880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8b:8f:c5:43:20:4c:12:49:84:29:e6:65:3d:5d:40:7a:0b: 7f:d2:f8:81:fc:2c:e2:c2:b6:96:3a:9e:4d:e3:7f:98:6b:3c: 74:60:a3:7b:db:d0:f3:02:88:3f:bc:d3:df:ac:06:c0:f1:34: b5:e7:88:bb:52:c6:b8:39:dd:a3:3c:6a:e1:b7:1a:3d:0b:78: 05:81:00:3f:bc:54:de:79:09:de:95:35:af:e3:05:86:d1:bb: c2:44:ac:b7:b4:4a:ff:b3:f7:b5:89:1d:c8:cb:d3:60:fc:37: af:d0:cc:f3:c9:34:ae:5e:64:f2:a0:61:07:e4:74:56:b3:df: 3d:55:6e:dd:69:b4:92:8d:8e:09:e0:86:b5:98:49:76:09:8d: 1c:f0:1b:c4:f5:68:30:89:ce:23:ce:fe:9d:41:18:a8:1c:d3: e7:15:ba:4f:ab:9c:f8:6c:ba:1c:73:c5:b7:f4:f8:ca:3f:a9: c7:d7:2f:11:81:6d:9d:6e:c4:8d:b0:c2:86:cc:78:90:b3:33: 27:9b:73:d8:dd:de:fc:5c:4d:83:7a:b7:90:31:dc:3e:af:e4: 98:76:c7:b3:70:c5:a1:78:ca:0e:c4:e6:cd:e3:78:db:b1:36: 8d:87:b4:02:0d:fa:f6:be:b1:34:78:46:f6:cf:8d:ac:f3:e6: 5b:f5:be:6a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEki4XRcfoaqfdmSxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxMDAwNDUzM1oXDTI3MDYxMzAwNDUzM1owLzEtMCsGA1UEAxMk YTgxNmU4YWQtOWJjYy00NmRhLWFmZDgtNzBkZDk3YmQwMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DQM8ABvCT7vOZp+gC4l8K8YiweJqlkzc6jP YIfC0Hd42diNHf/tvjzLsJlqXdpT/tJJxtuCr+I+psY09mC73ZBv5wY8qAuC7MRL jk3UKDjeEThgVDoDgzmeb/X6KnoBljJf2Ba/iC+OUvVMwofGo8JK39x8F2URxh3p 4z0r0DaIHfg+RJpAwLS7QB8oAiHpDBh/AEHxnPgGtnO2c89g2Y6YcukYa/+FxdkH otILuFMcaB9SCjmtaHML7K54qN0SNLGhnWgYTmZ+a103U9aSZOXRpKGXv5ZlWS+A L5eEkFrMwIjohqkmHtGKQoRIeJTKmfZYDY+Spdd9kn88gsmiYwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFAk0TyIOeyHBygQIxiqDwAn+Y7RBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h ODE2ZThhZC05YmNjLTQ2ZGEtYWZkOC03MGRkOTdiZDAyMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1h ZmQ4LTcwZGQ5N2JkMDIzMi9hODE2ZThhZC05YmNjLTQ2ZGEtYWZkOC03MGRkOTdi ZDAyMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALHtoQDBAHOqCQwDQQCAAIwBwMFACYFOIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANNeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABKLj8VDIEwSSYQp5mU9 XUB6C3/S+IH8LOLCtpY6nk3jf5hrPHRgo3vb0PMCiD+809+sBsDxNLXniLtSxrg5 3aM8auG3Gj0LeAWBAD+8VN55Cd6VNa/jBYbRu8JErLe0Sv+z97WJHcjL02D8N6/Q zPPJNK5eZPKgYQfkdFaz3z1Vbt1ptJKNjgnghrWYSXYJjRzwG8T1aDCJziPO/p1B GKgc0+cVuk+rnPhsuhxzxbf0+Mo/qcfXLxGBbZ1uxI2wwobMeJCzMyebc9jd3vxc TYN6t5Ax3D6v5Jh2x7NwxaF4yg7E5s3jeNuxNo2HtAIN+va+sTR4RvbPjazz5lv1 vmo= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:48 2025 by rpki-client