$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer File: a90f006a-b108-4757-9dfd-b36376534658.cer (raw, json) Hash identifier: jYnHPNgC6XfQbpoNYfe2QO3mZmKRYVFs219MN4siviI= Subject key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858499DB7950A02373F24BA6A4680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 32288 IP: 45.43.0.0/19 IP: 66.11.112.0/20 IP: 104.192.100.0/22 IP: 104.255.224.0/21 IP: 162.253.64.0/22 IP: 2605:fb80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:95:0a:02:37:3f:24:ba:6a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=a90f006a-b108-4757-9dfd-b36376534658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:5b:03:ae:7b:52:7f:d6:7a:6f:8d:cf:a7: 42:08:15:4f:26:a5:09:5b:2f:6a:c8:e5:67:0a:3a: cc:10:ad:e5:46:9d:50:f8:6a:b1:05:8e:4c:14:48: 46:bd:4d:43:55:18:36:19:6b:96:8b:5b:fa:9e:a7: 56:cf:3f:e5:58:31:55:e4:89:1e:a8:c8:57:b2:4c: 05:51:0e:5f:86:6d:42:b2:65:5c:98:aa:a3:e7:cd: c3:21:2e:7e:b7:c7:e5:04:13:74:20:40:d5:b9:26: 58:3c:06:84:48:71:d6:7b:34:1c:0d:54:12:3a:ea: dc:0a:93:16:70:62:06:5f:1a:9a:3b:1d:26:a4:57: ec:7d:54:0f:7f:f0:c4:b1:71:5b:6d:24:d3:c7:36: 4c:c3:45:fc:80:17:7e:ad:95:87:bd:d3:dd:e2:5e: d8:21:50:39:41:ef:ba:01:59:06:a8:21:38:83:31: 05:bd:9b:6e:7e:fd:e1:52:05:be:39:83:dd:38:9d: f6:46:85:13:99:b5:28:5f:4c:de:f7:b6:2e:00:f2: 81:42:f7:4b:c3:79:53:38:75:b0:68:00:3d:d4:60: 7f:9d:24:5e:5d:b9:55:df:4c:ee:2d:33:db:57:00: e4:af:24:9f:05:4d:5d:bd:01:c5:a1:49:30:06:6e: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.43.0.0/19 66.11.112.0/20 104.192.100.0/22 104.255.224.0/21 162.253.64.0/22 IPv6: 2605:fb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32288 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a1:c2:2c:66:8e:e2:14:80:7f:94:6a:5e:f6:68:fa:b3:b7: 93:15:d1:1f:09:42:a8:54:af:49:e4:39:c8:8d:ac:1e:82:f6: dc:7f:fa:ba:8b:e7:92:03:66:84:b9:f4:47:12:ab:4d:7c:59: 30:30:1a:2e:f8:ff:7f:1c:80:51:63:34:65:fd:cd:ab:84:9d: 9d:7e:2c:32:26:12:fd:9e:d0:42:b0:27:fe:ca:aa:3c:fd:07: e0:fb:59:1e:4f:99:83:8c:9f:fe:f9:e7:07:44:a0:69:b1:d7: 65:17:74:cf:d9:06:42:63:cf:a7:dc:35:2c:e2:d6:8b:d0:52: cf:be:45:89:e9:9c:c8:1d:9d:06:55:fd:a3:19:b1:81:52:f8: f3:19:eb:a0:17:90:fe:79:b1:17:fe:31:23:33:45:84:9b:1f: 5c:3e:2a:8a:a0:f4:a8:6b:54:18:3d:db:0e:96:14:15:fb:58: 15:37:cb:40:62:d9:c0:f6:10:19:06:63:0c:f3:2c:d5:dd:fc: 0a:e6:4d:f6:e2:e6:fd:88:e0:74:05:79:3b:07:e5:66:09:5e: e7:2c:51:c3:5c:19:68:de:18:83:cf:9c:e9:c2:9a:b3:f2:1a: 52:99:15:76:89:20:84:08:82:ea:6d:22:70:75:f8:a3:28:6f: 4a:73:e3:97 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEmdt5UKAjc/JLpqRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk YTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9tbA657Un/Wem+Nz6dCCBVPJqUJWy9qyOVn CjrMEK3lRp1Q+GqxBY5MFEhGvU1DVRg2GWuWi1v6nqdWzz/lWDFV5IkeqMhXskwF UQ5fhm1CsmVcmKqj583DIS5+t8flBBN0IEDVuSZYPAaESHHWezQcDVQSOurcCpMW cGIGXxqaOx0mpFfsfVQPf/DEsXFbbSTTxzZMw0X8gBd+rZWHvdPd4l7YIVA5Qe+6 AVkGqCE4gzEFvZtufv3hUgW+OYPdOJ32RoUTmbUoX0ze97YuAPKBQvdLw3lTOHWw aAA91GB/nSReXblV30zuLTPbVwDkrySfBU1dvQHFoUkwBm5BcQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFFa7dRqLvpINiZkmI/u1pfup9xj4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h OTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E5MGYwMDZhLWIxMDgtNDc1Ny05 ZGZkLWIzNjM3NjUzNDY1OC9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1 MzQ2NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAUtKwADBARCC3ADBAJowGQDBANo/+ADBAKi/UAw DQQCAAIwBwMFACYF+4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfiAwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAkqHCLGaO4hSAf5RqXvZo+rO3kxXRHwlCqFSvSeQ5yI2sHoL23H/6uovnkgNm hLn0RxKrTXxZMDAaLvj/fxyAUWM0Zf3Nq4SdnX4sMiYS/Z7QQrAn/sqqPP0H4PtZ Hk+Zg4yf/vnnB0SgabHXZRd0z9kGQmPPp9w1LOLWi9BSz75FiemcyB2dBlX9oxmx gVL48xnroBeQ/nmxF/4xIzNFhJsfXD4qiqD0qGtUGD3bDpYUFftYFTfLQGLZwPYQ GQZjDPMs1d38CuZN9uLm/YjgdAV5OwflZgle5yxRw1wZaN4Yg8+c6cKas/IaUpkV dokghAiC6m0icHX4oyhvSnPjlw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:29:55 2025 by rpki-client