$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer File: b267d832-cb05-4c68-a5ce-ba4645db35e0.cer (raw, json) Hash identifier: ma2wPUtmVe9SQXHpWZc7Ex6DMPo48AtCnXxEvQHGTvY= Subject key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858489769099763747B391ACA02C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jan 2025 01:45:34 +0000 Certificate not after: Sat 24 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 10929 AS: 13845 AS: 19122 AS: 55066 IP: 64.15.64.0/20 IP: 66.51.16.0/21 IP: 67.212.64.0/19 IP: 68.71.32.0/19 IP: 69.165.80.0/20 IP: 148.66.241.0/24 IP: 148.66.252.0/22 IP: 184.170.128.0/20 IP: 192.154.136.0/21 IP: 199.193.52.0/22 IP: 204.147.76.0/22 IP: 205.204.64.0/19 IP: 208.82.120.0/22 IP: 209.44.96.0/19 IP: 2605:9000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:69:09:97:63:74:7b:39:1a:ca:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 19 01:45:34 2025 GMT Not After : Apr 24 00:45:34 2027 GMT Subject: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:c5:d0:ba:7a:4b:92:b8:a2:05:8e:8a:a0: ff:b0:5c:29:a7:8a:a2:0c:97:81:60:68:78:6c:61: dd:56:de:2c:a6:d1:2d:8b:f5:73:7d:02:7e:9b:39: ce:74:2c:4a:37:36:74:b1:4f:79:2c:ad:9d:9c:4e: bc:f7:81:a4:3d:0a:45:22:77:9b:e4:4b:bc:9e:01: e3:74:fb:df:00:e8:08:e0:53:f5:af:d6:82:c7:3c: f0:3d:52:c6:43:8b:2e:d6:66:ce:a9:f1:be:c9:a6: 6f:97:e6:1d:c5:8a:25:35:2a:a9:bc:fc:64:a7:0d: 47:fa:43:db:fb:af:8d:df:e7:c1:e0:2a:db:cf:04: 06:e2:22:b3:84:e6:bb:96:27:f2:41:98:e6:39:ba: 8e:cc:59:e2:e6:5c:78:43:90:85:fb:51:14:a7:4f: e7:a3:a6:6b:1c:0e:c0:bc:81:3b:e8:de:b2:de:d3: be:51:f4:69:94:bc:6d:e0:99:13:e5:f3:34:49:37: cb:c2:8a:83:d0:df:d5:15:eb:2d:35:d1:bd:ae:35: 32:3c:f5:6d:fe:53:9d:a0:84:83:68:96:19:a2:82: 1e:33:13:35:32:16:56:e7:0b:30:a2:5c:17:f8:f7: 57:bf:e3:f6:e6:7a:21:b5:9f:c8:a4:ac:89:d1:c3: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.15.64.0/20 66.51.16.0/21 67.212.64.0/19 68.71.32.0/19 69.165.80.0/20 148.66.241.0/24 148.66.252.0/22 184.170.128.0/20 192.154.136.0/21 199.193.52.0/22 204.147.76.0/22 205.204.64.0/19 208.82.120.0/22 209.44.96.0/19 IPv6: 2605:9000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10929 13845 19122 55066 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:73:36:7e:55:66:e5:95:f7:8e:0d:eb:df:35:e4:5f:22:67: 05:12:f1:71:80:c6:a2:13:3d:33:d9:07:89:44:bc:4a:ed:8c: a6:93:bc:dd:ce:1d:0b:67:5b:29:09:72:cd:16:d9:03:86:6a: 42:45:e6:b0:fd:18:2e:cb:83:49:fe:7f:8e:e3:58:86:13:f6: ec:27:82:c5:99:f1:65:e8:38:f3:63:66:dd:16:92:15:ef:15: 9b:b1:ee:c7:58:9d:b4:0c:59:c5:23:89:e9:49:08:5c:55:0f: a6:38:54:36:74:39:7c:a1:68:66:66:a0:21:57:7a:9d:5e:ba: 37:3e:fd:44:d9:f9:8d:c6:51:ca:7c:73:11:c9:99:a2:00:6d: a6:cf:2c:4b:df:1e:b8:af:23:d3:5a:c1:73:d9:ad:9b:fc:c8: a6:39:3b:f3:4c:67:0c:a2:2d:fa:2d:09:b4:4a:02:8d:6a:0d: 58:72:3e:33:be:23:c3:5a:36:c0:f6:29:43:64:89:1c:fd:57: 38:ff:41:80:87:cd:09:bb:e5:e2:45:8a:67:55:e6:5f:e6:86: c7:31:f6:54:4f:00:a3:41:34:b7:a5:85:99:54:30:02:cf:a7: c9:4b:fc:30:29:5e:d9:0c:da:6d:8d:63:c8:7a:36:45:19:c3: 11:dc:dd:6c -----BEGIN CERTIFICATE----- MIIHcjCCBlqgAwIBAgIUAQ0Mn0MoWEiXaQmXY3R7ORrKAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDExOTAxNDUzNFoXDTI3MDQyNDAwNDUzNFowLzEtMCsGA1UEAxMk YjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIzNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylvF0Lp6S5K4ogWOiqD/sFwpp4qiDJeBYGh4 bGHdVt4sptEti/VzfQJ+mznOdCxKNzZ0sU95LK2dnE6894GkPQpFIneb5Eu8ngHj dPvfAOgI4FP1r9aCxzzwPVLGQ4su1mbOqfG+yaZvl+YdxYolNSqpvPxkpw1H+kPb +6+N3+fB4CrbzwQG4iKzhOa7lifyQZjmObqOzFni5lx4Q5CF+1EUp0/no6ZrHA7A vIE76N6y3tO+UfRplLxt4JkT5fM0STfLwoqD0N/VFestNdG9rjUyPPVt/lOdoISD aJYZooIeMxM1MhZW5wswolwX+PdXv+P25nohtZ/IpKyJ0cOdhwIDAQABo4IEhDCC BIAwHQYDVR0OBBYEFNq5YgNYSIcv0zLHUJsscQgvXqgmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IyNjdkODMyLWNiMDUtNGM2OC1h NWNlLWJhNDY0NWRiMzVlMC9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVk YjM1ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwfAYIKwYBBQUH AQcBAf8EbTBrMFoEAgABMFQDBARAD0ADBANCMxADBAVD1EADBAVERyADBARFpVAD BACUQvEDBAKUQvwDBAS4qoADBAPAmogDBALHwTQDBALMk0wDBAXNzEADBALQUngD BAXRLGAwDQQCAAIwBwMFACYFkAAwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQICKrEC AjYVAgJKsgIDANcaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKRzNn5VZuWV944N69815F8iZwUS8XGAxqIT PTPZB4lEvErtjKaTvN3OHQtnWykJcs0W2QOGakJF5rD9GC7Lg0n+f47jWIYT9uwn gsWZ8WXoOPNjZt0WkhXvFZux7sdYnbQMWcUjielJCFxVD6Y4VDZ0OXyhaGZmoCFX ep1eujc+/UTZ+Y3GUcp8cxHJmaIAbabPLEvfHrivI9NawXPZrZv8yKY5O/NMZwyi LfotCbRKAo1qDVhyPjO+I8NaNsD2KUNkiRz9Vzj/QYCHzQm75eJFimdV5l/mhscx 9lRPAKNBNLelhZlUMALPp8lL/DApXtkM2m2NY8h6NkUZwxHc3Ww= -----END CERTIFICATE-----Generated at Sun Apr 27 23:58:02 2025 by rpki-client