$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer File: c727dab7-c852-4d24-82ff-cf171b24f2f9.cer (raw, json) Hash identifier: pByHY25YxTuYJuky0mNg8NdbIUp8WchU1rAe1FyQYEA= Subject key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584875E8D0863D838D1A87A22BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 01:45:33 +0000 Certificate not after: Mon 12 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 394161 AS: 394363 AS: 394943 IP: 66.17.0.0/18 IP: 149.106.192.0/19 IP: 192.95.64.0/24 IP: 199.43.255.0/24 IP: 199.66.8.0/22 IP: 199.120.32.0 -- 199.120.57.255 IP: 2620:137:d000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:e8:d0:86:3d:83:8d:1a:87:a2:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 7 01:45:33 2025 GMT Not After : Apr 12 00:45:33 2027 GMT Subject: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:74:51:af:dc:13:3c:ff:d6:6a:fa:f8:d4: 9a:d0:cf:8c:26:74:b4:1b:e2:ff:87:ef:48:a5:b7: 63:1b:4e:eb:ee:92:0e:07:53:80:b8:f0:34:cb:d0: 1c:14:db:5a:5b:81:c6:50:b8:7f:a2:62:39:6a:b4: ab:ef:5e:62:c8:3c:24:49:b9:65:e1:93:5c:92:01: 1d:10:0f:70:a5:6c:18:09:32:25:0a:81:3b:a6:a7: db:8c:41:f2:fa:d3:a1:91:a4:dd:63:c2:bc:80:c2: c6:5b:5c:8e:e6:3a:cb:c6:9f:c5:19:c6:11:0d:ac: 3f:df:c3:d2:8a:b3:ff:35:69:fc:e9:69:18:c8:64: d5:65:b8:27:71:4e:5d:6c:8a:9f:22:3d:3f:01:18: e2:fd:ef:82:db:a6:2a:2d:91:dd:a1:22:e3:c3:2f: c7:44:2d:68:87:fc:6e:22:1d:d7:62:bd:f1:54:68: e8:d6:32:ba:b9:d1:4e:bf:c5:53:71:6e:2e:dc:f7: d7:13:6f:64:83:1b:2b:40:7c:62:d7:05:0f:26:41: 01:de:6f:79:ce:da:4c:15:8a:91:02:62:5c:e9:c1: 74:72:31:a2:c0:0d:a1:73:21:f0:37:ec:b6:cf:49: 55:ac:75:ee:7e:8f:9d:ad:82:09:ca:d2:83:df:48: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.17.0.0/18 149.106.192.0/19 192.95.64.0/24 199.43.255.0/24 199.66.8.0/22 199.120.32.0-199.120.57.255 IPv6: 2620:137:d000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394161 394363 394943 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f4:e0:3c:f2:0d:53:3d:6b:2e:1a:e5:64:bb:d0:86:b5:e7: 4f:0b:da:9e:8e:f3:7a:d7:0f:43:fe:15:c3:ef:5e:fe:96:48: bc:1c:27:56:fc:f7:81:a9:50:9a:95:65:23:90:e3:68:90:5e: a5:02:d2:73:58:b5:dd:20:a5:f5:2a:f4:71:98:b4:67:4e:38: 17:3a:49:5e:2a:72:2b:57:ca:2a:73:c9:60:fb:77:35:8c:1f: f5:6b:46:25:bb:ae:dd:11:35:c9:9c:ca:04:83:66:ca:34:84: 41:86:b4:5e:c6:8d:c8:10:87:1d:3b:ca:dd:0d:27:d7:70:9a: c6:89:88:ec:68:17:8c:b7:f0:d9:40:bd:2f:80:69:52:49:97: ba:0f:84:a4:0c:64:b4:b5:4b:73:bc:a2:68:03:dc:41:31:af: 7e:77:17:6e:22:9e:9a:6b:e0:7f:cd:a8:ae:ca:68:66:e3:08: 8f:3d:47:a4:10:8b:35:63:d0:a4:b5:1f:6c:ef:4e:60:28:ba: d5:94:b9:88:61:b2:de:07:81:c9:fe:80:cb:e9:c8:7e:b7:30: 64:18:3d:cc:e5:19:83:0f:ce:21:e6:b3:8b:a8:c7:76:3b:de: c3:19:bc:58:e8:43:9b:2f:ee:34:08:aa:33:dd:94:7f:7e:27: b1:5f:ac:6c -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWEh16NCGPYONGoeiK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDEwNzAxNDUzM1oXDTI3MDQxMjAwNDUzM1owLzEtMCsGA1UEAxMk YzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRmMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM90Ua/cEzz/1mr6+NSa0M+MJnS0G+L/h+9I pbdjG07r7pIOB1OAuPA0y9AcFNtaW4HGULh/omI5arSr715iyDwkSbll4ZNckgEd EA9wpWwYCTIlCoE7pqfbjEHy+tOhkaTdY8K8gMLGW1yO5jrLxp/FGcYRDaw/38PS irP/NWn86WkYyGTVZbgncU5dbIqfIj0/ARji/e+C26YqLZHdoSLjwy/HRC1oh/xu Ih3XYr3xVGjo1jK6udFOv8VTcW4u3PfXE29kgxsrQHxi1wUPJkEB3m95ztpMFYqR AmJc6cF0cjGiwA2hcyHwN+y2z0lVrHXufo+drYIJytKD30jebQIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFGEfWl8XVf3V0KNOII3UjMwdr2kaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M3MjdkYWI3LWM4NTItNGQyNC04 MmZmLWNmMTcxYjI0ZjJmOS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIy NGYyZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMDIEAgABMCwDBAZCEQADBAWVasADBADAX0ADBADHK/8DBALHQggw DAMEBcd4IAMEAcd4ODAOBAIAAjAIAwYAJiABN9AwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDBgOxAgMGBHsCAwYGvzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCt9OA88g1TPWsuGuVku9CGtedP C9qejvN61w9D/hXD717+lki8HCdW/PeBqVCalWUjkONokF6lAtJzWLXdIKX1KvRx mLRnTjgXOkleKnIrV8oqc8lg+3c1jB/1a0Ylu67dETXJnMoEg2bKNIRBhrRexo3I EIcdO8rdDSfXcJrGiYjsaBeMt/DZQL0vgGlSSZe6D4SkDGS0tUtzvKJoA9xBMa9+ dxduIp6aa+B/zaiuymhm4wiPPUekEIs1Y9CktR9s705gKLrVlLmIYbLeB4HJ/oDL 6ch+tzBkGD3M5RmDD84h5rOLqMd2O97DGbxY6EObL+40CKoz3ZR/fiexX6xs -----END CERTIFICATE-----Generated at Mon Apr 28 15:03:45 2025 by rpki-client