$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a.cer File: de018715-dccc-4fe7-9768-b7eddacc397a.cer (raw, json) Hash identifier: df9e7InIK5JfoZ4/wOiaknbwfCu7z7TOaaOHorWRp1w= Subject key identifier: 4E:DE:91:46:45:F1:7C:5E:1F:94:4C:09:2B:64:09:11:67:3F:25:67 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A0D62EC4590870753BC3E2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/de018715-dccc-4fe7-9768-b7eddacc397a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 00:45:35 +0000 Certificate not after: Sun 05 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 22837 IP: 66.220.32.0 -- 66.220.36.255 IP: 66.220.40.0/23 IP: 66.220.44.0/23 IP: 66.220.62.0/23 IP: 2607:2f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:62:ec:45:90:87:07:53:bc:3e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 2 00:45:35 2025 GMT Not After : Sep 5 00:45:35 2027 GMT Subject: CN=de018715-dccc-4fe7-9768-b7eddacc397a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:fe:ed:26:fd:f4:24:1e:2c:1b:13:30:87: bf:95:35:61:e3:04:93:67:a1:9c:0c:7c:c6:f0:7d: 9d:60:6e:9a:ed:be:65:f5:a4:91:4a:43:ac:28:7d: 75:a7:08:9f:72:ee:8b:ef:02:c1:10:3e:c6:d0:04: c5:ca:ae:ab:d8:3c:2b:d5:f1:2f:5c:2c:24:59:66: 1d:72:d6:92:5e:a4:37:ce:74:67:23:db:90:21:19: b0:58:35:ed:ac:ab:4d:2b:77:8c:81:47:ee:b2:b5: 90:48:ed:0f:90:0a:ea:13:d0:86:a5:90:ec:01:e6: d3:2b:c2:fe:26:f7:97:e1:0c:20:0d:d3:e2:84:e3: 8f:de:98:37:6f:c3:56:d4:c9:ed:81:8f:80:8c:13: d7:42:91:61:7c:46:a9:0c:6d:3d:cb:f3:ab:20:26: cf:d1:7f:50:8d:05:83:2c:a2:b1:49:71:a8:c8:8a: 56:28:75:52:47:b8:b8:35:58:9a:88:33:a8:f8:33: d3:a3:8a:8d:0f:96:dc:eb:ad:3a:ab:67:57:32:9e: e0:a7:6a:9a:1c:41:9e:b7:ed:21:a2:9d:7e:8e:79: 24:d2:7f:b5:83:5b:3f:66:d2:c3:b5:a8:af:93:a2: 43:68:43:98:4b:c0:bf:ff:aa:d0:37:4c:1e:c3:f4: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DE:91:46:45:F1:7C:5E:1F:94:4C:09:2B:64:09:11:67:3F:25:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/de018715-dccc-4fe7-9768-b7eddacc397a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.220.32.0-66.220.36.255 66.220.40.0/23 66.220.44.0/23 66.220.62.0/23 IPv6: 2607:2f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22837 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5e:65:11:20:f0:db:63:d5:7e:4d:35:9e:6a:2f:d4:69:4e: 0c:87:dc:a1:6b:ae:ca:81:8f:9f:2b:19:06:3a:8c:7a:79:76: d3:60:f0:16:97:19:14:a3:eb:83:d5:c8:20:c9:c1:a5:8e:f6: 36:a5:b9:df:d1:ca:c8:78:40:ac:75:35:da:39:87:06:0b:b4: 99:0e:67:df:9c:a8:f7:d5:9e:59:4c:ad:2a:c2:28:bf:21:e6: ba:f2:33:bc:c4:f7:7c:5a:fb:91:cc:ae:8e:cb:18:d7:5e:ce: e7:20:70:b3:84:05:cb:50:6f:bd:12:b6:c0:40:b4:9d:88:cf: 62:c3:a4:56:31:7e:60:73:80:7c:b7:f9:22:2b:86:3e:32:9a: ab:50:eb:cb:ff:bf:7e:4f:88:7e:70:a0:94:11:ab:47:69:8a: d7:ca:d0:e1:47:ea:a4:3a:f7:93:ae:4e:5f:b1:eb:f5:f5:2e: 5d:b2:1d:c0:ad:26:40:ef:35:c9:53:11:e4:b5:57:36:76:cd: ac:f3:5f:94:ca:b2:98:65:7f:63:33:c7:77:53:66:9b:1c:8e: bc:45:cd:2d:41:92:ca:26:88:13:95:0c:65:8a:39:67:83:50: de:c8:c4:9b:ec:fc:04:b2:9d:5a:76:89:a4:50:cd:8a:85:03: 92:ee:21:29 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEoNYuxFkIcHU7w+KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYwMjAwNDUzNVoXDTI3MDkwNTAwNDUzNVowLzEtMCsGA1UEAxMk ZGUwMTg3MTUtZGNjYy00ZmU3LTk3NjgtYjdlZGRhY2MzOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TP+7Sb99CQeLBsTMIe/lTVh4wSTZ6GcDHzG 8H2dYG6a7b5l9aSRSkOsKH11pwifcu6L7wLBED7G0ATFyq6r2Dwr1fEvXCwkWWYd ctaSXqQ3znRnI9uQIRmwWDXtrKtNK3eMgUfusrWQSO0PkArqE9CGpZDsAebTK8L+ JveX4QwgDdPihOOP3pg3b8NW1MntgY+AjBPXQpFhfEapDG09y/OrICbP0X9QjQWD LKKxSXGoyIpWKHVSR7i4NViaiDOo+DPTo4qND5bc6606q2dXMp7gp2qaHEGet+0h op1+jnkk0n+1g1s/ZtLDtaivk6JDaEOYS8C//6rQN0wew/TcPQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFE7ekUZF8XxeH5RMCStkCRFnPyVnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k ZTAxODcxNS1kY2NjLTRmZTctOTc2OC1iN2VkZGFjYzM5N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RlMDE4NzE1LWRjY2MtNGZlNy05 NzY4LWI3ZWRkYWNjMzk3YS9kZTAxODcxNS1kY2NjLTRmZTctOTc2OC1iN2VkZGFj YzM5N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCYEAgABMCAwDAMEBULcIAMEAELcJAMEAULcKAMEAULcLAMEAULc PjANBAIAAjAHAwUAJgcvQDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJZNTBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAFXmURIPDbY9V+TTWeai/UaU4Mh9yha67KgY+fKxkGOox6eXbTYPAWlxkU o+uD1cggycGljvY2pbnf0crIeECsdTXaOYcGC7SZDmffnKj31Z5ZTK0qwii/Iea6 8jO8xPd8WvuRzK6OyxjXXs7nIHCzhAXLUG+9ErbAQLSdiM9iw6RWMX5gc4B8t/ki K4Y+MpqrUOvL/79+T4h+cKCUEatHaYrXytDhR+qkOveTrk5fsev19S5dsh3ArSZA 7zXJUxHktVc2ds2s81+UyrKYZX9jM8d3U2abHI68Rc0tQZLKJogTlQxlijlng1De yMSb7PwEsp1adomkUM2KhQOS7iEp -----END CERTIFICATE-----Generated at Sun Jun 15 05:31:12 2025 by rpki-client