$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer File: e56f33c4-5195-43f8-a0d4-992f28b374ee.cer (raw, json) Hash identifier: TeIDdL/a/ND7nwK06FsXDVWEef2tWOGzuFsdf9EIZnI= Subject key identifier: 20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849017F036F03F4CD432C943000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 399273 IP: 45.42.225.0/24 IP: 2620:a2:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:03:6f:03:f4:cd:43:2c:94:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=e56f33c4-5195-43f8-a0d4-992f28b374ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:1e:51:96:e5:63:ef:a1:1d:40:38:b7:28: 16:f8:ca:db:cf:dd:8a:38:2f:89:e9:ad:92:b8:f9: 88:55:43:bb:4d:10:35:10:5c:93:66:b1:f3:07:6c: c2:30:9d:08:f5:55:21:4a:37:5b:65:82:b6:46:8e: d7:47:dc:87:d1:b4:25:9a:66:f2:fb:af:76:ab:5b: 5f:6c:15:a5:1a:7f:63:a7:97:05:e5:1e:56:05:ce: 5b:c6:aa:d1:80:cf:16:38:da:3d:d0:e5:ef:9b:43: 93:32:3e:6a:f0:fd:fe:c7:a0:67:a8:6f:5f:55:a3: 01:7d:eb:ee:6b:4e:74:07:a5:18:bd:c9:67:c4:bf: 19:19:22:27:bb:6b:48:53:db:5f:a8:7a:ad:5c:25: 95:ef:fa:dc:ce:bd:2a:c1:1d:80:8b:a3:00:13:45: a3:f8:f2:99:2b:dd:d1:65:5d:48:7a:05:a4:b7:70: d6:03:d3:ef:6d:20:02:67:a6:d0:fc:8d:53:24:f3: ee:c8:46:cf:94:53:a6:af:49:35:2c:79:c9:b1:e1: ec:70:7e:e5:78:84:e0:4c:17:e2:42:6f:59:b8:38: 7b:6b:71:6f:65:33:2d:28:0d:d3:60:3a:7e:e3:db: ac:f3:44:b5:1a:ed:bd:23:22:c1:75:18:f7:16:9a: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.42.225.0/24 IPv6: 2620:a2:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f4:3d:2c:6d:f6:2a:f6:b6:b3:e2:d5:2b:00:04:b2:89:22: 30:55:a0:7f:10:e7:55:21:d8:da:46:58:8c:f5:9f:7e:1b:20: 02:89:eb:96:5c:84:ce:5a:e1:19:77:9a:8a:df:9b:72:5e:0a: ba:c4:f5:2a:cd:4c:b9:b3:bd:ae:e7:13:20:af:b7:cc:ab:f9: 4b:89:93:d8:6f:b0:e3:c1:5d:91:17:79:30:52:a3:a6:93:4f: 37:6f:2a:eb:fd:96:21:dd:13:92:56:18:56:fe:39:76:02:31: 19:ce:e1:ad:d9:7e:13:6f:8c:1b:a2:3c:a2:31:00:c8:3b:48: 9e:29:5c:c4:9e:4e:41:df:ac:5f:6e:f5:58:a0:96:f6:37:6b: 64:84:84:59:ac:15:c0:9a:b3:c0:2d:b8:f8:69:91:32:7e:b2: 2e:c9:20:aa:1f:27:da:3d:2c:60:04:dc:23:24:a2:57:22:a0: f4:30:ed:3a:e4:fc:15:f3:54:8a:cf:16:4e:5c:0a:ac:bd:da: 01:c4:8d:2b:34:62:42:38:ec:4f:7f:ef:27:4f:2e:38:76:6d: ae:00:a9:69:8f:c5:4d:39:12:02:b6:90:7d:0e:08:37:f0:59: 3d:8b:af:41:c8:90:7d:37:18:5e:23:3d:8d:14:73:f3:be:52: b6:cf:4f:7d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEkBfwNvA/TNQyyUMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk ZTU2ZjMzYzQtNTE5NS00M2Y4LWEwZDQtOTkyZjI4YjM3NGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn0eUZblY++hHUA4tygW+Mrbz92KOC+J6a2S uPmIVUO7TRA1EFyTZrHzB2zCMJ0I9VUhSjdbZYK2Ro7XR9yH0bQlmmby+692q1tf bBWlGn9jp5cF5R5WBc5bxqrRgM8WONo90OXvm0OTMj5q8P3+x6BnqG9fVaMBfevu a050B6UYvclnxL8ZGSInu2tIU9tfqHqtXCWV7/rczr0qwR2Ai6MAE0Wj+PKZK93R ZV1IegWkt3DWA9PvbSACZ6bQ/I1TJPPuyEbPlFOmr0k1LHnJseHscH7leITgTBfi Qm9ZuDh7a3FvZTMtKA3TYDp+49us80S1Gu29IyLBdRj3FpraewIDAQABo4IELDCC BCgwHQYDVR0OBBYEFCBgyLNTL/KO6fSDGVaCLQS6PAv0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l NTZmMzNjNC01MTk1LTQzZjgtYTBkNC05OTJmMjhiMzc0ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U1NmYzM2M0LTUxOTUtNDNmOC1h MGQ0LTk5MmYyOGIzNzRlZS9lNTZmMzNjNC01MTk1LTQzZjgtYTBkNC05OTJmMjhi Mzc0ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAtKuEwDwQCAAIwCQMHACYgAKLgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGF6kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGfQ9LG32Kva2s+LVKwAEsoki MFWgfxDnVSHY2kZYjPWffhsgAonrllyEzlrhGXeait+bcl4KusT1Ks1MubO9rucT IK+3zKv5S4mT2G+w48FdkRd5MFKjppNPN28q6/2WId0TklYYVv45dgIxGc7hrdl+ E2+MG6I8ojEAyDtInilcxJ5OQd+sX271WKCW9jdrZISEWawVwJqzwC24+GmRMn6y Lskgqh8n2j0sYATcIySiVyKg9DDtOuT8FfNUis8WTlwKrL3aAcSNKzRiQjjsT3/v J08uOHZtrgCpaY/FTTkSAraQfQ4IN/BZPYuvQciQfTcYXiM9jRRz875Sts9PfQ== -----END CERTIFICATE-----Generated at Wed Apr 30 03:33:57 2025 by rpki-client