$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer File: e8abcb36-7d75-4654-a098-d032ddf03d8a.cer (raw, json) Hash identifier: gXRxJ3huWdh2/Yioe9vk9UaB2ecxyIn84FyviPUHK/Y= Subject key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848D4D4111BC737B3A416872D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Feb 2025 01:45:32 +0000 Certificate not after: Sun 16 May 2027 00:45:32 +0000 Subordinate resources: IP: 161.199.250.0/23 IP: 174.34.225.0/24 IP: 192.84.231.0/24 IP: 216.120.142.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:d4:11:1b:c7:37:b3:a4:16:87:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 10 01:45:32 2025 GMT Not After : May 16 00:45:32 2027 GMT Subject: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:24:36:a7:61:c7:3d:a6:6c:fd:ed:13:f5: 72:85:76:ac:e4:15:4b:d6:0d:d3:24:ac:b0:e7:ca: 53:38:b7:3a:bf:c2:50:09:00:41:fa:94:cb:e0:f7: a9:b3:ae:8f:68:da:54:55:fc:34:af:28:29:2e:4f: a9:e7:e7:4e:c4:7c:ae:47:6a:de:ae:3e:41:02:22: 89:5a:ff:cd:8a:d6:79:50:a4:d4:36:c0:4c:91:de: eb:1e:0a:5d:11:3c:d2:b3:71:da:76:58:49:5b:e2: 5a:14:96:18:bd:f9:76:2f:ee:c3:97:f2:20:1d:cc: c0:93:3c:83:ca:bf:f5:c6:4d:e5:9e:f8:8a:43:54: eb:e1:08:b5:b1:65:a4:1d:7d:01:c0:d2:f0:45:7d: f8:ed:17:fb:0f:79:24:e2:24:1a:a2:c8:c0:9b:c3: c7:d5:10:49:4a:98:c9:0f:dc:b9:af:9e:f0:e9:18: 40:f7:9f:f5:09:eb:32:cc:bb:a2:99:5b:b3:ce:d7: 1f:ba:53:9b:9c:1f:1a:90:db:67:98:07:a0:db:24: 37:a1:be:81:d4:a1:1e:c7:fc:52:1d:ff:05:2a:7a: 4e:d1:1b:47:22:a2:9c:c2:fb:f1:3d:83:17:7a:7e: d6:48:ca:37:c2:92:e1:82:d4:47:29:e6:a6:62:d4: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 174.34.225.0/24 192.84.231.0/24 216.120.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:f6:ab:f7:4e:e8:9a:35:60:ed:23:6b:74:ea:a2:08:92:c3: 23:95:af:b7:e7:fd:e4:20:d8:af:37:f8:53:c6:e5:16:c5:a3: 04:d4:fa:c2:94:d9:bd:7d:a9:07:25:2d:61:48:46:7c:82:9e: ed:7c:ff:9b:35:af:31:fc:94:b8:8c:3d:e3:d5:47:a5:0b:61: 87:d1:91:66:9c:65:c0:ab:e4:1f:0d:5e:5e:fd:e9:6a:a4:b6: ab:0c:7e:ee:b0:59:67:51:97:e8:f0:01:1b:f2:5d:a6:5a:83: 1e:cb:71:3b:e3:2e:04:ba:d7:b3:2c:b7:9b:ef:14:e5:10:fc: 02:de:34:1b:ad:68:7e:cc:f1:52:50:97:86:83:a3:63:a1:12: a4:e8:f6:5a:43:0f:a3:5e:61:14:ed:8b:99:83:58:9f:48:0e: ee:38:54:32:a3:36:ed:46:b0:72:5f:8e:61:0c:e7:2a:f0:bb: bf:4c:64:f2:97:5b:f6:60:c2:a2:12:a8:59:88:77:7f:61:78: 1f:aa:54:93:ab:d0:c8:1f:ca:c1:97:8f:ce:05:eb:cf:e5:ea: 68:7c:1b:fa:65:e9:44:24:f9:6f:8e:cb:6a:52:87:01:b3:f9: 9c:b0:07:68:03:60:c3:d0:e3:ca:9a:b7:d5:3a:b1:52:cb:1f: 77:10:a2:ae -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEjU1BEbxzezpBaHLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIxMDAxNDUzMloXDTI3MDUxNjAwNDUzMlowLzEtMCsGA1UEAxMk ZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAzZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwUkNqdhxz2mbP3tE/VyhXas5BVL1g3TJKyw 58pTOLc6v8JQCQBB+pTL4Peps66PaNpUVfw0rygpLk+p5+dOxHyuR2rerj5BAiKJ Wv/NitZ5UKTUNsBMkd7rHgpdETzSs3HadlhJW+JaFJYYvfl2L+7Dl/IgHczAkzyD yr/1xk3lnviKQ1Tr4Qi1sWWkHX0BwNLwRX347Rf7D3kk4iQaosjAm8PH1RBJSpjJ D9y5r57w6RhA95/1CesyzLuimVuzztcfulObnB8akNtnmAeg2yQ3ob6B1KEex/xS Hf8FKnpO0RtHIqKcwvvxPYMXen7WSMo3wpLhgtRHKeamYtT7XQIDAQABo4IEETCC BA0wHQYDVR0OBBYEFOUimw7u9OaoaNUTBrKZneONWBwfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l OGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U4YWJjYjM2LTdkNzUtNDY1NC1h MDk4LWQwMzJkZGYwM2Q4YS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRm MDNkOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAGhx/oDBACuIuEDBADAVOcDBADYeI4wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEApPar907omjVg7SNrdOqiCJLDI5Wvt+f95CDYrzf4U8blFsWjBNT6wpTZvX2p ByUtYUhGfIKe7Xz/mzWvMfyUuIw949VHpQthh9GRZpxlwKvkHw1eXv3paqS2qwx+ 7rBZZ1GX6PABG/JdplqDHstxO+MuBLrXsyy3m+8U5RD8At40G61ofszxUlCXhoOj Y6ESpOj2WkMPo15hFO2LmYNYn0gO7jhUMqM27Uawcl+OYQznKvC7v0xk8pdb9mDC ohKoWYh3f2F4H6pUk6vQyB/KwZePzgXrz+XqaHwb+mXpRCT5b47LalKHAbP5nLAH aANgw9Djypq31TqxUssfdxCirg== -----END CERTIFICATE-----Generated at Sat Apr 26 22:12:33 2025 by rpki-client