$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707.cer File: f28cc06c-5b21-4cf4-9ebc-1c91f6868707.cer (raw, json) Hash identifier: w2lvCTb5wdoDEeXVHaYYDxPncedqNVSk4qiT4RI1KwY= Subject key identifier: F7:49:62:2D:4A:73:83:C0:DE:74:6B:60:5D:AF:22:28:E4:77:01:2E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849123F200752EC740CCA310400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/f28cc06c-5b21-4cf4-9ebc-1c91f6868707.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 26801 AS: 54388 IP: 24.51.128.0/18 IP: 67.58.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:20:07:52:ec:74:0c:ca:31:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=f28cc06c-5b21-4cf4-9ebc-1c91f6868707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:94:af:18:75:59:27:b3:f3:8e:27:ab:9b: 83:ef:88:c3:1b:b2:38:cc:4d:c4:81:f3:5e:13:be: a2:28:9a:41:de:98:8e:09:9b:eb:f5:d3:39:b8:ca: 06:cd:9b:91:fa:6e:58:10:4b:99:b5:6c:b4:92:3e: 1e:1f:1f:37:49:1b:5e:76:d4:a0:80:93:2b:8d:4b: 76:30:98:69:8a:19:41:ce:60:1c:aa:5f:20:c5:c7: 4d:7d:98:5f:04:84:0e:95:b0:56:25:e1:21:3b:5c: bd:d1:10:bb:33:ed:c0:eb:0d:96:98:68:bf:19:67: b9:43:df:db:94:6a:d8:c2:d0:89:dd:e9:bf:61:32: 19:fb:6a:2a:27:77:e3:24:cc:ea:89:3f:1f:19:69: 14:b2:51:32:11:69:90:c6:f1:ce:0c:46:59:36:be: b7:45:49:86:62:df:11:42:ed:18:e9:e4:71:0d:75: 77:12:04:52:5c:0d:c5:e8:cf:1d:34:c9:6c:13:2c: 1e:2c:5d:4c:d8:82:45:37:d1:3c:e5:09:f9:c7:14: 53:8e:49:18:16:a0:ea:0f:22:24:d5:61:05:ee:4e: cc:03:19:fe:f5:94:44:56:28:90:0c:88:e2:54:00: 20:17:3c:bb:78:2c:d1:65:c9:53:44:95:ee:e5:c2: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:49:62:2D:4A:73:83:C0:DE:74:6B:60:5D:AF:22:28:E4:77:01:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f28cc06c-5b21-4cf4-9ebc-1c91f6868707/f28cc06c-5b21-4cf4-9ebc-1c91f6868707.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 24.51.128.0/18 67.58.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26801 54388 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:48:e2:e4:e8:45:01:42:07:82:2e:78:2e:26:7d:44:a0:93: 29:1d:2a:09:2b:88:c3:74:27:44:22:c9:c0:d1:61:03:6c:7c: 00:dd:a6:1b:f1:51:c1:36:49:80:d0:e7:7a:06:cc:31:75:18: 64:b6:d0:0f:23:4a:6e:9a:16:b5:46:5d:b1:6a:1d:ab:d2:4c: a3:fc:24:bf:df:5b:71:ea:b7:5e:b5:c9:c9:06:27:d3:62:9a: ba:fa:7e:bf:7c:b0:42:1b:8b:f6:01:cc:a1:57:70:a2:9a:9d: 90:02:47:7d:2c:b3:03:85:7e:42:4e:27:71:05:99:2d:1f:c4: c6:66:03:f7:5a:a8:7c:ab:21:c3:a7:e0:fb:8b:77:cf:7c:26: 69:0d:0d:18:80:34:aa:90:78:13:4c:be:fe:82:43:ca:38:42: 11:5a:aa:2d:ed:6f:da:21:32:fb:1e:e6:b1:11:ac:e8:54:e6: e7:bb:92:8f:67:67:0f:73:19:b6:6f:50:93:fd:ed:b5:f7:95: 55:ae:50:e7:41:cc:64:bf:b6:7c:16:d7:9d:a7:67:ea:cd:d9: e5:fc:cd:c2:fc:80:e7:00:00:b2:ae:d6:f3:28:be:83:44:0e: 10:22:fc:d2:e4:5b:a6:d4:79:7c:bf:29:e1:e3:4a:64:b3:68: f6:39:be:29 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEkSPyAHUux0DMoxBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk ZjI4Y2MwNmMtNWIyMS00Y2Y0LTllYmMtMWM5MWY2ODY4NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3uUrxh1WSez844nq5uD74jDG7I4zE3EgfNe E76iKJpB3piOCZvr9dM5uMoGzZuR+m5YEEuZtWy0kj4eHx83SRtedtSggJMrjUt2 MJhpihlBzmAcql8gxcdNfZhfBIQOlbBWJeEhO1y90RC7M+3A6w2WmGi/GWe5Q9/b lGrYwtCJ3em/YTIZ+2oqJ3fjJMzqiT8fGWkUslEyEWmQxvHODEZZNr63RUmGYt8R Qu0Y6eRxDXV3EgRSXA3F6M8dNMlsEyweLF1M2IJFN9E85Qn5xxRTjkkYFqDqDyIk 1WEF7k7MAxn+9ZREViiQDIjiVAAgFzy7eCzRZclTRJXu5cKGCQIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFPdJYi1Kc4PA3nRrYF2vIijkdwEuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m MjhjYzA2Yy01YjIxLTRjZjQtOWViYy0xYzkxZjY4Njg3MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2YyOGNjMDZjLTViMjEtNGNmNC05 ZWJjLTFjOTFmNjg2ODcwNy9mMjhjYzA2Yy01YjIxLTRjZjQtOWViYy0xYzkxZjY4 Njg3MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAYYM4ADBAVDOqAwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICaLECAwDUdDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAySOLk6EUBQgeCLnguJn1EoJMpHSoJK4jD dCdEIsnA0WEDbHwA3aYb8VHBNkmA0Od6BswxdRhkttAPI0pumha1Rl2xah2r0kyj /CS/31tx6rdetcnJBifTYpq6+n6/fLBCG4v2AcyhV3Cimp2QAkd9LLMDhX5CTidx BZktH8TGZgP3Wqh8qyHDp+D7i3fPfCZpDQ0YgDSqkHgTTL7+gkPKOEIRWqot7W/a ITL7HuaxEazoVObnu5KPZ2cPcxm2b1CT/e2195VVrlDnQcxkv7Z8Ftedp2fqzdnl /M3C/IDnAACyrtbzKL6DRA4QIvzS5Fum1Hl8vynh40pks2j2Ob4p -----END CERTIFICATE-----Generated at Sun Apr 27 23:50:26 2025 by rpki-client