$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer File: 0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer (raw, json) Hash identifier: ZO+kjxjirCciE9VAv1tAWuvrtLIDR/ODLHAA4Hb4KuM= Subject key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A426DF0D72B4078A9A056D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Jun 2025 00:45:37 +0000 Certificate not after: Fri 24 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 30110 IP: 67.218.64.0/20 IP: 72.36.0.0/18 IP: 198.59.140.0/22 IP: 2605:ce00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:6d:f0:d7:2b:40:78:a9:a0:56:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 21 00:45:37 2025 GMT Not After : Sep 24 00:45:37 2027 GMT Subject: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:5e:43:7c:35:85:4a:4c:7e:d6:5c:23:c9: d3:cc:3d:42:90:4f:28:1a:99:0c:ca:64:05:fe:fe: 87:46:ba:e6:95:a7:47:4d:5d:ff:5e:92:11:7f:99: a8:f4:8c:25:8c:f4:46:36:10:89:63:5f:dc:1a:14: 4f:6f:83:90:ff:e0:6a:01:81:8c:48:53:96:d2:4f: 4b:31:a9:45:b0:dd:e1:02:a9:fe:5f:87:71:75:c0: e7:f6:dc:ab:d9:4b:3b:a8:1e:d5:17:4d:50:5f:45: c4:73:89:39:9c:72:b5:11:92:be:99:fd:ed:31:9f: ce:72:ea:01:54:24:e7:7e:8e:bb:db:7e:3b:83:93: 07:96:56:1b:cf:90:83:3b:5f:95:eb:9e:41:a2:5a: 7f:14:9f:11:8f:35:8d:bc:60:70:4a:64:71:00:a6: 0f:e9:b1:bc:2d:43:01:f2:c6:34:70:1f:7f:f3:9c: c7:f5:cb:b4:2e:dd:e7:a6:53:2f:d3:db:e0:70:67: 4f:bd:3f:77:6b:12:e5:ae:8c:9e:ea:ad:84:51:09: 84:37:f8:38:c8:9e:83:80:23:f0:63:d9:dc:5a:ec: 78:02:cd:d9:4d:db:25:bc:f1:89:65:bf:03:5b:b7: e8:c9:2e:cd:c3:c5:db:ec:af:7a:e4:00:ec:da:ef: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 67.218.64.0/20 72.36.0.0/18 198.59.140.0/22 IPv6: 2605:ce00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30110 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:49:b3:e7:15:af:d2:b0:22:78:af:ae:a8:97:63:3d:a6:76: a6:c7:ec:09:01:c8:26:8e:94:15:b1:41:b3:d8:84:40:06:3d: 2e:fc:0f:58:72:e8:cc:d0:b5:94:47:34:55:41:ae:a6:68:c6: 64:54:47:93:37:74:e3:b1:bf:09:d1:bc:3b:a7:6e:31:5a:04: c7:a4:e2:3a:87:12:8b:9d:b3:da:01:91:1b:08:63:c1:1e:42: 7b:eb:4c:82:c6:7b:82:fd:e2:a0:fa:45:36:22:3b:3e:b5:6b: c8:4c:4f:a0:17:28:85:20:a6:d4:aa:10:45:54:2a:79:11:fb: ad:a1:88:66:11:0a:ab:04:4c:ae:c3:ca:77:ed:39:35:b1:a5: 21:1d:0f:91:c1:62:17:6f:b2:40:85:cc:14:95:e9:42:9c:e2: d5:6a:ff:36:21:20:a1:dd:c1:ee:be:1d:a9:e9:c9:2c:da:89: b2:91:a4:ad:32:a7:cf:1f:e7:26:49:8f:0d:0e:b2:b3:0a:12: db:02:80:1a:fb:9f:9f:15:3f:a0:c0:7d:e1:87:c8:6d:5a:c6: 02:90:58:f6:ca:14:b9:22:0f:3b:dd:36:f5:14:b9:7a:fa:80: ac:b3:f1:94:9b:f9:87:65:59:7b:74:6a:83:1f:a3:a6:5f:c2: 69:1e:d7:83 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEpCbfDXK0B4qaBW1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYyMTAwNDUzN1oXDTI3MDkyNDAwNDUzN1owLzEtMCsGA1UEAxMk MGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4ZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49ReQ3w1hUpMftZcI8nTzD1CkE8oGpkMymQF /v6HRrrmladHTV3/XpIRf5mo9IwljPRGNhCJY1/cGhRPb4OQ/+BqAYGMSFOW0k9L MalFsN3hAqn+X4dxdcDn9tyr2Us7qB7VF01QX0XEc4k5nHK1EZK+mf3tMZ/OcuoB VCTnfo672347g5MHllYbz5CDO1+V655Bolp/FJ8RjzWNvGBwSmRxAKYP6bG8LUMB 8sY0cB9/85zH9cu0Lt3nplMv09vgcGdPvT93axLlroye6q2EUQmEN/g4yJ6DgCPw Y9ncWux4As3ZTdslvPGJZb8DW7foyS7Nw8Xb7K965ADs2u+6pwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFEOAK1jpJw/XNhJg/wwGPTiU5AmXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w YzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBjNGJjZmM4LWU2ZTctNDUwMC1i OTg1LTVjYjg1OWY4OGZlYy8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlm ODhmZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARD2kADBAZIJAADBALGO4wwDQQCAAIwBwMFACYF zgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdZ4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUUmz5xWv0rAi eK+uqJdjPaZ2psfsCQHIJo6UFbFBs9iEQAY9LvwPWHLozNC1lEc0VUGupmjGZFRH kzd047G/CdG8O6duMVoEx6TiOocSi52z2gGRGwhjwR5Ce+tMgsZ7gv3ioPpFNiI7 PrVryExPoBcohSCm1KoQRVQqeRH7raGIZhEKqwRMrsPKd+05NbGlIR0PkcFiF2+y QIXMFJXpQpzi1Wr/NiEgod3B7r4dqenJLNqJspGkrTKnzx/nJkmPDQ6yswoS2wKA GvufnxU/oMB94YfIbVrGApBY9soUuSIPO9029RS5evqArLPxlJv5h2VZe3Rqgx+j pl/CaR7Xgw== -----END CERTIFICATE-----Generated at Sun Jun 29 08:43:43 2025 by rpki-client