$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer File: 0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer (raw, json) Hash identifier: hAXY6jRjcF1uWGsburl677qxZGfh6yOOEexvnpOnsWU= Subject key identifier: BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A3A0DDF96811159251958B380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 00:45:35 +0000 Certificate not after: Tue 21 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 399760 IP: 45.45.148.0/24 IP: 2602:fc62::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:0d:df:96:81:11:59:25:19:58:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 18 00:45:35 2025 GMT Not After : Sep 21 00:45:35 2027 GMT Subject: CN=0f24a760-0a44-48c2-ad3f-8326d01b1ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:3d:0c:75:42:d1:b5:4a:09:70:1b:6a:b0: de:8c:72:61:75:65:9f:c4:ad:e5:04:62:03:ad:43: 15:6a:20:80:ff:6c:a4:bf:79:87:50:ef:9b:c9:c4: fa:34:05:62:06:91:c3:da:11:0b:4c:47:f2:5c:1b: 2e:73:10:cc:ca:53:0a:8e:c6:03:9b:2d:d5:af:6f: c2:07:19:eb:5f:08:3e:99:c7:fb:1d:65:24:47:21: 64:57:eb:13:41:3f:47:4d:dc:5e:49:17:f3:b0:5c: 7f:49:9a:3d:81:ff:67:79:e0:b4:93:78:7d:df:a2: 5f:a4:8f:13:9e:8c:b6:a3:e2:1f:bd:2f:93:89:6a: 51:3a:a6:9c:e2:0b:46:15:bf:85:41:67:30:fc:c5: 95:c6:2d:d5:53:cf:85:c9:3d:07:33:48:b3:94:5c: 32:35:ee:b8:f4:a0:a4:3f:2b:bc:f5:c5:49:8a:bb: d1:fa:9d:03:32:10:a9:7b:f8:46:ae:71:90:9a:a8: fa:a6:31:01:3e:1f:6f:9a:41:b9:88:fe:30:fb:b3: 39:7a:0e:19:ee:89:14:1a:c4:ed:48:9e:69:56:d7: 6f:24:34:28:fd:b2:64:f4:0f:eb:dd:db:29:6f:69: 4d:a9:6b:8b:fb:a8:24:2c:ca:02:01:67:76:f7:0d: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.45.148.0/24 IPv6: 2602:fc62::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8d:22:47:2c:33:e5:fe:58:c4:c0:ef:c2:fa:d6:99:97:8e: d3:99:46:ad:46:ad:e4:3b:e6:1c:d2:90:bc:c6:0f:68:d4:da: 2c:7f:7a:b4:3b:16:e1:a4:78:ba:38:39:03:59:ba:bb:ae:c7: 13:f4:6c:5c:f1:42:34:3e:bf:7d:83:ef:7e:4e:47:25:e0:de: 1d:0e:6f:3f:20:56:84:f6:33:0b:bd:7e:29:72:f0:0d:1f:45: c4:eb:d6:15:72:0d:e2:7e:b6:ef:99:47:81:09:8a:2e:45:51: fd:c6:26:8b:30:6c:0e:9c:4f:d9:7d:58:87:12:41:96:87:5a: 90:c7:bb:96:28:75:eb:da:50:75:fe:07:c5:84:98:91:8e:97: 1c:6a:62:00:d5:cb:0b:a8:4a:e4:64:40:c9:b1:1a:03:2b:0d: 2a:fc:ee:7c:b0:29:f6:86:8e:a6:6b:79:1b:ee:9a:cb:ca:3e: 08:04:d9:ce:40:52:86:87:ff:92:ac:a4:70:04:9a:a9:ad:6b: 42:49:7e:fa:94:e7:df:7c:02:02:6c:52:b4:fb:cb:3a:07:53: d5:21:b7:17:f9:08:90:86:93:4c:12:d9:d5:e2:b2:c4:5d:ad: 32:30:4b:70:2f:b4:77:94:7e:bb:14:ff:a0:eb:b4:55:74:af: 77:70:77:25 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEo6Dd+WgRFZJRlYs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYxODAwNDUzNVoXDTI3MDkyMTAwNDUzNVowLzEtMCsGA1UEAxMk MGYyNGE3NjAtMGE0NC00OGMyLWFkM2YtODMyNmQwMWIxYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWo9DHVC0bVKCXAbarDejHJhdWWfxK3lBGID rUMVaiCA/2ykv3mHUO+bycT6NAViBpHD2hELTEfyXBsucxDMylMKjsYDmy3Vr2/C BxnrXwg+mcf7HWUkRyFkV+sTQT9HTdxeSRfzsFx/SZo9gf9neeC0k3h936JfpI8T noy2o+IfvS+TiWpROqac4gtGFb+FQWcw/MWVxi3VU8+FyT0HM0izlFwyNe649KCk Pyu89cVJirvR+p0DMhCpe/hGrnGQmqj6pjEBPh9vmkG5iP4w+7M5eg4Z7okUGsTt SJ5pVtdvJDQo/bJk9A/r3dspb2lNqWuL+6gkLMoCAWd29w1IOwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL2eYI8by6yJAwYAYFIxCWJAAehsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZjI0YTc2MC0wYTQ0LTQ4YzItYWQzZi04MzI2ZDAxYjFhYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBmMjRhNzYwLTBhNDQtNDhjMi1h ZDNmLTgzMjZkMDFiMWFjNS8wZjI0YTc2MC0wYTQ0LTQ4YzItYWQzZi04MzI2ZDAx YjFhYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAtLZQwDgQCAAIwCAMGACYC/GIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYZkDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0jSJHLDPl/ljEwO/C+taZl47T mUatRq3kO+Yc0pC8xg9o1Nosf3q0OxbhpHi6ODkDWbq7rscT9Gxc8UI0Pr99g+9+ Tkcl4N4dDm8/IFaE9jMLvX4pcvANH0XE69YVcg3ifrbvmUeBCYouRVH9xiaLMGwO nE/ZfViHEkGWh1qQx7uWKHXr2lB1/gfFhJiRjpccamIA1csLqErkZEDJsRoDKw0q /O58sCn2ho6ma3kb7prLyj4IBNnOQFKGh/+SrKRwBJqprWtCSX76lOfffAICbFK0 +8s6B1PVIbcX+QiQhpNMEtnV4rLEXa0yMEtwL7R3lH67FP+g67RVdK93cHcl -----END CERTIFICATE-----Generated at Mon Jun 30 17:24:57 2025 by rpki-client