$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer File: 0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer (raw, json) Hash identifier: tHJsJVSbtTjAUs53/UWKPBjHh0iiDS3pvxlWshT9Abc= Subject key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584870537338036757914B721A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Jan 2025 01:45:33 +0000 Certificate not after: Sat 10 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 6315 AS: 40519 IP: 68.69.160.0/20 IP: 166.70.0.0/16 IP: 198.60.22.0/24 IP: 198.60.80.0 -- 198.60.84.255 IP: 198.60.104.0 -- 198.60.110.255 IP: 198.60.113.0 -- 198.60.114.255 IP: 198.207.196.0/24 IP: 199.104.120.0/21 IP: 204.107.178.0/24 IP: 204.228.128.0/19 IP: 207.135.128.0/19 IP: 2607:24c0::/32 IP: 2607:fa18::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:53:73:38:03:67:57:91:4b:72:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 5 01:45:33 2025 GMT Not After : Apr 10 00:45:33 2027 GMT Subject: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:88:d1:8d:73:c2:7b:04:81:8f:10:fe:56: 76:5e:e0:09:63:43:1a:b9:29:0b:78:f2:ad:94:21: 4a:b4:1d:e1:b4:6d:16:06:67:2c:ae:77:94:b1:a2: ba:22:f5:76:59:fc:35:65:81:67:cc:25:8a:c0:68: 09:46:19:e5:fc:7f:53:e3:e2:46:53:dc:88:25:ef: d1:43:ed:17:01:08:1c:90:8e:e0:ab:06:5a:c9:e3: 6e:be:20:71:33:b8:5c:b0:6a:1c:d6:28:5a:f6:88: a1:cc:fe:1f:97:38:24:14:a4:6c:ec:47:6b:25:09: 0c:21:9e:ed:47:84:65:c7:25:91:5f:7a:fd:f1:60: b6:fc:72:b7:e9:18:e4:dc:5a:9a:c3:76:14:7f:63: 1a:88:bf:e9:b8:72:75:9e:69:c5:9d:d4:7e:22:91: e6:1d:0c:59:96:a4:a2:bb:93:19:c0:6e:0c:7e:72: 29:1e:2b:db:3d:b4:cf:b8:48:2f:0a:af:73:76:2e: 6e:02:1b:5e:81:dd:41:94:d0:62:82:8e:5e:13:3f: bf:c2:43:2c:21:89:52:f5:1a:85:72:37:aa:42:f0: 8f:09:53:3b:cf:d8:a0:e9:c4:0e:76:73:c5:25:2f: 8d:25:04:3b:d7:d4:be:10:19:fd:92:8f:c7:af:c7: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 68.69.160.0/20 166.70.0.0/16 198.60.22.0/24 198.60.80.0-198.60.84.255 198.60.104.0-198.60.110.255 198.60.113.0-198.60.114.255 198.207.196.0/24 199.104.120.0/21 204.107.178.0/24 204.228.128.0/19 207.135.128.0/19 IPv6: 2607:24c0::/32 2607:fa18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6315 40519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ef:e6:10:03:58:19:eb:0a:2a:ae:f3:36:b9:7f:90:d0:66: ef:c5:09:99:50:fc:63:96:c6:3a:d1:50:68:8c:ea:f3:a6:68: 4d:d9:b7:12:c5:4e:8a:92:68:1a:2a:e9:fa:6d:88:56:63:c3: 47:2c:08:b1:c3:cb:d3:22:72:c5:dc:49:ad:d0:15:d3:0f:e3: ba:80:b9:5a:3f:cc:0e:22:31:dc:e3:9e:30:55:1b:01:1e:bc: 88:df:ac:6b:dd:4a:1e:31:f2:b8:22:32:ee:d3:1e:03:c7:20: c7:00:a8:54:49:33:69:05:56:f6:45:8d:f6:78:f1:72:6b:98: 95:2f:e1:f9:58:1d:71:b8:ec:f1:00:f8:17:6c:4f:82:17:35: d1:81:23:3f:05:33:87:6e:dc:23:d2:aa:04:d6:70:90:e8:bb: 95:78:2f:57:37:73:5a:6e:76:dc:15:e8:ac:95:1d:3c:d9:fd: de:cc:9a:33:51:83:56:26:dd:e6:9e:db:af:e0:03:d4:25:7f: b6:50:98:2a:99:55:11:32:75:9b:9e:cf:44:6f:d6:ce:66:75: 0e:40:7e:40:45:75:b5:c2:aa:db:6e:0d:2e:05:b3:a7:2c:e7: 58:7f:e6:c9:44:c5:0a:d6:af:21:51:fe:36:e5:77:1d:f6:31: 80:ea:91:d8 -----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIUAQ0Mn0MoWEhwU3M4A2dXkUtyGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDEwNTAxNDUzM1oXDTI3MDQxMDAwNDUzM1owLzEtMCsGA1UEAxMk MGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTllNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycaI0Y1zwnsEgY8Q/lZ2XuAJY0MauSkLePKt lCFKtB3htG0WBmcsrneUsaK6IvV2Wfw1ZYFnzCWKwGgJRhnl/H9T4+JGU9yIJe/R Q+0XAQgckI7gqwZayeNuviBxM7hcsGoc1iha9oihzP4flzgkFKRs7EdrJQkMIZ7t R4RlxyWRX3r98WC2/HK36Rjk3Fqaw3YUf2MaiL/puHJ1nmnFndR+IpHmHQxZlqSi u5MZwG4MfnIpHivbPbTPuEgvCq9zdi5uAhtegd1BlNBigo5eEz+/wkMsIYlS9RqF cjeqQvCPCVM7z9ig6cQOdnPFJS+NJQQ719S+EBn9ko/Hr8cX+wIDAQABo4IEiTCC BIUwHQYDVR0OBBYEFPlVwEOEUS8Gzzq0upHyasNNpORoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBmZTc4MDRmLWYxNmEtNGY3OC05 OTc5LTZhOGQ1MDk5ZTVlNy8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5 OWU1ZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgYgGCCsGAQUF BwEHAQH/BHkwdzBfBAIAATBZAwQEREWgAwMApkYDBADGPBYwDAMEBMY8UAMEAMY8 VDAMAwQDxjxoAwQAxjxuMAwDBADGPHEDBADGPHIDBADGz8QDBAPHaHgDBADMa7ID BAXM5IADBAXPh4AwFAQCAAIwDgMFACYHJMADBQAmB/oYMB4GCCsGAQUFBwEIAQH/ BA8wDaALMAkCAhirAgMAnkcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAse/mEANYGesKKq7zNrl/kNBm78UJ mVD8Y5bGOtFQaIzq86ZoTdm3EsVOipJoGirp+m2IVmPDRywIscPL0yJyxdxJrdAV 0w/juoC5Wj/MDiIx3OOeMFUbAR68iN+sa91KHjHyuCIy7tMeA8cgxwCoVEkzaQVW 9kWN9njxcmuYlS/h+Vgdcbjs8QD4F2xPghc10YEjPwUzh27cI9KqBNZwkOi7lXgv VzdzWm523BXorJUdPNn93syaM1GDVibd5p7br+AD1CV/tlCYKplVETJ1m57PRG/W zmZ1DkB+QEV1tcKq224NLgWzpyznWH/myUTFCtavIVH+NuV3HfYxgOqR2A== -----END CERTIFICATE-----Generated at Sun May 4 18:32:24 2025 by rpki-client