$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68.cer File: 47af085d-4107-4581-aabf-ee9ca34b1b68.cer (raw, json) Hash identifier: ATwwm3k5xID4stqk7xSOw0UJGec8qZGt1CdGp8G+ZHc= Subject key identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A58C368E3E7A4E2496D2F0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Jun 2025 00:45:37 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 192.34.70.0/24 IP: 198.163.144.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:c3:68:e3:e7:a4:e2:49:6d:2f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 29 00:45:37 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=47af085d-4107-4581-aabf-ee9ca34b1b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:f0:8c:6a:bf:08:67:ff:c2:38:3a:f0:79: 28:ff:36:2e:a8:2f:ca:b3:81:80:6c:f2:1d:dd:f2: 92:f2:2b:ae:ad:d8:8c:f6:68:b6:b5:52:c9:69:d7: d6:d5:08:a0:f3:65:0b:9b:43:45:98:82:c4:25:ef: 8d:10:d9:a0:90:4d:b6:80:22:1b:98:bb:1d:ff:b0: 75:e1:77:d1:b0:04:6d:eb:7a:f7:3d:8f:a7:d7:e5: d6:7b:8a:3b:d1:28:78:dc:45:64:eb:6b:4b:a0:af: de:cb:4c:d6:0c:a4:c2:90:09:f8:8b:04:14:43:be: 1c:e5:11:76:f3:eb:36:16:d8:b2:3f:aa:e3:2e:b9: 76:a9:16:16:cb:2f:e2:74:90:98:cd:87:e6:50:2f: 7e:0e:0e:d8:76:0a:a8:e0:6c:ce:71:33:e4:b6:fd: 84:e1:2b:cc:6b:98:ec:79:9b:c5:29:08:59:8f:ca: a7:e8:be:68:db:79:57:41:ce:36:63:58:3a:5a:a6: 39:0c:6f:33:87:74:f1:49:8f:83:38:10:c3:09:ea: f3:e6:a6:92:a8:50:41:87:95:05:1a:ff:80:f7:53: 99:14:ff:7d:98:c0:80:7a:d7:66:8e:75:32:66:d8: 25:cd:34:85:77:1d:af:6e:76:7b:cb:cd:b8:08:0d: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.34.70.0/24 198.163.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cc:34:ab:b3:9f:cd:97:78:a2:00:31:8c:68:b5:a4:5d:c5: 8c:ba:11:4d:ff:d6:f6:09:ff:eb:5f:45:10:c6:27:39:e8:0a: 4c:de:32:01:1e:56:95:62:ec:e8:36:51:4e:ba:b0:34:c4:b3: 1a:85:79:14:f7:53:af:e6:70:f8:0c:8b:85:fe:29:c0:41:9d: 75:a8:7e:d5:5a:68:04:07:9d:6b:fc:1c:1d:57:e8:a3:4c:58: 1d:29:d9:e2:80:54:20:2d:b8:fb:33:22:b8:b2:f5:f0:6a:df: 81:80:52:38:69:43:bb:32:f3:6f:5f:c4:3f:94:d8:5a:e7:98: dc:7f:80:d8:28:99:a3:fc:80:2c:fc:73:60:8a:54:ae:65:bf: 4c:04:60:04:a9:07:6f:79:24:13:92:bf:23:ac:5c:ab:1a:5a: 7b:e4:64:fa:f1:61:2c:82:6a:50:31:fe:c5:da:0b:ca:30:f5: 5d:db:d8:66:f4:77:50:20:49:76:c4:08:f8:ce:8a:dd:f7:34: a3:e5:f8:ab:d1:b7:48:48:1a:c3:13:66:32:a8:78:f4:a2:25: 49:d5:4c:d2:6a:5e:b2:f6:98:44:b7:f8:e1:c3:84:0d:3d:a6: 96:85:13:26:38:cf:34:20:fb:35:93:ab:cb:bc:f7:ce:54:cb: 42:a2:4e:d2 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEpYw2jj56TiSW0vDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYyOTAwNDUzN1oXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk NDdhZjA4NWQtNDEwNy00NTgxLWFhYmYtZWU5Y2EzNGIxYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnwjGq/CGf/wjg68Hko/zYuqC/Ks4GAbPId 3fKS8iuurdiM9mi2tVLJadfW1Qig82ULm0NFmILEJe+NENmgkE22gCIbmLsd/7B1 4XfRsARt63r3PY+n1+XWe4o70Sh43EVk62tLoK/ey0zWDKTCkAn4iwQUQ74c5RF2 8+s2FtiyP6rjLrl2qRYWyy/idJCYzYfmUC9+Dg7Ydgqo4GzOcTPktv2E4SvMa5js eZvFKQhZj8qn6L5o23lXQc42Y1g6WqY5DG8zh3TxSY+DOBDDCerz5qaSqFBBh5UF Gv+A91OZFP99mMCAetdmjnUyZtglzTSFdx2vbnZ7y824CA1B1wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAAcoBfWPHoRkRdPNzmMl8OFSLilMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0YjFiNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ3YWYwODVkLTQxMDctNDU4MS1h YWJmLWVlOWNhMzRiMWI2OC80N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0 YjFiNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAIkYDBAPGo5AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABsw0q7OfzZd4 ogAxjGi1pF3FjLoRTf/W9gn/619FEMYnOegKTN4yAR5WlWLs6DZRTrqwNMSzGoV5 FPdTr+Zw+AyLhf4pwEGddah+1VpoBAeda/wcHVfoo0xYHSnZ4oBUIC24+zMiuLL1 8GrfgYBSOGlDuzLzb1/EP5TYWueY3H+A2CiZo/yALPxzYIpUrmW/TARgBKkHb3kk E5K/I6xcqxpae+Rk+vFhLIJqUDH+xdoLyjD1XdvYZvR3UCBJdsQI+M6K3fc0o+X4 q9G3SEgawxNmMqh49KIlSdVM0mpesvaYRLf44cOEDT2mloUTJjjPNCD7NZOry7z3 zlTLQqJO0g== -----END CERTIFICATE-----Generated at Sun Jun 29 08:17:50 2025 by rpki-client