$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer File: 61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer (raw, json) Hash identifier: L/7tC4rRqcjFyeyxftKuQZzXFpDPRfnF55I/HGwObGI= Subject key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848AFB3517FB5893A1BB553BCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Jan 2025 18:34:39 +0000 Certificate not after: Sun 02 May 2027 17:34:39 +0000 Subordinate resources: IP: 142.94.0.0/16 IP: 142.149.0.0/16 IP: 142.229.0.0/16 IP: 155.15.0.0/16 IP: 198.161.6.0/24 IP: 199.213.0.0 -- 199.216.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:b3:51:7f:b5:89:3a:1b:b5:53:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 27 18:34:39 2025 GMT Not After : May 2 17:34:39 2027 GMT Subject: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:87:6b:05:96:f5:7a:68:d7:da:8d:d9:49: 3c:0b:a5:12:11:88:17:39:f1:77:c3:03:f0:dd:30: 2f:fc:8f:8a:be:d6:8b:9c:09:af:b6:e3:84:49:be: 3c:03:e1:a8:10:72:1f:0c:89:23:2a:09:5f:8b:9a: 7e:65:44:a4:f3:38:89:e8:3d:4c:dc:ec:85:6f:19: 35:8c:22:19:a0:21:dd:2e:66:b6:fb:b6:53:27:0c: 3b:a0:dc:bb:63:b7:dd:6d:b4:90:13:4c:92:d5:01: e2:98:d5:5a:39:7b:28:db:79:b7:96:aa:28:45:6e: a3:38:ce:f3:91:5f:03:93:59:59:ce:aa:7a:34:1b: bc:3f:83:d4:ca:ba:c1:67:74:bb:84:d6:8d:89:f3: e6:a2:5b:6e:04:4e:54:55:12:86:04:a4:97:99:e0: 59:dc:bc:2e:fe:c4:4c:69:7b:bd:22:05:db:5f:1b: a1:d0:7d:2f:b5:8a:41:7f:be:db:0b:07:9b:0f:ef: e5:8a:21:01:e7:55:2b:ec:7d:96:4f:9b:41:fd:95: 7e:d1:6b:76:4b:43:e7:78:a3:92:85:a0:10:5e:d2: ed:71:97:79:aa:e6:73:38:39:b7:36:49:54:65:70: 28:fb:fd:34:57:eb:5f:84:00:e7:d6:08:1f:4b:d0: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 142.94.0.0/16 142.149.0.0/16 142.229.0.0/16 155.15.0.0/16 198.161.6.0/24 199.213.0.0-199.216.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:13:0f:e7:12:49:f1:0a:30:12:7c:df:43:81:cc:4b:84:19: c9:64:b3:fa:c0:eb:93:99:bb:01:cc:78:27:a4:7e:63:1d:71: d6:ee:43:e9:33:67:c3:2b:a3:23:b3:08:34:ee:66:5c:39:42: c8:94:76:8a:00:7a:18:47:d9:4a:e8:47:5c:1b:29:4a:d3:d1: 30:9a:f2:c5:c3:6c:06:95:33:d0:2b:c5:4b:74:4e:e5:e8:72: 84:f7:38:83:df:19:ed:90:8f:e8:cd:07:71:b1:6f:34:52:fa: 9c:cc:a3:e4:fd:04:09:92:5f:2a:6b:ac:ba:54:d7:e1:f4:2b: 32:1b:52:3e:30:a0:30:f2:fa:b1:d9:b3:5b:a7:30:14:3f:40: ff:7f:06:10:7a:4b:03:3e:a3:4e:d2:b5:e6:8e:91:63:6b:ce: 17:9c:d9:33:23:76:2a:a8:20:be:fc:c3:d9:63:8c:75:40:c1: 9e:40:54:05:d5:c7:36:6b:65:27:71:ef:dc:24:01:9a:70:25: 23:04:72:d0:d9:da:5c:50:5a:6a:c8:f6:93:2c:0d:fd:05:64: 20:4f:0f:28:f3:99:d2:6f:a7:ed:79:6a:df:9d:de:da:63:9a: d6:86:32:a1:bf:28:51:a8:9f:77:f0:12:3f:5f:7d:eb:fb:ad: af:3c:f1:b0 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEivs1F/tYk6G7VTvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDEyNzE4MzQzOVoXDTI3MDUwMjE3MzQzOVowLzEtMCsGA1UEAxMk NjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdiMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxGHawWW9Xpo19qN2Uk8C6USEYgXOfF3wwPw 3TAv/I+KvtaLnAmvtuOESb48A+GoEHIfDIkjKglfi5p+ZUSk8ziJ6D1M3OyFbxk1 jCIZoCHdLma2+7ZTJww7oNy7Y7fdbbSQE0yS1QHimNVaOXso23m3lqooRW6jOM7z kV8Dk1lZzqp6NBu8P4PUyrrBZ3S7hNaNifPmoltuBE5UVRKGBKSXmeBZ3Lwu/sRM aXu9IgXbXxuh0H0vtYpBf77bCwebD+/liiEB51Ur7H2WT5tB/ZV+0Wt2S0PneKOS haAQXtLtcZd5quZzODm3NklUZXAo+/00V+tfhADn1ggfS9DMFQIDAQABo4IEHzCC BBswHQYDVR0OBBYEFLuITV/eH9y2YqfeE4j9/KA/D/iOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYxZjNjN2M0LWE3NzEtNDdhOS1h NGU4LTBhYWU3ZGY3YjIzNC82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2Rm N2IyMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMCwEAgABMCYDAwCOXgMDAI6VAwMAjuUDAwCbDwMEAMahBjAKAwMA x9UDAwDH2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAfEw/nEknxCjASfN9DgcxLhBnJZLP6wOuTmbsBzHgn pH5jHXHW7kPpM2fDK6Mjswg07mZcOULIlHaKAHoYR9lK6EdcGylK09EwmvLFw2wG lTPQK8VLdE7l6HKE9ziD3xntkI/ozQdxsW80UvqczKPk/QQJkl8qa6y6VNfh9Csy G1I+MKAw8vqx2bNbpzAUP0D/fwYQeksDPqNO0rXmjpFja84XnNkzI3YqqCC+/MPZ Y4x1QMGeQFQF1cc2a2Unce/cJAGacCUjBHLQ2dpcUFpqyPaTLA39BWQgTw8o85nS b6fteWrfnd7aY5rWhjKhvyhRqJ938BI/X33r+62vPPGw -----END CERTIFICATE-----Generated at Sun May 4 20:43:20 2025 by rpki-client