$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer File: 6eb3f683-5247-4c55-a10b-2184f26c4f84.cer (raw, json) Hash identifier: gNar/3acblnQJD8x/f64UjB3zBChL57Vkfb3WiikehE= Subject key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858473788FF357DD7DE77C50E20D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Sep 2024 00:45:26 +0000 Certificate not after: Sat 19 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 36445 IP: 52.124.28.0/24 IP: 52.124.30.0/23 IP: 64.45.171.0/24 IP: 64.45.173.0/24 IP: 94.140.2.0/23 IP: 104.255.12.0/22 IP: 148.59.228.0/23 IP: 149.248.80.0 -- 149.248.127.255 IP: 149.248.170.0 -- 149.248.175.255 IP: 161.38.13.0/24 IP: 161.38.15.0/24 IP: 161.38.21.0/24 IP: 162.218.124.0/23 IP: 192.131.249.0/24 IP: 193.149.169.0/24 IP: 198.133.121.0/24 IP: 198.135.181.0/24 IP: 198.178.118.0/24 IP: 198.232.214.0/23 IP: 199.233.210.0/24 IP: 204.68.231.0/24 IP: 204.107.134.0/24 IP: 205.167.238.0/23 IP: 205.178.163.0/24 IP: 205.178.184.0/24 IP: 208.81.206.0/23 IP: 216.21.233.0/24 IP: 216.126.42.0/23 IP: 2606:7880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:88:ff:35:7d:d7:de:77:c5:0e:20:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 15 00:45:26 2024 GMT Not After : Dec 19 01:45:26 2026 GMT Subject: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:a2:83:0f:1d:6f:ea:1b:31:b2:22:41:21: 20:18:06:f1:8f:18:48:a9:15:25:fb:eb:c2:9c:a9: 93:1c:48:b1:40:d1:e7:f4:ba:47:f8:15:7b:61:94: 32:29:96:12:85:b9:c1:44:9a:13:6a:0e:de:9c:d7: 5b:9f:21:3b:15:de:92:77:f3:68:26:26:fe:a4:72: 86:05:02:65:17:0b:20:2e:a3:9b:e4:03:05:27:97: 27:57:b7:bc:ce:d3:30:5d:c7:d3:e6:b7:71:21:f1: ff:53:37:7b:eb:6b:83:d8:a5:a7:eb:ed:89:b4:b8: cf:fb:ff:58:2f:48:77:e1:57:a0:b3:a4:1b:f6:91: 88:08:e3:29:17:99:be:48:2f:a4:9f:41:85:54:83: 24:e5:fb:ba:f0:c0:08:09:03:6c:00:00:1b:de:3f: 2f:e9:a5:6f:f2:eb:8d:55:a7:67:eb:80:0a:ca:cd: 60:75:19:73:b3:2f:47:1a:ad:cc:ee:09:ee:fd:dc: 55:8c:7b:4b:a0:91:44:89:9d:83:88:4e:66:24:54: 1a:c9:15:e4:67:30:4b:73:f2:d1:da:85:1e:19:a0: 08:3f:74:13:de:ee:9d:86:86:10:b8:af:4f:ae:0c: 1f:1a:7f:9e:29:40:9c:c4:6b:7b:46:63:b8:22:7e: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 52.124.28.0/24 52.124.30.0/23 64.45.171.0/24 64.45.173.0/24 94.140.2.0/23 104.255.12.0/22 148.59.228.0/23 149.248.80.0-149.248.127.255 149.248.170.0-149.248.175.255 161.38.13.0/24 161.38.15.0/24 161.38.21.0/24 162.218.124.0/23 192.131.249.0/24 193.149.169.0/24 198.133.121.0/24 198.135.181.0/24 198.178.118.0/24 198.232.214.0/23 199.233.210.0/24 204.68.231.0/24 204.107.134.0/24 205.167.238.0/23 205.178.163.0/24 205.178.184.0/24 208.81.206.0/23 216.21.233.0/24 216.126.42.0/23 IPv6: 2606:7880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36445 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2c:68:b7:76:04:2c:3c:ce:e6:ff:5a:50:35:b4:f0:5f:89: b9:b6:c5:50:9e:73:dc:7d:90:9f:df:2f:a1:d8:3d:b2:2c:40: 4b:92:05:45:29:60:b1:84:dd:17:e7:9f:8c:f9:d3:59:00:fb: 41:7e:3f:89:0c:7e:90:9a:23:f9:1c:35:e4:72:ca:b9:0b:00: f3:cd:d6:fd:51:05:27:2b:74:b2:67:65:8b:df:8c:db:04:30: 96:41:8f:04:8f:25:17:c1:3a:e7:03:0d:b4:fc:14:31:f0:c8: be:42:fd:d8:e7:7b:57:b4:93:2d:7d:b1:4e:5c:eb:b2:6c:b6: 31:09:83:5c:c5:62:5c:c1:e4:8d:7d:25:89:cd:7f:f9:98:2e: be:55:a2:36:27:c0:0b:07:ad:2b:e0:98:e1:33:b2:6d:b0:56: b5:cd:ed:12:50:5e:b5:e0:e6:d7:1f:57:1e:3d:be:02:27:a3: e4:c5:c6:45:0b:6b:8b:b1:9e:07:89:a7:ac:09:6f:14:6b:b1: ef:9b:8d:02:04:75:50:8f:c0:13:35:60:94:c3:1c:32:cf:7f: fd:8d:c4:56:88:09:09:31:47:47:0c:0f:3c:32:db:13:fc:e9: 58:eb:e4:9e:94:b2:a0:47:e9:83:50:8d:9e:c3:e7:cf:cd:56: 34:e8:50:d7 -----BEGIN CERTIFICATE----- MIIHzzCCBregAwIBAgIUAQ0Mn0MoWEc3iP81fdfed8UOINYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDkxNTAwNDUyNloXDTI2MTIxOTAxNDUyNlowLzEtMCsGA1UEAxMk NmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZuigw8db+obMbIiQSEgGAbxjxhIqRUl++vC nKmTHEixQNHn9LpH+BV7YZQyKZYShbnBRJoTag7enNdbnyE7Fd6Sd/NoJib+pHKG BQJlFwsgLqOb5AMFJ5cnV7e8ztMwXcfT5rdxIfH/Uzd762uD2KWn6+2JtLjP+/9Y L0h34Vegs6Qb9pGICOMpF5m+SC+kn0GFVIMk5fu68MAICQNsAAAb3j8v6aVv8uuN Vadn64AKys1gdRlzsy9HGq3M7gnu/dxVjHtLoJFEiZ2DiE5mJFQayRXkZzBLc/LR 2oUeGaAIP3QT3u6dhoYQuK9PrgwfGn+eKUCcxGt7RmO4In4R0wIDAQABo4IE4TCC BN0wHQYDVR0OBBYEFGdz2ftII7sqzu/GQVudBGgpaKtvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZlYjNmNjgzLTUyNDctNGM1NS1h MTBiLTIxODRmMjZjNGY4NC82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2 YzRmODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgeQGCCsGAQUF BwEHAQH/BIHUMIHRMIG/BAIAATCBuAMEADR8HAMEATR8HgMEAEAtqwMEAEAtrQME AV6MAgMEAmj/DAMEAZQ75DAMAwQElfhQAwQHlfgAMAwDBAGV+KoDBASV+KADBACh Jg0DBAChJg8DBAChJhUDBAGi2nwDBADAg/kDBADBlakDBADGhXkDBADGh7UDBADG snYDBAHG6NYDBADH6dIDBADMROcDBADMa4YDBAHNp+4DBADNsqMDBADNsrgDBAHQ Uc4DBADYFekDBAHYfiowDQQCAAIwBwMFACYGeIAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI5dMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHEsaLd2BCw8zub/WlA1tPBfibm2xVCec9x9kJ/f L6HYPbIsQEuSBUUpYLGE3Rfnn4z501kA+0F+P4kMfpCaI/kcNeRyyrkLAPPN1v1R BScrdLJnZYvfjNsEMJZBjwSPJRfBOucDDbT8FDHwyL5C/djne1e0ky19sU5c67Js tjEJg1zFYlzB5I19JYnNf/mYLr5VojYnwAsHrSvgmOEzsm2wVrXN7RJQXrXg5tcf Vx49vgIno+TFxkULa4uxngeJp6wJbxRrse+bjQIEdVCPwBM1YJTDHDLPf/2NxFaI CQkxR0cMDzwy2xP86Vjr5J6UsqBH6YNQjZ7D58/NVjToUNc= -----END CERTIFICATE-----Generated at Sat May 10 16:02:49 2025 by rpki-client