$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/070fa716-fba2-461d-9b62-b1917eff7d41.cer File: 070fa716-fba2-461d-9b62-b1917eff7d41.cer (raw, json) Hash identifier: 3jogXSBf4olVIU37HUEgG8D58ssDg7l0d9c82s2Hx1w= Subject key identifier: 81:F2:04:0D:3C:60:55:75:8E:D7:81:B7:6F:9D:CC:2F:52:BA:20:CB Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858493936EB8AF7E7B48E49EDE9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/070fa716-fba2-461d-9b62-b1917eff7d41/070fa716-fba2-461d-9b62-b1917eff7d41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/070fa716-fba2-461d-9b62-b1917eff7d41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 00:45:33 +0000 Certificate not after: Mon 21 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 21874 IP: 204.26.0.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:36:eb:8a:f7:e7:b4:8e:49:ed:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 18 00:45:33 2025 GMT Not After : Jun 21 00:45:33 2027 GMT Subject: CN=070fa716-fba2-461d-9b62-b1917eff7d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:55:87:84:c1:5a:ee:8a:2e:22:91:a3:83: 0f:e9:ee:30:81:93:53:2d:3f:17:c5:e3:2b:cf:78: c4:6f:88:4f:48:df:a1:6b:3a:6a:3a:1c:99:b9:fc: 93:52:29:12:f4:58:4d:d9:2c:4d:60:44:a2:ba:b5: b2:cc:f6:08:be:b5:56:c6:fd:95:c4:a1:77:81:a5: a4:29:cd:3e:0c:5e:8e:f8:96:25:60:f0:79:bd:59: 87:3d:8b:37:a8:7a:ff:a9:2a:83:c1:67:85:ed:0f: 18:b2:f5:76:be:09:d1:92:9b:e3:6f:8a:cc:2c:df: c2:6a:bc:9d:5c:1d:6f:97:e1:06:69:3f:e5:0f:34: 4a:d9:31:36:b1:9c:53:cb:04:cf:af:57:be:be:02: 07:ed:62:58:f1:10:a3:75:4b:2b:58:07:b0:63:f1: a4:37:83:4f:d4:f9:77:89:f5:7f:70:21:8c:75:df: 83:f4:72:13:af:ae:1d:aa:30:43:64:b7:95:0f:83: 3a:3a:48:dd:44:3e:c4:94:fd:b1:84:f9:2f:b8:c3: 79:45:d6:43:6f:43:e3:71:da:42:24:d2:29:91:5a: b7:c5:32:06:4a:7b:49:9d:be:a8:a1:91:95:4a:d9: 2e:2f:b2:df:93:da:ff:76:b3:de:7d:b3:67:fb:57: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:04:0D:3C:60:55:75:8E:D7:81:B7:6F:9D:CC:2F:52:BA:20:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/070fa716-fba2-461d-9b62-b1917eff7d41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/070fa716-fba2-461d-9b62-b1917eff7d41/070fa716-fba2-461d-9b62-b1917eff7d41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 204.26.0.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21874 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5c:c1:70:e4:6a:b3:2b:ef:10:e8:92:1c:27:fe:d6:fa:26: 45:e6:02:37:8b:c7:a7:e6:ed:29:1e:26:d6:e8:5b:a8:72:ee: f4:cf:5d:89:c5:d2:3f:09:ee:1f:07:68:f9:f0:1c:27:41:35: 79:a4:3c:4e:5a:8c:f6:bb:1f:33:d1:ea:6c:f6:40:6e:97:d6: 53:25:f8:99:7c:f1:11:be:41:75:63:10:83:27:ed:d0:cc:cb: d7:61:1d:a0:27:0e:0a:ae:e8:73:96:87:07:ea:15:c3:f2:8f: 80:f2:17:77:d0:ad:28:13:eb:54:d5:97:b1:fc:8d:da:d8:20: b5:9b:d3:f9:f0:2e:c0:e3:dd:8f:7f:d0:27:cc:5b:a0:c1:69: 62:c2:53:0c:82:d7:a5:57:5b:87:69:41:e8:4c:67:30:71:0d: c6:f0:67:94:27:6c:7a:27:84:3d:c1:f0:45:14:ee:0f:57:f9: 52:0c:01:c3:22:54:1c:8a:5a:cb:db:82:20:f1:b3:d9:cc:d1: fa:c9:c5:27:e0:46:e8:a3:2f:7a:f9:39:57:5c:a8:b9:02:ef: 1f:7b:bd:00:78:60:cc:21:b5:1a:b1:e4:91:67:66:8e:b9:43: e8:c5:12:6f:1c:63:aa:0a:e9:06:25:b2:f1:c2:f8:bb:ec:25: a8:81:ca:19 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEk5NuuK9+e0jknt6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxODAwNDUzM1oXDTI3MDYyMTAwNDUzM1owLzEtMCsGA1UEAxMk MDcwZmE3MTYtZmJhMi00NjFkLTliNjItYjE5MTdlZmY3ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8NVh4TBWu6KLiKRo4MP6e4wgZNTLT8XxeMr z3jEb4hPSN+hazpqOhyZufyTUikS9FhN2SxNYESiurWyzPYIvrVWxv2VxKF3gaWk Kc0+DF6O+JYlYPB5vVmHPYs3qHr/qSqDwWeF7Q8YsvV2vgnRkpvjb4rMLN/Caryd XB1vl+EGaT/lDzRK2TE2sZxTywTPr1e+vgIH7WJY8RCjdUsrWAewY/GkN4NP1Pl3 ifV/cCGMdd+D9HITr64dqjBDZLeVD4M6OkjdRD7ElP2xhPkvuMN5RdZDb0PjcdpC JNIpkVq3xTIGSntJnb6ooZGVStkuL7Lfk9r/drPefbNn+1c/kQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIHyBA08YFV1jteBt2+dzC9SuiDLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w NzBmYTcxNi1mYmEyLTQ2MWQtOWI2Mi1iMTkxN2VmZjdkNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA3MGZhNzE2LWZiYTItNDYxZC05 YjYyLWIxOTE3ZWZmN2Q0MS8wNzBmYTcxNi1mYmEyLTQ2MWQtOWI2Mi1iMTkxN2Vm ZjdkNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPMGgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VXIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQVzBcORqsyvvEOiSHCf+1vomReYCN4vHp+btKR4m1uhbqHLu 9M9dicXSPwnuHwdo+fAcJ0E1eaQ8TlqM9rsfM9HqbPZAbpfWUyX4mXzxEb5BdWMQ gyft0MzL12EdoCcOCq7oc5aHB+oVw/KPgPIXd9CtKBPrVNWXsfyN2tggtZvT+fAu wOPdj3/QJ8xboMFpYsJTDILXpVdbh2lB6ExnMHENxvBnlCdseieEPcHwRRTuD1f5 UgwBwyJUHIpay9uCIPGz2czR+snFJ+BG6KMvevk5V1youQLvH3u9AHhgzCG1GrHk kWdmjrlD6MUSbxxjqgrpBiWy8cL4u+wlqIHKGQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:49 2025 by rpki-client