$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer File: 1040c089-26bf-4af5-9c25-bcef963829d2.cer (raw, json) Hash identifier: JZWQIQsNUr1sp9aEfI3zNywCsR2IMF/tlb0EHZlwOWA= Subject key identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849472C5788D7887881E111FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Mar 2025 00:45:33 +0000 Certificate not after: Sat 26 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 32704 IP: 198.38.13.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:2c:57:88:d7:88:78:81:e1:11:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 23 00:45:33 2025 GMT Not After : Jun 26 00:45:33 2027 GMT Subject: CN=1040c089-26bf-4af5-9c25-bcef963829d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:73:21:4f:5f:83:08:ef:a1:36:28:d3:ac: c1:ef:0b:ee:49:cf:c8:a9:b4:1e:de:e1:dc:fe:74: 5d:8a:bd:77:e6:60:5c:73:b8:cc:6f:1b:8f:2e:45: 30:72:ff:f1:79:e7:33:a6:77:eb:77:50:be:ed:d3: eb:a8:2b:03:31:24:85:22:c1:09:c9:2a:7f:23:c9: 43:13:9b:1e:5b:04:98:7b:b3:52:30:5f:48:78:18: c4:63:4d:92:48:01:71:b2:0b:e4:35:17:e5:8f:07: 5a:fb:b2:4c:ab:c5:73:af:e9:bc:68:48:58:34:76: 93:d0:a9:3a:9c:b4:0f:03:ba:67:56:0e:14:2f:78: ca:b7:ff:35:5c:bc:51:fe:79:7f:e5:e9:49:1c:4d: ba:d5:37:a3:83:1b:91:97:33:1e:b0:2a:4d:21:8a: 6e:40:53:76:51:a4:31:20:72:22:c4:7f:98:60:73: 08:49:e9:10:79:6e:d4:3f:55:7b:2c:81:7f:f5:c0: 18:d9:18:e3:eb:80:c9:f2:f0:2e:f0:51:4d:2c:df: b4:7f:45:3c:ca:f4:c6:a5:63:5c:f5:9c:65:c3:02: 52:bd:13:a5:eb:d8:9e:9d:25:a5:b0:59:7b:b9:dc: 8b:d6:76:c4:3b:a7:73:e2:4b:7f:39:d7:91:52:23: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 198.38.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32704 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:15:6e:f7:42:dc:5e:00:87:b8:d3:f9:7b:5f:8f:2b:3f:a7: 1b:6c:45:26:cd:80:ee:54:d9:ef:3e:bb:3b:74:42:05:77:1a: 96:10:79:c5:dc:b7:03:98:04:85:19:b7:25:13:75:12:18:7f: 43:64:f5:25:60:3b:19:6b:68:d2:d7:2c:60:91:b5:07:67:a2: 04:2e:d4:c9:8d:a2:04:1a:3c:69:5a:19:b5:87:76:51:a4:9b: 77:50:68:37:46:52:71:9b:21:a6:87:59:61:91:2d:42:62:16: 30:23:64:0c:dc:ee:c7:42:09:45:4f:8f:57:74:da:39:2e:e4: 9e:89:18:8f:d0:5d:9b:96:9d:91:6e:19:1b:fe:f8:26:69:ca: bc:05:42:08:c0:94:bc:53:82:cb:ac:01:63:ef:5c:71:98:cc: b4:a4:03:b5:aa:60:8e:ae:23:53:3f:0d:2b:db:0c:95:f6:63: 95:dc:0f:12:e7:36:e1:6a:a0:3b:e3:d5:c7:19:45:2f:01:fc: eb:a2:18:9d:3e:fe:07:74:b9:f5:b0:40:6f:4f:71:e2:ba:cd: 1e:1e:f5:93:cb:89:62:87:85:f6:7d:6f:4e:1c:67:4d:cf:ac: 95:1d:b1:ee:48:58:b4:33:b6:db:bb:76:00:5d:65:e0:1f:f8: 7a:01:35:8f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWElHLFeI14h4geER/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMyMzAwNDUzM1oXDTI3MDYyNjAwNDUzM1owLzEtMCsGA1UEAxMk MTA0MGMwODktMjZiZi00YWY1LTljMjUtYmNlZjk2MzgyOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUJzIU9fgwjvoTYo06zB7wvuSc/IqbQe3uHc /nRdir135mBcc7jMbxuPLkUwcv/xeeczpnfrd1C+7dPrqCsDMSSFIsEJySp/I8lD E5seWwSYe7NSMF9IeBjEY02SSAFxsgvkNRfljwda+7JMq8Vzr+m8aEhYNHaT0Kk6 nLQPA7pnVg4UL3jKt/81XLxR/nl/5elJHE261TejgxuRlzMesCpNIYpuQFN2UaQx IHIixH+YYHMISekQeW7UP1V7LIF/9cAY2Rjj64DJ8vAu8FFNLN+0f0U8yvTGpWNc 9ZxlwwJSvROl69ienSWlsFl7udyL1nbEO6dz4kt/OdeRUiOenwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCDd7Eq2CCQKU/IHx0di8DLMj4xuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x MDQwYzA4OS0yNmJmLTRhZjUtOWMyNS1iY2VmOTYzODI5ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzEwNDBjMDg5LTI2YmYtNGFmNS05 YzI1LWJjZWY5NjM4MjlkMi8xMDQwYzA4OS0yNmJmLTRhZjUtOWMyNS1iY2VmOTYz ODI5ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGJg0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC f8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADRVu90LcXgCHuNP5e1+PKz+nG2xFJs2A7lTZ7z67O3RCBXca lhB5xdy3A5gEhRm3JRN1Ehh/Q2T1JWA7GWto0tcsYJG1B2eiBC7UyY2iBBo8aVoZ tYd2UaSbd1BoN0ZScZshpodZYZEtQmIWMCNkDNzux0IJRU+PV3TaOS7knokYj9Bd m5adkW4ZG/74JmnKvAVCCMCUvFOCy6wBY+9ccZjMtKQDtapgjq4jUz8NK9sMlfZj ldwPEuc24WqgO+PVxxlFLwH866IYnT7+B3S59bBAb09x4rrNHh71k8uJYoeF9n1v ThxnTc+slR2x7khYtDO227t2AF1l4B/4egE1jw== -----END CERTIFICATE-----Generated at Fri Apr 4 20:17:01 2025 by rpki-client