$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer File: 17499469-12e7-4915-9db8-02bba626b87d.cer (raw, json) Hash identifier: A94NDbeP6EDC97CH1sNl8CC2/2jbK3vsaLa+vvFgBwI= Subject key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849389312ADC274037D48F2DED0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 19:15:26 +0000 Certificate not after: Wed 01 Jul 2026 00:45:22 +0000 Subordinate resources: AS: 396432 IP: 147.185.148.0/22 IP: 194.107.70.0/23 IP: 202.36.180.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:38:93:12:ad:c2:74:03:7d:48:f2:de:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 17 19:15:26 2025 GMT Not After : Jul 1 00:45:22 2026 GMT Subject: CN=17499469-12e7-4915-9db8-02bba626b87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:e5:8e:30:08:b8:cc:a0:25:26:e3:84:61: 64:db:ac:59:1c:91:be:77:0e:eb:72:78:d5:4b:46: 71:61:a3:2e:5f:7e:63:db:60:03:d5:bb:28:65:32: 68:e7:9b:d4:45:64:81:3c:56:0e:7b:01:41:24:f8: 31:d2:05:58:fa:f8:8c:8e:af:dd:7a:ba:9a:f0:f9: 80:87:b8:a2:75:63:1c:b1:4b:d3:a6:3f:10:e0:a1: 98:70:d3:c6:63:c2:a3:8b:24:7c:72:33:d6:57:57: a0:88:ed:06:99:91:c0:48:36:fc:47:30:d4:80:f7: b2:35:fe:7e:b0:51:53:7c:b6:ac:ae:97:16:14:bd: 13:6a:b5:cd:bf:7d:cd:45:9d:b1:4f:ef:76:50:2c: 8b:fe:6d:c0:17:c7:99:ae:96:f1:92:65:b6:32:83: 87:d6:0b:4b:02:e1:9e:75:d1:7d:30:d5:ef:8b:5e: 2f:fd:f1:86:b1:c5:b2:50:84:ee:8f:0b:95:1d:96: 66:04:b9:d4:a5:bf:7e:79:7e:ad:7c:d4:ef:c5:9f: 6b:02:c0:16:27:7e:7d:e2:7a:25:73:34:63:53:29: b8:8f:22:0f:3c:8d:36:36:ae:e3:27:69:31:64:8d: e8:e6:1d:c6:ce:ee:6c:6b:4d:bd:56:ed:c1:01:ee: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 147.185.148.0/22 194.107.70.0/23 202.36.180.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:c3:dd:88:b7:90:20:43:17:4b:d6:dc:25:6c:51:b9:51:d0: ec:46:a1:cb:ec:f4:80:1d:71:b3:aa:e4:3a:51:a3:d2:a0:1c: 87:a2:50:45:19:d5:e7:4f:2a:54:0a:dc:10:9e:45:35:8a:89: 8d:c9:fa:0b:65:c2:76:7e:c6:4d:3e:cb:bb:c0:c5:93:d3:1c: 5e:71:a9:28:ee:3e:c3:e7:67:c4:b0:72:69:9d:fd:0d:43:9a: 37:30:76:31:94:f0:74:65:80:03:2a:72:1d:cf:62:4d:5f:e2: 45:0f:77:2b:6e:b6:de:f1:2d:91:21:63:1d:c5:4d:23:0c:60: ef:2d:59:9a:a0:e2:31:49:8d:63:41:4c:5f:f7:6e:41:c3:8c: 72:1f:a7:8e:04:8e:74:f2:1e:85:bf:4f:66:c6:d3:bb:8a:42: df:ca:f5:d4:00:ef:81:6c:56:fd:9c:e7:b6:2c:b4:09:1c:98: 13:6b:dc:23:bc:9c:d3:ae:2f:b5:98:ab:4a:43:ed:fe:98:92: f4:6f:2c:c0:fa:fe:2a:b3:ca:71:ba:44:78:1c:6b:72:00:e7: ce:33:19:d8:cd:42:a2:b5:1f:01:f8:5a:52:94:4b:7e:77:8d: 05:d7:f7:eb:8d:dc:65:b6:77:dd:e6:87:c9:96:d3:0c:c5:8b: 81:a5:85:98 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEk4kxKtwnQDfUjy3tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDMxNzE5MTUyNloXDTI2MDcwMTAwNDUyMlowLzEtMCsGA1UEAxMk MTc0OTk0NjktMTJlNy00OTE1LTlkYjgtMDJiYmE2MjZiODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7ljjAIuMygJSbjhGFk26xZHJG+dw7rcnjV S0ZxYaMuX35j22AD1bsoZTJo55vURWSBPFYOewFBJPgx0gVY+viMjq/derqa8PmA h7iidWMcsUvTpj8Q4KGYcNPGY8KjiyR8cjPWV1egiO0GmZHASDb8RzDUgPeyNf5+ sFFTfLasrpcWFL0TarXNv33NRZ2xT+92UCyL/m3AF8eZrpbxkmW2MoOH1gtLAuGe ddF9MNXvi14v/fGGscWyUITujwuVHZZmBLnUpb9+eX6tfNTvxZ9rAsAWJ3594nol czRjUym4jyIPPI02Nq7jJ2kxZI3o5h3Gzu5sa029Vu3BAe7XLQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFG6JCORDOJZNSnnR7fxsgnFjPCYZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x NzQ5OTQ2OS0xMmU3LTQ5MTUtOWRiOC0wMmJiYTYyNmI4N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE3NDk5NDY5LTEyZTctNDkxNS05 ZGI4LTAyYmJhNjI2Yjg3ZC8xNzQ5OTQ2OS0xMmU3LTQ5MTUtOWRiOC0wMmJiYTYy NmI4N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKTuZQDBAHCa0YDBADKJLQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBgyQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAK/D3Yi3kCBDF0vW3CVsUblR0OxGocvs 9IAdcbOq5DpRo9KgHIeiUEUZ1edPKlQK3BCeRTWKiY3J+gtlwnZ+xk0+y7vAxZPT HF5xqSjuPsPnZ8Swcmmd/Q1DmjcwdjGU8HRlgAMqch3PYk1f4kUPdytutt7xLZEh Yx3FTSMMYO8tWZqg4jFJjWNBTF/3bkHDjHIfp44EjnTyHoW/T2bG07uKQt/K9dQA 74FsVv2c57YstAkcmBNr3CO8nNOuL7WYq0pD7f6YkvRvLMD6/iqzynG6RHgca3IA 584zGdjNQqK1HwH4WlKUS353jQXX9+uN3GW2d93mh8mW0wzFi4GlhZg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:03 2025 by rpki-client