$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/265f8422-0845-4454-8b53-cb6026fe3f84.cer File: 265f8422-0845-4454-8b53-cb6026fe3f84.cer (raw, json) Hash identifier: OHGjgjVkfyyCwgEjBF63oK0q7VIAPfSR4ar2bmJjFzQ= Subject key identifier: F4:62:50:9E:DB:5E:7B:50:7D:1F:CE:F8:9D:75:DF:89:AA:F6:13:0D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848EB298D1F4F781EE03227DE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/265f8422-0845-4454-8b53-cb6026fe3f84/265f8422-0845-4454-8b53-cb6026fe3f84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/265f8422-0845-4454-8b53-cb6026fe3f84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: AS: 36125 IP: 206.132.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8d:1f:4f:78:1e:e0:32:27:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=265f8422-0845-4454-8b53-cb6026fe3f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:8e:03:44:2f:57:20:2f:50:63:5d:4a:cf: b9:47:da:11:c4:40:2c:0a:01:a1:23:90:42:ea:95: 34:e7:4f:6e:02:f7:24:b3:e3:64:c8:cd:c1:1a:81: e3:21:19:48:4e:d8:f9:1f:7e:76:96:2f:8d:c8:fa: b4:d9:9b:bc:1b:04:e7:cd:74:10:e8:04:bd:0f:b5: d4:1e:c1:11:7c:3d:14:39:54:2c:49:8e:08:ea:20: 83:95:31:b2:74:31:b2:af:d2:a2:84:2d:ce:d7:f1: 17:8f:6c:02:e1:da:f0:61:25:46:e1:72:f6:d7:63: 83:b7:4e:db:eb:bf:68:07:a5:6e:b9:21:0e:be:8a: 55:61:6e:97:d2:f6:7f:60:77:bf:43:46:26:37:11: 14:3d:33:ff:e1:61:96:a1:1a:08:62:7c:aa:cd:8d: 15:28:6f:24:ee:51:c1:8c:c2:51:41:89:9e:bb:4b: 66:d6:e8:9a:bc:e7:52:82:b8:50:72:3d:08:24:71: 5d:db:c3:ae:0b:f6:8a:65:9d:95:36:90:de:5e:f9: ca:19:57:2b:0a:e2:29:b6:d3:23:9b:fe:cb:17:ae: 9f:25:8f:fb:a5:e0:6b:ce:d6:19:b2:1b:1b:3e:e8: 48:57:12:e1:47:50:3e:29:ef:ce:d6:8e:63:32:cd: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:50:9E:DB:5E:7B:50:7D:1F:CE:F8:9D:75:DF:89:AA:F6:13:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/265f8422-0845-4454-8b53-cb6026fe3f84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/265f8422-0845-4454-8b53-cb6026fe3f84/265f8422-0845-4454-8b53-cb6026fe3f84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 206.132.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a8:53:f0:ad:2b:a1:55:4a:1b:db:38:4a:25:62:61:6c:f3: c5:57:1b:4e:21:50:bb:47:4e:62:a0:42:c9:00:ec:92:2b:53: 27:e6:25:e0:7f:b9:3a:45:2e:19:82:0d:36:07:28:fd:8e:ee: 80:da:e0:60:23:7a:ed:4b:13:5b:2e:2a:c6:e9:3f:38:c8:3b: 19:7c:52:49:df:46:8f:5a:f2:81:8e:d6:e1:c6:20:d0:e2:58: da:65:84:21:d6:5e:c6:9c:0c:f3:2b:ce:b0:24:6b:37:71:59: 97:a2:82:ca:4b:d3:19:68:47:a4:4d:1d:39:44:bb:bf:46:6b: 05:64:8d:5e:20:2c:e4:64:7a:f9:c4:35:73:9b:b6:f6:b3:f7: 3b:f1:38:6b:b8:2e:61:4f:c0:a3:e7:ba:38:e4:6f:ff:0d:fd: 1b:5e:32:a1:22:e6:a1:8c:c9:60:11:08:59:15:50:7a:44:92: e7:41:8d:1a:9b:bf:17:8b:c7:d6:04:a9:fc:a2:9b:56:ee:25: 48:37:04:78:19:a3:4d:ef:2a:00:d2:76:58:15:40:1c:4e:62: dc:9c:51:01:ec:9f:a6:74:27:63:8f:b7:6e:4c:66:ec:01:f4: ca:be:04:84:66:cd:cf:ce:18:4d:1a:f3:ca:51:05:82:f9:a0: 53:27:1e:58 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEjrKY0fT3ge4DIn3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk MjY1Zjg0MjItMDg0NS00NDU0LThiNTMtY2I2MDI2ZmUzZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiOOA0QvVyAvUGNdSs+5R9oRxEAsCgGhI5BC 6pU0509uAvcks+NkyM3BGoHjIRlITtj5H352li+NyPq02Zu8GwTnzXQQ6AS9D7XU HsERfD0UOVQsSY4I6iCDlTGydDGyr9KihC3O1/EXj2wC4drwYSVG4XL212ODt07b 679oB6VuuSEOvopVYW6X0vZ/YHe/Q0YmNxEUPTP/4WGWoRoIYnyqzY0VKG8k7lHB jMJRQYmeu0tm1uiavOdSgrhQcj0IJHFd28OuC/aKZZ2VNpDeXvnKGVcrCuIpttMj m/7LF66fJY/7peBrztYZshsbPuhIVxLhR1A+Ke/O1o5jMs3YbQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFPRiUJ7bXntQfR/O+J1134mq9hMNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y NjVmODQyMi0wODQ1LTQ0NTQtOGI1My1jYjYwMjZmZTNmODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzI2NWY4NDIyLTA4NDUtNDQ1NC04 YjUzLWNiNjAyNmZlM2Y4NC8yNjVmODQyMi0wODQ1LTQ0NTQtOGI1My1jYjYwMjZm ZTNmODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATOhDAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI0dMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAASoU/CtK6FVShvbOEolYmFs88VXG04hULtHTmKgQskA7JIr UyfmJeB/uTpFLhmCDTYHKP2O7oDa4GAjeu1LE1suKsbpPzjIOxl8UknfRo9a8oGO 1uHGINDiWNplhCHWXsacDPMrzrAkazdxWZeigspL0xloR6RNHTlEu79GawVkjV4g LORkevnENXObtvaz9zvxOGu4LmFPwKPnujjkb/8N/RteMqEi5qGMyWARCFkVUHpE kudBjRqbvxeLx9YEqfyim1buJUg3BHgZo03vKgDSdlgVQBxOYtycUQHsn6Z0J2OP t25MZuwB9Mq+BIRmzc/OGE0a88pRBYL5oFMnHlg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:26:16 2025 by rpki-client