$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer File: a7804dec-fd00-426f-bba4-038d9b753fc5.cer (raw, json) Hash identifier: QHZM2FPm5oRYb6d+yhdwoYX2wgm/Ld1kuN+igyZpMWc= Subject key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848B353DD5893F78E226D34BE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 01:45:33 +0000 Certificate not after: Tue 04 May 2027 00:45:33 +0000 Subordinate resources: AS: 54702 IP: 64.112.80.0/22 IP: 136.175.124.0/22 IP: 173.0.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:53:dd:58:93:f7:8e:22:6d:34:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 29 01:45:33 2025 GMT Not After : May 4 00:45:33 2027 GMT Subject: CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:a9:b7:fb:ed:51:c9:85:e0:43:fd:8c:c9: 6c:27:25:53:e1:0f:d9:e3:bd:ef:60:b1:cb:f1:f6: d2:74:d6:6a:34:37:10:7f:57:06:7c:14:8b:4c:a9: 9e:6a:11:8b:43:4b:b9:35:35:bb:49:04:0b:4d:25: 41:5f:74:77:38:aa:5e:b3:72:dd:97:14:ca:08:11: b2:98:c6:95:e6:6b:83:fa:f6:1a:23:6d:2b:2e:7a: 4c:73:80:11:75:20:40:7c:d4:17:3f:34:8e:ea:4d: 1b:b3:a9:dc:51:70:a0:22:01:81:7b:61:9c:e2:b9: 3e:6c:7e:ae:2e:da:72:7d:06:90:e2:4d:21:91:72: cb:4d:3b:d1:8f:cd:e0:3e:22:8b:8a:b3:a8:2d:ba: 3e:f6:9b:39:7c:8c:1e:84:3f:fd:8d:ef:96:53:ab: 2b:5c:de:1d:f4:1a:4d:66:a6:9b:3d:17:64:a8:c7: ff:a9:10:ca:ef:0a:de:a9:ca:25:14:f5:4d:9b:5e: db:ae:2b:3c:0e:08:68:5e:e8:41:4b:f7:8a:9a:5c: b8:7a:f9:8f:48:7b:b5:37:c0:39:e7:37:75:8d:37: ba:24:5e:c1:97:5f:21:1b:6d:6d:d0:a9:78:f2:6d: 87:af:d2:7e:4d:eb:03:48:15:64:94:2b:47:74:94: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.112.80.0/22 136.175.124.0/22 173.0.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54702 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4a:06:b4:1a:0a:e8:db:e3:43:5d:fc:77:5d:63:ef:0e:35: 8b:1b:f7:39:14:ca:42:95:90:7a:dd:f1:44:1d:9d:44:63:e1: 3d:61:1f:1e:f0:35:04:e7:4d:e7:be:ef:7b:5c:a4:fd:3e:fe: 0a:a2:0c:2b:7b:a3:f9:a8:b1:7b:0d:50:d0:dd:80:f3:05:8f: 2e:7d:06:71:81:62:33:eb:59:65:c1:26:d8:b8:8d:04:14:36: b7:b1:51:f3:ae:48:6d:cd:0d:b6:8d:a5:c5:8b:ed:60:c8:92: da:28:7d:ce:1f:b7:bf:b8:ec:9f:27:17:52:92:2e:a8:d8:83: ca:1f:88:6a:ad:c7:49:46:61:75:48:4c:81:3b:9f:cb:5a:ae: 7c:e6:8a:ec:15:d5:b2:c2:0d:b5:84:06:f5:0a:72:50:96:b5: 1d:be:12:23:05:7c:1a:e6:7f:66:c6:60:92:f1:f8:ac:7a:f6: 46:e7:b9:b6:23:1b:65:42:f4:32:10:0b:4e:97:d5:c2:61:9c: 00:60:b7:b3:4f:58:38:4b:a7:44:84:1d:b6:0d:a9:90:d3:47: e8:45:60:8d:e4:37:22:96:24:2f:d5:9b:2e:c6:b9:3a:d0:e1: 15:b4:bc:56:a3:31:9f:30:cf:b5:95:e1:9f:14:a8:3b:0d:54: ed:34:54:f1 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEizU91Yk/eOIm00vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDEyOTAxNDUzM1oXDTI3MDUwNDAwNDUzM1owLzEtMCsGA1UEAxMk YTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUzZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lqpt/vtUcmF4EP9jMlsJyVT4Q/Z473vYLHL 8fbSdNZqNDcQf1cGfBSLTKmeahGLQ0u5NTW7SQQLTSVBX3R3OKpes3LdlxTKCBGy mMaV5muD+vYaI20rLnpMc4ARdSBAfNQXPzSO6k0bs6ncUXCgIgGBe2Gc4rk+bH6u LtpyfQaQ4k0hkXLLTTvRj83gPiKLirOoLbo+9ps5fIwehD/9je+WU6srXN4d9BpN ZqabPRdkqMf/qRDK7wreqcolFPVNm17bris8DghoXuhBS/eKmly4evmPSHu1N8A5 5zd1jTe6JF7Bl18hG21t0Kl48m2Hr9J+TesDSBVklCtHdJQO8wIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFGh1GxyGWWQ5ezm+Nx0QZ2achzKlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h NzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1i YmE0LTAzOGQ5Yjc1M2ZjNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3 NTNmYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJAcFADBAKIr3wDBAKtAAAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDANWuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD1KBrQaCujb40Nd/HddY+8ONYsb9zkU ykKVkHrd8UQdnURj4T1hHx7wNQTnTee+73tcpP0+/gqiDCt7o/mosXsNUNDdgPMF jy59BnGBYjPrWWXBJti4jQQUNrexUfOuSG3NDbaNpcWL7WDIktoofc4ft7+47J8n F1KSLqjYg8ofiGqtx0lGYXVITIE7n8tarnzmiuwV1bLCDbWEBvUKclCWtR2+EiMF fBrmf2bGYJLx+Kx69kbnubYjG2VC9DIQC06X1cJhnABgt7NPWDhLp0SEHbYNqZDT R+hFYI3kNyKWJC/Vmy7GuTrQ4RW0vFajMZ8wz7WV4Z8UqDsNVO00VPE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:48 2025 by rpki-client