$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer File: de0cc6bd-e920-421b-822f-9be354b0d759.cer (raw, json) Hash identifier: FhBb2KIbiU5quPS6Xy0rorLM/sBFB9YhvsxQMHS9L5A= Subject key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848CC7406322D8E8C0266705A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Feb 2025 01:45:33 +0000 Certificate not after: Thu 13 May 2027 00:45:33 +0000 Subordinate resources: AS: 399888 IP: 45.45.224.0/22 IP: 208.75.128.0/22 IP: 2602:fc52::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:74:06:32:2d:8e:8c:02:66:70:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 7 01:45:33 2025 GMT Not After : May 13 00:45:33 2027 GMT Subject: CN=de0cc6bd-e920-421b-822f-9be354b0d759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:e7:43:15:57:d2:37:45:77:66:95:99:31: dc:f8:21:64:06:df:51:b5:f2:c1:a9:bf:f3:bb:d1: fd:5a:7b:9f:45:05:9e:d2:69:b5:6b:ed:1b:94:59: 26:f1:5d:13:f0:21:64:db:09:67:fd:23:44:09:43: ea:1c:a3:f4:db:7c:ad:22:a4:45:39:65:ce:ef:e1: 26:05:b2:7b:86:42:fd:7b:01:a6:29:64:b0:70:96: e1:1f:a4:71:2d:64:33:62:fc:a9:85:2a:cf:da:1b: bd:25:ee:cf:67:ca:9f:cc:96:86:0c:c8:a7:82:13: 58:6a:cd:7c:8f:ed:93:16:8e:ec:cf:d6:96:58:df: 8f:45:21:c3:34:4d:df:85:47:a2:0c:53:1c:cf:c9: 83:32:3f:0b:03:4a:53:02:fb:1d:02:93:70:77:f4: f0:b9:41:44:48:2b:f5:d8:07:f4:c3:b3:b3:23:77: 6d:00:22:f4:26:6f:fb:ec:05:0b:bc:0a:9f:9d:b5: 14:84:ee:06:b3:d7:dc:c3:f8:1e:7a:71:b2:df:cb: f3:5a:16:0f:cb:9c:e4:31:ee:69:f6:25:82:77:78: e6:ce:07:5f:9b:a2:15:ec:39:21:54:cc:67:55:ab: ae:f2:c3:37:02:02:58:ac:a1:40:ab:c3:68:5f:38: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.45.224.0/22 208.75.128.0/22 IPv6: 2602:fc52::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a9:8a:d6:0f:2f:ed:6d:37:a5:00:97:c0:03:4f:55:1c:24: bb:c7:14:7f:9e:da:71:fe:1c:12:df:b9:87:3e:28:a9:ff:41: ea:fc:7c:c0:80:ec:05:b6:8e:63:b5:c7:5f:27:71:ef:81:b6: 2a:7e:39:1e:67:be:3e:50:db:5f:95:a7:b9:1b:d0:6a:a3:a2: 0d:88:05:22:a7:0c:cc:78:0a:5a:b1:f3:01:f9:86:10:8b:42: 80:9a:c6:27:e6:71:03:bd:1a:71:67:0b:4b:ef:56:43:53:1d: e3:fe:11:23:7f:05:3a:a9:06:8b:90:2a:8e:80:da:86:13:90: 6f:ba:f4:dc:cc:50:05:01:14:1e:05:0b:5c:5f:28:de:b1:bf: 93:ce:8b:80:85:72:8b:25:2f:fd:26:b8:1c:c3:35:85:89:16: 42:c5:39:30:c0:8e:09:d8:8e:76:b0:00:9a:e0:97:bc:b8:9d: 28:fc:a1:08:61:49:01:b8:ca:6f:07:97:47:22:b4:ec:41:08: d0:d6:3a:13:1d:e8:3d:f1:fc:8a:ad:49:76:f6:68:b3:81:5b: bc:e9:71:47:a5:27:89:02:c0:9f:f1:2f:9a:72:b3:78:29:d5: f9:79:2d:e4:97:5a:78:c5:71:1f:e7:e8:00:a4:8d:11:72:81: 1a:8d:54:e8 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEjMdAYyLY6MAmZwWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIwNzAxNDUzM1oXDTI3MDUxMzAwNDUzM1owLzEtMCsGA1UEAxMk ZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBkNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiXnQxVX0jdFd2aVmTHc+CFkBt9RtfLBqb/z u9H9WnufRQWe0mm1a+0blFkm8V0T8CFk2wln/SNECUPqHKP023ytIqRFOWXO7+Em BbJ7hkL9ewGmKWSwcJbhH6RxLWQzYvyphSrP2hu9Je7PZ8qfzJaGDMinghNYas18 j+2TFo7sz9aWWN+PRSHDNE3fhUeiDFMcz8mDMj8LA0pTAvsdApNwd/TwuUFESCv1 2Af0w7OzI3dtACL0Jm/77AULvAqfnbUUhO4Gs9fcw/geenGy38vzWhYPy5zkMe5p 9iWCd3jmzgdfm6IV7DkhVMxnVauu8sM3AgJYrKFAq8NoXzj5IQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFNDfBfrp24o3UnNqSGZ0U8ZoEHBYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k ZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RlMGNjNmJkLWU5MjAtNDIxYi04 MjJmLTliZTM1NGIwZDc1OS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRi MGQ3NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAItLeADBALQS4AwDgQCAAIwCAMGBCYC/FIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYaEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfqYrWDy/tbTelAJfA A09VHCS7xxR/ntpx/hwS37mHPiip/0Hq/HzAgOwFto5jtcdfJ3HvgbYqfjkeZ74+ UNtflae5G9Bqo6INiAUipwzMeApasfMB+YYQi0KAmsYn5nEDvRpxZwtL71ZDUx3j /hEjfwU6qQaLkCqOgNqGE5BvuvTczFAFARQeBQtcXyjesb+TzouAhXKLJS/9Jrgc wzWFiRZCxTkwwI4J2I52sACa4Je8uJ0o/KEIYUkBuMpvB5dHIrTsQQjQ1joTHeg9 8fyKrUl29mizgVu86XFHpSeJAsCf8S+acrN4KdX5eS3kl1p4xXEf5+gApI0RcoEa jVTo -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:43 2025 by rpki-client