$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer File: e48d3078-1b09-45c1-aa5b-24d202c19935.cer (raw, json) Hash identifier: JRKJA9sPm0sPQIkOAvYVQEm8I35wsO9lOi1YIB9ac1Q= Subject key identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584824F2FA4C25CA02D6E6CD9700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Dec 2024 01:45:33 +0000 Certificate not after: Sun 14 Mar 2027 01:45:33 +0000 Subordinate resources: AS: 35865 IP: 131.153.250.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:f2:fa:4c:25:ca:02:d6:e6:cd:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 9 01:45:33 2024 GMT Not After : Mar 14 01:45:33 2027 GMT Subject: CN=e48d3078-1b09-45c1-aa5b-24d202c19935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:63:28:98:af:47:b4:b2:77:0a:07:77:38: b7:21:5c:98:04:8e:bd:5b:e7:05:a7:b2:60:37:4c: c0:94:e3:f4:92:d8:62:fa:fc:87:e8:1b:e4:08:53: 5d:90:7f:11:1e:33:72:db:2a:48:8b:77:d9:c6:cf: d4:34:49:f4:a6:15:15:07:29:c1:00:cd:f4:f8:9e: cc:73:84:b9:58:ae:79:7c:7a:fd:96:b0:26:9f:61: 08:fa:61:e4:b7:6f:00:29:81:f9:00:00:cf:f7:51: 71:ba:60:6e:72:bc:8a:a2:4d:90:0a:0a:0d:f3:67: c3:94:2d:74:da:ff:fd:bf:d1:c6:17:80:40:c7:b5: 12:e8:d7:c5:6f:6d:88:fc:11:0c:84:31:b3:15:47: cd:e2:84:d7:0f:c9:4e:f0:97:df:6c:8d:a1:a9:3d: b5:b4:66:97:ca:f2:88:72:c5:6e:b7:d9:42:e0:c4: d8:c0:b4:af:29:98:61:c7:79:de:65:10:ae:ef:0e: 81:00:92:9d:bf:de:5a:1b:e7:16:9b:99:03:05:d7: 06:bf:1e:16:de:27:0b:b1:8f:b4:c5:db:9c:a4:1c: 2c:12:88:8e:5f:a6:06:17:54:be:ce:eb:11:ab:e3: 84:0d:ed:92:0c:5d:60:14:82:8c:5d:23:d5:0f:6a: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 131.153.250.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e1:91:ab:42:e5:7a:5f:0d:e1:b7:0e:b2:86:32:69:1d:b7: 52:d4:67:58:13:19:38:9d:91:7a:99:90:53:df:14:0a:35:64: 47:cd:40:3e:a9:b9:2d:7d:66:67:47:db:c1:da:a7:d3:91:6c: 75:47:d6:1c:0a:73:8d:95:59:58:c5:a6:7f:4f:00:76:59:8c: a7:4c:16:33:c3:13:a6:d5:2f:3c:c5:b5:d0:cf:04:fa:23:95: 85:f5:2a:6a:48:95:75:9d:32:51:d1:ea:65:cd:00:32:19:d7: 9c:83:61:4c:8d:fc:d8:43:e8:07:c1:0b:18:f3:94:4d:9b:a9: 70:cc:5f:d0:e9:4a:75:48:53:6c:44:81:43:74:c6:b9:bf:6a: 72:af:a5:31:af:bc:b9:bf:c2:a6:22:46:48:07:38:13:10:f6: b0:60:17:f2:f1:ac:ed:e8:45:a6:22:bc:1c:98:5a:5e:8b:fc: 91:b5:87:ec:c4:59:11:39:0b:b1:f5:d6:63:75:5b:86:ee:13: 49:48:b3:94:13:3c:2f:ae:3d:5c:80:50:51:26:e3:42:61:3d: e7:e6:a8:09:89:7e:df:6c:e2:25:32:ba:47:61:8a:99:4c:1e: 48:39:a6:52:f0:25:23:bc:73:64:f4:32:71:58:06:d7:29:10: b1:f5:84:65 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEgk8vpMJcoC1ubNlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIwOTAxNDUzM1oXDTI3MDMxNDAxNDUzM1owLzEtMCsGA1UEAxMk ZTQ4ZDMwNzgtMWIwOS00NWMxLWFhNWItMjRkMjAyYzE5OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCFjKJivR7SydwoHdzi3IVyYBI69W+cFp7Jg N0zAlOP0kthi+vyH6BvkCFNdkH8RHjNy2ypIi3fZxs/UNEn0phUVBynBAM30+J7M c4S5WK55fHr9lrAmn2EI+mHkt28AKYH5AADP91FxumBucryKok2QCgoN82fDlC10 2v/9v9HGF4BAx7US6NfFb22I/BEMhDGzFUfN4oTXD8lO8JffbI2hqT21tGaXyvKI csVut9lC4MTYwLSvKZhhx3neZRCu7w6BAJKdv95aG+cWm5kDBdcGvx4W3icLsY+0 xducpBwsEoiOX6YGF1S+zusRq+OEDe2SDF1gFIKMXSPVD2r+fwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKx8coGD9wYOs4jh5E+kqDHgVZrmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l NDhkMzA3OC0xYjA5LTQ1YzEtYWE1Yi0yNGQyMDJjMTk5MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U0OGQzMDc4LTFiMDktNDVjMS1h YTViLTI0ZDIwMmMxOTkzNS9lNDhkMzA3OC0xYjA5LTQ1YzEtYWE1Yi0yNGQyMDJj MTk5MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGDmfowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIwZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJHhkatC5XpfDeG3DrKGMmkdt1LUZ1gTGTidkXqZkFPfFAo1 ZEfNQD6puS19ZmdH28Hap9ORbHVH1hwKc42VWVjFpn9PAHZZjKdMFjPDE6bVLzzF tdDPBPojlYX1KmpIlXWdMlHR6mXNADIZ15yDYUyN/NhD6AfBCxjzlE2bqXDMX9Dp SnVIU2xEgUN0xrm/anKvpTGvvLm/wqYiRkgHOBMQ9rBgF/LxrO3oRaYivByYWl6L /JG1h+zEWRE5C7H11mN1W4buE0lIs5QTPC+uPVyAUFEm40JhPefmqAmJft9s4iUy ukdhiplMHkg5plLwJSO8c2T0MnFYBtcpELH1hGU= -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:40 2025 by rpki-client