$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer File: fa477642-e4af-4ff3-96bf-ada919ef1284.cer (raw, json) Hash identifier: q+D8b5hGJv4Uxs4B4jHizaFh4pyHvIZvjjzrerqjC1E= Subject key identifier: E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848DA69710C5ED40CDF32D55CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 01:45:33 +0000 Certificate not after: Tue 18 May 2027 00:45:33 +0000 Subordinate resources: AS: 394743 IP: 23.167.80.0/23 IP: 23.172.32.0/24 IP: 2605:12c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:69:71:0c:5e:d4:0c:df:32:d5:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 12 01:45:33 2025 GMT Not After : May 18 00:45:33 2027 GMT Subject: CN=fa477642-e4af-4ff3-96bf-ada919ef1284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:d5:f7:ab:0c:10:5c:b5:fa:79:08:e7:b0: 6f:90:5c:3b:4f:09:fc:2b:a1:03:18:aa:ca:f4:93: b9:b4:4a:2d:cc:15:ae:1c:44:a8:20:76:18:ae:1f: eb:48:20:13:67:05:65:a1:65:4c:f6:fc:7a:0f:f5: 4f:1c:ae:05:67:2e:ae:ab:a8:d8:aa:cf:7d:ae:f9: ef:75:a7:67:cc:85:42:f1:10:5f:30:4f:b4:f9:0b: 66:5c:01:34:d5:9d:01:60:1a:67:66:0b:a5:92:84: 6c:51:9b:dc:2f:70:a7:d2:04:42:29:db:d0:4d:95: 5f:fc:39:21:79:3e:e8:83:d1:73:3f:d8:c8:a2:4c: cc:ae:74:26:b5:fd:33:60:2e:45:11:1f:76:ef:ff: 45:a2:86:7c:9c:cf:3c:4f:21:6f:9a:31:0b:7a:75: 23:48:f7:80:8a:c2:60:cc:28:49:4e:ab:71:85:73: fd:54:7e:3d:fb:3b:ff:96:c9:98:a8:be:d7:86:58: e2:20:5a:4f:2a:52:5b:16:3c:44:18:49:f9:14:6b: aa:61:3b:f4:77:3b:1c:74:97:12:fc:d3:2e:74:6f: 19:f6:8d:64:6e:e6:08:2e:20:f3:bc:e9:b5:64:f6: 40:42:5e:e5:09:41:87:d4:fa:29:fa:93:ed:a1:d3: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.167.80.0/23 23.172.32.0/24 IPv6: 2605:12c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394743 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9d:4c:e4:67:35:2c:14:48:5e:48:06:30:81:ca:38:83:e2: c6:96:7f:07:5f:01:e5:00:8c:61:1c:30:56:cf:7b:1d:8a:fb: 2f:5c:ee:c0:6a:eb:02:1b:db:63:71:da:ff:34:dd:e1:b2:b6: aa:d7:71:8d:25:b7:b6:67:19:13:13:0b:f3:59:71:39:fc:ee: cb:00:8b:45:ba:04:eb:ef:c6:c8:be:ea:bc:87:ad:74:ba:3d: 2d:ef:5f:41:82:50:ff:38:1f:50:d4:c2:65:97:52:db:41:10: 2d:f6:43:38:2f:7e:d5:a3:0f:7d:6e:8a:e1:59:95:77:98:32: 4c:4b:21:7e:66:61:47:85:2e:53:e1:42:b1:d2:25:d8:06:65: 05:d2:97:ba:86:74:e0:52:cf:8f:e2:2d:e1:40:f5:de:4e:c8: 4c:21:e6:19:d7:56:0e:9c:f0:ac:e5:c9:99:6a:91:7f:df:df: 49:ab:af:cf:aa:c5:1b:7d:7f:c7:9d:79:fc:1c:61:3f:6d:de: b5:f8:a2:09:bb:24:b4:71:f0:6b:c4:e4:07:5a:8d:97:95:51: 05:19:ab:92:9a:f9:46:fe:a4:b8:93:cf:d2:4a:a9:54:03:72: 79:84:1e:cc:9b:e0:75:bb:45:b7:2f:79:d8:e1:c6:23:73:5a: 73:47:cb:cd -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEjaaXEMXtQM3zLVXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIxMjAxNDUzM1oXDTI3MDUxODAwNDUzM1owLzEtMCsGA1UEAxMk ZmE0Nzc2NDItZTRhZi00ZmYzLTk2YmYtYWRhOTE5ZWYxMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvfV96sMEFy1+nkI57BvkFw7Twn8K6EDGKrK 9JO5tEotzBWuHESoIHYYrh/rSCATZwVloWVM9vx6D/VPHK4FZy6uq6jYqs99rvnv dadnzIVC8RBfME+0+QtmXAE01Z0BYBpnZgulkoRsUZvcL3Cn0gRCKdvQTZVf/Dkh eT7og9FzP9jIokzMrnQmtf0zYC5FER927/9FooZ8nM88TyFvmjELenUjSPeAisJg zChJTqtxhXP9VH49+zv/lsmYqL7XhljiIFpPKlJbFjxEGEn5FGuqYTv0dzscdJcS /NMudG8Z9o1kbuYILiDzvOm1ZPZAQl7lCUGH1Pop+pPtodO3lwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOD/pQf1rX43jF8KdkOaR60iUdYvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m YTQ3NzY0Mi1lNGFmLTRmZjMtOTZiZi1hZGE5MTllZjEyODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2ZhNDc3NjQyLWU0YWYtNGZmMy05 NmJmLWFkYTkxOWVmMTI4NC9mYTQ3NzY0Mi1lNGFmLTRmZjMtOTZiZi1hZGE5MTll ZjEyODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEXp1ADBAAXrCAwDQQCAAIwBwMFACYFEsAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgX3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJGdTORnNSwUSF5IBjCB yjiD4saWfwdfAeUAjGEcMFbPex2K+y9c7sBq6wIb22Nx2v803eGytqrXcY0lt7Zn GRMTC/NZcTn87ssAi0W6BOvvxsi+6ryHrXS6PS3vX0GCUP84H1DUwmWXUttBEC32 QzgvftWjD31uiuFZlXeYMkxLIX5mYUeFLlPhQrHSJdgGZQXSl7qGdOBSz4/iLeFA 9d5OyEwh5hnXVg6c8KzlyZlqkX/f30mrr8+qxRt9f8edefwcYT9t3rX4ogm7JLRx 8GvE5AdajZeVUQUZq5Ka+Ub+pLiTz9JKqVQDcnmEHsyb4HW7RbcvedjhxiNzWnNH y80= -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:36 2025 by rpki-client