$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer File: 76554884-d362-4eab-82d1-ed9e4c9b289a.cer (raw, json) Hash identifier: Y7tD2vCkhV6TQJ4MXvhZtpHN7WzBg2DYr8bMScEz+j8= Subject key identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C37553978C3F99B81EF06780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Feb 2025 20:25:55 +0000 Certificate not after: Sun 09 May 2027 19:25:55 +0000 Subordinate resources: AS: 398238 IP: 216.170.121.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c3:75:53:97:8c:3f:99:b8:1e:f0:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 3 20:25:55 2025 GMT Not After : May 9 19:25:55 2027 GMT Subject: CN=76554884-d362-4eab-82d1-ed9e4c9b289a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:66:76:e8:ac:55:fe:98:7f:30:3f:c0:ee: 77:ee:ec:92:fd:67:13:9c:65:51:12:7a:be:a0:b2: 9b:7e:9d:5c:0c:95:bb:93:4f:33:11:e2:97:67:ad: cb:5b:85:e2:8d:63:03:0e:64:87:2d:b5:36:5c:b2: 38:9b:43:80:46:27:95:16:7c:ef:2a:34:97:c3:6f: 86:c9:34:b7:2d:22:6b:b2:89:86:03:58:93:e9:14: e9:3a:70:20:20:5e:65:4b:3e:b9:21:92:3c:17:3e: 6b:e3:8b:a3:76:e1:3d:91:e4:49:31:d2:3c:57:a3: d0:11:23:9a:59:31:9f:56:b1:0f:a9:e1:9e:de:b7: bb:7e:37:c4:41:43:aa:c0:55:54:f8:21:46:39:98: 5c:c5:15:14:2b:29:8e:e4:5f:24:78:98:44:09:c2: b5:e8:40:34:71:bd:dd:e9:93:c8:59:a4:ee:50:36: c4:28:23:39:11:cb:a3:f5:8b:44:fc:26:61:2e:05: 75:4d:9a:da:05:75:19:5c:8c:ec:f3:bc:7b:26:1f: 31:37:20:24:69:36:4b:ef:33:8f:83:9a:be:00:98: b0:16:da:5d:f4:58:c5:41:98:61:c5:81:5c:74:a0: 3a:de:78:28:c0:ee:58:0b:71:1d:75:3c:7d:48:fd: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 216.170.121.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:27:e0:e4:68:1a:f2:0a:f5:77:8e:bd:3a:1a:5c:2d:09:04: ad:a9:15:da:e3:2f:f6:23:fc:c5:a7:23:07:ee:c6:34:f1:a7: 79:5d:4a:9c:78:93:6c:d2:52:31:87:cd:e3:06:29:50:b6:60: 2d:e8:10:7a:92:70:68:6f:08:ac:a4:c0:96:89:9f:7b:98:98: 35:12:29:57:82:f7:65:0a:30:6d:75:e9:97:c9:f4:a1:21:f2: 4f:79:6b:d2:cd:19:9b:5c:0a:32:74:d1:25:97:b9:27:b3:e2: 7d:88:d8:bc:c0:c7:55:43:08:69:2f:a2:04:c1:e3:3a:4f:06: 48:6b:94:d0:49:24:b9:02:3b:57:af:0a:19:1f:f6:f7:9e:d0: fe:ed:6b:76:59:40:9b:42:77:ab:44:65:11:c6:58:22:9b:a5: fb:44:b2:04:b4:b0:f0:ed:da:fb:64:87:14:e6:b7:10:5f:0e: a2:79:82:25:50:b8:20:35:29:16:1f:be:40:e2:a1:0c:b6:bb: ba:7d:a4:46:7f:fb:db:fc:0b:36:4b:29:65:09:73:b2:1f:ee: 7c:81:53:9a:64:14:95:93:16:07:57:00:0f:1b:00:52:ee:e4: 0c:4a:3b:4f:12:db:17:38:a8:5f:57:39:73:a5:6e:51:f0:51: b0:fd:36:1f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEjDdVOXjD+ZuB7wZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwMzIwMjU1NVoXDTI3MDUwOTE5MjU1NVowLzEtMCsGA1UEAxMk NzY1NTQ4ODQtZDM2Mi00ZWFiLTgyZDEtZWQ5ZTRjOWIyODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQtmduisVf6YfzA/wO537uyS/WcTnGVREnq+ oLKbfp1cDJW7k08zEeKXZ63LW4XijWMDDmSHLbU2XLI4m0OARieVFnzvKjSXw2+G yTS3LSJrsomGA1iT6RTpOnAgIF5lSz65IZI8Fz5r44ujduE9keRJMdI8V6PQESOa WTGfVrEPqeGe3re7fjfEQUOqwFVU+CFGOZhcxRUUKymO5F8keJhECcK16EA0cb3d 6ZPIWaTuUDbEKCM5Ecuj9YtE/CZhLgV1TZraBXUZXIzs87x7Jh8xNyAkaTZL7zOP g5q+AJiwFtpd9FjFQZhhxYFcdKA63ngowO5YC3EddTx9SP1TGQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFASVkXz+Lf/ge0W/zQ5yqYyixCWxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NjU1NDg4NC1kMzYyLTRlYWItODJkMS1lZDllNGM5YjI4OWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc2NTU0ODg0LWQzNjItNGVhYi04 MmQxLWVkOWU0YzliMjg5YS83NjU1NDg4NC1kMzYyLTRlYWItODJkMS1lZDllNGM5 YjI4OWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADYqnkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhOeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFsn4ORoGvIK9XeOvToaXC0JBK2pFdrjL/Yj/MWnIwfuxjTx p3ldSpx4k2zSUjGHzeMGKVC2YC3oEHqScGhvCKykwJaJn3uYmDUSKVeC92UKMG11 6ZfJ9KEh8k95a9LNGZtcCjJ00SWXuSez4n2I2LzAx1VDCGkvogTB4zpPBkhrlNBJ JLkCO1evChkf9vee0P7ta3ZZQJtCd6tEZRHGWCKbpftEsgS0sPDt2vtkhxTmtxBf DqJ5giVQuCA1KRYfvkDioQy2u7p9pEZ/+9v8CzZLKWUJc7If7nyBU5pkFJWTFgdX AA8bAFLu5AxKO08S2xc4qF9XOXOlblHwUbD9Nh8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:52 2025 by rpki-client