$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer File: 5a456a73-032d-4675-8f0a-2db7b1e58168.cer (raw, json) Hash identifier: zutNr/38hNiNLvC5PW7W9b6k7OnT3JUYpe/NerjHpGU= Subject key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848DFFECED306363ED9DEBA4700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Feb 2025 01:45:33 +0000 Certificate not after: Thu 20 May 2027 00:45:33 +0000 Subordinate resources: AS: 53594 IP: 198.200.28.0/22 IP: 2606:4ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:fe:ce:d3:06:36:3e:d9:de:ba:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 14 01:45:33 2025 GMT Not After : May 20 00:45:33 2027 GMT Subject: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:c5:f9:b8:53:f6:93:56:bd:d7:5e:2d:97: 39:d7:30:cd:17:f3:b1:88:a7:0d:56:cf:11:3a:91: c9:1f:e3:08:e3:eb:20:96:c9:13:39:0f:13:b8:46: 3b:72:72:ae:dc:63:d0:42:49:e6:e9:ca:6c:c0:2c: 62:75:56:dc:7f:f4:ff:9b:7c:b0:95:61:9e:96:fc: 06:ac:fb:c3:a9:72:aa:62:33:d6:ba:ca:8e:18:cd: 5f:fe:22:73:16:91:c4:67:d3:83:61:5a:ec:3e:b1: 1f:79:14:66:d2:f9:9c:c4:4d:0b:6c:fa:89:b5:49: cb:a0:21:6b:b1:80:1a:a8:50:ae:99:10:f4:68:8f: 20:d7:95:1d:cd:24:ec:5b:8b:24:70:ad:51:ae:b5: 20:4e:d5:2d:e7:79:e4:95:1c:b8:88:2f:b6:e6:b2: 04:96:89:d6:81:c2:e5:65:be:8d:db:05:d2:23:22: af:6d:f5:7a:2d:01:aa:25:a5:f7:9b:a7:e9:20:f8: 44:d4:6c:7d:08:d3:96:cf:04:e1:f6:57:ef:e5:f5: 5e:57:35:4f:4b:e4:ef:2f:ca:e6:b2:25:e4:2c:55: bf:da:d3:c5:1f:5b:65:62:5e:a6:06:74:d2:2f:e2: ad:e8:94:ee:da:00:43:80:0f:8e:8e:c8:34:81:99: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 198.200.28.0/22 IPv6: 2606:4ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53594 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:24:19:31:b3:1b:63:f2:76:ac:0d:ef:70:6e:39:29:d8:4f: 59:22:61:68:7c:6b:56:4d:da:d4:59:b3:c3:79:36:47:ff:05: c0:73:5d:81:e9:ff:ea:52:2f:9c:b6:aa:c5:7f:91:a9:65:83: fe:c2:8d:fd:6f:fd:47:0c:e0:13:2e:b5:b8:11:d7:35:f0:a1: 3a:0c:06:ce:e7:58:fe:ac:91:c8:e5:57:ba:ad:9c:9f:81:ba: 1a:3d:3a:bc:f1:bc:88:8f:13:ce:97:8b:3e:f3:48:27:c0:b3: c3:d2:ab:d6:ab:23:ac:70:f6:f1:99:31:dd:1c:a6:ae:e0:d1: dc:7e:a8:85:9f:ce:62:ff:3a:e6:a7:7a:a1:c1:5d:1c:df:71: 8f:8d:7a:50:ec:26:bb:5f:dd:a9:09:87:ef:9a:b7:e5:75:f0: a5:47:c0:d2:79:c7:e5:8c:32:59:53:71:de:2e:9d:57:90:5f: 4f:d6:24:89:a4:9a:06:d0:7d:76:9e:87:4c:9c:e1:98:27:2b: 2f:ab:de:4f:c7:be:db:e7:18:1c:37:70:b4:57:cc:7b:52:19: 88:bb:6d:e1:41:65:20:d5:6b:2c:f4:5b:c0:1f:fb:c7:f9:ce: 35:4e:7e:f2:d5:37:df:f6:05:55:b7:82:d1:15:08:8b:04:ff: e7:76:98:b7 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjf/s7TBjY+2d66RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIxNDAxNDUzM1oXDTI3MDUyMDAwNDUzM1owLzEtMCsGA1UEAxMk NWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmarF+bhT9pNWvddeLZc51zDNF/OxiKcNVs8R OpHJH+MI4+sglskTOQ8TuEY7cnKu3GPQQknm6cpswCxidVbcf/T/m3ywlWGelvwG rPvDqXKqYjPWusqOGM1f/iJzFpHEZ9ODYVrsPrEfeRRm0vmcxE0LbPqJtUnLoCFr sYAaqFCumRD0aI8g15UdzSTsW4skcK1RrrUgTtUt53nklRy4iC+25rIElonWgcLl Zb6N2wXSIyKvbfV6LQGqJaX3m6fpIPhE1Gx9CNOWzwTh9lfv5fVeVzVPS+TvL8rm siXkLFW/2tPFH1tlYl6mBnTSL+Kt6JTu2gBDgA+Ojsg0gZnVbwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIWfNPU1vtVT3cHvu389SXpGVVfIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVhNDU2YTczLTAzMmQtNDY3NS04 ZjBhLTJkYjdiMWU1ODE2OC81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFl NTgxNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALGyBwwDQQCAAIwBwMFACYGSsAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANFaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADAkGTGzG2PydqwN73BuOSnYT1ki YWh8a1ZN2tRZs8N5Nkf/BcBzXYHp/+pSL5y2qsV/kallg/7Cjf1v/UcM4BMutbgR 1zXwoToMBs7nWP6skcjlV7qtnJ+Buho9OrzxvIiPE86Xiz7zSCfAs8PSq9arI6xw 9vGZMd0cpq7g0dx+qIWfzmL/OuaneqHBXRzfcY+NelDsJrtf3akJh++at+V18KVH wNJ5x+WMMllTcd4unVeQX0/WJImkmgbQfXaeh0yc4ZgnKy+r3k/HvtvnGBw3cLRX zHtSGYi7beFBZSDVayz0W8Af+8f5zjVOfvLVN9/2BVW3gtEVCIsE/+d2mLc= -----END CERTIFICATE-----Generated at Sun May 4 20:12:34 2025 by rpki-client