$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer File: 26dda032-79f9-423e-9994-33fdb1cd44db.cer (raw, json) Hash identifier: wQwgFAsL+8vgLW69jaJRtMOpkMCHMfDP9BKRlbWRrq0= Subject key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849604C81965830AC92805EF980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 00:45:34 +0000 Certificate not after: Mon 05 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 53779 IP: 162.253.0.0/21 IP: 2620:104:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:4c:81:96:58:30:ac:92:80:5e:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 1 00:45:34 2025 GMT Not After : Jul 5 00:45:34 2027 GMT Subject: CN=26dda032-79f9-423e-9994-33fdb1cd44db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:c6:a3:de:03:14:34:44:9d:f1:84:ae:96: 8d:50:85:3b:45:2b:eb:0b:ac:e8:52:af:af:00:e3: 2a:8f:c1:ce:9c:b6:be:2f:cc:08:93:b3:a4:a4:87: 5b:8f:17:8b:c4:66:d0:75:8a:e1:41:9d:de:4b:f1: 96:e4:e1:a5:89:fe:d4:73:92:cb:f3:7e:5d:63:10: d4:b5:95:d6:fc:d1:89:66:7f:e2:a4:cf:56:ec:4f: 94:59:b3:63:24:ae:91:20:a6:46:46:f4:af:39:5b: 61:e5:90:97:d4:2e:6a:1f:8f:bc:dd:e6:9c:0d:00: ab:ea:7d:6d:0e:88:7b:77:42:ed:9f:af:32:2c:ba: a2:72:04:a6:72:38:eb:c5:c6:8e:34:db:0a:f3:d8: ae:21:0f:6a:c1:a7:ce:b7:42:27:bd:49:28:06:6c: 52:67:05:d2:42:18:ef:8e:d9:9c:76:f3:cd:d8:d5: 18:a8:47:4f:e7:05:cb:f2:c1:3a:e3:66:27:a3:47: d8:a8:2d:e1:d9:d7:c6:59:59:a4:bb:4c:4b:0e:8c: b6:1e:d1:9a:09:a0:17:c0:8f:47:36:eb:30:83:c5: cb:13:6f:08:ce:e1:e1:14:ee:25:28:46:bd:98:bb: dd:00:db:56:e5:5c:bd:dc:0b:66:29:29:f5:16:6a: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.253.0.0/21 IPv6: 2620:104:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53779 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4a:a3:a4:13:8b:97:bb:1b:de:57:12:0a:e8:15:91:88:10: 6c:2a:b6:3c:2d:86:be:46:5e:69:20:7b:64:04:7f:ca:dc:8c: 77:34:60:b3:04:3a:7a:9d:dc:71:d9:0c:19:57:ea:4e:42:e8: 81:71:68:33:b7:be:08:5f:13:a7:bd:ee:23:05:59:a4:ac:7b: 38:64:4b:d4:34:c3:e0:c1:79:3a:3f:1a:46:11:84:d4:ea:7d: ad:2a:f1:e8:9e:17:19:ab:00:47:65:63:3e:63:d7:5b:9e:3c: 37:da:f6:30:3a:23:e8:28:cb:aa:ff:68:e8:79:48:05:9a:15: 30:d5:80:93:fa:2d:0c:a3:4c:fb:70:af:5b:99:e6:14:4b:92: 00:b3:dc:99:20:1b:bc:c6:5b:e5:31:a9:aa:a2:34:64:7d:a4: f5:72:aa:7d:28:1e:fd:1f:5d:f5:19:dd:9e:87:8a:50:1a:f9: fe:64:e9:96:a2:7b:40:c1:b9:63:5b:0b:1e:f2:76:c6:a8:40: d5:dd:84:53:c8:01:35:f2:38:e8:f6:12:df:47:30:6c:e4:47: 02:c7:c0:38:54:a6:05:d3:d5:ee:f6:22:39:61:80:de:d8:c1: 76:15:05:fd:a3:2a:7e:88:f4:ea:da:e1:2c:09:9d:1c:84:a4: 06:6f:bf:c6 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWElgTIGWWDCskoBe+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk MjZkZGEwMzItNzlmOS00MjNlLTk5OTQtMzNmZGIxY2Q0NGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhibGo94DFDREnfGErpaNUIU7RSvrC6zoUq+v AOMqj8HOnLa+L8wIk7OkpIdbjxeLxGbQdYrhQZ3eS/GW5OGlif7Uc5LL835dYxDU tZXW/NGJZn/ipM9W7E+UWbNjJK6RIKZGRvSvOVth5ZCX1C5qH4+83eacDQCr6n1t Doh7d0Ltn68yLLqicgSmcjjrxcaONNsK89iuIQ9qwafOt0InvUkoBmxSZwXSQhjv jtmcdvPN2NUYqEdP5wXL8sE642Yno0fYqC3h2dfGWVmku0xLDoy2HtGaCaAXwI9H Nuswg8XLE28IzuHhFO4lKEa9mLvdANtW5Vy93AtmKSn1FmpNewIDAQABo4IELDCC BCgwHQYDVR0OBBYEFJTsRzUsMexEQf/h4dd6cQVPFR20MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y NmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFjZDQ0ZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzI2ZGRhMDMyLTc5ZjktNDIzZS05 OTk0LTMzZmRiMWNkNDRkYi8yNmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFj ZDQ0ZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAOi/QAwDwQCAAIwCQMHBCYgAQRgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA0hMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkUqjpBOLl7sb3lcSCugVkYgQ bCq2PC2GvkZeaSB7ZAR/ytyMdzRgswQ6ep3ccdkMGVfqTkLogXFoM7e+CF8Tp73u IwVZpKx7OGRL1DTD4MF5Oj8aRhGE1Op9rSrx6J4XGasAR2VjPmPXW548N9r2MDoj 6CjLqv9o6HlIBZoVMNWAk/otDKNM+3CvW5nmFEuSALPcmSAbvMZb5TGpqqI0ZH2k 9XKqfSge/R9d9RndnoeKUBr5/mTplqJ7QMG5Y1sLHvJ2xqhA1d2EU8gBNfI46PYS 30cwbORHAsfAOFSmBdPV7vYiOWGA3tjBdhUF/aMqfoj06trhLAmdHISkBm+/xg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:24 2025 by rpki-client