$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267.cer File: 41ec972f-711e-4391-a3ef-92a389a34267.cer (raw, json) Hash identifier: lkiytabXv38oratgE+zR62RGtpuwtb17H84blqDC6qI= Subject key identifier: F5:2E:8B:7B:76:F4:89:42:3F:7D:7D:06:04:68:60:D3:1C:9B:33:B6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858483D33B9D2988FE9025A0D4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/41ec972f-711e-4391-a3ef-92a389a34267.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Dec 2024 18:15:25 +0000 Certificate not after: Mon 17 Aug 2026 00:45:19 +0000 Subordinate resources: AS: 394082 AS: 400177 AS: 400522 IP: 23.146.200.0/24 IP: 23.181.176.0/24 IP: 66.118.4.0/22 IP: 2606:5440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3d:33:b9:d2:98:8f:e9:02:5a:0d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 17 18:15:25 2024 GMT Not After : Aug 17 00:45:19 2026 GMT Subject: CN=41ec972f-711e-4391-a3ef-92a389a34267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:6b:de:b0:b5:5f:89:be:24:a6:b7:35:53: 92:76:6c:95:b9:4f:44:7c:ba:51:ea:1f:a7:08:03: 13:8f:a9:92:33:1d:ab:da:b2:8f:65:25:6d:24:3a: c2:e9:4c:9a:54:21:ee:72:66:b9:63:10:65:e2:a7: 21:16:8f:0f:c5:6e:14:70:cb:ec:df:d3:96:0d:c5: df:a5:98:4a:f2:60:79:04:dd:10:98:3f:43:3c:27: 8c:bd:81:45:75:b4:85:fb:ca:7f:4b:6d:93:da:85: 47:e1:ca:5e:58:ea:bc:df:83:fd:53:d4:8c:84:3f: 36:ab:3a:46:b9:d4:36:d2:8a:9c:b0:a7:3a:50:3c: 79:f9:c4:32:27:e2:26:4c:91:fe:b7:c6:c3:53:be: 77:bc:4c:8a:ea:da:05:dc:ff:40:3f:9b:47:fa:64: b4:9b:2a:41:ea:b0:4c:c0:3a:10:0c:1f:22:7f:9b: 18:5d:45:f4:ca:6a:44:8c:39:d3:c6:08:d6:7d:f0: 63:db:4b:92:d4:ca:c8:55:9a:2f:35:dd:2a:18:42: 9e:b3:93:0a:3e:46:b7:54:54:9c:65:d0:0b:4f:94: f4:0f:8b:d3:55:62:ea:20:8d:51:28:9e:37:94:1f: 8a:bc:6f:39:fb:c6:ad:9d:5a:78:df:3a:77:5c:50: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2E:8B:7B:76:F4:89:42:3F:7D:7D:06:04:68:60:D3:1C:9B:33:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/41ec972f-711e-4391-a3ef-92a389a34267.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.146.200.0/24 23.181.176.0/24 66.118.4.0/22 IPv6: 2606:5440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394082 400177 400522 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:40:8f:c8:39:08:2f:f7:3d:6e:3c:c9:cb:bb:90:1a:d4:c6: 18:f2:36:2d:a0:06:eb:ab:33:cf:3e:18:f4:ad:fd:54:25:dd: 5c:e8:23:3d:f9:1c:46:be:cd:95:36:08:93:12:f0:f4:8b:97: f2:cb:4b:e8:0b:35:9a:5d:18:3c:de:23:8f:98:e5:d7:e6:c4: 6c:8c:8b:65:5b:7d:3f:70:57:89:73:94:3f:fa:31:5c:af:65: b3:e2:65:0c:8d:f0:cf:70:68:41:71:cc:f2:d6:7d:2c:70:38: 74:c5:7a:65:b9:07:1a:25:47:d6:87:64:68:1a:0a:5b:da:30: 20:87:8c:c0:1d:1e:54:a6:52:a9:7b:c7:5b:8c:8d:c5:a7:1e: 19:4e:fd:bf:00:a0:7f:1e:16:f7:63:bc:1c:8c:28:d7:60:3d: df:e9:f5:39:b3:80:6d:9f:fc:b0:5c:ce:86:81:6c:5f:8d:28: 8d:aa:3d:53:2d:6d:6a:0c:f1:1e:47:88:0c:f9:1b:5b:4a:21: 7a:99:e3:6e:75:2e:68:98:a8:69:0b:8d:b1:c0:7f:f4:c2:6d: c6:89:27:10:35:d4:ce:6a:55:b2:00:ee:41:4d:bb:e8:0b:fe: de:a7:be:9b:68:59:f8:6d:18:22:40:e0:0f:c3:52:ca:f2:fe: 12:ab:0d:95 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEg9M7nSmI/pAloNSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIxNzE4MTUyNVoXDTI2MDgxNzAwNDUxOVowLzEtMCsGA1UEAxMk NDFlYzk3MmYtNzExZS00MzkxLWEzZWYtOTJhMzg5YTM0MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFFr3rC1X4m+JKa3NVOSdmyVuU9EfLpR6h+n CAMTj6mSMx2r2rKPZSVtJDrC6UyaVCHucma5YxBl4qchFo8PxW4UcMvs39OWDcXf pZhK8mB5BN0QmD9DPCeMvYFFdbSF+8p/S22T2oVH4cpeWOq834P9U9SMhD82qzpG udQ20oqcsKc6UDx5+cQyJ+ImTJH+t8bDU753vEyK6toF3P9AP5tH+mS0mypB6rBM wDoQDB8if5sYXUX0ympEjDnTxgjWffBj20uS1MrIVZovNd0qGEKes5MKPka3VFSc ZdALT5T0D4vTVWLqII1RKJ43lB+KvG85+8atnVp43zp3XFDz8wIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFPUui3t29IlCP319BgRoYNMcmzO2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 MWVjOTcyZi03MTFlLTQzOTEtYTNlZi05MmEzODlhMzQyNjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQxZWM5NzJmLTcxMWUtNDM5MS1h M2VmLTkyYTM4OWEzNDI2Ny80MWVjOTcyZi03MTFlLTQzOTEtYTNlZi05MmEzODlh MzQyNjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXksgDBAAXtbADBAJCdgQwDQQCAAIwBwMFACYG VEAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDBgNiAgMGGzECAwYcijBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBSQI/IOQgv9z1uPMnLu5Aa1MYY8jYtoAbrqzPPPhj0rf1UJd1c6CM9+RxGvs2V NgiTEvD0i5fyy0voCzWaXRg83iOPmOXX5sRsjItlW30/cFeJc5Q/+jFcr2Wz4mUM jfDPcGhBcczy1n0scDh0xXpluQcaJUfWh2RoGgpb2jAgh4zAHR5UplKpe8dbjI3F px4ZTv2/AKB/Hhb3Y7wcjCjXYD3f6fU5s4Btn/ywXM6GgWxfjSiNqj1TLW1qDPEe R4gM+RtbSiF6meNudS5omKhpC42xwH/0wm3GiScQNdTOalWyAO5BTbvoC/7ep76b aFn4bRgiQOAPw1LK8v4Sqw2V -----END CERTIFICATE-----Generated at Sun Apr 27 23:03:45 2025 by rpki-client