$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer File: 907e0105-3516-47a0-a9c2-5f0b77661cb1.cer (raw, json) Hash identifier: Jk+vvpEhtvAd7f7w+53RdFPHMo3DB2dclwF+q/VAdyM= Subject key identifier: 38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848F389999900C302F5C7947180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 01:45:33 +0000 Certificate not after: Thu 27 May 2027 00:45:33 +0000 Subordinate resources: IP: 74.120.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:89:99:99:00:c3:02:f5:c7:94:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 21 01:45:33 2025 GMT Not After : May 27 00:45:33 2027 GMT Subject: CN=907e0105-3516-47a0-a9c2-5f0b77661cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:4f:3c:fd:c1:d0:ed:f8:32:80:40:35:73: d3:44:50:39:b4:5d:66:4c:17:bd:73:54:c9:c3:4c: ef:83:f6:3e:9d:ba:bf:43:0e:0e:66:72:85:cc:96: 64:f4:b2:0b:33:ac:d2:a0:8c:6c:a9:5d:48:3b:d5: 0b:aa:74:7d:f6:24:b3:62:b1:14:30:56:4f:1c:b2: b0:d8:72:55:bf:63:a3:c8:9e:4c:64:74:89:a1:25: 17:e5:86:9b:eb:2b:a5:df:c7:b9:0b:fc:c3:6c:3d: 78:c8:e1:26:9b:64:21:4c:37:c9:22:8b:3a:66:d5: bf:78:7e:b3:01:4e:ed:d0:99:45:24:c5:69:7a:f4: ac:82:da:71:34:28:4f:64:ba:02:75:7f:8b:27:29: 25:dd:df:4e:a9:13:10:4e:f6:e3:34:be:aa:6c:5a: 38:53:80:fa:63:d8:db:c3:39:fb:8c:d1:55:1d:1b: 7b:f8:54:9e:87:ad:87:6c:6a:cb:7c:ca:46:b8:7b: e5:cd:84:56:fd:9b:57:4b:84:5e:80:6a:92:89:e8: e0:18:17:89:28:7c:a7:1a:f5:37:50:c3:c5:0b:aa: 9c:b2:ec:91:4b:7d:40:f5:cf:2c:03:79:7d:18:49: a2:7f:69:ec:9a:a2:aa:54:99:d8:4b:fb:d4:51:95: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.120.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6b:d7:8b:57:10:95:56:72:6e:1a:d4:97:12:68:fe:a6:46: 4d:8a:15:ae:88:3b:7a:fe:e3:65:65:af:64:34:0c:c1:d4:f8: d4:41:d7:92:06:5e:f6:be:fb:55:62:04:42:d7:6e:28:80:16: 2f:eb:bf:07:b4:03:19:2b:e1:85:5e:00:58:81:b5:2f:5b:88: e3:e2:a4:a5:12:89:12:29:db:45:db:2e:76:8e:b7:a0:24:de: a7:e4:83:59:e0:29:31:91:a3:ce:dd:31:ce:dc:66:fd:13:1b: 09:4e:a0:b4:a4:34:47:8d:a6:de:ab:d4:8b:1f:74:e4:40:a0: f3:0d:b3:12:d8:e8:4d:44:29:62:cf:f7:7f:20:3c:27:91:62: 6e:36:29:bf:b7:60:ed:07:17:54:2c:01:0c:6c:9b:cb:f9:f8: 3a:a9:4a:c7:c6:e7:01:02:01:ff:f0:e4:06:a0:bd:39:51:a7: e8:1b:72:87:f6:ca:55:00:3d:fe:da:b7:48:00:28:0e:78:94: aa:28:7e:62:7b:85:c8:bf:be:15:37:58:3d:c8:8e:5d:27:d3: c8:61:8c:24:9b:ef:d2:06:83:d7:9c:e0:44:16:fa:e9:b9:35: fc:c1:2b:75:6f:cf:b4:f7:fa:6c:75:14:28:14:ab:08:f2:90: 17:69:f2:2e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjziZmZAMMC9ceUcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIyMTAxNDUzM1oXDTI3MDUyNzAwNDUzM1owLzEtMCsGA1UEAxMk OTA3ZTAxMDUtMzUxNi00N2EwLWE5YzItNWYwYjc3NjYxY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNxPPP3B0O34MoBANXPTRFA5tF1mTBe9c1TJ w0zvg/Y+nbq/Qw4OZnKFzJZk9LILM6zSoIxsqV1IO9ULqnR99iSzYrEUMFZPHLKw 2HJVv2OjyJ5MZHSJoSUX5Yab6yul38e5C/zDbD14yOEmm2QhTDfJIos6ZtW/eH6z AU7t0JlFJMVpevSsgtpxNChPZLoCdX+LJykl3d9OqRMQTvbjNL6qbFo4U4D6Y9jb wzn7jNFVHRt7+FSeh62HbGrLfMpGuHvlzYRW/ZtXS4RegGqSiejgGBeJKHynGvU3 UMPFC6qcsuyRS31A9c8sA3l9GEmif2nsmqKqVJnYS/vUUZXyWwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDinuYrST8dozsqbYHZH6FZgwDg6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 MDdlMDEwNS0zNTE2LTQ3YTAtYTljMi01ZjBiNzc2NjFjYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzkwN2UwMTA1LTM1MTYtNDdhMC1h OWMyLTVmMGI3NzY2MWNiMS85MDdlMDEwNS0zNTE2LTQ3YTAtYTljMi01ZjBiNzc2 NjFjYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKeHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD2vXi1cQlVZybhrUlxJo /qZGTYoVrog7ev7jZWWvZDQMwdT41EHXkgZe9r77VWIEQtduKIAWL+u/B7QDGSvh hV4AWIG1L1uI4+KkpRKJEinbRdsudo63oCTep+SDWeApMZGjzt0xztxm/RMbCU6g tKQ0R42m3qvUix905ECg8w2zEtjoTUQpYs/3fyA8J5FibjYpv7dg7QcXVCwBDGyb y/n4OqlKx8bnAQIB//DkBqC9OVGn6Btyh/bKVQA9/tq3SAAoDniUqih+YnuFyL++ FTdYPciOXSfTyGGMJJvv0gaD15zgRBb66bk1/MErdW/PtPf6bHUUKBSrCPKQF2ny Lg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:23:27 2025 by rpki-client