$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer File: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (raw, json) Hash identifier: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY= Subject key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584863C35E63ACB3AF64291CF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Manifest: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft caRepository: rsync://rpki.roa.net/rrdp/xTom/52/ Notify URL: https://rpki.roa.net/rrdp/notification.xml Certificate not before: Tue 31 Dec 2024 13:45:33 +0000 Certificate not after: Mon 05 Apr 2027 12:45:33 +0000 Subordinate resources: AS: 32727 IP: 23.144.160.0/24 IP: 2604:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:c3:5e:63:ac:b3:af:64:29:1c:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Dec 31 13:45:33 2024 GMT Not After : Apr 5 12:45:33 2027 GMT Subject: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:14:75:7f:4c:90:50:67:3b:c2:91:ca:c2: 81:c2:8f:f1:70:07:32:2a:3c:9a:58:60:9c:47:5c: 5d:dc:d3:0c:5e:73:26:7e:3d:5e:4a:a2:e3:73:64: 03:1a:a6:1e:bc:f8:18:8b:e0:66:a0:c8:56:f4:b9: 55:98:82:6c:81:3d:b2:d6:30:26:a0:cd:2c:84:51: 2d:56:b2:49:26:1e:2a:da:58:c4:6c:67:f2:1e:52: fb:1e:22:79:87:26:68:1e:7a:08:a7:c5:da:a1:23: b3:6f:78:3d:94:0b:21:10:a8:4a:1b:b5:9d:5d:25: 97:7a:df:39:b9:e6:d5:d3:2c:9c:80:33:7d:d1:ee: 18:cf:8f:6f:e0:85:f5:9f:e6:3b:28:ea:8c:53:f5: cd:89:cc:71:9a:05:ac:5f:e1:f4:f6:66:c2:53:c7: ec:12:c0:30:40:74:80:bc:ee:10:ab:10:a3:18:11: b0:4e:19:22:d6:45:0e:f1:e3:1c:68:b3:60:4f:ec: 99:6a:05:a9:2a:4a:fd:52:02:06:1d:ca:c2:d7:76: 76:75:4d:08:70:f9:08:99:c2:84:8d:31:ce:fd:88: 01:ee:61:f7:45:d6:a5:07:1f:bf:78:8d:cb:67:bf: 66:4d:ea:a4:03:8e:80:fb:c7:04:33:b8:6e:4b:95: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Subject Information Access: CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/52/ RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: 23.144.160.0/24 IPv6: 2604:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32727 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:2e:ce:a2:4c:68:41:82:a2:77:3f:74:17:b3:a4:5a:3a: 94:01:3f:f8:1d:9c:52:b9:4b:d1:f8:1a:af:74:68:0a:b5:71: b5:b3:56:2c:39:5b:50:a7:60:e0:24:72:b9:2f:6a:d3:a3:0f: 88:91:80:ca:83:11:54:13:a8:f9:cc:0c:c5:6c:d6:58:b7:36: 0d:d8:86:b9:15:db:99:3d:f5:8a:30:dd:53:06:09:e4:85:d3: f1:b0:72:7e:55:52:de:a9:8c:c4:56:70:6a:12:45:a8:d6:df: f4:b1:2a:b4:e8:41:cd:a4:f8:d6:20:e9:13:6f:ac:b1:a2:ac: 5d:13:16:13:08:d6:d7:ef:d0:f5:a8:1d:a7:8f:f0:72:cd:7b: 85:ee:f8:a9:40:e0:11:43:fc:dc:f3:36:b9:52:ec:1f:20:1b: d1:5b:72:ab:f7:38:0e:70:98:c2:9c:ba:57:45:ef:dd:f3:3f: f6:f2:5a:3f:0e:ba:f3:d6:21:02:7c:e3:cf:41:e7:6f:60:4a: 9e:92:bd:18:67:45:eb:02:31:2a:76:22:e7:99:05:e2:e8:12: 2f:68:3b:db:de:f4:01:91:f4:55:91:77:29:99:50:5e:e5:ad: 27:72:8f:ff:89:d5:4a:d3:fb:fb:09:a0:99:fc:25:ed:b2:8f: ba:73:92:da -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEhjw15jrLOvZCkc9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI0MTIzMTEzNDUzM1oXDTI3MDQwNTEyNDUzM1owPTE7MDkGA1UEAxMy MGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3NzFkOWVlMTMwNDU1OGZk YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6RR1f0yQUGc7wpHK woHCj/FwBzIqPJpYYJxHXF3c0wxecyZ+PV5KouNzZAMaph68+BiL4GagyFb0uVWY gmyBPbLWMCagzSyEUS1WskkmHiraWMRsZ/IeUvseInmHJmgeeginxdqhI7NveD2U CyEQqEobtZ1dJZd63zm55tXTLJyAM33R7hjPj2/ghfWf5jso6oxT9c2JzHGaBaxf 4fT2ZsJTx+wSwDBAdIC87hCrEKMYEbBOGSLWRQ7x4xxos2BP7JlqBakqSv1SAgYd ysLXdnZ1TQhw+QiZwoSNMc79iAHuYfdF1qUHH794jctnv2ZN6qQDjoD7xwQzuG5L lbYFAgMBAAGjggN/MIIDezAdBgNVHQ4EFgQUCdKp2o8GX5lZrpzLBd/VCyOovvkw gdQGCCsGAQUFBwELBIHHMIHEMC4GCCsGAQUFBzAFhiJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTIvMFoGCCsGAQUFBzAKhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1 MEIyM0E4QkVGOS5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnBraS5yb2EubmV0 L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8E gdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1 N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQw ZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00NWJk LWFjMWQtZDc3YjNjNWMzNzgwLmNybDAfBgNVHSMEGDAWgBS8FXviubcOrWgGpbao nwPU4uBGTzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggr BgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYt NDViZC1hYzFkLWQ3N2IzYzVjMzc4MC5jZXIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAAXkKAwDQQCAAIwBwMFACYE60AwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICf9cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAO4guzqJMaEGConc/dBezpFo6lAE/+B2cUrlL0fgar3Ro CrVxtbNWLDlbUKdg4CRyuS9q06MPiJGAyoMRVBOo+cwMxWzWWLc2DdiGuRXbmT31 ijDdUwYJ5IXT8bByflVS3qmMxFZwahJFqNbf9LEqtOhBzaT41iDpE2+ssaKsXRMW EwjW1+/Q9agdp4/wcs17he74qUDgEUP83PM2uVLsHyAb0Vtyq/c4DnCYwpy6V0Xv 3fM/9vJaPw6689YhAnzjz0Hnb2BKnpK9GGdF6wIxKnYi55kF4ugSL2g72970AZH0 VZF3KZlQXuWtJ3KP/4nVStP7+wmgmfwl7bKPunOS2g== -----END CERTIFICATE-----Generated at Tue Apr 8 19:01:21 2025 by rpki-client