$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer File: 0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer (raw, json) Hash identifier: 1A7R2VNtA1ryMLLW2+Dw77IKcj6YXC6yPnQUUYIniPA= Subject key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584883DE3981471179A457EBB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: AS: 393529 IP: 160.129.0.0/16 IP: 2620:4e:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:39:81:47:11:79:a4:57:eb:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:81:6f:d5:b0:22:84:94:c3:18:b4:bc:8d:59: 48:49:ef:bb:2a:07:1a:b0:b3:21:ca:f7:20:80:ed: 54:74:74:7a:f4:79:bf:23:9d:bc:34:13:fd:71:b9: 67:54:00:a5:63:fa:04:08:c3:da:62:20:a9:38:05: fd:10:33:33:f4:16:d0:71:48:23:84:ce:c3:dd:0e: e9:02:71:07:88:b1:13:d1:c5:62:e4:ca:82:dd:da: 20:85:fd:ea:11:66:3c:ae:08:ac:fa:71:33:c4:92: 03:2b:43:9f:6c:59:b6:c1:6f:99:d5:7c:50:4e:9c: 4b:8b:38:dd:55:08:41:0b:e2:f7:49:7f:a4:72:c0: c9:89:c4:36:39:a4:19:fd:31:9d:14:c4:41:85:fe: e1:80:27:37:ab:79:bc:47:81:c8:fc:67:de:26:ed: de:e6:44:2f:77:f1:08:ec:3c:26:5b:56:e4:89:5e: 1b:a8:a9:6c:e4:7b:ee:f6:87:02:27:77:2d:17:33: 66:8f:43:99:48:eb:e3:51:86:03:7f:7f:c4:61:f1: b8:83:ee:6e:ba:d8:fa:00:82:00:f8:b7:1c:25:e8: e5:4c:4f:6c:61:88:14:88:45:66:ea:07:42:09:5c: 86:1a:a9:b6:3b:f9:6c:fa:0d:b1:5b:6b:9d:b9:9a: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 160.129.0.0/16 IPv6: 2620:4e:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393529 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7a:d3:c1:5b:a3:78:f6:0c:6e:23:13:d7:1c:e1:e3:74:36: 75:fd:b5:0e:b3:95:4a:e1:8b:7d:23:00:68:39:84:c6:ee:22: 70:71:db:40:df:a2:62:ab:71:63:f3:6c:30:a6:71:2a:70:fa: 34:73:96:21:15:10:3c:ac:35:27:bf:96:a2:0d:86:3f:53:6b: e9:e4:45:d7:57:a2:80:a7:71:d9:62:db:84:69:01:f0:78:f3: fc:6c:39:e5:ac:91:ad:f4:07:8a:2c:d2:b7:64:82:80:94:93: 9f:94:3b:86:3b:f3:de:84:36:b3:55:ca:f3:cf:8f:dc:c6:5e: 5b:a4:d5:4e:7e:a2:50:c1:4a:90:ae:18:88:70:bd:92:17:3b: e6:59:09:35:fe:6d:5b:23:ed:13:2b:85:41:a2:ac:2b:52:21: 7e:3d:80:22:12:59:52:9d:e2:4a:0e:01:8d:6a:3f:bb:40:78: 59:16:f1:e2:7c:32:40:c0:8c:01:24:a7:2f:fb:1b:e8:6c:f2: 8b:fc:51:67:76:28:0b:f2:c7:3c:5e:39:87:eb:d5:d8:99:dd: 5e:d6:bf:ce:55:56:57:88:90:b3:a1:cd:8a:f4:eb:e8:94:ad: 85:9f:50:e0:b6:80:24:57:db:74:f3:00:a8:9b:3b:cb:9b:ef: ca:c2:d6:7e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEiD3jmBRxF5pFfrsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk MGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2JhMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIFv1bAihJTDGLS8jVlISe+7KgcasLMhyvcg gO1UdHR69Hm/I528NBP9cblnVAClY/oECMPaYiCpOAX9EDMz9BbQcUgjhM7D3Q7p AnEHiLET0cVi5MqC3doghf3qEWY8rgis+nEzxJIDK0OfbFm2wW+Z1XxQTpxLizjd VQhBC+L3SX+kcsDJicQ2OaQZ/TGdFMRBhf7hgCc3q3m8R4HI/GfeJu3e5kQvd/EI 7DwmW1bkiV4bqKls5Hvu9ocCJ3ctFzNmj0OZSOvjUYYDf3/EYfG4g+5uutj6AIIA +LccJejlTE9sYYgUiEVm6gdCCVyGGqm2O/ls+g2xW2uduZqdfQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMphm+ispDoH0L9qX1uqP9Qg6VrWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w ZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBkMWZjYTc4LTlkOTgtNDU1OS1i ZDUxLTgwYTZjNDdiYTAxZS8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3 YmEwMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCggTAPBAIAAjAJAwcAJiAATqAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYBOTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQetPBW6N49gxuIxPXHOHjdDZ1 /bUOs5VK4Yt9IwBoOYTG7iJwcdtA36Jiq3Fj82wwpnEqcPo0c5YhFRA8rDUnv5ai DYY/U2vp5EXXV6KAp3HZYtuEaQHwePP8bDnlrJGt9AeKLNK3ZIKAlJOflDuGO/Pe hDazVcrzz4/cxl5bpNVOfqJQwUqQrhiIcL2SFzvmWQk1/m1bI+0TK4VBoqwrUiF+ PYAiEllSneJKDgGNaj+7QHhZFvHifDJAwIwBJKcv+xvobPKL/FFndigL8sc8XjmH 69XYmd1e1r/OVVZXiJCzoc2K9OvolK2Fn1DgtoAkV9t08wComzvLm+/KwtZ+ -----END CERTIFICATE-----Generated at Sat Feb 8 13:55:44 2025 by rpki-client