$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer File: 17ca7b45-83e1-4a1c-8713-317adea0e270.cer (raw, json) Hash identifier: PQxBTfzBPHJ77fEVbkFFVxqsiYYDP+zQBgXCCLQ+xmI= Subject key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584867F365DE6E28C707012C0540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jan 2025 01:45:33 +0000 Certificate not after: Wed 07 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 400839 IP: 23.144.82.0/24 IP: 2607:b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:f3:65:de:6e:28:c7:07:01:2c:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 2 01:45:33 2025 GMT Not After : Apr 7 00:45:33 2027 GMT Subject: CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:a5:6b:76:1b:11:e4:81:04:55:ef:23:ae: 26:1b:00:8c:48:7b:cb:7f:f5:de:95:91:55:51:f6: 3d:13:a4:6d:f1:7f:e8:27:c0:54:49:f2:91:0d:fe: 14:91:5c:b7:b5:f1:c6:ff:49:ab:c3:71:55:a5:45: d9:56:cc:da:9b:1f:f4:a6:e6:71:57:cb:2f:2c:d2: de:1b:c8:57:f0:84:2a:9b:26:7c:d5:7f:22:42:38: 22:62:00:7d:ac:30:a9:a0:f2:50:66:46:1f:e6:d2: eb:1f:fb:26:6e:1a:be:ca:a8:51:f9:55:84:37:60: 2a:c6:00:27:34:2e:e7:16:d0:ff:6c:c5:62:98:ff: 34:de:90:19:9b:2f:8b:99:34:0e:f6:3a:8f:da:9c: b3:85:a0:79:46:7a:35:bd:fe:e0:73:23:82:b3:9c: 5c:0e:6c:3e:26:1a:e9:62:45:5e:19:23:8c:71:8e: 29:76:a6:f4:ca:6c:ad:18:57:30:0d:ee:5f:78:e2: 55:59:61:3e:ce:f0:dc:fd:9d:1f:e5:0f:82:0a:8a: da:41:d4:ea:75:63:1d:a9:ee:22:43:a7:00:68:1b: 64:07:8f:2d:85:5d:32:e3:0c:63:ce:d5:a5:83:64: c1:35:23:89:32:43:15:4e:58:29:78:b0:31:6a:af: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.144.82.0/24 IPv6: 2607:b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400839 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5a:fc:bf:65:fc:2a:1b:b0:53:22:3e:da:b0:7c:8e:b3:4c: 06:35:03:6c:2a:c9:f3:83:bc:b7:03:43:36:da:0c:e9:8e:69: 8d:b7:57:cb:ff:91:b6:af:02:bc:4c:1d:dd:84:16:ed:4e:94: 0c:16:ff:8a:8f:09:ef:12:2e:66:21:c7:1f:80:7c:1d:d7:19: 95:2b:14:48:01:af:6c:84:c8:25:f5:75:21:3b:db:00:f7:ef: ad:8f:2d:12:9d:64:00:e0:36:13:3b:4f:05:e9:29:02:df:bc: 0d:a4:0f:7c:5b:20:2c:da:30:c1:66:af:9c:db:13:eb:8c:72: 4d:85:f8:1d:37:65:86:7a:8f:31:6c:7c:ff:ce:ce:93:b1:66: 6b:3d:d3:d0:08:5d:15:09:ec:f8:ff:c7:03:e4:b5:e3:fc:d7: cc:b1:5b:f1:c3:98:a1:59:ab:c5:dd:fa:7b:f1:29:31:40:bc: 67:fb:6f:05:19:b3:23:c8:55:ee:67:b7:ed:30:db:1a:4d:f6: 48:e9:aa:17:46:14:78:6e:04:4d:8a:83:bf:82:b7:56:00:2f: 31:35:62:1d:11:7b:8a:fb:b5:40:d3:7c:95:92:37:9e:21:54: c1:d7:3a:99:8d:48:cd:09:a3:b2:ae:78:f1:31:de:a8:5c:53: a2:69:b0:3f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEhn82XebijHBwEsBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwMjAxNDUzM1oXDTI3MDQwNzAwNDUzM1owLzEtMCsGA1UEAxMk MTdjYTdiNDUtODNlMS00YTFjLTg3MTMtMzE3YWRlYTBlMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9yla3YbEeSBBFXvI64mGwCMSHvLf/XelZFV UfY9E6Rt8X/oJ8BUSfKRDf4UkVy3tfHG/0mrw3FVpUXZVszamx/0puZxV8svLNLe G8hX8IQqmyZ81X8iQjgiYgB9rDCpoPJQZkYf5tLrH/smbhq+yqhR+VWEN2AqxgAn NC7nFtD/bMVimP803pAZmy+LmTQO9jqP2pyzhaB5Rno1vf7gcyOCs5xcDmw+Jhrp YkVeGSOMcY4pdqb0ymytGFcwDe5feOJVWWE+zvDc/Z0f5Q+CCoraQdTqdWMdqe4i Q6cAaBtkB48thV0y4wxjztWlg2TBNSOJMkMVTlgpeLAxaq8eWQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFF2mHN5sYP4WtTxvX5jfkcHXZEDlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x N2NhN2I0NS04M2UxLTRhMWMtODcxMy0zMTdhZGVhMGUyNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE3Y2E3YjQ1LTgzZTEtNGExYy04 NzEzLTMxN2FkZWEwZTI3MC8xN2NhN2I0NS04M2UxLTRhMWMtODcxMy0zMTdhZGVh MGUyNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXkFIwDQQCAAIwBwMFACYHC0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh3HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACFa/L9l/CobsFMiPtqwfI6zTAY1 A2wqyfODvLcDQzbaDOmOaY23V8v/kbavArxMHd2EFu1OlAwW/4qPCe8SLmYhxx+A fB3XGZUrFEgBr2yEyCX1dSE72wD3762PLRKdZADgNhM7TwXpKQLfvA2kD3xbICza MMFmr5zbE+uMck2F+B03ZYZ6jzFsfP/OzpOxZms909AIXRUJ7Pj/xwPkteP818yx W/HDmKFZq8Xd+nvxKTFAvGf7bwUZsyPIVe5nt+0w2xpN9kjpqhdGFHhuBE2Kg7+C t1YALzE1Yh0Re4r7tUDTfJWSN54hVMHXOpmNSM0Jo7KuePEx3qhcU6JpsD8= -----END CERTIFICATE-----Generated at Sun Feb 16 06:11:23 2025 by rpki-client