$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer File: 02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer (raw, json) Hash identifier: 7NgNWOL4l6I7JM2qYgjqIdogxUTJi9BJLmk0LWCjcHU= Subject key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Authority key identifier: AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 Certificate issuer: /CN=39065acc-beed-4115-bc6c-63de232f2a04 Certificate serial: 010D0C9F43285848B8E93BA59E9E364960EC14E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer Manifest: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft caRepository: rsync://repo.kagl.me/rpki/KeatonAGLair/0/ Notify URL: https://repo.kagl.me/rpki/notification.xml Certificate not before: Fri 31 Jan 2025 01:45:33 +0000 Certificate not after: Thu 06 May 2027 00:45:33 +0000 Subordinate resources: AS: 970 AS: 21957 IP: 104.37.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:e9:3b:a5:9e:9e:36:49:60:ec:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39065acc-beed-4115-bc6c-63de232f2a04 Validity Not Before: Jan 31 01:45:33 2025 GMT Not After : May 6 00:45:33 2027 GMT Subject: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:10:9b:88:cc:e4:1a:60:25:18:e2:cd:9a: 00:dc:7a:b1:13:07:a8:e3:ff:ec:51:9b:ae:fd:b7: 35:df:85:0a:9d:6b:98:74:1f:25:04:04:0f:41:0f: 20:3b:fa:8c:1c:0e:86:6a:eb:d8:0b:b5:8e:ec:61: 4c:8c:cd:01:38:b3:1f:18:4f:fb:a9:15:75:96:08: 5d:f3:c5:e3:61:ae:cb:41:62:db:7d:d2:a9:4e:f1: c8:67:82:df:89:02:29:d6:0f:a0:28:d4:2a:45:47: 50:b3:d1:fe:6d:b3:2a:dd:8e:46:33:a3:16:b2:55: b8:40:6c:5e:98:f8:df:49:88:91:1c:4b:ae:90:4f: f8:de:0d:f2:df:e2:fd:d2:1a:42:ec:7f:37:94:67: a0:d9:bf:52:90:5d:e4:0b:da:86:44:05:94:07:37: 5d:eb:38:34:7e:91:42:a6:85:7b:a3:75:2b:d1:e8: 41:af:c1:f1:56:ea:36:cb:68:d0:57:0d:0e:92:87: 48:19:61:35:23:2e:3e:5d:03:ee:70:61:78:1f:c2: 5c:e2:a3:37:29:9e:d1:60:28:b8:23:01:a3:ab:c1: 08:3b:79:67:fe:79:b0:25:6b:70:36:4f:0b:6e:0d: 96:07:66:41:b6:d0:bc:42:91:95:e7:e1:af:30:70: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Subject Information Access: CA Repository - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/ RPKI Manifest - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft RPKI Notify - URI:https://repo.kagl.me/rpki/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl X509v3 Authority Key Identifier: keyid:AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer sbgp-ipAddrBlock: critical IPv4: 104.37.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 970 21957 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:93:fa:9e:6d:9d:fb:c9:6a:61:c8:8e:60:4d:4b:f2:8a:2c: f5:4f:df:22:d1:9e:f7:13:99:70:13:71:77:4d:09:75:e1:73: b4:ff:93:55:38:fa:f0:d8:0d:55:62:71:4f:f4:9a:e8:dd:37: 76:7b:79:8e:71:a8:84:95:d0:6d:c4:9e:19:58:29:0f:65:94: b6:6a:56:85:dd:1f:fc:81:7d:a0:92:64:56:b4:4a:2f:fc:68: c7:59:d3:56:e8:32:96:81:94:94:49:c4:6f:34:4f:6f:be:2b: e6:44:b6:3a:b9:dc:07:b2:68:8a:09:5d:a6:39:3c:f7:21:a3: 0c:4b:e6:1c:94:8a:4f:0e:16:0c:98:76:f9:18:26:5e:bc:02: 1c:39:1b:8e:bb:5c:c4:01:a9:5f:17:76:ba:1e:25:62:fe:4d: 5f:e6:3d:ad:1e:81:8c:5f:31:e0:88:12:fb:88:6f:9c:18:ce: af:9d:e9:73:ae:17:d4:c4:8e:e1:c8:77:29:53:40:1b:ed:96: e4:bc:a2:80:57:b1:ef:f1:c3:54:e3:67:df:34:52:71:d5:a7: 1d:2c:c4:79:ec:28:55:f9:c7:5a:e5:b2:f8:6e:18:75:52:68: 22:64:eb:c8:c4:bb:f5:f2:f8:02:df:af:2c:95:f9:97:1d:8e: 11:7d:d2:64 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUAQ0Mn0MoWEi46Tulnp42SWDsFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwNjVhY2MtYmVlZC00MTE1LWJjNmMtNjNkZTIzMmYy YTA0MB4XDTI1MDEzMTAxNDUzM1oXDTI3MDUwNjAwNDUzM1owPTE7MDkGA1UEAxMy MDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1ODliOTk1NmM1MWUz NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5BCbiMzkGmAlGOLN mgDcerETB6jj/+xRm679tzXfhQqda5h0HyUEBA9BDyA7+owcDoZq69gLtY7sYUyM zQE4sx8YT/upFXWWCF3zxeNhrstBYtt90qlO8chngt+JAinWD6Ao1CpFR1Cz0f5t syrdjkYzoxayVbhAbF6Y+N9JiJEcS66QT/jeDfLf4v3SGkLsfzeUZ6DZv1KQXeQL 2oZEBZQHN13rODR+kUKmhXujdSvR6EGvwfFW6jbLaNBXDQ6Sh0gZYTUjLj5dA+5w YXgfwlziozcpntFgKLgjAaOrwQg7eWf+ebAla3A2TwtuDZYHZkG20LxCkZXn4a8w cJYDAgMBAAGjggOCMIIDfjAdBgNVHQ4EFgQUfsm10iUIwCMcFdq9r1E1mQtmv+0w geIGCCsGAQUFBwELBIHVMIHSMDUGCCsGAQUFBzAFhilyc3luYzovL3JlcG8ua2Fn bC5tZS9ycGtpL0tlYXRvbkFHTGFpci8wLzBhBggrBgEFBQcwCoZVcnN5bmM6Ly9y ZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVEMjI1MDhDMDIz MUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6 Ly9yZXBvLmthZ2wubWUvcnBraS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQF MAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzM5MDY1YWNjLWJlZWQtNDExNS1iYzZjLTYzZGUyMzJmMmEwNC8zOTA2 NWFjYy1iZWVkLTQxMTUtYmM2Yy02M2RlMjMyZjJhMDQuY3JsMB8GA1UdIwQYMBaA FKrKA/MnYHumVR55xd9F3Zg1sUyiMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUH AQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3Jl cG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIx NzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMv MzkwNjVhY2MtYmVlZC00MTE1LWJjNmMtNjNkZTIzMmYyYTA0LmNlcjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAmglKDAdBggrBgEFBQcBCAEB/wQOMAygCjAI AgIDygICVcUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEACJP6nm2d+8lqYciOYE1L8oos9U/fItGe9xOZcBNx d00JdeFztP+TVTj68NgNVWJxT/Sa6N03dnt5jnGohJXQbcSeGVgpD2WUtmpWhd0f /IF9oJJkVrRKL/xox1nTVugyloGUlEnEbzRPb74r5kS2OrncB7Joigldpjk89yGj DEvmHJSKTw4WDJh2+RgmXrwCHDkbjrtcxAGpXxd2uh4lYv5NX+Y9rR6BjF8x4IgS +4hvnBjOr53pc64X1MSO4ch3KVNAG+2W5LyigFex7/HDVONn3zRScdWnHSzEeewo VfnHWuWy+G4YdVJoImTryMS79fL4At+vLJX5lx2OEX3SZA== -----END CERTIFICATE-----Generated at Thu Apr 3 07:26:13 2025 by rpki-client