$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af.cer File: 3ea695da-d92a-47c3-a803-b435c34488af.cer (raw, json) Hash identifier: jAUiIVbK0UyV+5BmipzWeqIGppy9M/31GeULUnvCoe8= Subject key identifier: 31:06:58:D7:CA:C1:02:33:06:C9:27:B6:88:4C:2D:B8:EB:A8:50:81 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848B353DD4DBD564804F2746180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/3ea695da-d92a-47c3-a803-b435c34488af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 01:45:33 +0000 Certificate not after: Tue 04 May 2027 00:45:33 +0000 Subordinate resources: IP: 23.135.40.0/24 IP: 216.9.236.0/22 IP: 2606:c640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:53:dd:4d:bd:56:48:04:f2:74:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 29 01:45:33 2025 GMT Not After : May 4 00:45:33 2027 GMT Subject: CN=3ea695da-d92a-47c3-a803-b435c34488af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:77:f5:04:4d:af:e5:7a:65:e0:b3:53:39: d0:b1:78:e5:45:38:07:a4:dd:2c:12:9e:71:de:1e: 88:97:9f:2f:66:41:9a:5e:bc:4b:11:34:ab:54:4a: 62:28:9d:1c:da:20:19:27:ab:19:fa:56:25:3e:8b: e6:2f:20:69:e7:3b:de:b8:04:a1:b1:cb:cc:33:62: 02:5b:36:51:04:77:79:07:2e:63:78:3c:40:4a:0b: 7b:3f:a8:4e:5b:cb:84:a9:a9:cf:25:e9:d6:8d:31: 4c:b6:99:cf:4b:ab:01:18:04:4f:00:d8:0d:28:79: 54:c1:ca:1a:5e:c8:6f:09:8b:b2:75:b0:c5:8c:a2: 19:64:cb:e5:f9:01:f3:db:b3:19:e0:c8:7e:04:3e: 52:06:cc:e9:69:10:f0:a2:36:97:1f:11:8f:93:9a: 4d:67:f6:ff:3b:55:05:63:21:5f:7b:1f:94:79:a4: 3b:5a:43:4e:9e:5d:b0:96:0c:f8:9a:ec:52:07:dd: 7d:fd:24:15:bf:32:b7:b0:6b:2f:fc:6d:2f:82:06: 1e:36:2c:1d:16:1b:ab:fa:2b:8d:81:60:36:c3:e2: 3e:c5:c2:d8:07:3f:ba:a0:16:d3:cb:99:b8:90:8f: cc:ce:47:a7:40:d5:5a:a0:21:f3:06:18:46:f7:7f: f0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:06:58:D7:CA:C1:02:33:06:C9:27:B6:88:4C:2D:B8:EB:A8:50:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/3ea695da-d92a-47c3-a803-b435c34488af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.135.40.0/24 216.9.236.0/22 IPv6: 2606:c640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0c:e4:d8:73:97:7e:84:bf:d7:d2:7d:1f:28:ed:e9:e6:cc: e4:2e:82:a8:f1:00:56:5b:02:72:58:f8:aa:96:37:0a:8c:a4: 26:35:5a:df:64:ad:fa:23:0b:c6:ce:de:15:44:f7:0d:4c:c2: ff:40:92:13:ed:93:57:89:50:b4:54:27:5f:1f:c7:40:5e:5a: 40:19:16:1e:62:fb:ca:2d:69:cd:c1:9f:35:27:8e:0b:b5:a6: ff:a4:f3:3d:9f:79:38:43:77:2c:d6:84:13:ec:99:0d:0f:68: 20:da:32:b8:0f:14:b2:14:86:60:31:97:6a:2e:97:72:b8:a1: 07:88:e6:62:84:85:36:05:b7:e8:0b:1d:37:5a:a1:c4:0c:9d: b8:a2:4d:28:de:83:16:6c:06:6a:be:c1:c4:a9:c7:6a:20:b8: 7e:89:a4:9a:d8:47:bc:3e:42:7e:6e:d6:19:6d:2b:43:d4:08: e3:59:d5:b6:9e:e9:a4:b2:e8:30:bc:38:84:06:fd:db:ac:f7: d6:b4:b8:bf:79:7e:09:8e:6a:bb:51:9c:c5:27:f6:cb:ae:87: 92:33:17:24:e3:5a:02:7f:8e:3d:0e:87:61:b9:c5:6c:a6:c7: a7:7a:2c:44:4a:a6:4f:40:c7:58:2d:14:8e:0f:29:ae:eb:90: fa:52:3a:9a -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEizU91NvVZIBPJ0YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEyOTAxNDUzM1oXDTI3MDUwNDAwNDUzM1owLzEtMCsGA1UEAxMk M2VhNjk1ZGEtZDkyYS00N2MzLWE4MDMtYjQzNWMzNDQ4OGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytN39QRNr+V6ZeCzUznQsXjlRTgHpN0sEp5x 3h6Il58vZkGaXrxLETSrVEpiKJ0c2iAZJ6sZ+lYlPovmLyBp5zveuAShscvMM2IC WzZRBHd5By5jeDxASgt7P6hOW8uEqanPJenWjTFMtpnPS6sBGARPANgNKHlUwcoa XshvCYuydbDFjKIZZMvl+QHz27MZ4Mh+BD5SBszpaRDwojaXHxGPk5pNZ/b/O1UF YyFfex+UeaQ7WkNOnl2wlgz4muxSB919/SQVvzK3sGsv/G0vggYeNiwdFhur+iuN gWA2w+I+xcLYBz+6oBbTy5m4kI/MzkenQNVaoCHzBhhG93/wLQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFDEGWNfKwQIzBskntohMLbjrqFCBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8z ZWE2OTVkYS1kOTJhLTQ3YzMtYTgwMy1iNDM1YzM0NDg4YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzNlYTY5NWRhLWQ5MmEtNDdjMy1h ODAzLWI0MzVjMzQ0ODhhZi8zZWE2OTVkYS1kOTJhLTQ3YzMtYTgwMy1iNDM1YzM0 NDg4YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXhygDBALYCewwDQQCAAIwBwMFACYGxkAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYgzk2HOXfoS/19J9Hyjt6ebM5C6CqPEAVlsCclj4qpY3CoykJjVa32St +iMLxs7eFUT3DUzC/0CSE+2TV4lQtFQnXx/HQF5aQBkWHmL7yi1pzcGfNSeOC7Wm /6TzPZ95OEN3LNaEE+yZDQ9oINoyuA8UshSGYDGXai6XcrihB4jmYoSFNgW36Asd N1qhxAyduKJNKN6DFmwGar7BxKnHaiC4fomkmthHvD5Cfm7WGW0rQ9QI41nVtp7p pLLoMLw4hAb926z31rS4v3l+CY5qu1GcxSf2y66HkjMXJONaAn+OPQ6HYbnFbKbH p3osREqmT0DHWC0Ujg8pruuQ+lI6mg== -----END CERTIFICATE-----Generated at Wed Feb 12 09:40:08 2025 by rpki-client