$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer File: 438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer (raw, json) Hash identifier: 3wII+5qijm4JTXCcB0XrnRCp9KPRiNXvlobimk1lwS4= Subject key identifier: B2:60:93:23:B8:B0:88:91:08:42:73:EE:12:76:1C:1B:6C:7F:AE:EC Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858487B7E2E3A6E0C9DB619114E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 01:45:33 +0000 Certificate not after: Wed 14 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 397409 IP: 192.207.237.0/24 IP: 2607:e40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:7e:2e:3a:6e:0c:9d:b6:19:11:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 9 01:45:33 2025 GMT Not After : Apr 14 00:45:33 2027 GMT Subject: CN=438b28e8-b7c9-4bb1-aec2-234f758dfa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:5a:0e:ec:5a:02:81:3f:8c:bb:98:0b:48: 3f:e0:79:16:86:e1:b7:11:95:fd:05:18:2a:0b:35: 9c:03:83:06:1b:1e:4d:63:33:d3:d4:2e:9d:88:b6: 9d:3d:0c:fe:2a:b9:7f:0d:28:d2:03:e9:14:6f:bb: 7d:6b:cb:83:fb:3f:a3:7e:87:ab:bb:94:d4:75:a8: d7:08:55:3e:01:ae:86:64:5d:66:f1:a6:b6:43:a4: 98:66:57:66:b1:2a:01:55:0f:eb:18:54:b7:9f:90: 6c:33:d3:6f:f6:72:72:4c:6f:28:76:93:00:32:49: 73:3e:37:03:44:21:61:70:f7:3c:d4:f4:84:80:b6: ab:20:37:38:86:e3:ca:9a:9f:16:d3:79:09:7c:76: dd:2f:a0:69:66:f3:18:df:cc:d9:fd:8b:c7:7c:05: af:f1:e1:ff:1d:e4:13:36:ae:67:76:f2:91:d9:0c: c8:3f:d7:d8:56:05:be:3f:21:ff:ce:4f:e4:2a:82: 10:2c:5a:df:da:f7:b5:64:ef:81:f3:7f:f1:b6:a8: e4:30:9b:db:8e:04:05:57:14:b9:05:08:53:50:36: 09:ed:cd:7a:42:c9:19:61:56:c3:2e:a8:67:e7:63: 06:02:38:e1:53:62:47:f5:85:8b:24:2b:2e:2d:b0: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:60:93:23:B8:B0:88:91:08:42:73:EE:12:76:1C:1B:6C:7F:AE:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.207.237.0/24 IPv6: 2607:e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397409 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a9:56:c1:70:2e:f5:66:f3:d9:88:b7:67:e2:dc:88:c7:9b: e4:d3:97:22:6b:53:da:5b:06:0f:49:79:99:5c:96:43:50:05: 73:4d:47:47:6f:71:c6:30:71:cf:6d:59:27:a4:ce:49:ec:d3: f6:9e:f4:28:57:ab:1a:e8:a5:08:28:cf:ff:f8:e8:d4:26:13: 9e:0b:7b:af:de:39:f3:a0:c9:2c:f7:43:58:69:e5:d9:dd:01: 7c:9a:38:3e:56:26:91:e4:bd:b4:84:76:ee:f4:53:25:62:cd: 8f:6d:ea:5b:52:5d:50:83:3f:1f:71:0c:d7:df:1d:b9:fd:02: 08:dc:b0:ce:da:bc:ac:b4:c0:8a:d9:4d:9f:ef:f3:c8:ce:17: 0c:d0:e0:c6:54:a2:4a:94:d5:e3:40:0d:c4:d5:e9:f5:d4:46: a1:eb:5d:d0:76:ff:43:96:31:37:58:79:6b:a3:70:a6:d2:d6: ea:88:fd:6a:5c:b5:67:61:55:8f:b7:05:93:95:b8:af:c4:a6: ef:d7:88:1a:06:91:dd:b4:a1:02:51:8a:d4:f8:a2:82:f6:35: 86:77:a5:a1:42:49:ac:5d:f7:39:85:dd:57:6b:f4:b7:30:8c: dc:b4:94:bd:32:40:c3:c6:c8:95:fe:f1:1f:44:ae:28:57:d1: b5:20:5a:a9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEh7fi46bgydthkRToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwOTAxNDUzM1oXDTI3MDQxNDAwNDUzM1owLzEtMCsGA1UEAxMk NDM4YjI4ZTgtYjdjOS00YmIxLWFlYzItMjM0Zjc1OGRmYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dZaDuxaAoE/jLuYC0g/4HkWhuG3EZX9BRgq CzWcA4MGGx5NYzPT1C6diLadPQz+Krl/DSjSA+kUb7t9a8uD+z+jfoeru5TUdajX CFU+Aa6GZF1m8aa2Q6SYZldmsSoBVQ/rGFS3n5BsM9Nv9nJyTG8odpMAMklzPjcD RCFhcPc81PSEgLarIDc4huPKmp8W03kJfHbdL6BpZvMY38zZ/YvHfAWv8eH/HeQT Nq5ndvKR2QzIP9fYVgW+PyH/zk/kKoIQLFrf2ve1ZO+B83/xtqjkMJvbjgQFVxS5 BQhTUDYJ7c16QskZYVbDLqhn52MGAjjhU2JH9YWLJCsuLbCEZQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLJgkyO4sIiRCEJz7hJ2HBtsf67sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 MzhiMjhlOC1iN2M5LTRiYjEtYWVjMi0yMzRmNzU4ZGZhNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQzOGIyOGU4LWI3YzktNGJiMS1h ZWMyLTIzNGY3NThkZmE1ZS80MzhiMjhlOC1iN2M5LTRiYjEtYWVjMi0yMzRmNzU4 ZGZhNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADAz+0wDQQCAAIwBwMFACYHDkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhBhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJCpVsFwLvVm89mIt2fi3IjHm+TT lyJrU9pbBg9JeZlclkNQBXNNR0dvccYwcc9tWSekzkns0/ae9ChXqxropQgoz//4 6NQmE54Le6/eOfOgySz3Q1hp5dndAXyaOD5WJpHkvbSEdu70UyVizY9t6ltSXVCD Px9xDNffHbn9AgjcsM7avKy0wIrZTZ/v88jOFwzQ4MZUokqU1eNADcTV6fXURqHr XdB2/0OWMTdYeWujcKbS1uqI/WpctWdhVY+3BZOVuK/Epu/XiBoGkd20oQJRitT4 ooL2NYZ3paFCSaxd9zmF3Vdr9LcwjNy0lL0yQMPGyJX+8R9ErihX0bUgWqk= -----END CERTIFICATE-----Generated at Wed Feb 12 11:09:24 2025 by rpki-client