$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer File: 4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer (raw, json) Hash identifier: QCENvV1o+VARUUs5NmB5h6lm6x9vlruqJ4oJrAbHabc= Subject key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848B61E8BC86D1D050C69183F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jan 2025 01:45:33 +0000 Certificate not after: Wed 05 May 2027 00:45:33 +0000 Subordinate resources: AS: 30235 IP: 162.247.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:1e:8b:c8:6d:1d:05:0c:69:18:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 30 01:45:33 2025 GMT Not After : May 5 00:45:33 2027 GMT Subject: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:13:ba:bb:bf:04:64:df:d9:86:bf:8e:d0: fb:b4:98:f7:c7:84:13:04:8c:75:8d:72:9d:8c:f2: 0d:14:af:79:60:49:7a:e2:e1:da:45:d0:d7:ed:6d: f5:58:57:19:ea:d2:4a:84:19:18:d7:60:31:f8:8a: 6c:f7:43:06:dc:a6:6c:e2:b4:c8:c7:f7:5e:29:fa: 85:8a:ba:64:28:01:2c:1a:ef:b7:af:25:41:50:6d: a8:4e:48:ad:69:a1:0a:b8:13:67:61:5e:0b:f6:73: 7f:83:a4:9a:1d:2a:db:68:5a:a0:59:9c:8e:05:50: 78:4e:7d:81:d9:01:fe:47:95:ba:52:d9:86:ef:a6: 7a:20:93:49:d2:af:a8:4d:34:31:c3:cd:32:80:40: ba:87:b1:b0:d1:99:db:ef:36:fe:b8:1f:7d:02:3e: ff:92:f1:8b:fd:af:1e:d6:3c:c0:cf:1f:6a:b9:18: c7:b0:b8:42:99:b0:1c:08:5e:e0:7a:7b:ea:43:4e: 91:08:cc:eb:aa:b8:b7:1d:5e:51:5c:4c:cf:54:d6: fe:04:79:03:8c:56:ed:8e:12:94:a9:38:ce:61:ec: ea:04:8a:67:9b:22:c8:0b:68:0e:9a:53:3b:2c:f9: e5:1e:51:01:c7:14:b5:88:d4:0d:bc:56:51:e3:e0: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 162.247.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30235 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:aa:cc:b9:e3:a9:8f:2b:20:3b:40:7f:92:6c:2c:27:ba:ed: 0f:b4:f0:59:9c:ac:34:2b:cd:3a:25:6e:e1:71:81:4e:6f:64: ef:e8:bb:ac:57:ca:ce:17:99:4a:3f:64:9c:0f:42:8b:21:24: c5:22:9d:c6:9e:14:db:b0:ca:a2:b4:ae:66:8b:ec:49:75:ff: ef:b8:6c:f4:f1:2d:9f:33:c9:da:8e:fd:2e:e3:d3:86:f7:e1: 03:22:1e:da:a1:d9:b5:4a:b7:fc:18:00:a5:e9:ef:76:b8:1a: 3d:47:54:87:a8:7b:86:ab:7b:eb:2c:69:cd:43:68:f6:e8:62: a1:59:ff:42:12:17:32:db:e9:5c:6a:85:62:9b:fd:84:00:98: 9d:a7:c4:e2:18:c0:63:86:db:fd:e6:80:76:54:7a:6f:d7:e9: 83:17:bd:97:d9:3b:eb:20:46:28:23:e1:a8:d0:2e:e5:77:63: f9:43:fb:8c:03:14:09:74:8b:f0:9c:09:ea:a7:90:6e:bd:d6: b3:c6:80:11:6a:8a:bb:82:15:d9:d2:98:c4:5b:53:b4:0a:1f: e2:8c:f6:fe:97:0e:5b:2e:4c:28:7b:95:f8:57:1f:3b:f0:5c: 2e:e2:95:fa:5e:43:be:5c:0f:01:f3:a1:59:63:48:ed:94:a0: 0f:40:64:ea -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEi2HovIbR0FDGkYPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEzMDAxNDUzM1oXDTI3MDUwNTAwNDUzM1owLzEtMCsGA1UEAxMk NGNmY2JhNzQtMTE1Ny00NGU2LWExZTktN2Y0ZDRkOTIxOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj30Turu/BGTf2Ya/jtD7tJj3x4QTBIx1jXKd jPINFK95YEl64uHaRdDX7W31WFcZ6tJKhBkY12Ax+Ips90MG3KZs4rTIx/deKfqF irpkKAEsGu+3ryVBUG2oTkitaaEKuBNnYV4L9nN/g6SaHSrbaFqgWZyOBVB4Tn2B 2QH+R5W6UtmG76Z6IJNJ0q+oTTQxw80ygEC6h7Gw0Znb7zb+uB99Aj7/kvGL/a8e 1jzAzx9quRjHsLhCmbAcCF7genvqQ06RCMzrqri3HV5RXEzPVNb+BHkDjFbtjhKU qTjOYezqBIpnmyLIC2gOmlM7LPnlHlEBxxS1iNQNvFZR4+ANfQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIsY1R5rotdZOBBbzvt53pf5YpF9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 Y2ZjYmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRkNGQ5MjE4ZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRjZmNiYTc0LTExNTctNDRlNi1h MWU5LTdmNGQ0ZDkyMThkOS80Y2ZjYmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRkNGQ5 MjE4ZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi95gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dhswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAmarMueOpjysgO0B/kmwsJ7rtD7TwWZysNCvNOiVu4XGBTm9k 7+i7rFfKzheZSj9knA9CiyEkxSKdxp4U27DKorSuZovsSXX/77hs9PEtnzPJ2o79 LuPThvfhAyIe2qHZtUq3/BgApenvdrgaPUdUh6h7hqt76yxpzUNo9uhioVn/QhIX MtvpXGqFYpv9hACYnafE4hjAY4bb/eaAdlR6b9fpgxe9l9k76yBGKCPhqNAu5Xdj +UP7jAMUCXSL8JwJ6qeQbr3Ws8aAEWqKu4IV2dKYxFtTtAof4oz2/pcOWy5MKHuV +FcfO/BcLuKV+l5DvlwPAfOhWWNI7ZSgD0Bk6g== -----END CERTIFICATE-----Generated at Wed Feb 12 01:13:23 2025 by rpki-client