$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer File: 4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer (raw, json) Hash identifier: t9GoWkjZJbPU4egmT8YHSz9x25wq7xOJTUyrAoxTlMI= Subject key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848758F0EAC8F20A9CABD88F4F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jan 2025 22:44:42 +0000 Certificate not after: Sun 11 Apr 2027 21:44:42 +0000 Subordinate resources: AS: 10537 AS: 10989 AS: 32183 IP: 64.84.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:8f:0e:ac:8f:20:a9:ca:bd:88:f4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 6 22:44:42 2025 GMT Not After : Apr 11 21:44:42 2027 GMT Subject: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:4e:1b:94:ae:02:d3:28:7c:4f:54:69:7d: 28:60:10:34:eb:ec:8c:52:53:8f:14:36:9a:22:4a: bd:b2:01:05:f2:0f:40:27:d9:89:08:d5:7a:6c:1b: 53:f9:ce:48:a8:77:60:c9:29:7a:62:0c:87:eb:3b: 8a:12:d8:24:90:50:d5:6b:91:84:60:b5:3d:a1:3c: 33:9e:28:01:06:1b:68:24:3b:87:c6:14:af:32:a5: a9:82:9b:6d:ec:5c:cd:c3:4a:98:ed:e1:ea:36:86: 42:38:89:32:b5:49:38:ba:3a:49:d2:d1:c0:3d:10: db:e7:b7:a6:ae:13:91:a7:09:a1:cb:ad:ec:14:d5: 7a:9f:e4:e9:30:f8:0f:be:79:10:25:86:aa:4b:94: 8d:25:74:2d:84:6d:f1:8a:46:77:72:87:9f:f9:38: 7b:3c:97:4c:8a:74:ce:60:12:d9:ff:8d:ee:18:ad: d3:b8:47:1d:55:90:e5:97:7e:d3:21:5b:6f:5f:d8: 2f:cf:a0:fc:db:c1:5a:5d:ab:ab:9f:0f:d7:26:a1: 14:fa:03:b0:8a:3c:0d:ee:27:35:3a:af:d4:44:8c: 10:76:fd:99:8f:77:d7:d8:b6:d5:0e:bd:a0:a2:97: ee:a9:9b:fe:f1:99:e0:3f:dc:58:4b:b7:c8:03:3a: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.84.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10537 10989 32183 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:33:c7:d4:b0:a1:58:a1:db:49:8d:ab:bb:a8:cf:43:27:73: a9:8d:e6:82:55:44:7f:33:3e:e8:dd:98:6e:1e:9f:e8:a0:8d: aa:0c:a4:59:ba:b1:dd:24:4a:c8:36:5d:5e:0c:b4:6e:56:fa: 1d:70:0b:5a:20:42:c2:7d:aa:c7:10:92:0f:8e:9b:2e:df:56: 93:80:1f:d7:ef:a6:10:77:67:2f:12:a0:68:09:73:e8:04:87: 5f:8c:2e:2e:cf:b6:5f:c9:4b:b4:d2:fc:d2:3f:f7:34:eb:de: 87:d9:0f:d0:fe:8d:74:eb:48:7e:b6:c9:f3:6f:8d:3b:4f:08: 19:f3:53:bd:3b:10:9b:95:73:a7:41:81:1c:9d:c5:71:09:fb: 62:34:0d:75:a8:cd:e2:a5:af:4d:6b:25:6a:0f:03:ba:7b:26: 0b:5d:00:d6:11:e0:b0:b4:ab:56:d4:a6:5a:fb:30:13:e7:70: 68:64:e8:6b:19:70:54:7d:93:62:93:58:6f:34:2a:40:16:fe: 30:6c:20:2b:96:7b:7b:50:db:d5:ef:59:1e:2f:ad:ee:4c:d8: 62:d9:46:49:3f:83:b9:cf:87:d2:2f:19:97:9a:75:ec:08:7b: bd:91:73:f9:e9:73:5b:78:c7:28:bd:10:a7:e2:2a:72:c2:4b: 7b:f6:0b:40 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEh1jw6sjyCpyr2I9PQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwNjIyNDQ0MloXDTI3MDQxMTIxNDQ0MlowLzEtMCsGA1UEAxMk NGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFkYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjENOG5SuAtMofE9UaX0oYBA06+yMUlOPFDaa Ikq9sgEF8g9AJ9mJCNV6bBtT+c5IqHdgySl6YgyH6zuKEtgkkFDVa5GEYLU9oTwz nigBBhtoJDuHxhSvMqWpgptt7FzNw0qY7eHqNoZCOIkytUk4ujpJ0tHAPRDb57em rhORpwmhy63sFNV6n+TpMPgPvnkQJYaqS5SNJXQthG3xikZ3coef+Th7PJdMinTO YBLZ/43uGK3TuEcdVZDll37TIVtvX9gvz6D828FaXaurnw/XJqEU+gOwijwN7ic1 Oq/URIwQdv2Zj3fX2LbVDr2gopfuqZv+8ZngP9xYS7fIAzpyVwIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFHLzqC4BGGPyLL/bWONA9zuGepepMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05 MTM0LTIwOTYzZWIxZGJiZi80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2Vi MWRiYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVAVGAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAIC KSkCAirtAgJ9tzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARM8fUsKFYodtJjau7qM9DJ3OpjeaCVUR/Mz7o 3ZhuHp/ooI2qDKRZurHdJErINl1eDLRuVvodcAtaIELCfarHEJIPjpsu31aTgB/X 76YQd2cvEqBoCXPoBIdfjC4uz7ZfyUu00vzSP/c0696H2Q/Q/o1060h+tsnzb407 TwgZ81O9OxCblXOnQYEcncVxCftiNA11qM3ipa9NayVqDwO6eyYLXQDWEeCwtKtW 1KZa+zAT53BoZOhrGXBUfZNik1hvNCpAFv4wbCArlnt7UNvV71keL63uTNhi2UZJ P4O5z4fSLxmXmnXsCHu9kXP56XNbeMcovRCn4ipywkt79gtA -----END CERTIFICATE-----Generated at Wed Feb 5 12:48:41 2025 by rpki-client