$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer File: 5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer (raw, json) Hash identifier: s7wwbiRTJJV320n5NLz//9avkSfybf138Qz/4mlDtgc= Subject key identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848E21E2B6AE49C98E2CD47FB20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Feb 2025 20:00:22 +0000 Certificate not after: Thu 20 May 2027 19:00:22 +0000 Subordinate resources: IP: 162.253.176.0/22 IP: 2602:f788::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:1e:2b:6a:e4:9c:98:e2:cd:47:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 14 20:00:22 2025 GMT Not After : May 20 19:00:22 2027 GMT Subject: CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:05:5f:9c:88:db:2e:7c:f0:4f:8a:0c:4c: 4a:0b:3a:25:af:34:c2:62:dd:a3:55:73:07:42:76: 5f:f1:2f:24:0c:1b:11:7d:72:fe:78:0a:83:33:b9: 90:b7:f5:39:63:e6:fb:74:3b:c7:f5:f1:eb:9b:93: c9:9a:78:b1:34:23:0e:5e:85:eb:8c:cc:32:d7:a1: b8:96:35:be:7c:ff:89:8e:aa:f0:57:d8:1d:c2:26: 6a:25:fb:8b:1b:47:73:ef:f2:77:c7:85:ce:38:a4: 70:1a:be:79:9f:3a:5a:1f:85:ec:d6:d2:26:60:7e: 75:3e:ae:81:cb:9d:f1:2b:1f:4c:ad:d2:21:3c:98: 10:e2:d4:f9:87:b1:21:0b:3a:a9:1e:b0:dd:29:ec: 71:f5:0d:a5:e0:da:45:d6:c5:4f:d3:b4:a2:a6:e3: 05:81:86:15:96:9a:a2:4d:f0:3e:8f:07:28:4d:5a: 26:33:c2:fe:89:31:bb:30:a3:3b:e7:eb:06:d8:69: 82:b3:10:2c:bd:50:4e:77:89:8a:10:78:0a:a0:8a: 50:ea:4b:6a:19:78:47:2a:bd:00:d7:3b:2c:5d:ba: a3:32:0e:a4:e1:b1:93:ad:c7:27:2b:88:57:11:11: 88:a4:17:db:94:60:f0:89:8f:d4:7e:2b:8f:4e:fb: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 162.253.176.0/22 IPv6: 2602:f788::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b7:73:43:ab:7e:3b:7a:27:3d:0e:29:d0:60:09:d0:b2:e7: 68:6c:7e:f5:47:66:ae:28:2b:64:a0:6c:3a:c6:5d:59:bc:6f: d5:00:3f:c9:0e:18:84:b3:c4:5c:74:26:36:24:30:26:43:e5: 9b:58:75:6f:b8:07:bf:b6:78:3c:5b:09:58:cc:6e:48:5b:ed: 3c:a6:44:00:7a:cd:ed:86:b6:30:a1:e2:84:94:a3:d3:4b:5d: 20:f5:c4:b1:f8:c7:e2:d9:64:41:e3:3b:d2:87:d6:14:37:0e: be:3f:0e:66:29:cc:1b:ec:21:bb:24:ba:0b:e4:23:b8:a7:7d: c7:00:11:7a:bd:59:0a:ad:d0:79:c1:db:75:71:f3:4e:d8:91: f5:c7:7c:ec:ec:fe:1b:5d:e7:01:55:3d:e4:19:70:3a:2f:16: bf:aa:b5:b8:9d:20:d3:fe:03:81:04:16:de:e3:77:f0:be:72: 28:e4:42:a6:fe:b9:66:fa:2f:1c:ee:8b:25:a0:22:a8:6c:61: a6:ea:57:d3:8b:77:f5:4d:5f:4c:1f:01:35:4c:49:76:0b:f7: a2:10:8d:d2:35:3f:71:7e:74:4a:dd:d5:87:05:46:e9:14:d4: 0c:34:0e:cd:3d:f2:fd:0d:5e:59:b7:df:a7:9e:15:7f:0d:a8: 7a:be:a6:90 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjiHitq5JyY4s1H+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDIxNDIwMDAyMloXDTI3MDUyMDE5MDAyMlowLzEtMCsGA1UEAxMk NWRiYzBlNDEtYzg1Mi00M2JhLTljMTgtMjYyYzYzYWVjMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIMFX5yI2y588E+KDExKCzolrzTCYt2jVXMH QnZf8S8kDBsRfXL+eAqDM7mQt/U5Y+b7dDvH9fHrm5PJmnixNCMOXoXrjMwy16G4 ljW+fP+JjqrwV9gdwiZqJfuLG0dz7/J3x4XOOKRwGr55nzpaH4Xs1tImYH51Pq6B y53xKx9MrdIhPJgQ4tT5h7EhCzqpHrDdKexx9Q2l4NpF1sVP07SipuMFgYYVlpqi TfA+jwcoTVomM8L+iTG7MKM75+sG2GmCsxAsvVBOd4mKEHgKoIpQ6ktqGXhHKr0A 1zssXbqjMg6k4bGTrccnK4hXERGIpBfblGDwiY/UfiuPTvsbAwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMFfMB4pcbRdDIDavxMr/M5xvtufMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 ZGJjMGU0MS1jODUyLTQzYmEtOWMxOC0yNjJjNjNhZWMxYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzVkYmMwZTQxLWM4NTItNDNiYS05 YzE4LTI2MmM2M2FlYzFhOS81ZGJjMGU0MS1jODUyLTQzYmEtOWMxOC0yNjJjNjNh ZWMxYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKi/bAwDgQCAAIwCAMGBCYC94gAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIS3c0Orfjt6Jz0OKdBgCdCy52hsfvVHZq4oK2SgbDrGXVm8b9UAP8kOGISzxFx0 JjYkMCZD5ZtYdW+4B7+2eDxbCVjMbkhb7TymRAB6ze2GtjCh4oSUo9NLXSD1xLH4 x+LZZEHjO9KH1hQ3Dr4/DmYpzBvsIbskugvkI7infccAEXq9WQqt0HnB23Vx807Y kfXHfOzs/htd5wFVPeQZcDovFr+qtbidINP+A4EEFt7jd/C+cijkQqb+uWb6Lxzu iyWgIqhsYabqV9OLd/VNX0wfATVMSXYL96IQjdI1P3F+dErd1YcFRukU1Aw0Ds09 8v0NXlm336eeFX8NqHq+ppA= -----END CERTIFICATE-----Generated at Thu Mar 13 21:12:15 2025 by rpki-client