$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160.cer File: 5f218203-7869-4c63-a884-4946e8c91160.cer (raw, json) Hash identifier: VDY6Hm7jzCcN6o39UHYpfLcVJyz3Amr2ZkktQfgHEJs= Subject key identifier: 0E:25:69:3F:D6:91:E0:C8:FA:BC:70:90:E1:73:60:A2:96:BF:F4:83 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584930D6DD6369C9D334FE7A2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Mar 2025 00:45:33 +0000 Certificate not after: Fri 18 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 393563 IP: 192.43.242.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:d6:dd:63:69:c9:d3:34:fe:7a:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 15 00:45:33 2025 GMT Not After : Jun 18 00:45:33 2027 GMT Subject: CN=5f218203-7869-4c63-a884-4946e8c91160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:b2:fb:09:0c:d8:8f:81:2e:97:c5:57:2d: ed:69:a3:48:00:17:de:81:62:f0:fd:98:b3:5d:66: 99:e7:91:b4:74:0b:3b:09:08:a2:ce:5c:4c:2c:08: c4:98:f8:28:f1:42:f4:94:28:c2:4b:30:b3:3e:a2: a6:df:a1:91:cc:80:8d:84:21:e3:e7:19:73:ea:57: 01:4a:29:f2:31:9a:10:11:b3:20:20:b6:46:7b:a9: 06:a5:90:bf:09:6c:3c:f2:d0:e1:bf:0b:3c:af:a9: 4e:53:6d:1f:43:38:bc:c2:cc:d3:fe:aa:34:62:62: 5c:17:87:3a:21:fe:28:09:2a:be:93:0d:e8:a8:c0: 4d:3e:f9:1b:9a:f7:4f:68:bb:fa:17:85:31:5a:9b: c9:27:83:56:a9:ad:ca:d6:7d:c9:09:77:e1:8a:e4: 70:61:42:ba:ba:eb:e1:6d:d2:90:cf:90:de:96:5f: b8:e1:33:d2:17:c8:01:1f:14:ea:6e:dc:96:35:7f: a0:fc:e9:22:33:cb:cc:bd:7e:1c:dc:ee:1b:9a:02: d3:03:26:18:32:f6:ab:ed:d4:73:09:b8:68:e8:6a: 7b:9f:bc:74:43:01:de:a4:58:55:72:03:5d:65:fc: c7:6e:33:fe:ce:df:c5:c6:e5:1b:f4:96:61:2f:a5: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:69:3F:D6:91:E0:C8:FA:BC:70:90:E1:73:60:A2:96:BF:F4:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.43.242.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393563 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:04:9e:a2:07:21:28:fe:1e:a2:7c:95:f0:8d:e9:3c:b0:17: 68:d0:40:6c:7c:ee:69:62:e8:16:4b:f7:7d:e4:39:97:30:70: 50:82:f1:76:67:91:22:b4:44:82:fc:a0:78:4a:84:d6:c7:da: 5a:c8:f6:d2:e3:e4:05:19:fa:4d:1e:29:29:68:ba:e7:44:f9: 34:a1:39:bb:65:d9:37:24:86:54:89:23:3f:53:55:2f:f8:8f: 53:9a:ce:ba:43:4f:f7:49:81:25:b4:6b:5c:5c:07:98:86:ae: f4:c6:e4:e2:b7:82:f3:ae:9e:59:ca:72:02:7a:52:07:e7:7d: 2b:b3:64:25:50:d4:06:fc:c0:b5:20:d7:7b:53:53:72:ee:a1: 52:07:5f:a6:cf:9a:ce:5c:57:3f:32:31:6e:8f:24:53:6d:53: 87:b4:6e:93:18:d5:b5:7e:95:79:d5:fb:e4:8e:15:c3:d7:5d: 54:fa:a2:42:fc:4f:41:f4:83:88:8e:21:e0:25:e7:9f:f1:ac: 76:04:87:8d:27:b3:0f:de:c9:68:25:b5:68:e4:11:23:08:b0: 8b:13:bf:6d:ef:bb:9e:0b:6e:9f:cf:15:9d:cc:39:f5:9d:8b: 2a:fe:ce:f9:3c:57:69:6c:7a:c9:67:10:14:15:b7:24:20:a6: fa:5f:ea:97 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkw1t1jacnTNP56JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDMxNTAwNDUzM1oXDTI3MDYxODAwNDUzM1owLzEtMCsGA1UEAxMk NWYyMTgyMDMtNzg2OS00YzYzLWE4ODQtNDk0NmU4YzkxMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq26y+wkM2I+BLpfFVy3taaNIABfegWLw/Ziz XWaZ55G0dAs7CQiizlxMLAjEmPgo8UL0lCjCSzCzPqKm36GRzICNhCHj5xlz6lcB SinyMZoQEbMgILZGe6kGpZC/CWw88tDhvws8r6lOU20fQzi8wszT/qo0YmJcF4c6 If4oCSq+kw3oqMBNPvkbmvdPaLv6F4UxWpvJJ4NWqa3K1n3JCXfhiuRwYUK6uuvh bdKQz5Dell+44TPSF8gBHxTqbtyWNX+g/OkiM8vMvX4c3O4bmgLTAyYYMvar7dRz Cbho6Gp7n7x0QwHepFhVcgNdZfzHbjP+zt/FxuUb9JZhL6VRtQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFA4laT/WkeDI+rxwkOFzYKKWv/SDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 ZjIxODIwMy03ODY5LTRjNjMtYTg4NC00OTQ2ZThjOTExNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzVmMjE4MjAzLTc4NjktNGM2My1h ODg0LTQ5NDZlOGM5MTE2MC81ZjIxODIwMy03ODY5LTRjNjMtYTg4NC00OTQ2ZThj OTExNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAK/IwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgFbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJkEnqIHISj+HqJ8lfCN6TywF2jQQGx87mli6BZL933kOZcw cFCC8XZnkSK0RIL8oHhKhNbH2lrI9tLj5AUZ+k0eKSlouudE+TShObtl2TckhlSJ Iz9TVS/4j1OazrpDT/dJgSW0a1xcB5iGrvTG5OK3gvOunlnKcgJ6UgfnfSuzZCVQ 1Ab8wLUg13tTU3LuoVIHX6bPms5cVz8yMW6PJFNtU4e0bpMY1bV+lXnV++SOFcPX XVT6okL8T0H0g4iOIeAl55/xrHYEh40nsw/eyWgltWjkESMIsIsTv23vu54Lbp/P FZ3MOfWdiyr+zvk8V2lseslnEBQVtyQgpvpf6pc= -----END CERTIFICATE-----Generated at Fri Apr 4 10:55:17 2025 by rpki-client