$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer File: 835152c2-2ed8-4151-8f82-ac9407335b2c.cer (raw, json) Hash identifier: /QaIa9R2hVDcLMAKIpTggKCIdCgV9S4FozJ2sq9/isE= Subject key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584822284B3E02F0CD28FA4EEFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Dec 2024 01:45:33 +0000 Certificate not after: Sat 13 Mar 2027 01:45:33 +0000 Subordinate resources: IP: 50.116.64.0/18 IP: 96.125.160.0/20 IP: 108.167.128.0/18 IP: 108.174.144.0/20 IP: 108.179.192.0/18 IP: 162.210.48.0/22 IP: 192.185.0.0/16 IP: 192.232.192.0/18 IP: 192.254.128.0/17 IP: 198.20.224.0/19 IP: 198.154.192.0/18 IP: 216.172.160.0/19 IP: 2605:f300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:28:4b:3e:02:f0:cd:28:fa:4e:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 8 01:45:33 2024 GMT Not After : Mar 13 01:45:33 2027 GMT Subject: CN=835152c2-2ed8-4151-8f82-ac9407335b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:8e:08:7a:c0:9a:68:c4:b1:b5:c8:97:3c: a5:9c:48:1c:62:0f:46:da:aa:f4:2d:8c:4d:d1:45: 90:4e:ac:65:ad:de:5a:5c:9c:da:d9:ea:95:fa:df: f4:cc:1a:b6:84:75:40:eb:4a:c8:f3:4a:5e:09:6c: 8f:8f:a1:bd:35:8f:96:7b:33:75:5e:e4:aa:8e:71: 6a:36:79:9a:8c:51:a3:6c:c1:dc:73:df:1f:e2:ea: 14:13:9e:16:2c:c8:a7:fc:00:3d:36:26:0c:9a:a4: 79:72:5c:04:15:74:32:06:8b:23:7c:47:e4:8a:4f: 94:80:5f:cc:ad:bc:40:cc:b4:9d:21:bf:bf:82:7e: 54:7e:e6:4f:42:80:5a:3f:0a:7a:47:63:db:d9:1d: 03:a2:29:e1:67:5e:89:59:1d:ac:ae:ab:8d:c2:dd: 3a:4c:01:cb:86:0c:95:78:0c:3d:76:97:55:d5:24: 5e:b8:82:f9:e5:d4:58:77:ee:53:01:4f:b4:61:c5: 83:d9:8d:b8:ee:8c:c5:a4:fc:67:8b:c5:ba:65:4d: 69:0a:dc:9d:3f:cc:ff:a3:a3:73:2c:00:3f:f4:98: 84:42:ff:ca:b5:c9:ed:49:40:65:77:77:10:6a:dc: ba:d6:dc:a8:d5:02:e5:a2:75:06:28:a7:71:eb:b8: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 50.116.64.0/18 96.125.160.0/20 108.167.128.0/18 108.174.144.0/20 108.179.192.0/18 162.210.48.0/22 192.185.0.0/16 192.232.192.0/18 192.254.128.0/17 198.20.224.0/19 198.154.192.0/18 216.172.160.0/19 IPv6: 2605:f300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:53:20:7f:fa:1e:f5:f1:28:e0:3c:3a:02:65:4d:a1:45:34: d7:f6:7a:3e:9e:b3:a5:0e:ac:0b:57:bf:6e:38:93:3e:73:6b: b6:35:34:c5:86:1d:62:3c:ea:6d:eb:50:5c:9c:be:dd:3c:d4: 74:09:9a:9f:e4:28:68:e4:35:17:f6:d5:30:51:99:89:89:29: 83:9c:d3:9f:9a:d0:8a:bb:04:37:ed:de:f3:b6:b0:cd:3f:c6: 4f:2d:8b:a2:c7:b3:cb:4b:a6:8f:48:e9:69:50:11:be:9c:89: 76:99:2b:97:83:c1:99:cd:b2:b6:4a:47:79:c3:f9:6b:13:fd: 49:60:03:73:8f:91:68:0a:71:f6:e5:9a:72:47:97:ef:d1:64: 54:a3:c0:e0:45:5e:05:30:47:a8:7c:ba:5f:4a:f9:27:6d:af: e8:41:f9:ac:85:38:bf:23:f6:a6:85:5f:13:10:2a:d8:09:67: df:9a:ce:14:05:52:3b:d3:63:df:a7:25:10:2f:28:7e:30:9a: 8a:b9:c7:b3:86:12:97:e1:96:cf:cb:1f:ca:ef:19:2f:f8:f3: 65:d1:dc:09:fe:fa:f2:e5:2b:21:9d:2b:8f:d4:75:50:6e:1d: ce:be:89:35:ba:e1:97:31:4c:58:49:34:bc:55:39:cd:20:1d: f9:21:79:d4 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEgiKEs+AvDNKPpO78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MTIwODAxNDUzM1oXDTI3MDMxMzAxNDUzM1owLzEtMCsGA1UEAxMk ODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU2OCHrAmmjEsbXIlzylnEgcYg9G2qr0LYxN 0UWQTqxlrd5aXJza2eqV+t/0zBq2hHVA60rI80peCWyPj6G9NY+WezN1XuSqjnFq NnmajFGjbMHcc98f4uoUE54WLMin/AA9NiYMmqR5clwEFXQyBosjfEfkik+UgF/M rbxAzLSdIb+/gn5UfuZPQoBaPwp6R2Pb2R0DoinhZ16JWR2srquNwt06TAHLhgyV eAw9dpdV1SReuIL55dRYd+5TAU+0YcWD2Y247ozFpPxni8W6ZU1pCtydP8z/o6Nz LAA/9JiEQv/KtcntSUBld3cQaty61tyo1QLlonUGKKdx67ia7QIDAQABo4IETzCC BEswHQYDVR0OBBYEFIqfdNlMt2MFMDaPD+xFmrfmaXXeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzgzNTE1MmMyLTJlZDgtNDE1MS04 ZjgyLWFjOTQwNzMzNWIyYy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDcz MzViMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwbwYIKwYBBQUH AQcBAf8EYDBeME0EAgABMEcDBAYydEADBARgfaADBAZsp4ADBARsrpADBAZss8AD BAKi0jADAwDAuQMEBsDowAMEB8D+gAMEBcYU4AMEBsaawAMEBdisoDANBAIAAjAH AwUAJgXzADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBZUyB/+h718SjgPDoCZU2hRTTX9no+nrOlDqwLV79u OJM+c2u2NTTFhh1iPOpt61BcnL7dPNR0CZqf5Cho5DUX9tUwUZmJiSmDnNOfmtCK uwQ37d7ztrDNP8ZPLYuix7PLS6aPSOlpUBG+nIl2mSuXg8GZzbK2Skd5w/lrE/1J YANzj5FoCnH25ZpyR5fv0WRUo8DgRV4FMEeofLpfSvknba/oQfmshTi/I/amhV8T ECrYCWffms4UBVI702PfpyUQLyh+MJqKucezhhKX4ZbPyx/K7xkv+PNl0dwJ/vry 5SshnSuP1HVQbh3Ovok1uuGXMUxYSTS8VTnNIB35IXnU -----END CERTIFICATE-----Generated at Sat Feb 8 13:11:36 2025 by rpki-client