$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer File: 8a177cd6-d91e-4c15-992e-7337b8e894a8.cer (raw, json) Hash identifier: 9blYfHwSgYOJLHbsxKD/PWnqMN1uM2SqOD4HMkghuVA= Subject key identifier: 30:27:85:3A:1E:C9:86:50:0A:E6:6D:A5:9D:71:01:33:85:57:A4:68 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849604C8183E997FE11B065ECC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 00:45:34 +0000 Certificate not after: Mon 05 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 1001 AS: 1040 IP: 23.138.56.0/24 IP: 2602:fb55::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:4c:81:83:e9:97:fe:11:b0:65:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 1 00:45:34 2025 GMT Not After : Jul 5 00:45:34 2027 GMT Subject: CN=8a177cd6-d91e-4c15-992e-7337b8e894a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:ed:32:a3:15:ae:7d:77:37:a9:46:c5:96: 6b:b9:1e:bc:96:e8:20:62:58:44:4b:a8:9a:bf:d6: 5d:f9:17:71:9e:03:95:37:08:09:22:ef:93:f4:d4: dd:75:9c:7e:7b:aa:dd:f9:88:af:81:5f:6b:a0:d5: 10:21:c1:9d:c6:57:a8:aa:7a:8a:f6:a5:c0:aa:bb: b4:d7:c8:27:4a:0a:5f:46:97:61:d3:6b:8c:4c:92: c0:9b:0a:40:4b:49:d1:26:d8:b1:6b:5d:ef:3b:ba: 00:75:81:18:f2:42:19:6c:bf:0e:8b:9f:0e:25:cd: 93:bc:bd:a6:5b:fd:d1:a9:71:dd:71:20:e7:b4:5c: 8f:75:65:ed:42:10:1c:85:19:e3:01:78:22:b8:6c: e1:21:3c:16:ac:e8:4e:6a:08:c1:6d:a0:8a:0c:e0: 25:c0:33:c9:b4:7d:ba:ac:25:e9:e7:d5:48:70:a0: 1b:14:bb:6c:d0:67:06:4d:3b:a1:1d:f3:20:54:35: 5a:bd:39:9c:16:ce:32:c2:d9:73:7a:92:f1:57:fa: ec:cd:ae:cb:6d:80:77:66:a7:7e:86:5b:5a:de:9e: ae:7f:fe:66:70:f3:2a:08:76:22:8e:f0:9e:4d:61: 4b:4b:36:24:d1:5f:b5:25:4d:03:8c:4f:28:07:81: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:27:85:3A:1E:C9:86:50:0A:E6:6D:A5:9D:71:01:33:85:57:A4:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.138.56.0/24 IPv6: 2602:fb55::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1001 1040 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ae:be:a1:76:b8:d1:54:0a:c3:59:43:8a:eb:77:09:a4:d7: 51:97:18:d1:e2:67:dd:5c:6d:dd:a0:3b:64:04:f7:d9:d2:c4: 01:11:60:9c:49:06:31:29:4d:40:53:47:77:73:31:02:47:f5: 9c:b5:73:a1:65:47:1b:df:91:de:6f:c8:28:27:82:7d:ce:48: f0:7d:65:89:9b:58:04:fa:4c:ae:c6:7f:c8:0a:0b:56:5c:f5: 57:28:4d:e6:3e:10:26:f1:f1:78:5c:be:83:11:9c:05:50:f2: 6b:bb:18:bd:0c:d7:7f:76:57:ca:01:da:26:d2:96:1e:21:f8: a3:0b:ad:ea:54:21:e1:d1:8a:58:9b:b6:36:d9:5b:09:cf:af: d2:7c:20:21:03:19:cc:0e:ca:c4:80:28:45:3a:aa:83:a8:56: 37:5f:de:b4:7e:b9:19:e1:42:9f:79:01:dc:8c:90:cf:9f:dc: 12:18:1a:3e:b6:32:95:2b:5c:d6:d0:05:71:89:58:f9:fc:81: 87:71:fa:d4:55:fe:81:e9:ac:82:83:11:17:7f:c7:f8:4e:e3: 54:9f:89:76:68:dd:2d:cd:c3:fe:59:63:8e:f8:9a:99:0b:0b: 46:13:12:37:4a:f9:0d:90:1a:24:c5:2e:00:4e:64:18:b3:0a: 57:a5:75:cf -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWElgTIGD6Zf+EbBl7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk OGExNzdjZDYtZDkxZS00YzE1LTk5MmUtNzMzN2I4ZTg5NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSPtMqMVrn13N6lGxZZruR68luggYlhES6ia v9Zd+RdxngOVNwgJIu+T9NTddZx+e6rd+YivgV9roNUQIcGdxleoqnqK9qXAqru0 18gnSgpfRpdh02uMTJLAmwpAS0nRJtixa13vO7oAdYEY8kIZbL8Oi58OJc2TvL2m W/3RqXHdcSDntFyPdWXtQhAchRnjAXgiuGzhITwWrOhOagjBbaCKDOAlwDPJtH26 rCXp59VIcKAbFLts0GcGTTuhHfMgVDVavTmcFs4ywtlzepLxV/rsza7LbYB3Zqd+ hlta3p6uf/5mcPMqCHYijvCeTWFLSzYk0V+1JU0DjE8oB4Fx7QIDAQABo4IELjCC BCowHQYDVR0OBBYEFDAnhToeyYZQCuZtpZ1xATOFV6RoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 YTE3N2NkNi1kOTFlLTRjMTUtOTkyZS03MzM3YjhlODk0YTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05 OTJlLTczMzdiOGU4OTRhOC84YTE3N2NkNi1kOTFlLTRjMTUtOTkyZS03MzM3Yjhl ODk0YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXijgwDgQCAAIwCAMGBCYC+1UAMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAgPpAgIEEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBurr6hdrjRVArDWUOK63cJ pNdRlxjR4mfdXG3doDtkBPfZ0sQBEWCcSQYxKU1AU0d3czECR/WctXOhZUcb35He b8goJ4J9zkjwfWWJm1gE+kyuxn/ICgtWXPVXKE3mPhAm8fF4XL6DEZwFUPJruxi9 DNd/dlfKAdom0pYeIfijC63qVCHh0YpYm7Y22VsJz6/SfCAhAxnMDsrEgChFOqqD qFY3X960frkZ4UKfeQHcjJDPn9wSGBo+tjKVK1zW0AVxiVj5/IGHcfrUVf6B6ayC gxEXf8f4TuNUn4l2aN0tzcP+WWOO+JqZCwtGExI3SvkNkBokxS4ATmQYswpXpXXP -----END CERTIFICATE-----Generated at Sat Apr 5 04:55:49 2025 by rpki-client