$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer File: 8b01f829-1ce6-47d5-af2d-f61a257f023f.cer (raw, json) Hash identifier: puKoXBv7Mz8n9Fy/rFAwBDPQPhHIQGQj+t3d1ljk0IM= Subject key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858492B417F9C4422DA205D1E9A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 00:45:33 +0000 Certificate not after: Wed 16 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 14478 IP: 23.136.216.0/24 IP: 2602:fb65::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:41:7f:9c:44:22:da:20:5d:1e:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 13 00:45:33 2025 GMT Not After : Jun 16 00:45:33 2027 GMT Subject: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:71:41:37:f4:42:10:8e:0a:2d:a9:9a:bf:42: 2c:09:de:31:bf:cf:bc:99:97:b4:28:99:d6:27:1c: fb:c0:13:48:75:71:51:00:d0:ed:b4:96:a2:1d:7b: 49:5a:c7:d5:b2:d5:71:fe:60:58:36:01:dc:ce:f5: c2:40:c8:23:77:f6:d3:97:53:09:a9:53:dd:2c:ee: f1:d5:ec:22:8e:04:bf:83:92:fd:45:0e:07:4d:93: b9:85:2f:ea:43:94:ad:21:9c:74:01:8e:4d:25:09: e5:61:41:2e:2c:ed:d5:12:f4:0f:5c:1d:49:51:e0: fe:14:7a:ff:8c:63:8e:79:75:c1:92:94:63:81:5d: de:0e:92:a6:85:8f:69:7b:1d:92:f3:b4:ce:d4:43: 58:d3:2d:97:77:67:84:4a:75:44:6a:b4:af:86:8d: cf:95:e2:ea:9d:92:12:f7:64:21:6c:a7:24:ef:1b: 00:d6:53:74:66:a6:92:40:a0:17:e9:01:18:b6:ad: 3f:02:02:cc:c7:7d:d3:4e:26:c0:d8:7a:03:78:e5: 73:12:e2:79:21:26:f2:b3:ee:ca:8b:58:d6:98:97: 23:f8:3c:c2:01:dc:f7:e8:d4:44:78:b0:69:96:89: b5:44:22:8e:62:38:54:ac:2e:c1:7a:ff:b9:da:6b: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.136.216.0/24 IPv6: 2602:fb65::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14478 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:87:79:a2:5d:62:a2:63:8e:96:50:fd:1e:1b:98:f9:05:3c: fb:b5:9d:cc:e1:10:1e:b8:29:3e:06:67:0e:66:b1:ed:93:6b: a3:09:4a:ec:20:21:28:e6:80:84:5a:9f:d6:73:5a:5e:f1:03: b4:27:66:4f:5d:95:bf:fe:7f:c0:49:dc:29:ab:3b:ff:71:a6: ed:78:b7:06:3e:90:1d:e4:a6:18:5f:f0:fe:ac:b6:c9:20:46: 3e:f0:f6:7a:56:0f:5b:c1:d9:8e:aa:47:aa:f8:c2:e0:a5:14: 49:13:51:38:13:fc:9d:71:6b:e6:74:8e:74:87:ad:3e:20:c5: b6:2a:58:a2:50:26:b4:42:ff:6b:3f:66:17:9f:ed:33:fb:6e: 43:11:f0:53:2e:43:9e:24:bf:0e:df:68:dd:46:6c:14:51:8d: 44:3c:a7:fe:a6:e5:e9:d6:9c:f3:05:39:12:83:cf:8e:e0:90: cb:5a:d0:04:96:b7:37:b8:9d:2f:ac:51:4f:e1:bf:6c:e9:39: 6e:99:b8:67:79:0c:13:59:69:c4:57:21:0d:99:37:76:87:fa: e6:4d:a3:a8:83:a2:e1:a8:5b:5a:3e:06:9d:aa:22:42:68:07: 34:4d:10:5b:81:74:47:9a:aa:4b:9f:d6:73:42:69:a5:23:50: 5a:3d:60:0c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkrQX+cRCLaIF0emgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDMxMzAwNDUzM1oXDTI3MDYxNjAwNDUzM1owLzEtMCsGA1UEAxMk OGIwMWY4MjktMWNlNi00N2Q1LWFmMmQtZjYxYTI1N2YwMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHFBN/RCEI4KLamav0IsCd4xv8+8mZe0KJnW Jxz7wBNIdXFRANDttJaiHXtJWsfVstVx/mBYNgHczvXCQMgjd/bTl1MJqVPdLO7x 1ewijgS/g5L9RQ4HTZO5hS/qQ5StIZx0AY5NJQnlYUEuLO3VEvQPXB1JUeD+FHr/ jGOOeXXBkpRjgV3eDpKmhY9pex2S87TO1ENY0y2Xd2eESnVEarSvho3PleLqnZIS 92QhbKck7xsA1lN0ZqaSQKAX6QEYtq0/AgLMx33TTibA2HoDeOVzEuJ5ISbys+7K i1jWmJcj+DzCAdz36NREeLBplom1RCKOYjhUrC7Bev+52muWTQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDelIB4e/sQvtm3U6uMW9zD+75EOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 YjAxZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFhMjU3ZjAyM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzhiMDFmODI5LTFjZTYtNDdkNS1h ZjJkLWY2MWEyNTdmMDIzZi84YjAxZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFhMjU3 ZjAyM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiNgwDgQCAAIwCAMGACYC+2UAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjiOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADWHeaJdYqJjjpZQ/R4bmPkFPPu1 nczhEB64KT4GZw5mse2Ta6MJSuwgISjmgIRan9ZzWl7xA7QnZk9dlb/+f8BJ3Cmr O/9xpu14twY+kB3kphhf8P6stskgRj7w9npWD1vB2Y6qR6r4wuClFEkTUTgT/J1x a+Z0jnSHrT4gxbYqWKJQJrRC/2s/Zhef7TP7bkMR8FMuQ54kvw7faN1GbBRRjUQ8 p/6m5enWnPMFORKDz47gkMta0ASWtze4nS+sUU/hv2zpOW6ZuGd5DBNZacRXIQ2Z N3aH+uZNo6iDouGoW1o+Bp2qIkJoBzRNEFuBdEeaqkuf1nNCaaUjUFo9YAw= -----END CERTIFICATE-----Generated at Wed Apr 9 12:51:09 2025 by rpki-client