$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer File: a4c09862-33b2-4c17-b018-07f7502c45f6.cer (raw, json) Hash identifier: N5K50GnPBBid/WiDELUOqcX+G1MoUdw2nx8OQYv9Q8o= Subject key identifier: B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584878B37F72C092572FDD1C4C50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 01:45:33 +0000 Certificate not after: Tue 13 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 22686 IP: 2620:13a:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:78:b3:7f:72:c0:92:57:2f:dd:1c:4c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 8 01:45:33 2025 GMT Not After : Apr 13 00:45:33 2027 GMT Subject: CN=a4c09862-33b2-4c17-b018-07f7502c45f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:1a:97:d6:db:09:18:88:ee:24:8b:5e:7d: ef:7f:16:3d:78:eb:23:8f:52:14:e2:70:6d:63:7f: c8:e0:5d:1f:8b:b0:1c:b0:4f:7c:b0:7d:52:0b:11: 9b:c8:4c:eb:d1:4f:bb:32:06:2f:0e:e1:ad:a3:b1: dd:b0:5d:8f:c0:72:7d:f2:4b:c7:ac:e1:73:19:67: 2a:9a:53:96:cf:08:d2:07:38:f9:35:75:68:a4:43: 6c:80:8a:45:65:0f:07:f1:76:e6:67:ff:d7:bf:51: 3c:b0:ac:61:b2:31:35:47:2c:2f:bb:80:cf:0f:69: 31:2b:3c:ec:58:84:95:89:e3:cb:1e:70:6f:42:2c: a1:3d:7b:69:eb:8d:28:84:9c:6f:f6:1a:2d:73:e3: 12:84:60:45:96:2b:f6:0e:bd:c3:44:15:0b:f1:0a: 8f:2f:b0:92:af:8b:f7:0c:c6:08:b2:c1:02:7d:9c: c0:e8:4f:7c:34:bc:1f:f1:54:1b:e9:5e:ee:b3:b4: 0c:56:12:b3:1a:8a:cc:38:77:47:7f:ec:df:d9:6b: 51:e1:81:37:f5:80:16:56:1e:e4:49:a4:0e:51:c2: 79:51:0b:51:49:d4:2c:75:c0:c0:a1:71:74:9b:47: 31:f1:77:5c:bd:01:0e:51:ce:7d:2d:8d:ba:f3:42: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2620:13a:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ea:2a:16:02:24:90:f2:d2:84:74:cc:25:48:e0:dd:65:54: 12:ce:34:5e:f7:e6:44:a2:a9:1a:a2:eb:b8:ac:a7:3d:5f:6e: 27:42:d0:f9:71:36:df:07:d9:3d:7b:20:21:86:db:f9:f2:f1: 1d:0a:4d:82:8d:fd:36:17:ae:14:43:18:51:c2:ea:2e:ca:b3: 2a:d5:0c:a6:5e:d6:ed:43:90:55:a2:0b:6c:c9:e9:13:0b:a5: 28:40:85:03:71:8f:f2:ee:01:f2:c7:80:a6:20:41:2a:37:19: dc:2b:f8:0b:d7:4e:b0:1a:6a:88:47:1d:0c:23:40:32:ab:89: ee:7f:38:3b:21:12:68:df:b1:e0:b8:9f:14:eb:ee:eb:33:bd: 92:7d:aa:37:b4:5a:aa:8a:80:c4:de:39:c5:b7:62:c9:ff:1f: 28:e8:6c:78:32:24:2b:70:16:ff:ca:42:65:a0:40:5f:f4:ac: 9a:e7:8d:5e:03:7c:f5:1e:79:09:d2:98:d7:9f:4e:39:b8:bb: e9:e1:da:ea:0a:ca:d9:48:3e:8e:c1:5f:01:bd:53:31:49:cc: 9d:16:28:3a:78:9b:a5:00:a8:a9:46:88:9b:68:be:bb:2c:fc: 2c:08:0b:0e:14:c7:04:c7:b6:24:68:fc:8d:4c:13:5a:f1:57: 14:08:26:f0 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEh4s39ywJJXL90cTFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwODAxNDUzM1oXDTI3MDQxMzAwNDUzM1owLzEtMCsGA1UEAxMk YTRjMDk4NjItMzNiMi00YzE3LWIwMTgtMDdmNzUwMmM0NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+gal9bbCRiI7iSLXn3vfxY9eOsjj1IU4nBt Y3/I4F0fi7AcsE98sH1SCxGbyEzr0U+7MgYvDuGto7HdsF2PwHJ98kvHrOFzGWcq mlOWzwjSBzj5NXVopENsgIpFZQ8H8XbmZ//Xv1E8sKxhsjE1Rywvu4DPD2kxKzzs WISViePLHnBvQiyhPXtp640ohJxv9hotc+MShGBFliv2Dr3DRBUL8QqPL7CSr4v3 DMYIssECfZzA6E98NLwf8VQb6V7us7QMVhKzGorMOHdHf+zf2WtR4YE39YAWVh7k SaQOUcJ5UQtRSdQsdcDAoXF0m0cx8XdcvQEOUc59LY2680KAjwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFLHsaz7FjjdI5jITRf9OY5HEnAohMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h NGMwOTg2Mi0zM2IyLTRjMTctYjAxOC0wN2Y3NTAyYzQ1ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2E0YzA5ODYyLTMzYjItNGMxNy1i MDE4LTA3Zjc1MDJjNDVmNi9hNGMwOTg2Mi0zM2IyLTRjMTctYjAxOC0wN2Y3NTAy YzQ1ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE6QDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJYnjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBh6ioWAiSQ8tKEdMwlSODdZVQSzjRe9+ZEoqkaouu4rKc9 X24nQtD5cTbfB9k9eyAhhtv58vEdCk2Cjf02F64UQxhRwuouyrMq1QymXtbtQ5BV ogtsyekTC6UoQIUDcY/y7gHyx4CmIEEqNxncK/gL106wGmqIRx0MI0Ayq4nufzg7 IRJo37HguJ8U6+7rM72Sfao3tFqqioDE3jnFt2LJ/x8o6Gx4MiQrcBb/ykJloEBf 9Kya541eA3z1HnkJ0pjXn045uLvp4drqCsrZSD6OwV8BvVMxScydFig6eJulAKip RoibaL67LPwsCAsOFMcEx7YkaPyNTBNa8VcUCCbw -----END CERTIFICATE-----Generated at Sat Feb 15 16:12:53 2025 by rpki-client