$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73.cer File: b575130a-1aa4-4ba5-8770-337f3ccebd73.cer (raw, json) Hash identifier: rrdQpkkk9m5N8TzN/r8gS4iClifcsN2lESW9tGuWJg8= Subject key identifier: AD:F8:F5:81:88:AA:E2:6F:5F:38:FF:89:9C:86:97:45:42:34:46:C1 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858490449B22ABA62597554D9A920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Feb 2025 01:45:32 +0000 Certificate not after: Wed 02 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 23088 IP: 148.66.32.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:49:b2:2a:ba:62:59:75:54:d9:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 27 01:45:32 2025 GMT Not After : Jun 2 00:45:32 2027 GMT Subject: CN=b575130a-1aa4-4ba5-8770-337f3ccebd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:39:2f:3f:36:0c:ca:0d:b0:b0:8d:59:08: 3a:43:e2:31:b1:29:de:36:a2:8a:29:d0:9c:90:b3: de:02:a7:13:3b:48:d3:ff:58:a8:7e:68:c8:5d:33: 71:54:da:63:64:d4:23:8e:4d:0f:a4:60:69:99:0a: 5b:f4:b4:c5:5d:25:b9:3f:bc:9f:e9:58:6c:75:bb: 17:bf:bf:61:30:2a:2e:8c:aa:4b:c4:d9:1c:df:a3: 0e:ae:ad:c3:1e:d7:a1:bc:70:9f:ef:86:f7:02:b3: 8b:51:43:ea:05:fa:11:74:bd:0b:1e:49:ec:9d:3d: 6e:8d:3d:81:76:77:e0:4e:fe:88:56:7d:9f:0c:b1: c9:21:52:b1:ed:3f:9a:82:88:6e:16:85:84:f7:f6: 9c:b1:f6:1d:6c:07:c6:58:38:92:52:27:fd:55:bc: f1:a4:0d:39:66:a5:2f:3a:ec:87:ba:39:dc:3b:60: 94:99:29:ab:3c:1d:8c:e0:4a:7d:9b:4a:8f:d4:05: 38:bd:74:76:39:09:5a:c1:be:8f:09:1b:b0:9e:71: f4:e4:34:09:75:3f:05:62:b6:8d:61:80:10:73:19: 02:56:a6:43:88:3b:43:04:c6:3d:32:22:1d:e0:32: e3:fa:e1:33:91:b6:d1:34:62:f5:79:fa:8e:3e:bb: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F8:F5:81:88:AA:E2:6F:5F:38:FF:89:9C:86:97:45:42:34:46:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 148.66.32.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b5:e5:c2:35:f9:c1:3a:d7:9b:e2:db:85:6a:13:d4:e6:02: 0a:6c:99:a3:b9:88:a0:3e:14:b6:bd:7b:3c:8c:58:68:be:b4: 7a:cf:a3:55:3d:33:5d:97:4f:5f:87:2e:e2:57:c2:dd:a0:35: be:33:b5:23:f6:f8:31:c6:95:de:a0:24:d4:14:b4:d9:c4:e1: 43:ca:17:ba:a8:b7:41:6a:45:df:db:75:69:a7:07:89:7a:44: f3:6f:ba:3e:d2:f1:5b:1d:ca:4c:9c:c6:16:ee:7c:cb:4d:1d: de:79:e6:3f:9d:25:d4:87:21:4e:79:29:39:58:ee:e1:11:0d: dd:6f:37:9d:d5:b9:b5:6d:2a:38:c6:51:a8:e2:61:1f:18:0f: 3c:7d:e9:2d:aa:d5:fa:5b:00:43:03:b4:dc:56:8d:8c:a8:d2: 30:b8:ad:98:16:e7:29:91:87:2d:84:de:f9:6c:be:50:5a:73: 04:50:86:f2:df:78:7d:6b:87:24:ff:ea:2f:47:a2:01:5d:b7: ea:e7:b4:9d:08:c9:d0:66:84:ae:df:49:3e:e1:8b:ba:4d:d3: 3b:11:0a:b9:d5:73:4e:1d:56:ed:09:21:f8:2f:a4:be:47:ba: cf:7f:6f:15:4b:56:3a:76:a5:b8:66:fa:02:c2:95:52:ed:93: ac:8f:b5:38 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEkESbIqumJZdVTZqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDIyNzAxNDUzMloXDTI3MDYwMjAwNDUzMlowLzEtMCsGA1UEAxMk YjU3NTEzMGEtMWFhNC00YmE1LTg3NzAtMzM3ZjNjY2ViZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEw5Lz82DMoNsLCNWQg6Q+IxsSneNqKKKdCc kLPeAqcTO0jT/1iofmjIXTNxVNpjZNQjjk0PpGBpmQpb9LTFXSW5P7yf6VhsdbsX v79hMCoujKpLxNkc36MOrq3DHtehvHCf74b3ArOLUUPqBfoRdL0LHknsnT1ujT2B dnfgTv6IVn2fDLHJIVKx7T+agohuFoWE9/acsfYdbAfGWDiSUif9VbzxpA05ZqUv OuyHujncO2CUmSmrPB2M4Ep9m0qP1AU4vXR2OQlawb6PCRuwnnH05DQJdT8FYraN YYAQcxkCVqZDiDtDBMY9MiId4DLj+uEzkbbRNGL1efqOPrs7MQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFK349YGIquJvXzj/iZyGl0VCNEbBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i NTc1MTMwYS0xYWE0LTRiYTUtODc3MC0zMzdmM2NjZWJkNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2I1NzUxMzBhLTFhYTQtNGJhNS04 NzcwLTMzN2YzY2NlYmQ3My9iNTc1MTMwYS0xYWE0LTRiYTUtODc3MC0zMzdmM2Nj ZWJkNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKUQiAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WjAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJrXlwjX5wTrXm+LbhWoT1OYCCmyZo7mIoD4Utr17PIxYaL60 es+jVT0zXZdPX4cu4lfC3aA1vjO1I/b4McaV3qAk1BS02cThQ8oXuqi3QWpF39t1 aacHiXpE82+6PtLxWx3KTJzGFu58y00d3nnmP50l1IchTnkpOVju4REN3W83ndW5 tW0qOMZRqOJhHxgPPH3pLarV+lsAQwO03FaNjKjSMLitmBbnKZGHLYTe+Wy+UFpz BFCG8t94fWuHJP/qL0eiAV236ue0nQjJ0GaErt9JPuGLuk3TOxEKudVzTh1W7Qkh +C+kvke6z39vFUtWOnaluGb6AsKVUu2TrI+1OA== -----END CERTIFICATE-----Generated at Thu Apr 10 22:06:28 2025 by rpki-client