$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer File: b89f752a-b36c-4af5-938d-969edb017937.cer (raw, json) Hash identifier: K2cWoR3+B604m1/Bch3+gccvDYwV9f5wXC+tJNQuZe0= Subject key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848DA6970B495339DF49ACEA580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 01:45:33 +0000 Certificate not after: Tue 18 May 2027 00:45:33 +0000 Subordinate resources: IP: 153.46.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:69:70:b4:95:33:9d:f4:9a:ce:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 12 01:45:33 2025 GMT Not After : May 18 00:45:33 2027 GMT Subject: CN=b89f752a-b36c-4af5-938d-969edb017937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:aa:04:bd:f7:60:76:61:c0:64:5f:9a:c9: 45:70:2f:5b:55:ed:dc:65:b9:98:18:d4:5b:2f:81: 35:f3:cc:be:8f:7b:30:b3:19:14:a9:8e:27:19:5a: 6c:d7:83:b1:1c:47:e6:9e:2b:d1:85:57:b6:08:d5: e3:60:e6:d2:33:7a:fb:81:ce:07:de:05:59:eb:e2: 34:9e:1d:9b:8d:b9:9b:1b:9e:1a:ff:8c:76:25:8c: ed:fb:43:18:82:20:d8:84:1c:74:93:00:9b:cc:4d: 31:df:a4:09:3c:cb:07:2c:2a:36:3f:28:db:70:48: b0:d9:ad:80:e8:2c:f3:13:05:4c:93:7a:f2:a3:a1: 2b:f9:da:cd:44:ba:25:51:3e:f7:e9:61:d0:5e:65: 76:d4:02:02:3b:ee:3e:40:df:bc:70:30:04:b9:ae: 40:67:53:68:c7:3f:f6:4e:98:62:ea:73:05:f9:09: 8c:97:26:2a:56:2d:90:d2:9f:a9:ff:e4:23:38:c5: d4:f5:b2:cd:07:f9:cb:a2:0c:dc:a6:b9:44:ef:a1: d0:42:f3:ca:51:c2:ab:2c:18:93:30:5a:31:2c:a0: 1f:16:4a:25:5a:ac:48:2d:a9:1e:55:78:57:c1:84: f1:ab:11:da:55:d6:52:40:f4:bc:d4:a0:15:62:2c: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 153.46.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6c:30:8a:c2:9f:19:53:42:6b:cc:d5:24:cf:d3:cb:23:f3: 3f:e0:d9:82:8d:5f:0c:03:fa:04:e1:ef:78:59:82:20:75:64: 61:8e:6b:f3:ec:1e:de:d9:f0:68:bf:78:8b:dc:b3:21:f2:a6: ed:cc:67:3f:32:87:b4:85:6e:93:66:08:39:2c:ff:f8:fd:8e: 95:36:ad:22:cb:5f:96:00:91:d5:af:8d:90:a6:dd:97:dc:9d: 02:aa:44:70:c9:cb:ed:03:35:2a:3a:0c:17:2c:6f:0d:93:80: 02:df:8a:c4:96:60:0e:b3:76:ad:b2:48:d5:da:4b:58:c3:0f: fd:21:fb:44:fd:99:f2:a6:1f:7b:63:25:41:9a:3a:58:22:0c: 5f:84:28:7a:c3:b8:06:26:60:87:30:ca:09:a2:d3:bc:47:da: c4:5b:40:07:d1:18:4e:f7:7c:68:3c:e4:b1:78:8d:1b:88:6e: 8f:57:bc:fb:88:4d:cb:b6:cc:68:6e:c9:12:c2:1f:07:23:51: d8:b2:21:7b:9e:6e:32:2d:85:c7:37:cb:38:cb:22:64:20:c9: 6d:58:67:ee:64:5e:f9:85:98:f4:1d:ae:58:2d:26:98:5d:7b: 44:72:55:0c:f8:77:4e:6a:95:ec:eb:d2:9a:1d:a9:2e:3e:e2: b8:95:35:2c -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEjaaXC0lTOd9JrOpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDIxMjAxNDUzM1oXDTI3MDUxODAwNDUzM1owLzEtMCsGA1UEAxMk Yjg5Zjc1MmEtYjM2Yy00YWY1LTkzOGQtOTY5ZWRiMDE3OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizmqBL33YHZhwGRfmslFcC9bVe3cZbmYGNRb L4E188y+j3swsxkUqY4nGVps14OxHEfmnivRhVe2CNXjYObSM3r7gc4H3gVZ6+I0 nh2bjbmbG54a/4x2JYzt+0MYgiDYhBx0kwCbzE0x36QJPMsHLCo2PyjbcEiw2a2A 6CzzEwVMk3ryo6Er+drNRLolUT736WHQXmV21AICO+4+QN+8cDAEua5AZ1Noxz/2 Tphi6nMF+QmMlyYqVi2Q0p+p/+QjOMXU9bLNB/nLogzcprlE76HQQvPKUcKrLBiT MFoxLKAfFkolWqxILakeVXhXwYTxqxHaVdZSQPS81KAVYiydAwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFLqJ1DOPhkrOiEdXSfIrhG9rLvnPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i ODlmNzUyYS1iMzZjLTRhZjUtOTM4ZC05NjllZGIwMTc5MzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2I4OWY3NTJhLWIzNmMtNGFmNS05 MzhkLTk2OWVkYjAxNzkzNy9iODlmNzUyYS1iMzZjLTRhZjUtOTM4ZC05NjllZGIw MTc5MzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCZLjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfbDCKwp8ZU0JrzNUkz9PL I/M/4NmCjV8MA/oE4e94WYIgdWRhjmvz7B7e2fBov3iL3LMh8qbtzGc/Moe0hW6T Zgg5LP/4/Y6VNq0iy1+WAJHVr42Qpt2X3J0CqkRwycvtAzUqOgwXLG8Nk4AC34rE lmAOs3atskjV2ktYww/9IftE/Znyph97YyVBmjpYIgxfhCh6w7gGJmCHMMoJotO8 R9rEW0AH0RhO93xoPOSxeI0biG6PV7z7iE3LtsxobskSwh8HI1HYsiF7nm4yLYXH N8s4yyJkIMltWGfuZF75hZj0Ha5YLSaYXXtEclUM+HdOapXs69KaHakuPuK4lTUs -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:36 2025 by rpki-client