$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer File: bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer (raw, json) Hash identifier: RwD23HV1ihzCKCL4k/FoD9nbPyhFTIJ0xcpk2ZrOAMI= Subject key identifier: 64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858489FC9144FAA5E5E2318E3F100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 01:45:33 +0000 Certificate not after: Tue 27 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 35891 IP: 192.83.205.0/24 IP: 199.59.120.0/22 IP: 199.254.124.0/22 IP: 208.93.248.0/21 IP: 216.211.240.0/20 IP: 2606:bf00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:c9:14:4f:aa:5e:5e:23:18:e3:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 22 01:45:33 2025 GMT Not After : Apr 27 00:45:33 2027 GMT Subject: CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:aa:25:91:8a:b1:95:0e:8b:6f:d3:ac:d6: 52:e4:41:8c:fc:f6:58:0f:90:ac:8e:a7:e8:1e:9a: fb:12:1f:c2:2e:be:87:0a:c7:d6:7a:4e:4a:9b:21: a6:12:68:f7:f1:33:ca:d2:60:15:5c:65:c9:1b:fc: e4:09:16:fb:45:90:2e:1f:48:3c:78:ff:b3:c4:d9: ee:c8:af:3e:8e:b9:04:99:4e:1a:50:48:bd:b5:23: 01:af:48:cc:44:b6:92:28:02:e4:74:96:18:f9:46: bd:43:a9:34:8e:73:a2:6e:20:32:47:75:65:d4:14: 89:9b:eb:1d:d4:a7:ad:08:ce:01:bf:56:8b:7a:52: af:5b:48:7b:55:51:8b:42:ca:5c:15:92:52:04:b8: e8:91:dc:1d:ad:92:88:8d:fc:a8:ce:51:ac:92:13: 1f:c2:51:d9:53:64:cf:00:14:74:05:e8:5d:50:5e: 78:5a:da:92:60:46:b6:d4:e2:75:fa:9a:a9:27:d6: f0:e9:b5:3a:66:23:04:79:f1:8d:4b:16:c6:22:bc: c7:72:2a:4b:91:0f:14:8b:a4:7e:49:14:c4:e1:11: db:c7:0b:ec:b7:f3:fb:dd:fd:bd:12:93:a0:95:72: 24:99:fe:10:7f:74:a0:8e:90:59:87:00:7f:64:03: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.83.205.0/24 199.59.120.0/22 199.254.124.0/22 208.93.248.0/21 216.211.240.0/20 IPv6: 2606:bf00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c2:f5:41:2e:18:40:4d:07:fb:78:b0:9a:77:69:46:88:36: 60:9c:d5:b5:f4:19:52:9a:ec:ba:29:59:b7:1a:f3:42:1d:fb: af:31:bd:29:57:14:de:e5:e2:0d:e8:a6:63:9c:e1:ba:32:48: e1:cc:55:84:b9:03:cb:7f:df:e5:18:31:be:ab:dc:81:35:c1: 43:fd:25:62:1d:d4:af:c0:9e:82:f3:d2:df:d6:a4:32:3e:01: 4b:ad:c6:ed:01:83:7a:dd:da:fc:64:2a:62:a2:da:24:4d:ce: f3:a7:59:8a:8e:2d:9a:ee:f1:a3:4d:61:e1:43:8e:da:0a:04: 6e:7a:3d:f1:70:6a:cd:95:df:df:1f:dd:03:b3:26:01:61:4e: 14:b2:46:4f:46:59:4a:f3:8a:6c:34:b9:97:87:a6:6b:31:8b: 65:09:b9:be:be:bd:cf:8b:7a:b5:ba:9e:ce:86:82:10:22:54: 4d:d2:90:ad:17:c2:ce:eb:88:a5:45:49:22:11:44:75:05:b4: 97:7c:44:54:ca:d2:e7:6d:10:de:24:bb:12:36:fd:1e:e0:e0: 48:43:59:46:94:56:1a:31:77:90:5e:a2:68:a5:1d:28:45:7f: 6d:18:a8:75:4c:72:cc:bc:db:37:d2:93:e6:c2:61:75:20:16: ed:eb:ef:4a -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEifyRRPql5eIxjj8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEyMjAxNDUzM1oXDTI3MDQyNzAwNDUzM1owLzEtMCsGA1UEAxMk YmM0ZDU2MTQtZDFkNC00MmViLWExNzEtYjNkMjM0YWVmN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vSqJZGKsZUOi2/TrNZS5EGM/PZYD5Csjqfo Hpr7Eh/CLr6HCsfWek5KmyGmEmj38TPK0mAVXGXJG/zkCRb7RZAuH0g8eP+zxNnu yK8+jrkEmU4aUEi9tSMBr0jMRLaSKALkdJYY+Ua9Q6k0jnOibiAyR3Vl1BSJm+sd 1KetCM4Bv1aLelKvW0h7VVGLQspcFZJSBLjokdwdrZKIjfyozlGskhMfwlHZU2TP ABR0BehdUF54WtqSYEa21OJ1+pqpJ9bw6bU6ZiMEefGNSxbGIrzHcipLkQ8Ui6R+ SRTE4RHbxwvst/P73f29EpOglXIkmf4Qf3SgjpBZhwB/ZAONbwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFGQIl7BHsnCL9FbY3CGIt1v0LGwKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i YzRkNTYxNC1kMWQ0LTQyZWItYTE3MS1iM2QyMzRhZWY3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2JjNGQ1NjE0LWQxZDQtNDJlYi1h MTcxLWIzZDIzNGFlZjdhMy9iYzRkNTYxNC1kMWQ0LTQyZWItYTE3MS1iM2QyMzRh ZWY3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBADAU80DBALHO3gDBALH/nwDBAPQXfgDBATY0/Aw DQQCAAIwBwMFACYGvwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIwzMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAC3C9UEuGEBNB/t4sJp3aUaINmCc1bX0GVKa7LopWbca80Id+68xvSlXFN7l 4g3opmOc4boySOHMVYS5A8t/3+UYMb6r3IE1wUP9JWId1K/AnoLz0t/WpDI+AUut xu0Bg3rd2vxkKmKi2iRNzvOnWYqOLZru8aNNYeFDjtoKBG56PfFwas2V398f3QOz JgFhThSyRk9GWUrzimw0uZeHpmsxi2UJub6+vc+LerW6ns6GghAiVE3SkK0Xws7r iKVFSSIRRHUFtJd8RFTK0udtEN4kuxI2/R7g4EhDWUaUVhoxd5BeomilHShFf20Y qHVMcsy82zfSk+bCYXUgFu3r70o= -----END CERTIFICATE-----Generated at Tue Feb 11 22:58:26 2025 by rpki-client