$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer File: d6b690dc-d325-42b2-9834-06e4a779b209.cer (raw, json) Hash identifier: U0GycMhX3tnMCnsiSg/X4NhKz0lb3FheGQKQQp/fpe0= Subject key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285847FDDD6A37DF78C49022617180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Nov 2024 01:45:35 +0000 Certificate not after: Sun 28 Feb 2027 01:45:35 +0000 Subordinate resources: AS: 14171 IP: 198.252.136.0/24 IP: 204.152.118.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fd:dd:6a:37:df:78:c4:90:22:61:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Nov 25 01:45:35 2024 GMT Not After : Feb 28 01:45:35 2027 GMT Subject: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7d:01:0d:fa:46:d1:e2:30:bd:a2:d3:49:20: 59:bd:c8:7c:8e:bb:3d:7e:3e:05:ec:fb:32:e0:32: 2b:65:fc:63:bb:a6:7d:95:8a:0a:5f:27:57:14:39: 78:97:89:70:fc:48:72:51:d3:f6:6d:1b:2d:9a:ba: 53:ac:68:61:63:60:67:85:6c:b4:bf:79:9f:fc:9a: 13:f5:3f:04:4c:35:5f:3c:be:e1:6c:9e:48:e8:da: 36:c3:39:52:39:f2:29:b3:d5:34:82:ce:b6:11:0f: 58:ab:06:2e:50:55:f5:89:34:53:f4:6e:46:9d:7e: 58:b4:6f:14:b0:ac:ef:4d:7d:44:6d:93:0a:35:78: eb:c6:23:92:05:a6:63:ff:cd:c8:13:9d:5a:ae:53: 32:27:fc:d8:3f:9c:a7:c3:7f:85:03:62:25:38:5f: 52:08:06:51:91:97:7e:4a:c2:c1:4a:0c:06:a3:9a: 18:ac:a5:2f:3f:61:41:38:f6:7e:e9:5c:66:14:22: a5:6b:70:d9:6e:11:3f:d7:20:ef:67:04:87:d4:2d: 53:13:6f:37:29:a7:88:87:d0:52:77:82:a6:e2:4f: 33:9f:41:c1:e4:92:b4:f3:1f:9b:b1:a8:6e:54:22: fe:eb:47:70:22:3e:c0:cb:46:49:be:ca:3d:58:58: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.252.136.0/24 204.152.118.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14171 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5c:a2:b1:98:55:fd:18:c1:54:f2:32:c5:e2:b4:33:5d:b1: 44:3a:16:9c:69:93:79:d4:0d:dd:88:49:d7:c5:83:a7:c9:57: bd:f8:66:28:26:61:5e:ab:fb:1f:20:b9:4a:c5:ce:f9:3b:7e: 78:b2:a1:15:cf:5d:1b:61:fe:8c:bc:f1:cb:6b:14:91:08:b3: d3:ef:36:29:66:da:5a:7a:30:dd:42:be:fc:cc:90:d5:f8:de: ca:d2:fd:0f:5c:26:2b:31:36:6d:b6:97:5d:35:8c:9f:e7:16: 26:a1:3c:53:cf:c5:eb:c9:ba:e2:fb:c2:63:2e:ef:f8:b0:e3: cb:aa:b0:ae:89:1d:9d:3b:d6:e1:89:bc:bb:48:0a:5c:c6:35: 44:2a:e9:fb:32:07:e3:55:e9:06:55:6d:ca:8f:30:e9:48:bd: 00:d9:a4:e4:ae:4d:ba:92:af:13:ac:75:e7:83:92:cd:5f:2f: da:ee:88:b1:15:e1:0d:a1:f1:05:a5:79:6f:21:34:47:ed:7e: 06:89:ec:f1:26:4f:7f:18:46:8c:d0:85:2d:5f:9d:6d:24:83: 3b:28:42:45:5f:2e:4e:58:52:e0:c1:db:37:a8:4c:87:84:75: 92:56:ee:b1:be:88:4e:dd:bb:46:d1:37:7a:8a:ef:63:1c:2e: fe:28:fc:78 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEf93Wo333jEkCJhcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MTEyNTAxNDUzNVoXDTI3MDIyODAxNDUzNVowLzEtMCsGA1UEAxMk ZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3NzliMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh30BDfpG0eIwvaLTSSBZvch8jrs9fj4F7Psy 4DIrZfxju6Z9lYoKXydXFDl4l4lw/EhyUdP2bRstmrpTrGhhY2BnhWy0v3mf/JoT 9T8ETDVfPL7hbJ5I6No2wzlSOfIps9U0gs62EQ9YqwYuUFX1iTRT9G5GnX5YtG8U sKzvTX1EbZMKNXjrxiOSBaZj/83IE51arlMyJ/zYP5ynw3+FA2IlOF9SCAZRkZd+ SsLBSgwGo5oYrKUvP2FBOPZ+6VxmFCKla3DZbhE/1yDvZwSH1C1TE283KaeIh9BS d4Km4k8zn0HB5JK08x+bsahuVCL+60dwIj7Ay0ZJvso9WFj59QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFO1EE4ahy53zJrI3wlu/mMTv0l+MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k NmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Q2YjY5MGRjLWQzMjUtNDJiMi05 ODM0LTA2ZTRhNzc5YjIwOS9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3 OWIyMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADG/IgDBAHMmHYwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICN1swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAO1yisZhV/RjBVPIyxeK0M12xRDoWnGmTedQN3YhJ 18WDp8lXvfhmKCZhXqv7HyC5SsXO+Tt+eLKhFc9dG2H+jLzxy2sUkQiz0+82KWba Wnow3UK+/MyQ1fjeytL9D1wmKzE2bbaXXTWMn+cWJqE8U8/F68m64vvCYy7v+LDj y6qwrokdnTvW4Ym8u0gKXMY1RCrp+zIH41XpBlVtyo8w6Ui9ANmk5K5NupKvE6x1 54OSzV8v2u6IsRXhDaHxBaV5byE0R+1+Bons8SZPfxhGjNCFLV+dbSSDOyhCRV8u TlhS4MHbN6hMh4R1klbusb6ITt27RtE3eorvYxwu/ij8eA== -----END CERTIFICATE-----Generated at Fri Apr 4 20:23:16 2025 by rpki-client