$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer File: d84b0325-0327-4cbf-bc76-4e79de05793d.cer (raw, json) Hash identifier: TSSI0XR0U6LRjSrFX9/aiy3M/1lX8YuKODyvIB0gnqQ= Subject key identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584881138F4013A1454A50C04AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Jan 2025 01:45:34 +0000 Certificate not after: Fri 16 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 395044 IP: 23.145.88.0/24 IP: 2602:fac4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:81:13:8f:40:13:a1:45:4a:50:c0:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 11 01:45:34 2025 GMT Not After : Apr 16 00:45:34 2027 GMT Subject: CN=d84b0325-0327-4cbf-bc76-4e79de05793d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:97:e9:1e:42:1c:78:b2:18:81:92:18:b0: d1:f1:e5:fc:41:b6:74:dc:31:87:ce:8c:fc:66:f1: 90:14:93:a8:8a:75:37:b1:d3:c2:2b:75:be:d2:57: 29:92:5e:fe:38:88:ec:2f:d4:25:86:d0:0b:5a:ef: dc:46:f7:02:a1:e5:bf:a1:29:24:ae:f7:d2:80:a9: 1f:d6:98:2d:7a:40:35:61:a8:cb:62:02:d0:a1:ca: 70:55:68:79:b5:19:0e:1a:30:8e:bd:0f:6f:26:9b: 94:6b:ef:e6:d9:4b:d6:29:8a:8c:ca:aa:d3:9d:40: 60:2f:7c:6f:a3:aa:16:a4:c4:10:c5:f1:2f:d3:60: e7:b0:9a:b7:55:30:b9:87:dc:71:37:5b:0f:01:c4: d5:28:90:56:4d:98:a4:2b:b9:9a:b2:94:b2:58:16: 8a:bf:c1:77:ab:a5:7a:0b:c9:db:f7:18:93:63:37: 15:ee:0a:89:11:01:56:b9:36:8c:6a:dc:59:6f:64: 57:0f:e0:ba:da:c2:c6:24:f7:28:57:98:8e:fe:1b: 1c:b7:25:7e:f6:c3:03:ea:38:38:bb:d3:f3:54:2d: c4:81:3b:9c:06:b9:59:e2:3f:51:2d:d6:53:45:e0: cf:4a:dd:a7:62:78:04:ec:ae:1a:ac:c7:03:7d:ef: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.145.88.0/24 IPv6: 2602:fac4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395044 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:41:cf:c2:62:b9:2c:ca:5f:3b:1e:ea:22:ed:76:fe:06:00: d5:52:88:a7:94:e7:75:bf:21:e6:4c:34:61:ea:54:57:38:7e: b5:28:87:ea:17:75:48:b3:bf:a3:79:75:90:98:66:8a:48:b1: 84:7a:46:7e:95:a2:e9:ce:ba:7f:59:ba:c6:af:a2:d4:ff:fd: 16:54:ef:67:55:9e:95:92:de:4f:7c:1e:4f:46:84:ca:29:cd: 83:30:b4:86:9c:be:1d:5a:98:4d:58:df:c2:2b:2f:bb:4e:34: 97:30:f1:fd:d4:a7:90:9d:c6:b0:ab:e7:f0:30:d3:89:33:27: ca:68:61:86:c2:fa:58:64:25:14:4f:c7:a2:9c:39:fa:4a:2e: d0:e6:9c:cb:eb:3d:d3:f8:1d:ce:e5:01:c6:18:28:61:90:ca: c6:eb:be:29:10:78:32:8b:41:cd:19:b6:d7:ca:df:1b:e0:1a: 53:e0:57:f2:91:e3:7f:f8:9a:83:34:22:94:18:c4:85:52:fc: a1:99:f4:e8:31:f7:f1:e3:24:88:5f:37:3a:30:63:20:b1:6a: 15:08:9c:84:6f:35:4a:59:44:4b:7e:03:b0:ee:fb:c7:06:0d: 99:8e:fe:b7:6f:df:db:cb:26:5f:0d:b7:c8:09:b2:48:71:39: 3c:3c:a6:27 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEiBE49AE6FFSlDASsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDExMTAxNDUzNFoXDTI3MDQxNjAwNDUzNFowLzEtMCsGA1UEAxMk ZDg0YjAzMjUtMDMyNy00Y2JmLWJjNzYtNGU3OWRlMDU3OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTSX6R5CHHiyGIGSGLDR8eX8QbZ03DGHzoz8 ZvGQFJOoinU3sdPCK3W+0lcpkl7+OIjsL9QlhtALWu/cRvcCoeW/oSkkrvfSgKkf 1pgtekA1YajLYgLQocpwVWh5tRkOGjCOvQ9vJpuUa+/m2UvWKYqMyqrTnUBgL3xv o6oWpMQQxfEv02DnsJq3VTC5h9xxN1sPAcTVKJBWTZikK7maspSyWBaKv8F3q6V6 C8nb9xiTYzcV7gqJEQFWuTaMatxZb2RXD+C62sLGJPcoV5iO/hsctyV+9sMD6jg4 u9PzVC3EgTucBrlZ4j9RLdZTReDPSt2nYngE7K4arMcDfe8fzwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK69gj/dJ6mRZONpxTQdJctgkKNQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k ODRiMDMyNS0wMzI3LTRjYmYtYmM3Ni00ZTc5ZGUwNTc5M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Q4NGIwMzI1LTAzMjctNGNiZi1i Yzc2LTRlNzlkZTA1NzkzZC9kODRiMDMyNS0wMzI3LTRjYmYtYmM3Ni00ZTc5ZGUw NTc5M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkVgwDgQCAAIwCAMGACYC+sQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYHJDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjQc/CYrksyl87Huoi7Xb+BgDV UoinlOd1vyHmTDRh6lRXOH61KIfqF3VIs7+jeXWQmGaKSLGEekZ+laLpzrp/WbrG r6LU//0WVO9nVZ6Vkt5PfB5PRoTKKc2DMLSGnL4dWphNWN/CKy+7TjSXMPH91KeQ ncawq+fwMNOJMyfKaGGGwvpYZCUUT8einDn6Si7Q5pzL6z3T+B3O5QHGGChhkMrG 674pEHgyi0HNGbbXyt8b4BpT4FfykeN/+JqDNCKUGMSFUvyhmfToMffx4ySIXzc6 MGMgsWoVCJyEbzVKWURLfgOw7vvHBg2Zjv63b9/byyZfDbfICbJIcTk8PKYn -----END CERTIFICATE-----Generated at Sat Feb 15 19:32:10 2025 by rpki-client