$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer (raw, json) Hash identifier: t9IKfd466B6lSnsCsRM56QlPs8feW5HUqAciqdlSQ8s= Subject key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849286B2A66E99D8A7790A8E9B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Mar 2025 00:22:05 +0000 Certificate not after: Tue 15 Jun 2027 00:22:05 +0000 Subordinate resources: AS: 33307 IP: 2604:9840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:6b:2a:66:e9:9d:8a:77:90:a8:e9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 12 00:22:05 2025 GMT Not After : Jun 15 00:22:05 2027 GMT Subject: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:f6:73:6f:93:7b:de:f4:97:62:83:d7:85: 19:a3:5c:92:13:c7:3c:8b:36:ef:13:98:8e:21:1d: 65:19:3d:10:42:9d:fa:08:a3:9d:68:2c:a5:a8:5c: 40:2f:fc:ff:a7:58:10:f0:ad:2a:d0:2b:5e:a7:e5: 90:1e:d6:f2:70:fa:13:02:13:96:3b:e5:04:16:2e: f7:4a:a2:18:2f:67:87:c7:1a:f1:59:43:a8:da:fd: e0:a9:4f:90:32:c9:0e:51:03:d4:1a:e4:42:61:d8: 78:90:9d:80:40:cd:48:c2:3c:81:f4:2a:52:31:85: a5:ae:eb:d4:8d:a5:5c:45:55:54:81:15:c1:5e:23: ab:7f:8d:21:d8:8c:ce:28:81:f3:1c:4f:21:6d:29: ec:b8:60:99:2c:3d:25:e5:1f:c4:a9:1d:7e:8b:6a: c9:16:5b:d1:4a:05:6b:7d:1a:9d:f3:73:13:3f:87: a1:86:0a:01:10:90:18:4c:6a:da:bc:5c:20:12:f3: 93:1e:f3:86:90:ea:78:46:d4:89:04:2a:9d:4f:b6: b5:14:45:4f:89:c3:e7:98:43:98:68:cd:92:39:56: 5c:b5:b0:0a:d5:cb:9c:0b:8b:f9:c4:57:6c:bf:51: 11:67:d8:ea:89:73:e6:84:25:c6:f1:38:37:d3:3e: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2604:9840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33307 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:93:8b:e5:7f:b8:4a:be:91:27:f6:1d:ed:9f:73:4c:5d:57: 06:27:8c:67:c3:71:3e:23:49:9d:d1:32:89:76:6e:85:49:0a: 82:4a:eb:71:3a:66:14:ec:f3:71:fe:99:16:a0:57:4e:a0:80: 30:16:9f:40:c3:55:f0:6c:f4:c1:cf:1e:2d:4c:d9:61:95:d5: 51:84:e5:3c:07:35:f9:a7:7f:53:83:2f:87:c4:99:5e:64:86: 34:a7:fd:ea:c1:07:e6:de:cd:2b:93:1c:97:2a:b1:4b:dd:9b: 47:ab:03:5a:92:58:66:7d:bc:df:2c:1c:3e:f9:c8:19:83:ab: b9:fb:f4:ce:96:4a:d2:9c:1f:3a:40:63:9a:24:29:80:31:c6: 7f:37:4c:0f:94:4c:df:f6:71:79:2b:f5:0f:e4:d2:81:cc:0d: c3:0d:99:01:b7:ac:75:ce:e6:a2:a8:60:2f:3f:f5:63:b6:a3: c9:8b:26:30:9e:93:45:3a:7e:c7:31:03:e9:f3:55:ce:77:16: 7d:ea:45:9c:8d:d4:39:ba:a7:8d:1b:4f:e6:2e:a3:83:09:df: a0:71:8b:63:09:9e:b2:81:c3:57:61:33:19:d0:83:04:45:0f: 9d:5a:8d:c1:55:27:6c:ab:6e:76:fb:8b:75:b8:c8:8d:ec:9a: 26:e6:57:60 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEkoaypm6Z2Kd5Co6bQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDMxMjAwMjIwNVoXDTI3MDYxNTAwMjIwNVowLzEtMCsGA1UEAxMk ZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhv2c2+Te970l2KD14UZo1ySE8c8izbvE5iO IR1lGT0QQp36CKOdaCylqFxAL/z/p1gQ8K0q0Ctep+WQHtbycPoTAhOWO+UEFi73 SqIYL2eHxxrxWUOo2v3gqU+QMskOUQPUGuRCYdh4kJ2AQM1IwjyB9CpSMYWlruvU jaVcRVVUgRXBXiOrf40h2IzOKIHzHE8hbSnsuGCZLD0l5R/EqR1+i2rJFlvRSgVr fRqd83MTP4ehhgoBEJAYTGravFwgEvOTHvOGkOp4RtSJBCqdT7a1FEVPicPnmEOY aM2SOVZctbAK1cucC4v5xFdsv1ERZ9jqiXPmhCXG8Tg30z6mTQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFPZWE8YXGzCN4obWQqwrHfg83kNxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k ZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2RkZjk4YzdhLWVlMjItNDY5My04 MTcwLWM5YjE5N2JjOWRhMC9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdi YzlkYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBJhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCCGzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAJk4vlf7hKvpEn9h3tn3NMXVcGJ4xnw3E+I0md0TKJdm6F SQqCSutxOmYU7PNx/pkWoFdOoIAwFp9Aw1XwbPTBzx4tTNlhldVRhOU8BzX5p39T gy+HxJleZIY0p/3qwQfm3s0rkxyXKrFL3ZtHqwNaklhmfbzfLBw++cgZg6u5+/TO lkrSnB86QGOaJCmAMcZ/N0wPlEzf9nF5K/UP5NKBzA3DDZkBt6x1zuaiqGAvP/Vj tqPJiyYwnpNFOn7HMQPp81XOdxZ96kWcjdQ5uqeNG0/mLqODCd+gcYtjCZ6ygcNX YTMZ0IMERQ+dWo3BVSdsq252+4t1uMiN7Jom5ldg -----END CERTIFICATE-----Generated at Sat Apr 5 00:31:03 2025 by rpki-client