$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer File: e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer (raw, json) Hash identifier: 9t8CC+6UPSFmqEQfCnU45edZQn22YoKXIWcI8LaNqlE= Subject key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584881138F2D1849566DDA1BC580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Jan 2025 01:45:34 +0000 Certificate not after: Fri 16 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 400688 IP: 23.172.72.0/24 IP: 2602:80f:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:81:13:8f:2d:18:49:56:6d:da:1b:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 11 01:45:34 2025 GMT Not After : Apr 16 00:45:34 2027 GMT Subject: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:bf:29:e3:77:4c:24:27:19:da:bd:17:80: 87:dc:e8:75:f5:1d:fe:de:2d:7a:f2:cf:ee:12:53: 7e:97:7c:e4:e9:f3:cb:66:c7:2f:2b:af:b7:5e:39: b1:dd:6c:e0:d1:13:70:34:b1:53:fa:22:c2:5a:c8: 63:06:9b:c8:0a:e7:55:53:de:00:15:87:0c:75:6d: b8:8b:09:47:ee:25:66:95:eb:f2:50:85:cc:e0:d5: 7a:69:a4:5d:ed:18:dc:e2:1d:00:77:6f:e3:bf:23: 30:85:02:2a:13:25:35:2b:18:cf:a0:66:2a:48:ac: 52:d5:30:04:56:64:fb:2d:8b:46:d5:08:b7:7c:cd: 38:39:1b:3d:8a:9f:3c:84:7c:0b:b6:b0:c8:1f:69: 6d:68:4b:dd:9d:74:99:f0:a2:32:c2:76:17:ad:b6: 43:bf:a5:36:c6:64:a6:92:2f:ed:46:7a:30:3b:1a: a4:03:16:38:61:c6:b6:83:1c:2e:20:c5:76:9b:93: 73:49:60:60:8e:57:e7:f3:6c:e4:8b:46:4c:3e:9a: 53:ab:82:5e:ef:38:db:a3:cf:d7:a3:78:47:31:89: 82:86:16:91:54:0a:00:ef:c7:d1:03:ce:97:a1:88: d2:ec:fb:6d:0c:2c:39:49:a6:41:9f:c3:4a:cc:4b: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.172.72.0/24 IPv6: 2602:80f:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d9:31:dc:2c:75:62:d1:73:2c:c9:56:72:41:41:05:b3:df: 4b:b0:ae:22:c3:75:c8:87:bd:16:ee:01:f9:c0:33:04:9d:8e: b4:4d:28:c8:e4:17:40:01:ec:2f:60:1b:42:db:a9:2d:05:6c: c0:7d:77:fd:69:04:86:61:27:d6:e4:09:5e:e5:51:59:f9:c1: 8e:dd:4f:d0:e2:bf:07:74:3c:39:e2:78:bc:ee:ab:2b:32:64: db:f9:36:fa:d3:4b:8a:e0:31:91:75:2a:ad:6c:f6:8c:63:4b: 85:af:dd:2d:a6:ce:84:9a:69:3d:29:4c:0e:4e:fa:7e:43:49: 41:cc:0e:31:1d:bd:45:7f:2d:41:96:64:9b:cf:99:01:8c:2a: ce:43:ab:d6:86:1f:b0:4a:39:d7:9e:74:1a:ff:88:cd:1f:94: da:0f:83:13:8c:eb:65:5d:68:ce:1a:be:49:ad:73:18:aa:b1: 90:ed:5c:38:9b:09:47:4b:02:e8:9e:0b:9f:fc:3d:b9:45:38: c5:34:ed:ed:cc:c2:09:e9:1e:26:e5:9f:54:57:eb:b0:0d:65: f9:b9:ad:b8:a5:d7:7f:7e:0b:7f:05:29:95:7d:8f:71:72:fd: 99:cd:13:3b:e0:f0:4c:55:6a:3a:61:ac:14:aa:fb:c9:bf:5d: 4f:c1:62:6b -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEiBE48tGElWbdobxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDExMTAxNDUzNFoXDTI3MDQxNjAwNDUzNFowLzEtMCsGA1UEAxMk ZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhlMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJi/KeN3TCQnGdq9F4CH3Oh19R3+3i168s/u ElN+l3zk6fPLZscvK6+3Xjmx3Wzg0RNwNLFT+iLCWshjBpvICudVU94AFYcMdW24 iwlH7iVmlevyUIXM4NV6aaRd7Rjc4h0Ad2/jvyMwhQIqEyU1KxjPoGYqSKxS1TAE VmT7LYtG1Qi3fM04ORs9ip88hHwLtrDIH2ltaEvdnXSZ8KIywnYXrbZDv6U2xmSm ki/tRnowOxqkAxY4Yca2gxwuIMV2m5NzSWBgjlfn82zki0ZMPppTq4Je7zjbo8/X o3hHMYmChhaRVAoA78fRA86XoYjS7PttDCw5SaZBn8NKzEt3bwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFHGiM9QofjH1N+Ei+lJ5wusGJdWRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9l MzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2UzNDc2ODdjLWQ4MGQtNDZlMi1i MzBlLTEwYWU2OGQ4ZTFlZS9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhk OGUxZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXrEgwDwQCAAIwCQMHBCYCCA+QADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGHTAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmdkx3Cx1YtFzLMlWckFBBbPf S7CuIsN1yIe9Fu4B+cAzBJ2OtE0oyOQXQAHsL2AbQtupLQVswH13/WkEhmEn1uQJ XuVRWfnBjt1P0OK/B3Q8OeJ4vO6rKzJk2/k2+tNLiuAxkXUqrWz2jGNLha/dLabO hJppPSlMDk76fkNJQcwOMR29RX8tQZZkm8+ZAYwqzkOr1oYfsEo51550Gv+IzR+U 2g+DE4zrZV1ozhq+Sa1zGKqxkO1cOJsJR0sC6J4Ln/w9uUU4xTTt7czCCekeJuWf VFfrsA1l+bmtuKXXf34LfwUplX2PcXL9mc0TO+DwTFVqOmGsFKr7yb9dT8Fiaw== -----END CERTIFICATE-----Generated at Tue Feb 11 22:49:28 2025 by rpki-client