$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer File: 3025c657-32e7-49d2-ab95-71634243f0d7.cer (raw, json) Hash identifier: isnsHJJZQxMvYZNdYsmfksp83iGwiNX037KqbvzBwv4= Subject key identifier: 48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858489FC91436B6E69534E31CFC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 01:45:33 +0000 Certificate not after: Tue 27 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 14241 IP: 216.11.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:c9:14:36:b6:e6:95:34:e3:1c:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 22 01:45:33 2025 GMT Not After : Apr 27 00:45:33 2027 GMT Subject: CN=3025c657-32e7-49d2-ab95-71634243f0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:93:10:d1:18:95:c9:52:ec:28:d6:cd:73: 20:55:a2:f3:cf:13:23:20:6a:63:2d:a7:43:ec:30: 3f:9b:2a:64:30:bb:7b:a0:f3:ae:f0:fb:44:9a:42: a8:85:6c:eb:a2:1e:67:8a:de:94:c8:2e:ff:ad:34: 03:48:0a:76:e3:1c:ea:a8:5d:f8:47:a0:81:a9:6a: 4c:d6:04:56:09:18:98:c2:45:57:0b:08:da:72:e9: e3:d0:22:e4:f6:34:50:10:6b:d3:d5:b8:31:02:4c: 6f:41:dc:e8:22:f1:fc:72:31:22:4a:80:4d:7a:86: 44:98:97:e9:4c:6d:1d:3d:0e:1f:aa:a5:3c:04:08: fe:0d:47:f5:69:6f:5e:68:ca:2a:01:60:93:9b:14: c9:bc:61:71:a0:94:ab:a1:5f:a8:9d:c2:1c:62:d2: 1e:90:f1:c2:f0:b9:d3:b7:72:1e:2d:c0:85:7c:a8: 7a:06:0f:64:cc:8b:7e:25:86:b0:11:5b:86:49:80: 71:ec:4d:18:84:0c:23:46:a6:ec:7b:04:ec:e1:8d: 6a:5c:59:12:ca:2f:51:3b:aa:09:3d:aa:db:d8:8d: a0:45:99:59:40:09:b7:fc:5f:e3:23:8c:d5:70:55: 46:7b:9c:10:d7:b2:e3:69:2b:67:ad:79:28:83:1d: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 216.11.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14241 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7d:69:e5:2b:b6:2b:81:20:40:d7:c3:f7:b2:da:46:f4:41: 1f:60:40:f8:09:01:80:d9:d0:0e:fb:fa:61:c0:63:10:ed:ab: e6:ee:3c:1f:d2:b2:ac:0c:19:2d:11:b4:82:6e:2a:58:7c:80: 9c:8b:af:03:44:3a:93:57:b7:85:32:4c:f4:8d:91:96:47:53: 60:57:40:cb:af:69:09:77:e1:c9:95:64:17:05:f7:60:48:ed: 88:56:a1:a8:78:ae:85:86:90:0d:09:70:8d:64:27:08:9f:8c: 7b:c4:3f:ac:23:10:c8:29:23:2a:ea:5e:0d:92:35:bc:e0:42: a5:81:9d:24:21:13:c2:15:a9:c3:2b:b7:d6:ee:b3:c5:57:2c: bd:3c:1f:5e:d5:c6:5f:b9:ef:0d:0a:e9:f2:b8:58:2b:5f:e3: be:3a:9c:7c:37:79:f2:0c:7d:19:b8:1b:d9:d7:db:76:be:3f: ff:62:44:4e:c9:9f:e4:0d:86:10:93:f9:87:31:e9:43:68:19: 0f:9a:d8:99:ea:07:af:57:60:e8:56:6d:4c:27:36:c6:c9:0e: 44:31:eb:5e:2d:f7:d4:09:bd:e2:64:a3:34:e5:a9:e2:b1:bf: 8f:95:97:20:6a:88:35:0c:52:08:e5:75:9f:37:ca:ef:74:e6: 6c:a1:16:4b -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEifyRQ2tuaVNOMc/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEyMjAxNDUzM1oXDTI3MDQyNzAwNDUzM1owLzEtMCsGA1UEAxMk MzAyNWM2NTctMzJlNy00OWQyLWFiOTUtNzE2MzQyNDNmMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTSTENEYlclS7CjWzXMgVaLzzxMjIGpjLadD 7DA/mypkMLt7oPOu8PtEmkKohWzroh5nit6UyC7/rTQDSAp24xzqqF34R6CBqWpM 1gRWCRiYwkVXCwjacunj0CLk9jRQEGvT1bgxAkxvQdzoIvH8cjEiSoBNeoZEmJfp TG0dPQ4fqqU8BAj+DUf1aW9eaMoqAWCTmxTJvGFxoJSroV+oncIcYtIekPHC8LnT t3IeLcCFfKh6Bg9kzIt+JYawEVuGSYBx7E0YhAwjRqbsewTs4Y1qXFkSyi9RO6oJ Parb2I2gRZlZQAm3/F/jI4zVcFVGe5wQ17LjaStnrXkogx3W9QIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFEiIFsFw+L/fhbvRWPg3lQ1jfpboMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z MDI1YzY1Ny0zMmU3LTQ5ZDItYWI5NS03MTYzNDI0M2YwZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMwMjVjNjU3LTMyZTctNDlkMi1h Yjk1LTcxNjM0MjQzZjBkNy8zMDI1YzY1Ny0zMmU3LTQ5ZDItYWI5NS03MTYzNDI0 M2YwZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwDYCzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI3 oTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQALfWnlK7YrgSBA18P3stpG9EEfYED4CQGA2dAO+/phwGMQ7avm 7jwf0rKsDBktEbSCbipYfICci68DRDqTV7eFMkz0jZGWR1NgV0DLr2kJd+HJlWQX BfdgSO2IVqGoeK6FhpANCXCNZCcIn4x7xD+sIxDIKSMq6l4NkjW84EKlgZ0kIRPC FanDK7fW7rPFVyy9PB9e1cZfue8NCunyuFgrX+O+Opx8N3nyDH0ZuBvZ19t2vj// YkROyZ/kDYYQk/mHMelDaBkPmtiZ6gevV2DoVm1MJzbGyQ5EMeteLffUCb3iZKM0 5anisb+PlZcgaog1DFII5XWfN8rvdOZsoRZL -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:38 2025 by rpki-client