$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer File: 40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer (raw, json) Hash identifier: 2UoRTfZnHpwxNyltaPtBwF9tQwK10+MYtd+R3N4BLRw= Subject key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848CAD751FFF4940598D30E5C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Feb 2025 11:54:01 +0000 Certificate not after: Wed 12 May 2027 10:54:01 +0000 Subordinate resources: IP: 23.133.164.0/24 IP: 2602:f703::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ca:d7:51:ff:f4:94:05:98:d3:0e:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 6 11:54:01 2025 GMT Not After : May 12 10:54:01 2027 GMT Subject: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:4c:eb:8c:62:76:00:02:d4:a2:8a:e2:14: fd:7b:bd:50:f3:6e:44:d0:30:c2:fc:a4:e0:c8:21: 00:4c:da:da:cc:21:87:bd:a2:72:e2:fe:4b:6b:e9: 7f:49:ee:af:14:cc:3a:8c:04:a8:3c:33:db:d3:5f: c6:6b:38:00:ff:24:75:d8:97:9f:c4:6c:83:81:33: f2:d0:62:b3:77:f6:64:4f:ed:f7:df:22:09:f0:6b: 98:1c:c3:63:aa:94:29:a0:fb:77:bd:53:ab:00:dc: cb:17:3f:9d:3e:ed:1a:c2:77:c2:e1:67:1d:21:e5: a2:b8:4f:17:d4:43:ab:74:44:51:93:43:ed:b2:6b: f1:27:a6:36:29:5d:5e:f5:13:3a:29:5d:7b:71:1e: 75:10:d2:ae:c2:cc:c3:bb:05:34:84:fb:1d:86:5f: ba:27:6f:0d:b9:65:ea:4b:55:ac:9c:f7:9a:fd:47: 9f:79:6c:c6:b7:04:c4:5f:a3:ac:29:24:a0:9a:bb: 58:90:49:52:1a:a5:52:d3:33:c2:bf:77:0b:9c:7c: d6:2d:9b:6f:d8:01:56:db:5b:b5:a8:84:ff:4c:8d: 50:47:b3:11:de:bc:2f:3d:43:b8:64:05:33:76:46: 79:ad:ef:7e:54:b1:6c:32:8c:26:07:77:1f:41:22: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 IPv6: 2602:f703::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e8:e0:b2:38:11:c3:2b:96:c0:4a:d5:84:cb:04:05:3e:e7: 53:24:da:d8:3b:fc:9a:96:30:dc:57:c3:03:da:1d:cb:83:06: 00:29:71:e0:8b:ab:d9:71:32:dd:1f:b7:61:0e:81:08:0e:a6: 8c:16:81:86:2a:97:af:ab:0a:88:e9:14:eb:39:d4:df:65:f0: 2c:e1:f5:42:51:e0:77:91:3f:90:51:6f:31:2d:3c:78:b7:19: 74:b4:f0:8f:d3:9f:1d:b7:ba:cb:73:30:7c:53:fe:d0:2e:e2: 9c:e3:1e:21:9d:70:6c:50:a1:d0:d3:b2:aa:d6:e9:c7:e5:ad: 57:94:c4:2d:8a:b3:ff:fd:3f:11:2c:c6:49:2e:d1:0f:3a:e4: f9:b7:47:b8:a1:a6:47:25:b0:a3:c7:2f:86:b7:c6:a8:92:27: ac:d6:6e:98:ba:19:18:a5:af:2f:a4:81:81:b4:ec:ae:4b:ab: db:d9:11:aa:67:f3:d1:84:b9:34:66:cc:14:6a:91:58:37:22: 66:9f:71:6e:bf:6b:c6:86:a9:a1:75:10:e8:7d:6f:26:36:c1: ed:a1:7a:1a:63:12:93:80:13:09:6b:63:bc:57:9c:f6:23:20: 8e:b7:65:3b:16:58:8b:bf:aa:b8:ae:3e:43:4b:d5:e4:69:f7: a9:c1:10:bf -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjK11H/9JQFmNMOXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDIwNjExNTQwMVoXDTI3MDUxMjEwNTQwMVowLzEtMCsGA1UEAxMk NDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEVM64xidgAC1KKK4hT9e71Q825E0DDC/KTg yCEATNrazCGHvaJy4v5La+l/Se6vFMw6jASoPDPb01/GazgA/yR12JefxGyDgTPy 0GKzd/ZkT+333yIJ8GuYHMNjqpQpoPt3vVOrANzLFz+dPu0awnfC4WcdIeWiuE8X 1EOrdERRk0PtsmvxJ6Y2KV1e9RM6KV17cR51ENKuwszDuwU0hPsdhl+6J28NuWXq S1WsnPea/UefeWzGtwTEX6OsKSSgmrtYkElSGqVS0zPCv3cLnHzWLZtv2AFW21u1 qIT/TI1QR7MR3rwvPUO4ZAUzdkZ5re9+VLFsMowmB3cfQSIsbwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFP0sbE0QyexQYcHrXYRSJDtiey5DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQwZDdiM2VhLThjZjYtNDRjNC1i NjgxLTdiNjI3MmU2ODhmNi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJl Njg4ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhaQwDgQCAAIwCAMGACYC9wMAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD7o4LI4EcMrlsBK1YTLBAU+51Mk2tg7/JqWMNxXwwPaHcuDBgApceCLq9lxMt0f t2EOgQgOpowWgYYql6+rCojpFOs51N9l8Czh9UJR4HeRP5BRbzEtPHi3GXS08I/T nx23ustzMHxT/tAu4pzjHiGdcGxQodDTsqrW6cflrVeUxC2Ks//9PxEsxkku0Q86 5Pm3R7ihpkclsKPHL4a3xqiSJ6zWbpi6GRilry+kgYG07K5Lq9vZEapn89GEuTRm zBRqkVg3ImafcW6/a8aGqaF1EOh9byY2we2hehpjEpOAEwlrY7xXnPYjII63ZTsW WIu/qriuPkNL1eRp96nBEL8= -----END CERTIFICATE-----Generated at Fri Apr 4 20:16:37 2025 by rpki-client