$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer File: f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer (raw, json) Hash identifier: THKF9zvwbgPCVzjjgPD5ggSAZHU8koHjJM6ap4bAjkk= Subject key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Authority key identifier: D3:4F:20:B1:A7:C4:06:D9:A3:43:21:ED:FF:F4:B7:9E:99:15:A0:E5 Certificate issuer: /CN=02c7706b-3baf-42cb-bdf7-782b036252b3 Certificate serial: 010D0C9F43285848CD9B716264DFFBBEB753FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 07 Feb 2025 11:40:48 +0000 Certificate not after: Thu 13 May 2027 10:40:48 +0000 Subordinate resources: AS: 26556 IP: 23.172.120.0/24 IP: 23.178.72.0/24 IP: 2602:f96d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:9b:71:62:64:df:fb:be:b7:53:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c7706b-3baf-42cb-bdf7-782b036252b3 Validity Not Before: Feb 7 11:40:48 2025 GMT Not After : May 13 10:40:48 2027 GMT Subject: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:48:43:64:86:d2:3f:2c:c9:51:33:6b:dd: 02:aa:67:de:2f:62:15:3b:e4:18:ec:64:03:0b:27: 71:da:66:5c:10:ef:72:89:74:57:a7:4c:7a:37:c2: 50:1c:bc:7b:0c:9b:6a:fe:a3:d4:86:91:ce:cf:81: a9:51:70:c3:9f:14:03:ce:a8:f0:a1:e1:e0:e5:54: fc:a5:91:79:42:61:67:65:0d:53:3c:94:c0:fc:36: f8:4b:ff:86:13:67:5c:a7:59:fe:ad:68:38:bd:88: 24:23:a2:96:6a:35:69:f3:77:86:e3:c2:f1:27:0a: d8:ab:44:bf:b3:c7:2c:4c:2f:f3:19:8e:01:d4:08: 36:a6:a1:b8:c4:c4:38:97:1a:03:60:ec:fa:73:dd: 71:21:cf:1d:b0:6b:ac:a4:6d:5a:cd:fe:27:74:9a: b6:65:9c:c8:f6:64:8b:ca:b8:d1:84:75:39:da:3e: d9:b6:9f:db:e0:81:39:46:bb:ec:00:6f:c1:93:5f: 13:fb:e6:13:37:e0:72:56:65:d0:41:da:2c:8d:49: e9:d6:fe:30:2d:42:44:ef:59:ee:51:a2:58:10:50: b5:6b:0c:bb:79:62:bc:c0:92:f2:39:43:d0:7b:c6: 9e:0d:59:d6:a5:81:f3:49:60:e9:6c:1f:17:2f:4a: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl X509v3 Authority Key Identifier: keyid:D3:4F:20:B1:A7:C4:06:D9:A3:43:21:ED:FF:F4:B7:9E:99:15:A0:E5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.120.0/24 23.178.72.0/24 IPv6: 2602:f96d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26556 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:39:6a:44:ce:78:a0:d0:20:2c:9a:e4:f3:15:f3:b2:23:2f: 65:02:b9:86:56:0d:63:a2:d2:cc:a6:df:17:42:75:82:f7:b4: 09:3e:07:0e:04:c6:6f:85:04:2e:1b:e2:20:d5:18:af:3b:8c: eb:bc:37:b0:4a:ce:eb:67:3e:e8:5a:49:7d:c1:24:57:ca:84: 4b:0d:eb:c6:9a:7b:f4:7c:10:c6:65:bd:75:43:c1:5d:06:30: 70:4c:32:ed:ba:f0:f6:95:75:b6:6c:8f:7a:4f:9b:f8:7b:2f: 9e:65:9c:35:b5:bd:99:33:6f:b0:85:4a:ba:b6:52:aa:d3:99: 41:fb:8c:6f:08:71:bb:66:db:d1:22:ee:2a:28:c5:4e:11:e7: 55:53:85:33:0d:10:37:26:21:86:ba:4d:07:da:1e:71:a3:87: 1b:a1:98:cc:e2:10:9f:98:20:13:e2:b8:21:1b:9c:43:b2:0a: 61:f6:6e:54:cd:a1:fb:27:84:63:0e:d9:db:79:e0:dd:fa:9e: 0d:8e:0d:ec:48:8c:04:2f:4a:25:79:46:f7:0e:d1:e6:9d:94: d4:04:b5:c3:0d:59:f0:3b:ce:6c:be:b3:ed:2c:78:a4:09:ff: 90:23:9b:43:55:64:8e:9a:b4:ac:e6:4d:65:ee:24:fa:ec:dc: 54:28:2e:e5 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEjNm3FiZN/7vrdT/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgyYjAzNjI1 MmIzMB4XDTI1MDIwNzExNDA0OFoXDTI3MDUxMzEwNDA0OFowPTE7MDkGA1UEAxMy ZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJlNjEyNTY2MWI5MmJk YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgbkhDZIbSPyzJUTNr 3QKqZ94vYhU75BjsZAMLJ3HaZlwQ73KJdFenTHo3wlAcvHsMm2r+o9SGkc7PgalR cMOfFAPOqPCh4eDlVPylkXlCYWdlDVM8lMD8NvhL/4YTZ1ynWf6taDi9iCQjopZq NWnzd4bjwvEnCtirRL+zxyxML/MZjgHUCDamobjExDiXGgNg7Ppz3XEhzx2wa6yk bVrN/id0mrZlnMj2ZIvKuNGEdTnaPtm2n9vggTlGu+wAb8GTXxP75hM34HJWZdBB 2iyNSenW/jAtQkTvWe5RolgQULVrDLt5YrzAkvI5Q9B7xp4NWdalgfNJYOlsHxcv SqGBAgMBAAGjggPyMIID7jAdBgNVHQ4EFgQUJPXaSMOvvKD/2SFUfvCfd2r4ouow ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlm OS05YjZjLTljOWYzODk4OTk1ZC8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00 OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzEvMjRGNURBNDhDM0FGQkNBMEZGRDkyMTU0 N0VGMDlGNzc2QUY4QTJFQS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4 MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03ODJiMDM2MjUyYjMvMDJjNzcw NmItM2JhZi00MmNiLWJkZjctNzgyYjAzNjI1MmIzLmNybDAfBgNVHSMEGDAWgBTT TyCxp8QG2aNDIe3/9LeemRWg5TAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzAy Yzc3MDZiLTNiYWYtNDJjYi1iZGY3LTc4MmIwMzYyNTJiMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXrHgDBAAXskgwDgQCAAIwCAMGBCYC+W0AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAme8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE05akTOeKDQICya5PMV 87IjL2UCuYZWDWOi0sym3xdCdYL3tAk+Bw4Exm+FBC4b4iDVGK87jOu8N7BKzutn PuhaSX3BJFfKhEsN68aae/R8EMZlvXVDwV0GMHBMMu268PaVdbZsj3pPm/h7L55l nDW1vZkzb7CFSrq2UqrTmUH7jG8Icbtm29Ei7iooxU4R51VThTMNEDcmIYa6TQfa HnGjhxuhmMziEJ+YIBPiuCEbnEOyCmH2blTNofsnhGMO2dt54N36ng2ODexIjAQv SiV5RvcO0eadlNQEtcMNWfA7zmy+s+0seKQJ/5Ajm0NVZI6atKzmTWXuJPrs3FQo LuU= -----END CERTIFICATE-----Generated at Fri Apr 4 01:16:27 2025 by rpki-client