$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer File: e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer (raw, json) Hash identifier: OmncNaoNUj5RgnXz5GVvNFlfRt9JHpKRYfGVzxYsi5U= Subject key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 Authority key identifier: 9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E Certificate issuer: /CN=dab76c6b-0e86-4a03-a59a-f3fc77dbba62 Certificate serial: 010D0C9F4328584863C35E8F0E4EF3E52EACE780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer Manifest: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft caRepository: rsync://rpki.roa.net/rrdp/xTom/51/ Notify URL: https://rpki.roa.net/rrdp/notification.xml Certificate not before: Tue 31 Dec 2024 13:45:33 +0000 Certificate not after: Mon 05 Apr 2027 12:45:33 +0000 Subordinate resources: AS: 55158 IP: 23.159.160.0/24 IP: 2605:9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:c3:5e:8f:0e:4e:f3:e5:2e:ac:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab76c6b-0e86-4a03-a59a-f3fc77dbba62 Validity Not Before: Dec 31 13:45:33 2024 GMT Not After : Apr 5 12:45:33 2027 GMT Subject: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:9d:61:55:4c:09:df:4e:c1:bc:a2:90:5e: b0:09:ca:f0:19:52:40:c9:58:54:a8:bb:91:d4:89: ce:c3:76:c4:07:f4:f4:35:e9:4e:ce:da:98:ef:7f: 76:8d:2f:f7:66:cf:9c:dc:80:32:38:d0:d0:91:7f: 4b:60:b3:d9:dd:59:3c:dd:1b:83:c0:a9:e3:f8:80: 9f:ae:1f:d7:3f:c2:4f:89:5c:c4:d0:e7:c3:9d:58: 03:7e:75:24:37:e4:4c:1a:85:39:57:09:f9:3a:94: c2:e3:4a:43:19:45:32:72:17:28:ce:a0:75:0d:4f: 45:75:ae:a5:dc:c7:80:cc:82:bd:0f:b3:2f:69:1b: 30:09:8b:75:25:1a:39:16:f9:1c:12:c9:19:fb:ea: cc:d8:f1:af:e0:d1:1c:02:82:a1:09:9c:47:1f:d8: 69:82:a9:67:b3:19:21:76:eb:51:81:44:11:2f:56: 95:93:8b:c9:99:b3:a8:74:b0:62:df:9c:b3:0e:ee: 9a:2e:e9:a1:fa:c0:08:16:cf:ac:62:22:67:ab:df: 17:7a:e3:f6:30:bd:0b:ea:2b:6c:ff:aa:b8:09:3c: f9:46:28:38:00:da:6d:9e:6b:4a:9e:3c:be:89:b1: 6c:62:24:2c:ee:13:5c:a4:ba:10:08:2f:e9:ef:74: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 Subject Information Access: CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/51/ RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl X509v3 Authority Key Identifier: keyid:9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer sbgp-ipAddrBlock: critical IPv4: 23.159.160.0/24 IPv6: 2605:9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55158 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ab:39:4b:ca:94:97:78:e7:41:bb:3f:32:34:b2:ad:d0:c4: 4a:4d:72:88:fb:8e:ce:06:2d:aa:0e:f9:ed:50:0d:1d:e8:da: 31:57:d1:da:8d:e5:c8:d8:a3:a4:96:de:f2:69:cc:94:fb:e1: 12:5e:1b:75:8f:bf:03:db:1f:43:7c:04:db:d4:32:da:ff:d0: d5:09:98:5e:9b:d7:a3:0b:cf:84:d1:33:d9:11:d7:2b:24:a6: 93:d0:27:d4:49:ae:20:9a:65:30:9d:f9:19:3e:06:60:14:0b: a9:b5:db:1b:37:31:e5:75:31:12:2b:76:80:e0:a5:bf:43:7c: e2:05:84:7e:39:87:ae:c2:e8:cf:b7:a5:fd:d5:c4:87:cf:5b: 5f:c1:33:4d:30:03:0b:9f:ca:b0:dd:67:13:5b:92:c3:98:09: 48:26:de:0b:ab:5d:47:28:0a:b7:2a:47:6e:e6:e5:54:ae:76: 72:53:de:69:64:f5:34:a2:2a:e5:c9:c7:99:9d:63:71:7a:76: a1:f0:73:4b:34:23:a9:81:58:32:a0:22:ff:75:71:70:24:ed: 0a:ef:6e:c3:3f:17:a3:38:de:8b:2a:e3:99:3f:88:91:b6:b7: db:1f:ed:fa:22:0c:00:51:c9:44:0c:5c:eb:3a:54:6e:2e:f0: 78:c9:9d:31 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEhjw16PDk7z5S6s54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFiNzZjNmItMGU4Ni00YTAzLWE1OWEtZjNmYzc3ZGJi YTYyMB4XDTI0MTIzMTEzNDUzM1oXDTI3MDQwNTEyNDUzM1owPTE7MDkGA1UEAxMy ZTlmYWMxNDY3MjEyMmJkZGZjN2ExMjc4OTgwZDY5NWM2MDlkNWVhZWVkYjBkZjI0 NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7951hVUwJ307BvKKQ XrAJyvAZUkDJWFSou5HUic7DdsQH9PQ16U7O2pjvf3aNL/dmz5zcgDI40NCRf0tg s9ndWTzdG4PAqeP4gJ+uH9c/wk+JXMTQ58OdWAN+dSQ35EwahTlXCfk6lMLjSkMZ RTJyFyjOoHUNT0V1rqXcx4DMgr0Psy9pGzAJi3UlGjkW+RwSyRn76szY8a/g0RwC gqEJnEcf2GmCqWezGSF261GBRBEvVpWTi8mZs6h0sGLfnLMO7pou6aH6wAgWz6xi Imer3xd64/YwvQvqK2z/qrgJPPlGKDgA2m2ea0qePL6JsWxiJCzuE1ykuhAIL+nv dBtzAgMBAAGjggOAMIIDfDAdBgNVHQ4EFgQUUTB51M/7/fgQJMobSMq3e9UWZlcw gdQGCCsGAQUFBwELBIHHMIHEMC4GCCsGAQUFBzAFhiJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTEvMFoGCCsGAQUFBzAKhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTEvNTEzMDc5RDRDRkZCRkRGODEwMjRDQTFCNDhDQUI3 N0JENTE2NjY1Ny5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnBraS5yb2EubmV0 L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8E gdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1 N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWI3NmM2 Yi0wZTg2LTRhMDMtYTU5YS1mM2ZjNzdkYmJhNjIvZGFiNzZjNmItMGU4Ni00YTAz LWE1OWEtZjNmYzc3ZGJiYTYyLmNybDAfBgNVHSMEGDAWgBScd3L7l6WmVKNaVn0T 57mcqstqnjAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggr BgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYt NGEwMy1hNTlhLWYzZmM3N2RiYmE2Mi5jZXIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAAXn6AwDQQCAAIwBwMFACYFCcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDANd2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBACOrOUvKlJd450G7PzI0sq3QxEpNcoj7js4GLaoO+e1Q DR3o2jFX0dqN5cjYo6SW3vJpzJT74RJeG3WPvwPbH0N8BNvUMtr/0NUJmF6b16ML z4TRM9kR1yskppPQJ9RJriCaZTCd+Rk+BmAUC6m12xs3MeV1MRIrdoDgpb9DfOIF hH45h67C6M+3pf3VxIfPW1/BM00wAwufyrDdZxNbksOYCUgm3gurXUcoCrcqR27m 5VSudnJT3mlk9TSiKuXJx5mdY3F6dqHwc0s0I6mBWDKgIv91cXAk7QrvbsM/F6M4 3osq45k/iJG2t9sf7foiDABRyUQMXOs6VG4u8HjJnTE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:34:37 2025 by rpki-client