$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer File: 17436076-857b-4889-82e9-22151c59a4b1.cer (raw, json) Hash identifier: zfh77zGhBZ/cprjH3hvDy8n9HGsy7lSi7qecjxHQBBA= Subject key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858482A88585D90E6952FEBEAA580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Dec 2024 01:45:33 +0000 Certificate not after: Tue 16 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 46644 IP: 170.39.228.0/24 IP: 2620:bf:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:88:58:5d:90:e6:95:2f:eb:ea:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 11 01:45:33 2024 GMT Not After : Mar 16 00:45:33 2027 GMT Subject: CN=17436076-857b-4889-82e9-22151c59a4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:5d:87:3a:8e:dd:5a:7e:7a:81:55:32:3f: 5c:90:18:a1:14:41:2b:8c:fd:3c:95:b5:13:b3:84: 3b:ca:d3:f8:6b:08:e8:f9:e0:96:6b:23:b9:d7:b4: 57:1d:02:bc:69:ec:20:41:ec:a7:b8:4f:f5:00:71: fe:01:c6:89:c2:cc:28:04:da:d2:87:00:10:7d:44: b6:33:1e:4e:0b:e0:4f:1d:a5:02:99:7d:fd:a1:24: 3e:0c:50:dd:29:20:6f:0d:e8:8f:e8:5e:b0:2d:d0: 50:30:d8:27:3e:0f:2e:7f:7d:c5:01:81:ca:58:5d: 6f:42:51:81:fc:23:8a:85:6f:1b:14:24:fb:1f:5b: 5d:7b:c0:32:61:64:9e:d3:a1:50:ec:ad:c7:cc:7a: 0e:4a:f5:8d:87:53:b9:99:b2:fd:6b:e2:6b:b2:c7: f7:c2:bc:4f:7c:1b:d6:ed:89:70:0a:d5:a5:3a:36: 58:53:97:e6:70:a5:7f:cd:c1:ef:76:e3:1d:74:e5: da:99:98:06:9c:c8:1c:15:72:2e:ac:e2:11:d9:30: e8:dd:5e:f7:c8:7c:68:8e:46:67:30:36:16:e5:84: c2:ed:72:f5:8c:1d:10:12:f9:ab:79:f5:99:95:6e: 0d:6e:3c:0b:fc:57:fc:10:eb:70:7b:ed:ec:d2:d9: 16:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 170.39.228.0/24 IPv6: 2620:bf:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46644 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:57:7c:4c:1e:a1:d7:d8:f3:3c:e1:04:dc:0c:6a:b1:5d:ad: 13:60:4d:07:f8:95:bf:c3:7a:16:0f:d0:07:14:14:5c:f5:23: a9:fe:44:74:c3:52:62:f9:f1:a4:5d:d2:4d:ca:4d:d9:d5:d2: 2b:52:54:8f:d0:23:99:c1:f3:24:3c:dd:18:83:3e:38:b2:43: bb:8b:df:5d:7a:f4:73:f2:a6:da:2c:4c:db:ca:30:84:c7:76: ef:19:7e:86:8c:3b:99:eb:a1:a8:78:e6:fb:f7:5f:fd:45:ce: d9:96:17:b8:a6:74:b0:42:91:30:0a:7d:38:65:a2:a8:a1:97: 28:08:d0:5b:cc:64:b8:e0:e8:d2:c4:ca:52:77:14:0f:ba:bb: f2:4e:ee:e3:2a:6a:06:1a:08:83:84:cd:0d:b4:17:89:d9:34: 47:5b:2f:03:0b:98:bc:6c:88:18:12:19:d4:cc:33:ed:96:56: fa:95:bb:44:09:95:b3:9e:fc:6a:b4:3a:d8:04:73:7a:77:36: 6b:e8:11:04:e1:de:4c:a3:40:b0:be:68:93:99:66:56:aa:9b: e9:6c:af:20:83:7a:87:2f:eb:7c:a4:88:d7:ff:18:ea:08:f0: ff:8e:8a:b6:d7:f2:6e:2b:41:75:8d:70:f2:71:27:e4:6a:c6: 33:7f:4f:1b -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEgqiFhdkOaVL+vqpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMTAxNDUzM1oXDTI3MDMxNjAwNDUzM1owLzEtMCsGA1UEAxMk MTc0MzYwNzYtODU3Yi00ODg5LTgyZTktMjIxNTFjNTlhNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIFdhzqO3Vp+eoFVMj9ckBihFEErjP08lbUT s4Q7ytP4awjo+eCWayO517RXHQK8aewgQeynuE/1AHH+AcaJwswoBNrShwAQfUS2 Mx5OC+BPHaUCmX39oSQ+DFDdKSBvDeiP6F6wLdBQMNgnPg8uf33FAYHKWF1vQlGB /COKhW8bFCT7H1tde8AyYWSe06FQ7K3HzHoOSvWNh1O5mbL9a+Jrssf3wrxPfBvW 7YlwCtWlOjZYU5fmcKV/zcHvduMddOXamZgGnMgcFXIurOIR2TDo3V73yHxojkZn MDYW5YTC7XL1jB0QEvmrefWZlW4NbjwL/Ff8EOtwe+3s0tkWaQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFEcK+la5Ccmn7m1+/rojDMuAGB0dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x NzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1OWE0YjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE3NDM2MDc2LTg1N2ItNDg4OS04 MmU5LTIyMTUxYzU5YTRiMS8xNzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1 OWE0YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACqJ+QwDwQCAAIwCQMHBCYgAL8gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAtjQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgVd8TB6h19jzPOEE3AxqsV2t E2BNB/iVv8N6Fg/QBxQUXPUjqf5EdMNSYvnxpF3STcpN2dXSK1JUj9AjmcHzJDzd GIM+OLJDu4vfXXr0c/Km2ixM28owhMd27xl+how7meuhqHjm+/df/UXO2ZYXuKZ0 sEKRMAp9OGWiqKGXKAjQW8xkuODo0sTKUncUD7q78k7u4ypqBhoIg4TNDbQXidk0 R1svAwuYvGyIGBIZ1Mwz7ZZW+pW7RAmVs578arQ62ARzenc2a+gRBOHeTKNAsL5o k5lmVqqb6WyvIIN6hy/rfKSI1/8Y6gjw/46KttfybitBdY1w8nEn5GrGM39PGw== -----END CERTIFICATE-----Generated at Sat Apr 5 08:49:52 2025 by rpki-client