$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer (raw, json) Hash identifier: yfXUCPUfjd7f+3hTVaGQWpUGECW1QZXd9amVMkgUng0= Subject key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847F6E2AF6986079EE2013246C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Nov 2024 13:45:33 +0000 Certificate not after: Thu 25 Feb 2027 13:45:33 +0000 Subordinate resources: AS: 32526 IP: 23.160.168.0/24 IP: 2602:fa48::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f6:e2:af:69:86:07:9e:e2:01:32:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 22 13:45:33 2024 GMT Not After : Feb 25 13:45:33 2027 GMT Subject: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:f6:96:8d:7b:5b:88:88:48:90:49:91:29: 8f:7f:cc:b6:08:5e:ae:fe:8d:3a:f1:18:1b:c8:02: 49:e2:f4:dc:9b:40:cd:75:99:72:0b:9e:1d:14:ac: 43:05:4c:65:51:9e:40:75:1d:52:1a:26:de:39:39: c8:c1:13:67:28:04:72:6a:91:40:5a:69:c5:5f:da: af:94:bf:27:95:84:8b:b8:95:1a:89:75:95:98:a1: 55:69:90:08:fd:a8:c4:fb:d7:5f:ad:30:77:c6:82: 1b:f2:ee:d4:b7:1c:f7:53:3c:37:66:cd:ad:fe:c5: b2:5d:69:80:f8:a6:6e:b8:57:4b:f8:13:46:8d:3f: 77:44:58:2a:50:17:db:c7:3a:80:84:03:34:d2:3e: 9d:38:bf:51:71:3e:d8:98:d4:52:e1:95:8e:db:78: cc:85:7c:26:2d:5f:23:db:57:cb:7a:33:cb:70:0f: 3c:4e:e8:cd:1f:f1:26:59:5e:87:e8:32:2f:76:c7: 54:25:77:b2:47:a0:c7:de:07:e4:6d:d5:9c:c5:d2: 51:20:11:1f:df:79:eb:48:a2:6a:63:e0:ab:ed:cd: a1:1d:1f:fd:78:d6:a1:c7:02:28:e8:27:22:24:18: 99:fb:d1:ba:d8:b3:42:79:81:4b:61:4d:e4:62:d6: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.168.0/24 IPv6: 2602:fa48::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32526 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1f:6a:41:e4:28:47:9f:f7:7a:5a:2b:fb:41:06:31:50:c7: de:76:f1:ee:34:9b:b0:88:20:9b:04:4d:fc:21:a8:5c:be:d4: 25:40:03:d2:a0:5d:01:f6:b6:88:f7:de:d6:13:68:78:7b:3b: 66:74:a8:19:4c:2b:dc:f2:93:f9:31:f6:2d:43:35:3a:e5:bb: 83:c1:21:23:59:eb:df:ac:12:7e:49:20:ac:34:7a:e7:f5:e7: 6c:24:2c:2d:42:7e:42:60:b2:e0:54:5b:35:ca:68:48:32:3e: d4:8f:41:87:4c:76:86:9d:75:e2:56:37:a3:53:19:71:b9:58: d1:55:a6:2d:d4:90:2f:7e:e7:20:51:62:e5:06:cb:0e:fd:e5: d5:b2:d7:77:a0:ce:8e:1c:dc:ba:5f:90:c3:4e:7c:82:e8:78: 72:d1:2d:47:83:8b:b1:c0:14:fb:da:6e:cd:18:53:be:ad:44: 33:af:c7:43:ed:e4:45:58:87:1c:eb:56:d9:0c:cd:44:2e:53: fc:03:f1:05:ea:d3:3a:52:c0:0e:4a:8c:20:ad:01:e0:1d:85: 34:73:a6:00:27:03:2a:0e:ef:4e:f4:6d:d7:5d:19:ff:97:64: 09:70:c5:62:e5:70:09:ce:7b:c7:80:e8:9b:62:78:70:a0:26: 70:45:aa:5b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEf24q9phgee4gEyRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyMjEzNDUzM1oXDTI3MDIyNTEzNDUzM1owLzEtMCsGA1UEAxMk YWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUyZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcz2lo17W4iISJBJkSmPf8y2CF6u/o068Rgb yAJJ4vTcm0DNdZlyC54dFKxDBUxlUZ5AdR1SGibeOTnIwRNnKARyapFAWmnFX9qv lL8nlYSLuJUaiXWVmKFVaZAI/ajE+9dfrTB3xoIb8u7Utxz3Uzw3Zs2t/sWyXWmA +KZuuFdL+BNGjT93RFgqUBfbxzqAhAM00j6dOL9RcT7YmNRS4ZWO23jMhXwmLV8j 21fLejPLcA88TujNH/EmWV6H6DIvdsdUJXeyR6DH3gfkbdWcxdJRIBEf33nrSKJq Y+Cr7c2hHR/9eNahxwIo6CciJBiZ+9G62LNCeYFLYU3kYtb1GwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN1TwtRMbwHCNgqVEYBCk1ADWNOEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FmZDQ0YjljLTIzMTItNGFjYi1i MjNlLTQwYWFhYWZlMmRmZS9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFm ZTJkZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoKgwDgQCAAIwCAMGACYC+kgAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn8OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHAfakHkKEef93paK/tBBjFQx952 8e40m7CIIJsETfwhqFy+1CVAA9KgXQH2toj33tYTaHh7O2Z0qBlMK9zyk/kx9i1D NTrlu4PBISNZ69+sEn5JIKw0euf152wkLC1CfkJgsuBUWzXKaEgyPtSPQYdMdoad deJWN6NTGXG5WNFVpi3UkC9+5yBRYuUGyw795dWy13egzo4c3LpfkMNOfILoeHLR LUeDi7HAFPvabs0YU76tRDOvx0Pt5EVYhxzrVtkMzUQuU/wD8QXq0zpSwA5KjCCt AeAdhTRzpgAnAyoO7070bdddGf+XZAlwxWLlcAnOe8eA6JtieHCgJnBFqls= -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:49 2025 by rpki-client