$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer File: d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer (raw, json) Hash identifier: hTc8jsc4dK35auFIN5eu+mjlNK5uZIj2x+DjdRGUGDk= Subject key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584940C187CFBD6BA8EFBDFB0EE8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 20 Mar 2025 17:35:30 +0000 Certificate not after: Wed 23 Jun 2027 17:35:30 +0000 Subordinate resources: AS: 26561 IP: 23.164.152.0/24 IP: 2602:f9fa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:c1:87:cf:bd:6b:a8:ef:bd:fb:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Mar 20 17:35:30 2025 GMT Not After : Jun 23 17:35:30 2027 GMT Subject: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:ca:d1:1f:43:52:ad:ca:e7:f1:c2:04:71: 16:ef:61:d1:3a:39:a7:e5:80:47:54:e1:2e:7f:76: b6:05:72:56:77:00:79:38:0f:e1:44:38:73:a4:9d: 54:20:27:c7:e4:9c:94:ec:d2:8f:66:83:2a:bf:fd: b6:0e:55:7f:28:7b:54:37:aa:da:b6:ca:ad:1e:92: 43:66:5c:0b:98:71:08:27:bd:18:81:25:0d:d8:54: ed:aa:79:6c:b6:70:c7:fd:12:b2:a1:45:7f:7d:bd: 42:f5:4d:08:e7:f1:40:af:de:d1:f8:64:bb:17:57: 18:08:27:41:12:f8:32:73:52:0c:d1:36:fd:e8:0b: 18:83:a9:ca:73:f6:c5:c8:d3:2f:58:4b:62:e0:7e: 49:b0:63:7c:b4:87:c2:b2:43:b7:b3:05:ba:07:79: 39:b4:22:50:cf:37:ad:6e:de:d3:3c:96:6b:09:a3: 62:45:97:1d:8d:6c:64:ef:df:3d:88:58:a0:09:58: d0:8b:a9:2a:9c:c4:a8:b6:2a:4e:b1:09:c2:39:a4: 5c:dc:b5:cb:96:d9:78:d8:78:d9:66:ed:60:85:e6: c4:6b:c9:e0:12:81:70:9b:41:2f:e4:57:87:f7:76: 13:94:93:95:d9:a9:ac:6d:75:5e:f0:22:91:2d:88: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: 23.164.152.0/24 IPv6: 2602:f9fa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26561 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3d:14:4d:f8:b8:77:cc:d6:84:4d:93:2b:95:e3:6f:fb:97: 4a:33:2e:6d:c4:c4:65:02:0e:13:63:25:12:f9:05:49:79:91: 35:24:42:96:1e:e6:dd:93:bc:fb:73:d9:aa:f5:4a:be:7a:a4: df:65:26:66:f9:fd:95:37:d2:87:c5:e6:ce:a4:13:5e:01:2b: ac:70:44:c9:73:2a:e4:11:e4:4b:c4:b8:d0:da:79:30:05:59: 60:52:81:ea:7b:85:f0:81:22:fa:1f:87:9d:6a:c6:95:11:1c: 18:b2:0a:24:c5:18:f2:49:98:e4:b9:a4:32:8c:62:11:e8:4f: 1d:d8:21:05:df:05:ac:e1:3e:85:84:c4:0e:7e:c6:51:fc:54: 56:3c:f9:57:60:3f:97:bf:89:31:41:fc:59:e8:e7:1c:9f:b9: d1:a1:e0:20:23:a4:ff:3d:e6:9f:3f:c3:58:60:5e:e7:c0:4e: e0:0a:e6:41:59:cd:0b:28:f0:25:ff:fd:69:00:26:e7:1d:ab: 73:b0:04:df:9d:f5:67:05:00:ce:a6:af:f5:e2:65:be:66:f5: 80:71:69:3f:9e:fd:b7:3b:eb:e4:b6:bd:41:cf:17:42:f9:c3: fa:0d:d9:4f:de:4a:22:5e:56:3c:78:76:74:21:ca:f6:9a:76: 65:f6:4a:5c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWElAwYfPvWuo7737DugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI1MDMyMDE3MzUzMFoXDTI3MDYyMzE3MzUzMFowPTE7MDkGA1UEAxMy ZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAyOTc1MGUwMTVkYmRiYTQx OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+srRH0NSrcrn8cIE cRbvYdE6OaflgEdU4S5/drYFclZ3AHk4D+FEOHOknVQgJ8fknJTs0o9mgyq//bYO VX8oe1Q3qtq2yq0ekkNmXAuYcQgnvRiBJQ3YVO2qeWy2cMf9ErKhRX99vUL1TQjn 8UCv3tH4ZLsXVxgIJ0ES+DJzUgzRNv3oCxiDqcpz9sXI0y9YS2LgfkmwY3y0h8Ky Q7ezBboHeTm0IlDPN61u3tM8lmsJo2JFlx2NbGTv3z2IWKAJWNCLqSqcxKi2Kk6x CcI5pFzctcuW2XjYeNlm7WCF5sRryeASgXCbQS/kV4f3dhOUk5XZqaxtdV7wIpEt iHYZAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUtzsFlxoadr3xvGGlF4sAtP9xursw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNk OS05ZjZjLWZjNTMwNjZiZWI4OC8yLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2I4NmNiNzctNjlhYy00 M2Q5LTlmNmMtZmM1MzA2NmJlYjg4LzIvQjczQjA1OTcxQTFBNzZCREYxQkM2MUE1 MTc4QjAwQjRGRjcxQkFCQi5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMy MWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcx NTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQzMGUyLmNybDAfBgNVHSMEGDAWgBTL VH2/JIelcbKwx4iWmec5ID9yYzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBl YzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0MzBlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpJgwDgQCAAIwCAMGBCYC+foAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmfBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFc9FE34uHfM1oRNkyuV42/7l0oz Lm3ExGUCDhNjJRL5BUl5kTUkQpYe5t2TvPtz2ar1Sr56pN9lJmb5/ZU30ofF5s6k E14BK6xwRMlzKuQR5EvEuNDaeTAFWWBSgep7hfCBIvofh51qxpURHBiyCiTFGPJJ mOS5pDKMYhHoTx3YIQXfBazhPoWExA5+xlH8VFY8+VdgP5e/iTFB/Fno5xyfudGh 4CAjpP895p8/w1hgXufATuAK5kFZzQso8CX//WkAJucdq3OwBN+d9WcFAM6mr/Xi Zb5m9YBxaT+e/bc76+S2vUHPF0L5w/oN2U/eSiJeVjx4dnQhyvaadmX2Slw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:24 2025 by rpki-client