$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer File: 1be7bcf5-0538-4a92-9aef-c460f15023b4.cer (raw, json) Hash identifier: CstXUpBaUQuBNUXg8avZXtozBgzU1fdLR4Q4eSVrrUc= Subject key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848454DCBC45329C5F6F1D2E7A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 15:54:25 +0000 Certificate not after: Sun 26 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 46365 IP: 23.152.56.0/24 IP: 198.135.179.0/24 IP: 2602:2cd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:4d:cb:c4:53:29:c5:f6:f1:d2:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 20 15:54:25 2024 GMT Not After : Apr 26 00:45:20 2026 GMT Subject: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:6f:13:71:23:70:7d:f0:a6:3d:a7:fe:c7: c9:94:7f:10:51:2f:f8:61:f3:94:ea:5e:8d:50:e5: 63:6d:fe:4c:05:a7:f4:bb:d8:21:fa:8f:0e:7d:ff: 4c:b5:71:e8:c1:43:b1:4a:61:42:c7:0d:d9:17:ef: 78:19:76:e2:32:93:95:f4:b4:25:62:f6:d4:a6:3e: 8e:1d:37:52:7a:b7:cf:5e:d9:35:a3:cc:cf:47:7c: 60:c2:eb:a7:85:9e:df:7a:59:57:3a:d8:01:e1:01: 1b:2b:a6:2c:41:87:83:70:32:c9:36:19:f8:35:41: 6c:1c:26:0b:af:18:e3:12:3a:1d:19:a2:96:d9:04: 25:81:65:96:99:f1:ac:5d:c3:4e:ab:bd:99:7b:56: 10:ac:bc:66:5e:45:04:e7:9d:38:ec:c4:bd:7d:33: 88:78:14:57:e2:3f:3f:08:05:44:78:12:5d:e7:df: 47:7a:36:32:16:de:69:c4:96:fe:73:cb:ae:36:b0: 12:1d:9b:48:65:7f:f0:42:e4:ab:8d:27:24:51:f0: f7:9b:b9:45:23:6a:53:97:ff:89:77:33:ad:44:3a: 51:2f:98:f9:eb:d8:a4:ff:8b:3b:43:d8:48:b7:9e: 0a:2e:86:c2:85:48:16:77:35:90:ed:4d:57:8f:44: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46365 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4c:7b:e3:47:fe:67:f3:e1:7b:8a:6a:bc:ea:3d:25:1d:da: 7d:01:6a:0c:21:e4:26:87:9b:08:37:e0:4e:29:a8:4b:d3:c7: 2a:e6:46:dd:7b:4e:c1:c9:09:73:36:7f:8e:99:4b:35:a3:68: a7:dd:1f:6c:2c:3b:df:c5:3d:79:b5:9f:a0:4e:3a:e6:bd:2a: b3:05:04:f6:a7:5b:8a:00:f1:4f:02:33:e3:71:da:61:22:87: 44:e0:0f:dd:c7:98:7f:f9:42:ac:8a:e9:56:50:63:80:89:6c: 4f:db:27:5c:70:2a:c3:96:fe:8d:89:d7:02:17:ac:31:1d:9f: 22:4b:45:8d:30:5c:a7:71:ce:21:89:f4:1d:be:e7:47:4d:54: f2:17:f8:76:c5:1b:45:94:81:48:c7:f6:a7:be:d9:06:8c:0d: 74:1a:8e:21:a9:8a:9a:30:8c:30:e0:56:6c:1a:7a:22:8e:80: 49:1b:4e:c2:3a:cc:ef:ab:47:16:ca:20:62:d2:3f:67:14:07: 29:25:dc:50:6d:8e:ea:a3:4f:a2:00:64:1b:bd:ec:19:0f:ce: 08:4a:e8:a3:6c:e5:5c:14:a5:b5:21:38:1d:d9:5c:b1:ef:1a: 1d:6b:42:2b:00:09:f6:9c:7c:2e:de:23:96:6b:57:71:f3:8e: c0:d2:ae:59 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEhFTcvEUynF9vHS56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIyMDE1NTQyNVoXDTI2MDQyNjAwNDUyMFowLzEtMCsGA1UEAxMk MWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAyM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLVvE3EjcH3wpj2n/sfJlH8QUS/4YfOU6l6N UOVjbf5MBaf0u9gh+o8Off9MtXHowUOxSmFCxw3ZF+94GXbiMpOV9LQlYvbUpj6O HTdSerfPXtk1o8zPR3xgwuunhZ7fellXOtgB4QEbK6YsQYeDcDLJNhn4NUFsHCYL rxjjEjodGaKW2QQlgWWWmfGsXcNOq72Ze1YQrLxmXkUE55047MS9fTOIeBRX4j8/ CAVEeBJd599HejYyFt5pxJb+c8uuNrASHZtIZX/wQuSrjSckUfD3m7lFI2pTl/+J dzOtRDpRL5j569ik/4s7Q9hIt54KLobChUgWdzWQ7U1Xj0SP7wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEWUKrVqnX42j0kJrKWAe3TeDbdnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFiZTdiY2Y1LTA1MzgtNGE5Mi05 YWVmLWM0NjBmMTUwMjNiNC8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1 MDIzYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmDgDBADGh7MwDgQCAAIwCAMGBCYCAs0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC1HTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+THvjR/5n8+F7imq8 6j0lHdp9AWoMIeQmh5sIN+BOKahL08cq5kbde07ByQlzNn+OmUs1o2in3R9sLDvf xT15tZ+gTjrmvSqzBQT2p1uKAPFPAjPjcdphIodE4A/dx5h/+UKsiulWUGOAiWxP 2ydccCrDlv6NidcCF6wxHZ8iS0WNMFyncc4hifQdvudHTVTyF/h2xRtFlIFIx/an vtkGjA10Go4hqYqaMIww4FZsGnoijoBJG07COszvq0cWyiBi0j9nFAcpJdxQbY7q o0+iAGQbvewZD84ISuijbOVcFKW1ITgd2Vyx7xoda0IrAAn2nHwu3iOWa1dx847A 0q5Z -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:13 2025 by rpki-client