$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da.cer File: 7403d331-bdc4-4424-9467-f0b9ac3da2da.cer (raw, json) Hash identifier: HqCRFDH+at2XPQJLACDF488ANGfYjwFKkdCYUErH1Ww= Subject key identifier: 19:15:EE:0C:D3:1E:B8:F4:CE:0C:D2:3E:DC:47:71:DB:5D:AF:FA:E2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848625E07A6864AB296B24BE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/7403d331-bdc4-4424-9467-f0b9ac3da2da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 01:45:33 +0000 Certificate not after: Mon 05 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 192.104.38.0/24 IP: 2620:b7:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:5e:07:a6:86:4a:b2:96:b2:4b:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 31 01:45:33 2024 GMT Not After : Apr 5 00:45:33 2027 GMT Subject: CN=7403d331-bdc4-4424-9467-f0b9ac3da2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:14:89:e3:65:76:40:5e:4c:91:1f:53:29: 5d:1e:06:ca:ff:b0:da:ef:de:13:a2:a4:8e:26:9a: a2:01:34:89:87:98:1f:69:49:c4:e2:c0:58:f8:ef: fe:3d:69:86:dd:8e:00:03:09:0f:4d:ff:a9:08:49: 1b:1e:4a:4b:bd:5a:c9:b2:19:f9:5c:b9:33:7e:a5: b0:61:00:31:44:59:6b:24:b3:af:d5:9f:a1:6c:57: dc:bc:58:41:74:ae:38:ca:37:25:79:70:9e:e8:28: 8b:c3:95:d4:43:fa:f8:42:55:5c:36:a6:be:55:4d: f6:48:06:6d:b1:25:29:2a:53:01:92:63:de:b0:c1: 4e:de:e0:3b:45:51:0b:00:db:f1:e8:76:31:d2:28: 50:51:96:d9:8f:eb:ce:d0:e6:27:5c:59:17:a6:78: ff:4a:6d:f2:ae:fe:0a:27:48:b7:75:35:c0:13:fa: 95:bc:53:c2:a6:e2:5b:28:96:08:05:79:29:7a:b4: c3:06:ad:42:6c:85:c3:23:b9:91:64:15:3d:d2:7f: f7:dd:05:eb:cb:5e:eb:9e:3a:80:c6:bc:f5:c6:41: ef:f1:da:7b:b3:5b:45:ee:61:c2:70:e1:05:9c:4f: c1:a6:23:fb:54:4b:dd:f1:ad:ab:7e:93:92:16:fe: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:EE:0C:D3:1E:B8:F4:CE:0C:D2:3E:DC:47:71:DB:5D:AF:FA:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7403d331-bdc4-4424-9467-f0b9ac3da2da/7403d331-bdc4-4424-9467-f0b9ac3da2da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.104.38.0/24 IPv6: 2620:b7:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:06:75:5c:3e:6f:3a:43:53:c5:c0:05:d0:98:fa:4d:6f:82: c0:4b:7c:fc:c6:92:6f:1d:64:0e:56:06:7f:bd:62:08:dd:30: 84:fa:5f:60:8b:4f:df:00:68:5e:97:27:e1:41:10:85:d8:a1: fc:cb:7e:c4:d6:ab:ab:3d:ce:ef:13:68:20:cf:d9:8b:54:a6: 08:70:8e:d1:0e:a7:51:be:d3:d7:5c:21:b4:60:0c:2c:b6:85: 0e:fd:d1:75:61:ac:80:89:b6:fb:3a:cd:d8:0e:61:ec:8c:4e: 3f:2f:3f:25:3e:2a:9f:a4:39:ff:65:41:cd:40:ec:45:cb:7c: 3e:c1:12:19:a0:70:4e:d5:ad:3e:0e:00:30:d2:57:c5:ea:aa: f5:68:43:61:dc:f8:34:28:01:c5:83:cc:45:a9:52:b3:e1:94: 90:34:8e:30:dd:62:5d:15:11:7f:d3:18:29:0e:ae:42:c1:6c: ce:51:0e:0c:43:79:19:13:d3:a7:71:de:0c:d9:2f:bc:3c:a3: 60:37:f4:cd:6f:89:2c:3f:9f:bf:2c:55:ac:82:2d:61:68:88: ba:67:fb:7a:67:f4:24:a1:c3:df:69:4f:33:d7:6a:8d:ea:bb: 4c:f3:19:be:ef:58:26:dd:c3:27:e4:9b:43:79:34:93:4d:a9: b5:62:14:6c -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEhiXgemhkqylrJL5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIzMTAxNDUzM1oXDTI3MDQwNTAwNDUzM1owLzEtMCsGA1UEAxMk NzQwM2QzMzEtYmRjNC00NDI0LTk0NjctZjBiOWFjM2RhMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihsUieNldkBeTJEfUyldHgbK/7Da794ToqSO JpqiATSJh5gfaUnE4sBY+O/+PWmG3Y4AAwkPTf+pCEkbHkpLvVrJshn5XLkzfqWw YQAxRFlrJLOv1Z+hbFfcvFhBdK44yjcleXCe6CiLw5XUQ/r4QlVcNqa+VU32SAZt sSUpKlMBkmPesMFO3uA7RVELANvx6HYx0ihQUZbZj+vO0OYnXFkXpnj/Sm3yrv4K J0i3dTXAE/qVvFPCpuJbKJYIBXkperTDBq1CbIXDI7mRZBU90n/33QXry17rnjqA xrz1xkHv8dp7s1tF7mHCcOEFnE/BpiP7VEvd8a2rfpOSFv5FHwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFBkV7gzTHrj0zgzSPtxHcdtdr/riMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 NDAzZDMzMS1iZGM0LTQ0MjQtOTQ2Ny1mMGI5YWMzZGEyZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc0MDNkMzMxLWJkYzQtNDQyNC05 NDY3LWYwYjlhYzNkYTJkYS83NDAzZDMzMS1iZGM0LTQ0MjQtOTQ2Ny1mMGI5YWMz ZGEyZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAaCYwDwQCAAIwCQMHACYgALdAADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA9BnVcPm86Q1PFwAXQmPpNb4LAS3z8xpJvHWQOVgZ/vWII3TCE+l9gi0/fAGhe lyfhQRCF2KH8y37E1qurPc7vE2ggz9mLVKYIcI7RDqdRvtPXXCG0YAwstoUO/dF1 YayAibb7Os3YDmHsjE4/Lz8lPiqfpDn/ZUHNQOxFy3w+wRIZoHBO1a0+DgAw0lfF 6qr1aENh3Pg0KAHFg8xFqVKz4ZSQNI4w3WJdFRF/0xgpDq5CwWzOUQ4MQ3kZE9On cd4M2S+8PKNgN/TNb4ksP5+/LFWsgi1haIi6Z/t6Z/QkocPfaU8z12qN6rtM8xm+ 71gm3cMn5JtDeTSTTam1YhRs -----END CERTIFICATE-----Generated at Fri Apr 4 16:09:13 2025 by rpki-client