$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer File: 9945234d-5624-4733-92d1-ade3a2f33d87.cer (raw, json) Hash identifier: iWSaWGIziG2fA92/iqKMr4FUHVsVRrxgZs4pZbK1nyo= Subject key identifier: D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848B353DD802520817703BD7A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 01:45:33 +0000 Certificate not after: Tue 04 May 2027 00:45:33 +0000 Subordinate resources: AS: 397614 IP: 23.137.240.0/24 IP: 2602:800::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:53:dd:80:25:20:81:77:03:bd:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 29 01:45:33 2025 GMT Not After : May 4 00:45:33 2027 GMT Subject: CN=9945234d-5624-4733-92d1-ade3a2f33d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:1d:fb:47:81:34:63:11:4b:65:8e:82:0f: 23:db:33:a7:c9:05:a0:5c:ec:e2:33:a4:7f:db:2c: 8c:12:dd:e9:f9:e0:08:2e:e8:59:c5:fc:2e:da:4c: 20:a0:95:0a:69:e3:b3:62:6b:1e:17:69:97:91:91: 1f:52:38:0b:8d:be:3b:25:38:0c:ce:97:15:b5:ea: da:46:4b:3c:fe:b6:fe:6d:d1:c0:2c:95:32:5e:b5: 7f:cb:4f:9f:43:fd:4b:f8:a2:4f:bd:08:b7:33:72: 01:25:0b:a7:04:79:d7:3e:84:a6:93:58:ea:cf:1d: 04:cd:60:23:e7:01:b5:30:ac:7e:31:40:9d:33:05: e2:9c:95:d3:34:1a:47:5f:ee:b4:53:c3:23:ff:b2: 4b:c3:2e:a9:2f:48:18:fe:89:b9:de:7d:46:ca:a5: 10:6b:85:63:bb:20:14:6d:6d:e3:09:09:a7:f6:4c: 89:db:85:6d:10:8b:57:8d:e6:77:b3:26:74:7e:32: a4:62:a5:11:99:b2:64:ea:44:16:4c:d9:bc:3e:c0: b7:68:52:f1:35:91:0b:81:b8:2a:5c:a9:85:de:3b: 39:75:e1:8b:10:1f:58:e6:59:23:65:76:09:22:48: 3e:2e:62:f0:45:32:e9:c8:a7:44:63:e6:7a:3d:60: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.137.240.0/24 IPv6: 2602:800::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397614 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:eb:61:5b:80:25:a5:b9:1f:be:be:61:d0:a9:c0:6c:d5:08: d6:21:9a:28:5c:dd:ca:f5:23:e6:54:22:5c:99:03:0a:0d:b7: bf:d8:78:f0:ee:eb:56:c6:62:b4:88:49:c0:e8:06:89:d0:e8: 04:d9:ee:0f:6e:30:35:de:b7:90:e6:c3:ee:5d:74:24:cb:6a: 3b:d0:3d:8e:9c:9e:e1:95:14:0f:53:45:87:fc:ae:8d:0c:fc: dc:5b:4d:79:68:62:50:91:3d:b3:70:17:8d:23:63:15:46:e5: 1d:e1:05:f3:04:59:29:e2:4f:65:29:91:6e:17:b5:79:46:5d: 4b:fb:d1:ae:03:e5:db:0e:16:fe:7f:67:0e:b0:05:5b:a7:d4: 73:cf:97:30:fc:4f:08:e2:d7:e1:7b:c0:52:89:61:73:ce:93: b8:b9:66:34:0e:62:7e:f6:a5:6e:ae:7a:21:29:45:fb:43:39: b1:7e:bc:15:be:27:82:fe:24:b5:6e:3c:fe:2a:39:cb:3f:22: bc:6a:04:64:8e:e6:ca:9a:ba:56:e0:d8:91:a0:8e:09:b6:0e: 6a:79:c6:45:af:bf:e0:c0:c8:d6:53:a0:05:4b:bc:ce:40:2e: b4:ff:e8:7a:43:14:b6:fc:a2:f3:a6:27:f9:5a:43:35:66:b3: 09:4a:c5:b1 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEizU92AJSCBdwO9eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDEyOTAxNDUzM1oXDTI3MDUwNDAwNDUzM1owLzEtMCsGA1UEAxMk OTk0NTIzNGQtNTYyNC00NzMzLTkyZDEtYWRlM2EyZjMzZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfYd+0eBNGMRS2WOgg8j2zOnyQWgXOziM6R/ 2yyMEt3p+eAILuhZxfwu2kwgoJUKaeOzYmseF2mXkZEfUjgLjb47JTgMzpcVtera Rks8/rb+bdHALJUyXrV/y0+fQ/1L+KJPvQi3M3IBJQunBHnXPoSmk1jqzx0EzWAj 5wG1MKx+MUCdMwXinJXTNBpHX+60U8Mj/7JLwy6pL0gY/om53n1GyqUQa4VjuyAU bW3jCQmn9kyJ24VtEItXjeZ3syZ0fjKkYqURmbJk6kQWTNm8PsC3aFLxNZELgbgq XKmF3js5deGLEB9Y5lkjZXYJIkg+LmLwRTLpyKdEY+Z6PWCDuQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNNmNlBxBodIQiTbWUAWa1EZnt9PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 OTQ1MjM0ZC01NjI0LTQ3MzMtOTJkMS1hZGUzYTJmMzNkODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk5NDUyMzRkLTU2MjQtNDczMy05 MmQxLWFkZTNhMmYzM2Q4Ny85OTQ1MjM0ZC01NjI0LTQ3MzMtOTJkMS1hZGUzYTJm MzNkODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXifAwDwQCAAIwCQMHBCYCCAAAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGES4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEOthW4Alpbkfvr5h0KnAbNUI 1iGaKFzdyvUj5lQiXJkDCg23v9h48O7rVsZitIhJwOgGidDoBNnuD24wNd63kObD 7l10JMtqO9A9jpye4ZUUD1NFh/yujQz83FtNeWhiUJE9s3AXjSNjFUblHeEF8wRZ KeJPZSmRbhe1eUZdS/vRrgPl2w4W/n9nDrAFW6fUc8+XMPxPCOLX4XvAUolhc86T uLlmNA5ifvalbq56ISlF+0M5sX68Fb4ngv4ktW48/io5yz8ivGoEZI7mypq6VuDY kaCOCbYOannGRa+/4MDI1lOgBUu8zkAutP/oekMUtvyi86Yn+VpDNWazCUrFsQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:53 2025 by rpki-client