$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer File: d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer (raw, json) Hash identifier: Av7jdb83+sQ61xbP2lDIyDBB0b8AKDZpKRzQg37G8M8= Subject key identifier: 37:33:EB:5B:18:1F:15:8D:BF:5E:5E:E5:54:70:03:E8:49:25:77:71 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584937CD0E7C86823F779DD51950 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 12:36:27 +0000 Certificate not after: Thu 25 Mar 2027 19:51:43 +0000 Subordinate resources: AS: 30581 AS: 397958 AS: 401519 IP: 23.147.232.0/24 IP: 23.163.8.0/24 IP: 140.235.36.0/22 IP: 2602:2a3::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:cd:0e:7c:86:82:3f:77:9d:d5:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 17 12:36:27 2025 GMT Not After : Mar 25 19:51:43 2027 GMT Subject: CN=d40e6cab-e66c-4ca7-ab61-126b3cfcbb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:2b:3c:21:6c:8b:99:99:55:ac:1c:75:0d: f7:0f:e9:0a:20:11:b9:d8:92:db:a6:89:2d:f9:1d: cb:3b:b8:03:5f:d2:a1:a9:a2:5f:63:ab:fb:35:3a: 20:8d:03:b3:9e:6f:a0:ce:56:48:21:f3:a1:9f:85: 5d:c0:51:3c:94:ca:00:b0:cd:40:1e:6c:1e:b8:e4: 08:6f:cc:38:aa:32:61:76:ec:1f:bf:87:aa:56:a6: 56:45:f9:79:d9:4f:e1:8d:b3:04:32:f7:08:b8:cc: c2:2f:f9:c0:ef:71:1a:3f:df:2a:5c:a2:d0:d8:7a: 68:99:3d:9b:fd:3f:f3:c0:30:4d:ee:5f:58:9b:7d: c3:b9:e7:b8:fe:fd:9f:5e:35:9a:ee:0b:29:27:7e: 9a:3e:5d:80:ba:26:c0:2a:61:73:0c:d5:bc:72:eb: 91:48:7f:31:69:e7:e0:3f:56:fb:22:d9:5b:82:d2: e0:7c:e9:cc:09:03:30:07:09:d0:48:07:7a:17:ff: 61:d4:1d:0e:25:b8:cf:59:3c:db:c8:d4:e0:48:c0: e8:3b:f5:a9:e9:e5:6a:f9:a9:75:84:69:65:79:12: 02:bf:1f:1f:f1:2b:62:37:e3:74:9a:40:7d:c2:f1: 27:e2:d3:2a:30:96:57:53:b8:67:f8:14:11:82:7f: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:33:EB:5B:18:1F:15:8D:BF:5E:5E:E5:54:70:03:E8:49:25:77:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.232.0/24 23.163.8.0/24 140.235.36.0/22 IPv6: 2602:2a3::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30581 397958 401519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:22:ba:5a:aa:66:2e:7c:d9:8a:eb:d5:63:74:1b:5f:93:83: 63:f1:27:8b:bd:ab:91:2e:70:d5:5a:0b:d2:2f:bd:28:58:2c: 52:75:3e:88:07:12:8c:8b:7f:2f:7f:ac:f5:9e:17:f5:e0:3a: ad:1e:84:ec:a4:33:5c:22:b9:3f:bc:81:a4:32:31:0e:68:1a: b6:90:11:88:1b:74:34:98:5c:0c:f1:0a:ed:3d:f3:a2:85:76: 17:ff:ad:3d:6f:50:78:55:9a:3a:63:85:7f:c1:fd:59:69:fd: f4:6a:6b:87:18:05:a0:4e:8b:07:20:7f:f0:4a:6a:55:9d:36: 74:66:eb:68:8a:16:1f:a0:42:bf:58:83:a1:11:fc:0a:9e:74: 80:7f:ae:46:05:90:ee:af:4c:11:29:c5:96:c2:1a:fd:cb:86: ae:6c:e1:12:83:f0:2b:51:bb:4c:1b:43:4d:c4:be:a0:02:84: a5:9a:f6:1c:e9:3b:6b:71:97:ce:6a:e2:37:71:f1:7c:42:0d: 96:9f:1c:28:4a:63:a0:af:c9:13:a4:2b:e0:87:21:3f:6e:79: ec:23:07:0d:5b:11:bd:fa:3c:95:8a:4d:78:71:92:e9:44:66: f9:ad:0f:ed:5d:d8:7f:d5:d4:16:01:79:db:84:b6:1f:75:f5: 4e:d1:ae:c9 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEk3zQ58hoI/d53VGVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxNzEyMzYyN1oXDTI3MDMyNTE5NTE0M1owLzEtMCsGA1UEAxMk ZDQwZTZjYWItZTY2Yy00Y2E3LWFiNjEtMTI2YjNjZmNiYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8QrPCFsi5mZVawcdQ33D+kKIBG52JLbpokt +R3LO7gDX9KhqaJfY6v7NTogjQOznm+gzlZIIfOhn4VdwFE8lMoAsM1AHmweuOQI b8w4qjJhduwfv4eqVqZWRfl52U/hjbMEMvcIuMzCL/nA73EaP98qXKLQ2HpomT2b /T/zwDBN7l9Ym33Duee4/v2fXjWa7gspJ36aPl2AuibAKmFzDNW8cuuRSH8xaefg P1b7ItlbgtLgfOnMCQMwBwnQSAd6F/9h1B0OJbjPWTzbyNTgSMDoO/Wp6eVq+al1 hGlleRICvx8f8StiN+N0mkB9wvEn4tMqMJZXU7hn+BQRgn8zgwIDAQABo4IEPzCC BDswHQYDVR0OBBYEFDcz61sYHxWNv15e5VRwA+hJJXdxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NDBlNmNhYi1lNjZjLTRjYTctYWI2MS0xMjZiM2NmY2JiODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MGU2Y2FiLWU2NmMtNGNhNy1h YjYxLTEyNmIzY2ZjYmI4Ni9kNDBlNmNhYi1lNjZjLTRjYTctYWI2MS0xMjZiM2Nm Y2JiODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXk+gDBAAXowgDBAKM6yQwDQQCAAIwBwMFACYC AqMwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICd3UCAwYShgIDBiBvMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADUiulqqZi582Yrr1WN0G1+Tg2PxJ4u9q5EucNVaC9IvvShYLFJ1PogHEoyLfy9/ rPWeF/XgOq0ehOykM1wiuT+8gaQyMQ5oGraQEYgbdDSYXAzxCu0986KFdhf/rT1v UHhVmjpjhX/B/Vlp/fRqa4cYBaBOiwcgf/BKalWdNnRm62iKFh+gQr9Yg6ER/Aqe dIB/rkYFkO6vTBEpxZbCGv3Lhq5s4RKD8CtRu0wbQ03EvqAChKWa9hzpO2txl85q 4jdx8XxCDZafHChKY6CvyROkK+CHIT9ueewjBw1bEb36PJWKTXhxkulEZvmtD+1d 2H/V1BYBeduEth919U7Rrsk= -----END CERTIFICATE-----Generated at Fri May 9 12:44:03 2025 by rpki-client