$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer File: de57fd18-3c65-43a3-96c1-a6fe61028c72.cer (raw, json) Hash identifier: RZoF7e5+1Suv150SRcO+18cfPcMxLTq7edxos20Lg+o= Subject key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848DCDC37D3CFCB54AC554F5880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 22:48:26 +0000 Certificate not after: Tue 15 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 400304 IP: 23.147.152.0/23 IP: 193.149.164.0/24 IP: 216.181.107.0/24 IP: 2606:a8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:dc:37:d3:cf:cb:54:ac:55:4f:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 12 22:48:26 2025 GMT Not After : Dec 15 01:45:26 2026 GMT Subject: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:81:30:14:98:fb:7b:30:8a:da:68:ad:81: a3:7a:d4:2f:4c:37:56:60:54:6d:2d:e3:ae:9f:22: c2:2c:e6:47:7b:eb:1e:a3:9f:1b:03:a4:ae:52:44: d2:4a:67:ee:88:93:02:a2:85:70:39:0d:91:78:23: b7:10:3c:6a:db:ae:7f:28:9d:65:bf:16:36:04:a8: ac:30:30:16:3f:6a:58:a2:30:ec:12:35:23:c9:75: ae:cb:2e:05:41:45:8e:6a:74:54:36:ec:43:ff:b6: 8c:24:93:aa:8a:cd:6c:e3:84:5d:6a:97:1d:44:82: e5:d0:d8:38:32:6b:e6:e8:b2:70:cc:45:43:48:c9: 9f:b1:77:11:02:58:a6:ea:3f:c4:c3:87:96:41:d8: 7e:1e:ff:5e:bd:78:ca:3e:99:a6:2c:80:e5:4f:b0: 76:63:04:62:2b:75:13:ad:6e:10:5a:27:83:15:c9: 45:5d:85:a7:96:18:2b:8e:6d:9b:37:d4:1e:ac:de: 7f:8d:d8:ae:24:6b:d3:d9:5c:de:c0:13:93:3d:ea: 94:c6:1f:65:aa:73:01:9c:12:93:e9:ac:b0:fa:9e: bf:86:57:6a:d0:3b:be:28:97:e6:19:ad:b2:fa:ea: ce:30:5a:72:bb:c6:00:fa:50:da:83:e9:a4:da:90: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/23 193.149.164.0/24 216.181.107.0/24 IPv6: 2606:a8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:56:36:77:8a:b4:79:6b:99:af:7d:46:cf:19:8f:b5:89:57: 50:a5:0f:34:82:a9:5c:d5:dd:87:0b:e0:1a:8b:e8:d0:5a:ee: 9b:d0:a8:2e:3b:66:26:93:82:d6:84:9a:5b:d9:08:8a:ee:02: d8:4c:b9:df:b8:18:02:2e:16:73:f2:bc:83:f0:f9:e2:5f:52: fc:b4:b2:55:60:28:c2:95:b6:c3:d0:c3:09:ee:54:f9:ea:fd: e7:f2:ed:e7:80:79:b5:27:88:6a:86:ef:52:ff:89:97:36:3a: e8:4a:2b:f0:0d:dc:52:b0:02:22:a9:e2:b4:6f:a6:93:2c:a0: 87:94:f3:23:fd:a7:60:76:ac:d6:a2:34:90:18:af:0e:50:5c: 6d:e0:08:d1:b4:45:59:b3:ac:b0:43:dd:a0:6a:fe:a8:49:c5: 2e:d8:b8:03:2c:5c:f6:fc:b1:4a:07:02:4e:af:65:e4:ec:8b: 25:f5:71:bb:7f:c2:87:0f:4d:6a:cf:ba:32:f2:e6:92:89:d2: c1:95:93:2b:36:0f:f9:ec:a6:b8:14:90:6a:79:2d:56:03:6c: f1:f0:9a:30:13:ea:22:b2:ae:8e:fe:ce:16:47:b3:be:93:a0: 6f:f5:68:85:ee:0f:2a:53:d5:78:50:c5:08:32:44:25:27:08: 9d:9a:87:93 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEjc3DfTz8tUrFVPWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIxMjIyNDgyNloXDTI2MTIxNTAxNDUyNlowLzEtMCsGA1UEAxMk ZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XiBMBSY+3switporYGjetQvTDdWYFRtLeOu nyLCLOZHe+seo58bA6SuUkTSSmfuiJMCooVwOQ2ReCO3EDxq265/KJ1lvxY2BKis MDAWP2pYojDsEjUjyXWuyy4FQUWOanRUNuxD/7aMJJOqis1s44RdapcdRILl0Ng4 Mmvm6LJwzEVDSMmfsXcRAlim6j/Ew4eWQdh+Hv9evXjKPpmmLIDlT7B2YwRiK3UT rW4QWieDFclFXYWnlhgrjm2bN9QerN5/jdiuJGvT2VzewBOTPeqUxh9lqnMBnBKT 6ayw+p6/hldq0Du+KJfmGa2y+urOMFpyu8YA+lDag+mk2pAsDwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMi8G/UvUulPlct6/BgMAmRATII9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k ZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RlNTdmZDE4LTNjNjUtNDNhMy05 NmMxLWE2ZmU2MTAyOGM3Mi9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEw MjhjNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXk5gDBADBlaQDBADYtWswDQQCAAIwBwMFACYG qMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhuwMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABWNneKtHlr ma99Rs8Zj7WJV1ClDzSCqVzV3YcL4BqL6NBa7pvQqC47ZiaTgtaEmlvZCIruAthM ud+4GAIuFnPyvIPw+eJfUvy0slVgKMKVtsPQwwnuVPnq/efy7eeAebUniGqG71L/ iZc2OuhKK/AN3FKwAiKp4rRvppMsoIeU8yP9p2B2rNaiNJAYrw5QXG3gCNG0RVmz rLBD3aBq/qhJxS7YuAMsXPb8sUoHAk6vZeTsiyX1cbt/wocPTWrPujLy5pKJ0sGV kys2D/nsprgUkGp5LVYDbPHwmjAT6iKyro7+zhZHs76ToG/1aIXuDypT1XhQxQgy RCUnCJ2ah5M= -----END CERTIFICATE-----Generated at Sun Feb 16 22:31:16 2025 by rpki-client