$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer File: 69dba5e3-26fb-440c-884d-525d04a32b0f.cer (raw, json) Hash identifier: GhYdMCBGuDNUNhpUaxCikLEVjg4YOZPOxTYCD1LseWU= Subject key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848350026805933AC075C472100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Dec 2024 19:45:02 +0000 Certificate not after: Fri 19 Mar 2027 18:45:02 +0000 Subordinate resources: AS: 17034 IP: 103.229.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:00:26:80:59:33:ac:07:5c:47:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 14 19:45:02 2024 GMT Not After : Mar 19 18:45:02 2027 GMT Subject: CN=69dba5e3-26fb-440c-884d-525d04a32b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:b6:a5:0f:59:b8:b5:8e:f7:7d:7b:2d:5c: cd:94:4c:e0:73:29:17:c6:ea:47:19:ad:bb:37:31: fc:39:94:60:11:bf:e5:41:ce:33:43:dd:11:2f:22: 44:06:c0:c8:0b:19:8a:ed:78:1d:27:1a:40:ea:08: 0b:89:bd:c8:44:4e:fa:40:07:fd:a6:df:99:26:d9: 20:de:a5:85:18:e5:79:6c:e8:ad:72:b7:b2:8d:65: 77:1f:1c:4c:0c:62:1d:03:de:85:f5:c8:d1:af:a2: 7b:86:35:02:a0:2c:67:c9:7b:32:de:5c:8a:e4:32: 6b:0b:31:44:d7:fc:1c:b3:b4:3b:4a:1f:94:66:6a: 2d:31:1b:7e:36:9d:9d:32:ba:64:a7:83:c5:ba:cd: 18:84:11:09:e2:4a:d1:ee:d1:b7:61:92:3f:9e:2b: 09:b7:c8:e9:98:3f:8e:51:63:e7:41:1c:18:bf:b7: 9f:f9:ff:9b:b7:0a:05:d0:33:88:ce:64:d2:e5:e3: c2:3f:ad:fc:88:db:bf:0e:10:ed:36:d4:0b:6b:f2: c6:33:f4:6b:85:b7:76:b5:4d:ce:ad:e4:08:e2:65: 22:f6:28:ae:74:64:c7:b8:48:29:9b:ce:ec:eb:77: 09:7d:52:4e:0f:29:07:d3:ef:1a:cc:6c:f9:fe:43: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 103.229.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:15:5d:d9:e1:df:b5:21:6a:9b:63:20:7f:e0:c3:7f:2d:47: 3f:71:eb:23:6e:b3:75:a3:75:70:bd:de:51:38:f5:46:f5:79: 0e:3c:e3:24:19:f5:ce:93:84:24:2c:2a:04:ba:1b:6a:1c:9d: 19:88:4f:42:a8:cf:bd:59:bd:a6:24:57:7f:a1:fb:be:11:e6: 69:81:22:76:34:6e:72:76:c8:a2:89:73:e3:04:7c:38:19:bc: 57:4c:c3:a5:fe:f0:9e:1c:9c:67:bf:a3:2c:64:0c:31:7c:fb: 6c:4e:80:3e:5d:13:9d:c0:9d:34:e8:52:11:a0:e0:cd:d1:0e: d5:13:5b:2f:f8:ba:48:99:96:84:38:24:08:f9:d6:40:f3:d1: 77:84:2c:ad:88:87:79:13:93:09:b7:2e:59:87:97:4f:50:fd: d4:cb:9b:f5:89:59:55:42:ff:7f:9e:a6:31:fc:fa:a4:76:40: 7a:a7:16:30:e9:e5:87:e9:8c:ba:02:81:1c:8f:fe:bb:69:2d: b2:49:f3:5f:74:44:0d:e1:a4:ac:2e:9a:e1:9b:e1:5b:cd:c1: b7:2a:e1:69:d6:40:b7:eb:8f:e8:37:e0:f9:07:1b:e2:9a:40: cc:74:96:62:90:08:cd:81:57:9d:30:5e:96:b4:f1:86:4d:82: 6f:d0:ec:a2 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEg1ACaAWTOsB1xHIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIxNDE5NDUwMloXDTI3MDMxOTE4NDUwMlowLzEtMCsGA1UEAxMk NjlkYmE1ZTMtMjZmYi00NDBjLTg4NGQtNTI1ZDA0YTMyYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yS2pQ9ZuLWO9317LVzNlEzgcykXxupHGa27 NzH8OZRgEb/lQc4zQ90RLyJEBsDICxmK7XgdJxpA6ggLib3IRE76QAf9pt+ZJtkg 3qWFGOV5bOitcreyjWV3HxxMDGIdA96F9cjRr6J7hjUCoCxnyXsy3lyK5DJrCzFE 1/wcs7Q7Sh+UZmotMRt+Np2dMrpkp4PFus0YhBEJ4krR7tG3YZI/nisJt8jpmD+O UWPnQRwYv7ef+f+btwoF0DOIzmTS5ePCP638iNu/DhDtNtQLa/LGM/Rrhbd2tU3O reQI4mUi9iiudGTHuEgpm87s63cJfVJODykH0+8azGz5/kOHqwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNRAe2+nFlpPA+FOfFkJ80blC46mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRhMzJiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY5ZGJhNWUzLTI2ZmItNDQwYy04 ODRkLTUyNWQwNGEzMmIwZi82OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRh MzJiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJn5ZgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC QoowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAShVd2eHftSFqm2Mgf+DDfy1HP3HrI26zdaN1cL3eUTj1RvV5 DjzjJBn1zpOEJCwqBLobahydGYhPQqjPvVm9piRXf6H7vhHmaYEidjRucnbIoolz 4wR8OBm8V0zDpf7wnhycZ7+jLGQMMXz7bE6APl0TncCdNOhSEaDgzdEO1RNbL/i6 SJmWhDgkCPnWQPPRd4QsrYiHeROTCbcuWYeXT1D91Mub9YlZVUL/f56mMfz6pHZA eqcWMOnlh+mMugKBHI/+u2ktsknzX3REDeGkrC6a4ZvhW83BtyrhadZAt+uP6Dfg +Qcb4ppAzHSWYpAIzYFXnTBelrTxhk2Cb9Dsog== -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:17 2025 by rpki-client