$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer File: 7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer (raw, json) Hash identifier: TxVotsJ4SH/yi//uzKZcKnBa6+jqamnPm1/OmjX9iGQ= Subject key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B68DF30D415E01725F9D1118 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jan 2025 05:30:01 +0000 Certificate not after: Wed 05 May 2027 04:30:01 +0000 Subordinate resources: AS: 401388 IP: 167.253.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:8d:f3:0d:41:5e:01:72:5f:9d:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 30 05:30:01 2025 GMT Not After : May 5 04:30:01 2027 GMT Subject: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:54:eb:2a:66:eb:8e:06:55:ae:c3:3b:ab: 1b:3d:26:86:eb:9d:67:79:70:85:be:c4:87:67:02: 3d:fb:ca:13:9a:d2:fb:aa:80:ca:74:c0:81:ba:c2: 1d:db:8d:fb:52:70:b2:8f:40:cf:10:a6:91:bd:3e: 63:d5:8b:1c:db:79:12:80:8f:61:56:f7:2b:a3:90: 03:48:30:2d:48:7b:0e:39:dc:81:0d:1d:0e:a9:eb: 7f:94:e1:d8:ad:70:93:e5:a9:7d:fc:08:9f:8a:7a: 06:6d:43:cf:3a:c9:10:03:aa:5e:37:77:e1:82:b4: bd:30:b3:03:c4:1f:f9:15:7d:5a:4a:73:57:f0:7b: 60:7d:7a:7e:9d:5f:59:ca:5a:a9:73:c7:1b:d6:90: 36:45:49:d7:8c:51:5b:6a:ca:b4:64:cd:42:3a:1f: 4f:23:8d:48:0e:16:00:87:fb:93:f6:c5:a4:0c:6a: 2b:26:a5:f9:c6:59:3a:4e:c4:e4:92:42:a1:51:1f: fa:9c:68:8f:aa:7f:a2:2b:9b:4a:4e:d6:58:99:8c: 7e:39:01:9a:ac:57:c8:98:6a:0a:ad:28:e4:be:57: 7c:95:ab:1a:fb:9c:12:77:4a:ff:14:f9:34:1f:a9: c8:dc:78:cd:ea:27:9f:bf:34:db:8a:b8:25:2b:67: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401388 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:98:0b:e1:c4:40:f4:1c:ac:d7:ba:c6:7e:72:b6:e6:f5:c0: 1e:2a:71:ec:e7:2f:af:2d:7b:04:c0:c2:a3:6a:2b:46:84:37: ad:46:a0:fb:b2:23:8a:6c:13:cd:79:42:df:49:ee:43:16:e9: 47:16:12:ec:13:78:d9:af:a5:22:4b:88:0e:64:e1:bf:7d:71: 25:e4:fd:7a:fd:a3:62:34:ce:db:c8:64:9f:d3:0c:5b:77:05: fd:7b:81:9e:8c:1b:eb:e5:52:8c:74:f6:54:75:9f:19:ea:c4: 27:14:04:93:1e:23:47:b0:7d:dc:12:91:7d:4c:51:03:8c:f8: 9a:4e:81:8f:cc:76:68:c7:ae:d4:99:ab:ba:61:f1:28:e4:88: f4:9c:79:64:79:30:e9:db:e6:73:8a:8c:45:7d:1d:36:44:fa: 54:04:97:3d:71:59:56:9f:5b:ab:13:9f:11:18:42:18:f4:4a: b4:06:47:48:fa:82:e6:ba:aa:cc:a8:7e:21:ea:3a:be:66:64: 3d:a0:6c:44:9a:12:ac:aa:22:ed:1a:1e:81:62:dc:04:c0:a9: 40:63:3a:89:94:64:5b:38:b0:bd:1e:2a:38:00:69:5b:f4:0f: 42:3a:52:5c:a8:c8:94:ae:fa:58:03:49:20:42:5a:ab:37:9e: c1:9c:b6:7f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEi2jfMNQV4Bcl+dERgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEzMDA1MzAwMVoXDTI3MDUwNTA0MzAwMVowLzEtMCsGA1UEAxMk N2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFhM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOJU6ypm644GVa7DO6sbPSaG651neXCFvsSH ZwI9+8oTmtL7qoDKdMCBusId2437UnCyj0DPEKaRvT5j1Ysc23kSgI9hVvcro5AD SDAtSHsOOdyBDR0Oqet/lOHYrXCT5al9/AifinoGbUPPOskQA6peN3fhgrS9MLMD xB/5FX1aSnNX8HtgfXp+nV9Zylqpc8cb1pA2RUnXjFFbasq0ZM1COh9PI41IDhYA h/uT9sWkDGorJqX5xlk6TsTkkkKhUR/6nGiPqn+iK5tKTtZYmYx+OQGarFfImGoK rSjkvld8lasa+5wSd0r/FPk0H6nI3HjN6iefvzTbirglK2dlSwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFK8Jy9VKPSBNFX5TBRAgfyFIv5RaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdlZTY3MGYzLTg0ZDYtNGE3Ny04 NmMyLThjNmJjNmJhYTNiMi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZi YWEzYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/XQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh/sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAACYC+HEQPQcrNe6xn5ytub1wB4qceznL68tewTAwqNqK0aE N61GoPuyI4psE815Qt9J7kMW6UcWEuwTeNmvpSJLiA5k4b99cSXk/Xr9o2I0ztvI ZJ/TDFt3Bf17gZ6MG+vlUox09lR1nxnqxCcUBJMeI0ewfdwSkX1MUQOM+JpOgY/M dmjHrtSZq7ph8SjkiPSceWR5MOnb5nOKjEV9HTZE+lQElz1xWVafW6sTnxEYQhj0 SrQGR0j6gua6qsyofiHqOr5mZD2gbESaEqyqIu0aHoFi3ATAqUBjOomUZFs4sL0e KjgAaVv0D0I6UlyoyJSu+lgDSSBCWqs3nsGctn8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:09 2025 by rpki-client