$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer File: 03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer (raw, json) Hash identifier: w89uEG+ggf2da4a8pVzLppnrkhT8+O+jhtCoHTgOnjA= Subject key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Authority key identifier: FC:16:3C:4B:E3:40:A0:31:6F:1A:FC:1E:8F:C7:EE:FB:00:AA:B6:E3 Certificate issuer: /CN=da272869-5127-4af6-8053-b8617ccb9de3 Certificate serial: 010D0C9F432858488D9430FC015B0B8A60213480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 15 Jan 2025 13:14:27 +0000 Certificate not after: Tue 20 Apr 2027 12:14:27 +0000 Subordinate resources: AS: 397730 IP: 23.132.92.0/24 IP: 2602:f761::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:94:30:fc:01:5b:0b:8a:60:21:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da272869-5127-4af6-8053-b8617ccb9de3 Validity Not Before: Jan 15 13:14:27 2025 GMT Not After : Apr 20 12:14:27 2027 GMT Subject: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:09:66:ec:e2:5d:0e:b3:a6:eb:bf:8a:da: 87:1c:3d:38:08:bd:62:91:d2:40:e1:8a:b9:ba:87: b4:9b:1b:fd:7d:cb:80:2e:cd:f6:dc:6d:e1:c1:da: 8a:15:b5:08:69:f7:de:24:d9:5f:47:5c:6a:82:c5: 11:26:9e:3a:0b:1d:c1:b5:88:e0:c3:8b:e0:40:62: 7e:8f:7d:84:0d:b3:7f:c7:22:a4:0f:33:22:2b:b3: e9:2a:5c:5d:1f:62:f4:05:e5:b1:1f:1c:e7:7d:6e: 57:aa:ba:92:e9:85:bf:27:46:54:65:e7:ab:2b:57: 4c:2a:58:9f:db:bc:e1:43:96:47:46:89:b7:f9:3e: 9e:98:02:94:f6:23:d6:35:b3:80:b7:d2:bc:3d:d6: 29:9b:b4:45:07:da:88:cb:9c:53:96:1c:f1:92:f5: 3d:8e:f5:96:17:cc:92:f3:71:d4:8a:7b:c6:64:d5: 8f:73:5a:84:b7:a2:57:cd:3d:64:c3:4e:6f:fb:ff: 67:c9:66:91:c4:98:89:31:c9:4b:f3:e2:e5:58:d2: fe:a7:20:37:c0:0c:99:ec:e5:51:46:5c:02:1f:e8: c5:09:6d:c6:d1:15:b8:a9:d3:54:2e:f4:f8:c9:7b: ea:b4:fe:2b:b6:7f:a3:72:00:1d:34:de:61:b5:e4: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl X509v3 Authority Key Identifier: keyid:FC:16:3C:4B:E3:40:A0:31:6F:1A:FC:1E:8F:C7:EE:FB:00:AA:B6:E3 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer sbgp-ipAddrBlock: critical IPv4: 23.132.92.0/24 IPv6: 2602:f761::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397730 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f9:3b:43:38:16:9f:c3:c0:79:81:b0:dc:37:dc:2c:a9:79: a5:fd:91:1c:6c:95:c4:eb:8c:0b:0b:13:49:d9:4f:ca:56:f1: f6:55:3f:c5:7c:4b:89:26:23:e2:a4:d0:a0:a4:37:6e:b3:ab: 41:71:76:58:90:cd:cf:ff:e5:71:86:1f:17:85:0d:c7:bb:0b: cc:2b:47:47:da:72:33:15:6a:11:0b:07:b7:93:ae:f3:0e:0f: da:f9:c7:c6:2f:ed:37:42:a3:b6:12:fd:33:e5:a7:4d:79:5b: 6d:d1:00:66:50:c1:b0:84:b2:e2:94:7f:86:40:68:9d:16:0f: 1d:78:89:76:25:08:a2:27:7e:18:c8:9a:c2:4d:d0:6a:8c:a4: fc:68:96:37:67:0f:ca:fd:61:76:a8:f2:35:7d:28:2d:4b:e0: a0:01:e5:2c:38:52:21:a7:d0:84:30:05:5b:ac:63:a1:f5:c9: 07:63:2a:0b:86:de:cf:c1:ce:80:32:90:12:f7:3e:ab:2a:e6: 4c:a9:aa:fc:bc:0a:1a:72:e7:81:bb:e7:28:f7:35:a7:7b:bb: 18:ee:9f:ec:88:46:52:b5:da:62:b9:ec:fe:bb:11:32:ae:1d: e3:3a:b4:6c:19:d7:5a:94:59:55:0e:68:32:28:b2:e5:a6:2d: f6:5b:d6:71 -----BEGIN CERTIFICATE----- MIIG6TCCBdGgAwIBAgIUAQ0Mn0MoWEiNlDD8AVsLimAhNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEyNzI4NjktNTEyNy00YWY2LTgwNTMtYjg2MTdjY2I5 ZGUzMB4XDTI1MDExNTEzMTQyN1oXDTI3MDQyMDEyMTQyN1owPTE7MDkGA1UEAxMy MDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdjMzZkMTMyNDI4NWFh ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GQlm7OJdDrOm67+K 2occPTgIvWKR0kDhirm6h7SbG/19y4AuzfbcbeHB2ooVtQhp994k2V9HXGqCxREm njoLHcG1iODDi+BAYn6PfYQNs3/HIqQPMyIrs+kqXF0fYvQF5bEfHOd9blequpLp hb8nRlRl56srV0wqWJ/bvOFDlkdGibf5Pp6YApT2I9Y1s4C30rw91imbtEUH2ojL nFOWHPGS9T2O9ZYXzJLzcdSKe8Zk1Y9zWoS3olfNPWTDTm/7/2fJZpHEmIkxyUvz 4uVY0v6nIDfADJns5VFGXAIf6MUJbcbRFbip01Qu9PjJe+q0/iu2f6NyAB003mG1 5L8rAgMBAAGjggPtMIID6TAdBgNVHQ4EFgQU+qbEJSk8in+cL8mE7w4monY9l30w ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYz MS1hYmYzLTBmMzJiOGU3ZmU3OS8zLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00 ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUyOTNDOEE3RjlDMkZDOTg0 RUYwRTI2QTI3NjNEOTc3RC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgx ZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1iODYxN2NjYjlkZTMvZGEyNzI4 NjktNTEyNy00YWY2LTgwNTMtYjg2MTdjY2I5ZGUzLmNybDAfBgNVHSMEGDAWgBT8 FjxL40CgMW8a/B6Px+77AKq24zAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Rh MjcyODY5LTUxMjctNGFmNi04MDUzLWI4NjE3Y2NiOWRlMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhFwwDgQCAAIwCAMGACYC92EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYRojBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK+TtDOBafw8B5gbDcN9wsqXml /ZEcbJXE64wLCxNJ2U/KVvH2VT/FfEuJJiPipNCgpDdus6tBcXZYkM3P/+Vxhh8X hQ3HuwvMK0dH2nIzFWoRCwe3k67zDg/a+cfGL+03QqO2Ev0z5adNeVtt0QBmUMGw hLLilH+GQGidFg8deIl2JQiiJ34YyJrCTdBqjKT8aJY3Zw/K/WF2qPI1fSgtS+Cg AeUsOFIhp9CEMAVbrGOh9ckHYyoLht7Pwc6AMpAS9z6rKuZMqar8vAoacueBu+co 9zWne7sY7p/siEZStdpiuez+uxEyrh3jOrRsGddalFlVDmgyKLLlpi32W9Zx -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:15 2025 by rpki-client