$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer File: f35be5f0-d452-4cd8-859e-27da5839ddb4.cer (raw, json) Hash identifier: +ZENstlNr6YPOy4kYRlaQVM2tzISv0Qflgmx0Pqg14s= Subject key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848B0892DD3297A99C9DC01B4AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 01:45:33 +0000 Certificate not after: Mon 03 May 2027 00:45:33 +0000 Subordinate resources: AS: 21659 AS: 63334 IP: 23.143.216.0/24 IP: 130.51.76.0/24 IP: 142.202.128.0/24 IP: 2602:fdd2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:89:2d:d3:29:7a:99:c9:dc:01:b4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 28 01:45:33 2025 GMT Not After : May 3 00:45:33 2027 GMT Subject: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:9d:a4:21:4d:fe:92:96:4e:04:9b:08:ed: 1b:78:ac:c9:68:66:60:1e:60:c9:93:5f:a2:ce:2b: b9:b4:25:22:fb:d8:7d:29:08:9f:97:14:10:9d:d2: f5:79:d2:f7:06:f9:21:68:e7:d8:c7:cc:e5:9c:58: b6:f8:79:7f:8e:da:00:c9:57:2d:c5:db:18:10:ca: ae:5e:8b:5f:7f:73:59:8c:2b:bc:a3:24:6f:25:e1: b7:08:46:30:c3:d2:65:2a:60:c7:d3:4e:28:c3:c4: 58:f9:a8:41:15:83:59:b1:e3:d0:8a:34:b8:8d:d0: 55:0e:ac:81:1e:c6:c8:d3:ea:4a:8a:f6:cf:1c:65: ca:a9:19:3f:69:14:2a:51:96:bb:d8:b8:b7:f0:02: 87:2b:51:cc:87:1d:ba:0e:8f:70:33:4f:8c:7d:65: c1:a8:34:20:12:5c:76:ef:44:df:d0:ca:55:2b:40: ed:ad:ab:0e:d0:1f:9f:67:61:aa:c7:bf:61:87:e4: fd:3f:d4:50:e0:f5:3e:a5:95:e5:40:59:2e:99:13: ba:af:da:94:74:99:6e:ed:ce:ce:1e:18:88:e9:73: ee:c5:a4:f0:1c:f7:01:45:ad:f2:ef:d8:42:d2:32: 93:d1:80:70:1f:16:d1:42:5f:48:f5:77:7a:4f:9a: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.143.216.0/24 130.51.76.0/24 142.202.128.0/24 IPv6: 2602:fdd2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21659 63334 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8b:23:39:7a:af:e1:bc:65:b6:2e:72:e6:d8:09:6f:a9:e0: 2d:4f:32:25:5d:4b:e3:3e:a8:26:0c:a9:3b:c1:0a:91:5f:2e: f5:ad:ed:8b:2a:32:2b:ae:f7:de:97:90:27:1f:bd:cc:75:3d: 8e:ed:26:24:af:75:9d:7c:ce:45:56:d5:f9:2c:56:42:9b:82: d9:f5:68:b0:f2:ba:a2:50:aa:ac:a4:8c:a2:db:42:bc:e3:71: 5c:34:d5:b2:5b:75:0d:a0:75:96:0b:ad:15:59:a6:69:cc:24: ca:c8:4c:60:dc:88:02:cb:7b:1e:48:96:aa:e0:b9:65:88:9d: d8:cf:8c:ef:e4:58:ca:7a:16:1e:b6:cb:f7:e5:b3:7f:62:a7: d8:d1:a8:2e:21:bc:40:99:f9:de:40:e3:98:98:cf:07:06:5d: b5:55:7f:70:0b:1d:da:ac:cd:a0:1c:e3:d7:b4:20:4a:83:94: ab:f6:78:54:82:04:6f:05:27:ad:bb:6e:6c:01:1f:c4:28:48: 4f:9c:f2:4c:49:47:61:0b:2d:bf:d2:73:e3:06:39:5c:bb:22: 58:97:6f:20:00:3d:1d:0d:2d:64:91:3f:81:3f:61:3b:94:41: 06:c3:b4:2a:7b:97:07:ba:a4:bf:ce:2e:90:cc:70:63:f1:a4: 87:c4:79:1f -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEiwiS3TKXqZydwBtK4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk ZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4MzlkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N2dpCFN/pKWTgSbCO0beKzJaGZgHmDJk1+i ziu5tCUi+9h9KQiflxQQndL1edL3BvkhaOfYx8zlnFi2+Hl/jtoAyVctxdsYEMqu Xotff3NZjCu8oyRvJeG3CEYww9JlKmDH004ow8RY+ahBFYNZsePQijS4jdBVDqyB HsbI0+pKivbPHGXKqRk/aRQqUZa72Li38AKHK1HMhx26Do9wM0+MfWXBqDQgElx2 70Tf0MpVK0DtrasO0B+fZ2Gqx79hh+T9P9RQ4PU+pZXlQFkumRO6r9qUdJlu7c7O HhiI6XPuxaTwHPcBRa3y79hC0jKT0YBwHxbRQl9I9Xd6T5pijwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFBbThvl5O10NnP0P87VvBG2Nd1jXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m MzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2YzNWJlNWYwLWQ0NTItNGNkOC04 NTllLTI3ZGE1ODM5ZGRiNC9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgz OWRkYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXj9gDBACCM0wDBACOyoAwDgQCAAIwCAMGBCYC /dIAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlSbAgMA92YwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIosj OXqv4bxlti5y5tgJb6ngLU8yJV1L4z6oJgypO8EKkV8u9a3tiyoyK6733peQJx+9 zHU9ju0mJK91nXzORVbV+SxWQpuC2fVosPK6olCqrKSMottCvONxXDTVslt1DaB1 lgutFVmmacwkyshMYNyIAst7HkiWquC5ZYid2M+M7+RYynoWHrbL9+Wzf2Kn2NGo LiG8QJn53kDjmJjPBwZdtVV/cAsd2qzNoBzj17QgSoOUq/Z4VIIEbwUnrbtubAEf xChIT5zyTElHYQstv9Jz4wY5XLsiWJdvIAA9HQ0tZJE/gT9hO5RBBsO0KnuXB7qk v84ukMxwY/Gkh8R5Hw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:34 2025 by rpki-client