$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer File: 2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer (raw, json) Hash identifier: fBUnodT5uf5XehxSPyRmMOI4uhWxljCJOURuPMk10o0= Subject key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848519DEBFA9EB3CBA4A1085F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Dec 2024 01:45:33 +0000 Certificate not after: Tue 30 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 396000 IP: 138.128.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:9d:eb:fa:9e:b3:cb:a4:a1:08:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 25 01:45:33 2024 GMT Not After : Mar 30 00:45:33 2027 GMT Subject: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:e6:9c:94:38:cc:9e:99:85:b2:8d:42:a6: 81:0e:a2:ba:7c:33:c4:e1:8e:48:10:37:b3:fa:e7: 95:a9:00:54:6f:82:a0:c2:55:49:4a:be:fa:fc:d2: 80:28:06:61:88:c2:e4:77:01:cf:06:aa:37:71:23: ea:3a:77:dc:b7:c9:f2:44:46:97:1a:83:1f:6c:aa: 2a:b6:6e:6b:c4:7f:e1:3b:ac:4a:20:c8:cf:ee:74: 36:9f:8e:57:17:2a:fe:c3:5b:13:91:6c:b2:5b:67: 36:f6:e9:6f:d3:5b:0f:1c:4d:22:72:2a:24:33:38: fb:a6:27:58:2c:27:1e:64:a7:32:be:9b:5c:6b:b2: 0f:6a:67:ec:c7:ab:dc:6f:5a:b4:3d:10:1b:59:82: 57:ec:96:54:59:d3:44:e8:ee:18:87:1b:30:a0:de: 0a:65:15:46:07:a3:38:d1:cd:b6:8d:ed:87:e4:8a: ec:07:2c:86:37:ed:f9:df:e7:7b:96:c6:41:b8:5b: 67:f7:00:ad:c4:b9:9f:4d:78:0c:a8:fa:80:93:b8: 44:7c:9e:05:8e:61:95:d8:0c:44:2c:aa:6b:69:b1: 14:fd:1f:72:27:bc:e5:f6:39:1e:03:72:b9:f0:3d: 2e:18:ae:10:f0:24:b1:b6:16:35:9e:05:44:ca:a3: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 138.128.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396000 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d9:eb:97:ba:52:ba:3e:49:11:30:6a:d7:4a:9c:c3:66:09: 61:fd:cf:40:0a:32:5f:d1:ea:eb:3a:f3:ea:fd:82:7a:ce:76: 3a:26:db:8a:b2:1c:f9:a4:d8:9b:d1:bc:33:91:df:3d:32:cc: 72:5b:9b:8f:2b:d6:10:9b:33:7a:47:f9:95:2d:a5:44:5a:ab: 03:ba:1c:8f:6b:1b:02:46:4c:94:e6:cb:2d:e4:b8:3a:4e:88: a5:0f:b2:2f:c8:10:64:6a:a0:93:4e:4b:46:60:28:3b:d5:f3: f9:52:89:97:fa:25:8a:69:b1:09:82:29:1f:76:4c:46:61:32: 48:34:6c:75:07:b1:1f:bb:8f:10:ad:f0:89:6a:fb:e6:2c:3a: 1e:3d:a7:6f:1c:99:cf:11:d5:d2:35:18:18:5d:5a:92:de:03: 56:36:7f:6c:97:b0:f7:36:e7:b2:de:a5:f9:20:0f:a7:4b:28: 3b:d4:4b:23:9c:87:b4:aa:fd:24:bb:ba:93:f8:25:28:70:3b: 17:e5:56:cb:e7:a4:68:19:ca:d2:1f:f1:46:f2:8a:20:19:c6: 3b:2d:a1:24:83:8e:6d:99:33:5e:b6:13:bb:38:28:b2:a3:85: 9b:04:e3:c8:3b:d8:04:85:ea:ff:00:d2:cf:28:c9:ec:b9:2a: d8:7a:07:48 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEhRnev6nrPLpKEIX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MTIyNTAxNDUzM1oXDTI3MDMzMDAwNDUzM1owLzEtMCsGA1UEAxMk MmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjllOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIDmnJQ4zJ6ZhbKNQqaBDqK6fDPE4Y5IEDez +ueVqQBUb4KgwlVJSr76/NKAKAZhiMLkdwHPBqo3cSPqOnfct8nyREaXGoMfbKoq tm5rxH/hO6xKIMjP7nQ2n45XFyr+w1sTkWyyW2c29ulv01sPHE0iciokMzj7pidY LCceZKcyvptca7IPamfsx6vcb1q0PRAbWYJX7JZUWdNE6O4YhxswoN4KZRVGB6M4 0c22je2H5IrsByyGN+353+d7lsZBuFtn9wCtxLmfTXgMqPqAk7hEfJ4FjmGV2AxE LKprabEU/R9yJ7zl9jkeA3K58D0uGK4Q8CSxthY1ngVEyqO5AwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLXm6ARiTPFnHgaJBGbR5iUtu4KtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y YjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJiM2JjYjQ3LTVmMTgtNDZkMy05 YjUwLTYzZDVjYmI5ZTlkZC8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2Ji OWU5ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKgPgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAHZ65e6Uro+SREwatdKnMNmCWH9z0AKMl/R6us68+r9gnrO djom24qyHPmk2JvRvDOR3z0yzHJbm48r1hCbM3pH+ZUtpURaqwO6HI9rGwJGTJTm yy3kuDpOiKUPsi/IEGRqoJNOS0ZgKDvV8/lSiZf6JYppsQmCKR92TEZhMkg0bHUH sR+7jxCt8Ilq++YsOh49p28cmc8R1dI1GBhdWpLeA1Y2f2yXsPc257LepfkgD6dL KDvUSyOch7Sq/SS7upP4JShwOxflVsvnpGgZytIf8UbyiiAZxjstoSSDjm2ZM162 E7s4KLKjhZsE48g72ASF6v8A0s8oyey5Kth6B0g= -----END CERTIFICATE-----Generated at Sat Apr 26 22:49:50 2025 by rpki-client