$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer File: 39065acc-beed-4115-bc6c-63de232f2a04.cer (raw, json) Hash identifier: xyBdd0nv7lBv8a481rl3u38JcaoYVXfM/x+0BLwfVaY= Subject key identifier: AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584909DF11C41C5DFF1801341C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Mar 2025 01:45:33 +0000 Certificate not after: Fri 04 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 970 AS: 21957 IP: 104.37.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:df:11:c4:1c:5d:ff:18:01:34:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 1 01:45:33 2025 GMT Not After : Jun 4 00:45:33 2027 GMT Subject: CN=39065acc-beed-4115-bc6c-63de232f2a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1f:39:54:58:bd:f2:7c:87:ab:bd:a6:22:e1: 62:0f:b1:48:1e:5f:8e:f8:b4:5e:ac:37:81:05:48: 72:ab:36:17:f9:d9:98:65:43:5f:30:a6:4d:c8:bc: a4:c6:6a:59:01:37:03:7e:dd:75:0f:44:a0:c1:9c: 91:1e:03:d5:21:f7:b3:98:37:98:48:87:c5:08:c5: bd:c3:15:32:4e:07:a0:57:c2:14:a3:ce:2a:1d:8f: 92:54:5f:8c:c5:d0:91:b4:23:4d:49:ea:78:12:c9: 03:f5:f3:53:f0:f5:b2:85:fa:00:ba:f9:41:ff:ae: 06:43:09:e9:2b:41:82:29:a3:fe:57:a0:49:ae:29: 3b:10:c0:28:b8:12:1c:7f:22:d8:b2:ae:05:93:19: 7a:a5:7c:78:35:e1:81:79:ee:88:67:4e:1a:35:c2: ee:51:53:5b:e4:e1:fe:32:ee:e5:e6:cb:30:58:61: 6d:0d:b0:88:9a:36:f1:ac:de:b3:78:a3:b4:21:48: 18:fc:f1:7e:ae:72:24:01:64:61:e9:76:dd:e3:d4: 12:43:de:cf:87:eb:a4:20:8b:aa:f6:78:d4:77:4f: fb:37:17:6c:f8:4d:2c:e1:e7:e0:39:a0:01:0d:99: 4d:c9:e5:8e:c9:27:9a:da:87:1b:1f:b1:6c:d9:17: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 104.37.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 970 21957 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b3:96:9e:d2:03:db:ca:bd:87:f4:5c:c8:3c:69:ef:2e:34: 29:58:a2:34:57:7f:7b:49:fb:2d:37:15:96:5a:98:53:8a:8f: ab:e4:34:57:17:c7:dc:00:7e:de:60:e8:e7:bb:43:3c:b7:92: 10:23:eb:7d:e0:5e:45:89:03:5e:b2:fc:7b:10:71:47:31:cd: f2:11:65:65:80:28:38:99:ed:34:e0:9b:aa:32:44:07:9a:f0: 70:92:7f:1c:29:ea:57:2d:fd:3f:cc:6d:b7:32:2b:d1:3a:7e: 5a:86:96:e0:f2:71:15:6e:2f:09:3d:3d:bf:74:50:02:71:02: 61:82:d8:75:3c:90:97:cb:1d:26:6a:9c:fc:71:5d:6e:ac:26: 75:18:6f:68:8a:5e:45:50:bf:d6:78:3a:2f:6c:93:f8:11:d7: 22:75:17:29:12:ad:42:5f:0e:53:dc:8f:f7:a3:65:62:07:b1: 5c:53:a6:75:6e:6e:02:af:04:3a:23:52:42:da:75:21:d6:a9: 1b:8a:8e:9d:ad:fb:b5:ab:10:71:3b:29:44:59:bc:f3:4f:76: 24:8b:22:45:94:30:1e:2e:8c:9a:e7:63:6f:41:24:87:46:9a: c5:c1:92:10:13:1a:36:c5:89:bb:33:39:93:56:22:bb:a9:9e: 39:30:d9:f9 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEkJ3xHEHF3/GAE0HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDMwMTAxNDUzM1oXDTI3MDYwNDAwNDUzM1owLzEtMCsGA1UEAxMk MzkwNjVhY2MtYmVlZC00MTE1LWJjNmMtNjNkZTIzMmYyYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9R85VFi98nyHq72mIuFiD7FIHl+O+LRerDeB BUhyqzYX+dmYZUNfMKZNyLykxmpZATcDft11D0SgwZyRHgPVIfezmDeYSIfFCMW9 wxUyTgegV8IUo84qHY+SVF+MxdCRtCNNSep4EskD9fNT8PWyhfoAuvlB/64GQwnp K0GCKaP+V6BJrik7EMAouBIcfyLYsq4Fkxl6pXx4NeGBee6IZ04aNcLuUVNb5OH+ Mu7l5sswWGFtDbCImjbxrN6zeKO0IUgY/PF+rnIkAWRh6Xbd49QSQ97Ph+ukIIuq 9njUd0/7Nxds+E0s4efgOaABDZlNyeWOySea2ocbH7Fs2Rc8YQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFKrKA/MnYHumVR55xd9F3Zg1sUyiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8z OTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02M2RlMjMyZjJhMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzM5MDY1YWNjLWJlZWQtNDExNS1i YzZjLTYzZGUyMzJmMmEwNC8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02M2RlMjMy ZjJhMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJoJSgwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC A8oCAlXFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAG+zlp7SA9vKvYf0XMg8ae8uNClYojRXf3tJ+y03FZZa mFOKj6vkNFcXx9wAft5g6Oe7Qzy3khAj633gXkWJA16y/HsQcUcxzfIRZWWAKDiZ 7TTgm6oyRAea8HCSfxwp6lct/T/MbbcyK9E6flqGluDycRVuLwk9Pb90UAJxAmGC 2HU8kJfLHSZqnPxxXW6sJnUYb2iKXkVQv9Z4Oi9sk/gR1yJ1FykSrUJfDlPcj/ej ZWIHsVxTpnVubgKvBDojUkLadSHWqRuKjp2t+7WrEHE7KURZvPNPdiSLIkWUMB4u jJrnY29BJIdGmsXBkhATGjbFibszOZNWIrupnjkw2fk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:21:47 2025 by rpki-client