$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer File: 4bc701e5-cff5-4660-9102-08342e5ad35f.cer (raw, json) Hash identifier: fRZcZENTOATEXJuDfR4YLfKdeE1IfmHKb2ZOMqWRtzA= Subject key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858487E48DD03BB5629B21983FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jan 2025 01:45:33 +0000 Certificate not after: Thu 15 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 17120 IP: 2620:0:f0::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:48:dd:03:bb:56:29:b2:19:83:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 10 01:45:33 2025 GMT Not After : Apr 15 00:45:33 2027 GMT Subject: CN=4bc701e5-cff5-4660-9102-08342e5ad35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:73:90:62:a4:18:30:40:c4:45:2f:a5:68: a8:37:a1:6e:4e:5c:fb:dd:ac:c1:08:b0:8f:7c:be: 05:56:7e:c3:5f:09:9b:3d:4d:27:65:eb:52:9d:1c: f7:c1:6e:84:12:e8:d1:94:03:8d:81:2f:f9:f8:66: 7d:be:3b:59:56:38:59:a0:03:d9:de:db:b4:39:87: 5f:6f:56:ab:5c:ec:a1:45:a6:70:e8:98:10:67:c6: 86:ef:7b:e3:5c:df:e2:8c:c2:f7:7a:ae:ea:96:20: 7e:db:d8:43:08:3d:5b:a0:97:e2:11:f9:e0:b0:1c: f8:64:56:93:e2:28:f1:32:67:23:32:f8:6c:52:96: 0d:9c:2d:b3:5e:ef:da:53:8b:dc:30:d0:54:97:5f: e7:55:dd:8a:83:fa:83:fc:ff:09:49:a4:2e:f1:6a: f4:18:53:1b:5d:a1:46:c7:4e:58:1f:65:01:b6:03: cb:42:9d:47:cf:67:b3:55:d5:07:6c:81:98:6e:b8: fd:e3:ef:50:23:a2:23:46:82:f7:46:4b:65:49:af: 8f:98:d7:99:4c:08:f3:10:ee:9f:2f:1e:30:57:39: d3:4f:d4:b9:c7:52:64:22:d6:65:dd:76:fb:ce:57: 80:ec:4b:51:f2:fc:c1:12:e7:24:2b:21:72:16:65: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:f0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17120 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2a:b2:58:8a:36:45:5f:b7:90:ce:2d:37:88:c3:0e:b3:d5: c2:e0:04:6e:11:9b:32:52:20:94:a9:e6:d8:ad:cf:17:3a:b1: 43:67:40:e5:f8:a4:44:c4:3a:22:d5:0d:1b:17:c1:b4:52:00: a8:fa:56:5c:3f:f2:97:b6:3b:88:a6:01:46:24:6b:10:4c:f8: b3:34:41:c0:e7:73:92:3d:87:8d:44:91:72:e2:46:d6:94:67: 75:54:16:38:7e:10:0b:81:52:9f:e9:aa:3c:36:ab:83:b3:a8: ee:02:18:03:b2:08:ff:9d:b1:11:48:5c:9a:c0:d5:aa:0f:95: b2:97:10:32:5e:ff:73:07:fa:57:1e:1c:3a:d2:34:c9:31:7f: a5:62:69:b1:b9:76:4d:31:10:f3:60:0d:29:ef:9e:c3:87:cb: 50:8f:82:e4:73:a5:f4:25:f7:a8:de:84:8b:1b:71:1d:75:37: 49:aa:d8:bb:04:7c:cb:79:83:c0:78:8b:51:47:84:51:ce:6a: f1:97:bc:7a:75:3f:83:54:34:34:2e:88:45:93:30:b8:25:0a: 64:dc:c1:08:1d:ac:cd:f6:6c:74:e6:b3:df:9c:02:0e:18:e1: 54:34:fd:93:a8:cc:cc:0d:6d:1d:95:5b:ce:5f:28:cb:36:cb: 28:0c:f0:40 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEh+SN0Du1YpshmD/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDExMDAxNDUzM1oXDTI3MDQxNTAwNDUzM1owLzEtMCsGA1UEAxMk NGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFkMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0tzkGKkGDBAxEUvpWioN6FuTlz73azBCLCP fL4FVn7DXwmbPU0nZetSnRz3wW6EEujRlAONgS/5+GZ9vjtZVjhZoAPZ3tu0OYdf b1arXOyhRaZw6JgQZ8aG73vjXN/ijML3eq7qliB+29hDCD1boJfiEfngsBz4ZFaT 4ijxMmcjMvhsUpYNnC2zXu/aU4vcMNBUl1/nVd2Kg/qD/P8JSaQu8Wr0GFMbXaFG x05YH2UBtgPLQp1Hz2ezVdUHbIGYbrj94+9QI6IjRoL3RktlSa+PmNeZTAjzEO6f Lx4wVznTT9S5x1JkItZl3Xb7zleA7EtR8vzBEuckKyFyFmVCNQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFGJkU365VriJVyxE1EGiH/peAbu2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRiYzcwMWU1LWNmZjUtNDY2MC05 MTAyLTA4MzQyZTVhZDM1Zi80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1 YWQzNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAAAPAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICQuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAiiqyWIo2RV+3kM4tN4jDDrPVwuAEbhGbMlIglKnm2K3P FzqxQ2dA5fikRMQ6ItUNGxfBtFIAqPpWXD/yl7Y7iKYBRiRrEEz4szRBwOdzkj2H jUSRcuJG1pRndVQWOH4QC4FSn+mqPDarg7Oo7gIYA7II/52xEUhcmsDVqg+VspcQ Ml7/cwf6Vx4cOtI0yTF/pWJpsbl2TTEQ82ANKe+ew4fLUI+C5HOl9CX3qN6Eixtx HXU3SarYuwR8y3mDwHiLUUeEUc5q8Ze8enU/g1Q0NC6IRZMwuCUKZNzBCB2szfZs dOaz35wCDhjhVDT9k6jMzA1tHZVbzl8oyzbLKAzwQA== -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:20 2025 by rpki-client