$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer File: d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer (raw, json) Hash identifier: /8DvaV0NQZPVnG1sOGzi04LEjjYMpTgApMf9acDGenY= Subject key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848705373531DCFE95EF3BDF980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Jan 2025 01:45:33 +0000 Certificate not after: Sat 10 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 21557 IP: 23.128.104.0/23 IP: 64.15.208.0/20 IP: 75.127.48.0/20 IP: 104.218.188.0/22 IP: 147.92.120.0/21 IP: 162.219.200.0/22 IP: 2605:5300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:53:73:53:1d:cf:e9:5e:f3:bd:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 5 01:45:33 2025 GMT Not After : Apr 10 00:45:33 2027 GMT Subject: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2a:de:c2:dd:18:9a:4b:17:49:bc:b0:1d:59: 06:7a:4f:9f:f7:46:e3:b8:ef:f0:0c:67:1e:4f:21: fe:0d:ed:1e:11:07:4b:ca:4f:d6:a0:d3:03:28:db: d3:dd:23:ba:c7:0b:3a:2e:ae:96:b5:c7:43:93:ee: 49:85:86:02:1e:68:92:10:ee:46:51:ff:9b:6d:ee: fc:bc:7c:f6:e8:db:21:29:84:66:dd:2e:c0:1c:0b: e9:1a:44:37:c8:b6:e6:26:6b:50:c4:e4:26:9b:fb: 2f:42:53:a5:41:87:56:7f:69:60:05:8a:de:c6:5c: a5:9d:7c:27:da:83:74:0a:a2:b0:a5:d5:68:1d:4a: 66:a3:44:62:62:83:83:dd:0b:d7:f8:17:1b:e3:9c: fc:b8:ab:3f:99:f2:b6:e2:60:10:54:03:84:a3:4f: a2:f7:81:46:98:a6:81:19:67:88:81:b2:66:78:50: a1:49:1b:ca:f2:79:db:73:f7:1d:7f:0e:f4:11:30: 6c:ee:fe:73:0f:e0:e6:eb:c1:1a:26:fb:d9:50:f2: 26:e3:9d:0d:ad:03:36:b8:62:ec:05:1f:ae:5b:40: dd:7d:d4:2b:50:a7:f8:60:93:81:cd:c6:fe:0e:7f: 70:3a:0c:ad:8c:02:77:99:a4:54:b8:41:ab:b8:2c: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.128.104.0/23 64.15.208.0/20 75.127.48.0/20 104.218.188.0/22 147.92.120.0/21 162.219.200.0/22 IPv6: 2605:5300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a9:4e:66:ce:0a:8f:48:2d:6b:1a:ef:20:00:b1:1a:dc:04: 07:14:e2:60:fa:68:92:bf:78:14:66:d6:95:33:6d:89:3d:52: f2:22:c6:4f:e9:81:0d:33:64:e0:61:a6:16:9f:e3:4d:de:dd: f7:e7:5b:9b:2a:e2:1a:30:09:aa:90:0c:db:4b:39:8a:33:20: 1f:00:61:0f:7d:19:73:98:fa:2a:49:83:b1:32:30:ee:14:66: 58:d7:16:e9:c8:08:0d:cb:b0:33:6d:d3:44:e3:9b:8e:7b:a2: 8f:a6:3f:a4:39:92:51:eb:9d:05:41:c0:2b:82:20:6a:64:7c: 47:e1:fa:46:86:a4:00:92:98:5a:67:75:d5:01:ca:60:ae:43: 6a:5b:30:e0:d5:33:f0:89:0a:93:91:02:35:f2:58:5b:e4:e7: ad:fa:8e:4c:9c:dd:c3:1a:40:f4:a1:da:1e:44:49:97:d1:33: d7:03:e3:e2:fc:eb:50:77:d6:41:19:e3:36:90:4c:10:7d:e6: 02:68:2f:76:32:f2:51:07:e1:e0:c9:47:fd:94:d5:9e:45:fb: ba:36:be:a0:73:93:44:34:6a:9e:90:29:d2:f8:5e:6a:dc:b5: e8:0a:3b:ee:69:ab:6e:57:7b:cc:14:2d:d2:37:17:19:e6:17: 1f:2b:6d:20 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEhwU3NTHc/pXvO9+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwNTAxNDUzM1oXDTI3MDQxMDAwNDUzM1owLzEtMCsGA1UEAxMk ZDkwZGM0NGItODViNi00MjQ3LWI1NzktZWI4Y2ZkOGU5N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSrewt0YmksXSbywHVkGek+f90bjuO/wDGce TyH+De0eEQdLyk/WoNMDKNvT3SO6xws6Lq6WtcdDk+5JhYYCHmiSEO5GUf+bbe78 vHz26NshKYRm3S7AHAvpGkQ3yLbmJmtQxOQmm/svQlOlQYdWf2lgBYrexlylnXwn 2oN0CqKwpdVoHUpmo0RiYoOD3QvX+Bcb45z8uKs/mfK24mAQVAOEo0+i94FGmKaB GWeIgbJmeFChSRvK8nnbc/cdfw70ETBs7v5zD+Dm68EaJvvZUPIm450NrQM2uGLs BR+uW0DdfdQrUKf4YJOBzcb+Dn9wOgytjAJ3maRUuEGruCzQmwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFEnlJG4rkEg7Xmu0dxbplFQPsxhGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k OTBkYzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhjZmQ4ZTk3ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Q5MGRjNDRiLTg1YjYtNDI0Ny1i NTc5LWViOGNmZDhlOTdmZS9kOTBkYzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhjZmQ4 ZTk3ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAEXgGgDBARAD9ADBARLfzADBAJo2rwDBAOTXHgD BAKi28gwDQQCAAIwBwMFACYFUwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVDUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg6lOZs4Kj0gtaxrvIACxGtwEBxTiYPpokr94FGbWlTNtiT1S8iLG T+mBDTNk4GGmFp/jTd7d9+dbmyriGjAJqpAM20s5ijMgHwBhD30Zc5j6KkmDsTIw 7hRmWNcW6cgIDcuwM23TROObjnuij6Y/pDmSUeudBUHAK4IgamR8R+H6RoakAJKY Wmd11QHKYK5Dalsw4NUz8IkKk5ECNfJYW+TnrfqOTJzdwxpA9KHaHkRJl9Ez1wPj 4vzrUHfWQRnjNpBMEH3mAmgvdjLyUQfh4MlH/ZTVnkX7uja+oHOTRDRqnpAp0vhe aty16Ao77mmrbld7zBQt0jcXGeYXHyttIA== -----END CERTIFICATE-----Generated at Tue Apr 29 01:22:34 2025 by rpki-client