$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer File: f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer (raw, json) Hash identifier: RxtAWokdKG1na57FB9epoxZS+OgrvXe83j+23V6iGIA= Subject key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584867F36669C8F9CC789A0AFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jan 2025 01:45:33 +0000 Certificate not after: Wed 07 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 51312 AS: 51856 AS: 54681 AS: 56808 AS: 400917 IP: 23.133.248.0/21 IP: 170.205.56.0/22 IP: 2602:fba2::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:f3:66:69:c8:f9:cc:78:9a:0a:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 2 01:45:33 2025 GMT Not After : Apr 7 00:45:33 2027 GMT Subject: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:5a:15:52:cd:30:c6:11:ae:ca:d8:ed:6b: ae:4e:75:93:26:f4:ec:d0:3d:c5:1d:94:a1:4f:a1: ca:15:10:ea:72:06:61:55:6a:e0:4c:4d:a2:93:05: ba:12:bc:c2:1f:b0:cf:ae:ac:85:13:68:3c:56:58: 20:8d:ed:ba:53:96:0b:ab:02:35:1f:e3:c5:e8:fd: 11:0c:38:4c:3a:5e:98:6f:d9:0d:1c:58:42:56:e6: 44:d8:20:a5:d4:7c:2b:6f:8c:9e:7d:51:64:e6:87: 9a:16:10:08:7b:03:fe:f6:a5:89:8d:05:1e:82:f6: 6c:a0:8d:0a:f2:ce:e0:26:eb:8e:db:17:5f:2a:10: 16:f8:81:b9:45:9a:1e:9a:61:28:06:c3:53:2e:05: 10:4d:00:8f:ea:97:73:1e:52:9d:d8:13:7c:18:b9: ca:f4:a0:aa:ef:2a:ad:9c:6d:8c:52:78:5b:34:bf: 27:1a:42:e8:a6:f9:63:11:a8:9c:f4:4b:ee:3b:c3: 0a:6b:80:06:dc:7a:d9:1d:57:62:b6:d3:28:5f:5b: c5:ef:d0:fa:43:81:7a:96:03:95:5d:15:f8:f8:77: ee:b3:02:44:da:db:fa:7c:7a:d6:6e:3a:fc:94:84: 3b:8b:0a:f2:27:3c:e9:16:77:db:72:d6:16:12:b5: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.133.248.0/21 170.205.56.0/22 IPv6: 2602:fba2::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51312 51856 54681 56808 400917 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c7:57:12:7d:e1:8c:86:b9:95:08:3b:18:9a:65:b4:5a:6a: b3:23:f6:69:8c:0a:b7:33:7a:bc:61:76:5c:64:44:67:d2:76: 6a:b0:2d:72:6a:68:af:b7:93:47:6b:46:cc:4a:c0:4a:2d:9c: 08:be:02:c9:ec:a4:d2:8d:97:f7:e1:9e:d4:e1:5d:04:83:ce: 22:57:cd:8f:27:56:70:27:30:dd:f0:30:35:9b:59:32:9a:52: 46:ca:4e:7a:10:21:d2:78:b7:fd:4c:c1:44:9a:d7:7c:97:bd: 29:73:8f:e0:89:be:97:01:21:fd:ff:e3:51:31:2e:ea:29:b3: 5b:9c:c0:d3:09:a3:09:26:61:18:6c:ac:2f:fc:f1:fd:fc:cf: c9:b3:e5:47:11:59:84:ae:60:fb:4f:dd:60:4c:81:c0:98:98: fe:0a:b1:75:51:44:e6:0a:37:a1:44:37:29:d3:67:61:1d:31: aa:ed:45:a9:70:b6:bd:8f:21:ee:49:cc:58:22:f1:9b:fa:28: 8a:d7:d0:c5:7b:0b:0f:11:02:74:d4:b6:04:11:3e:3d:41:c8: 8f:e4:ec:29:08:5e:fb:3f:6c:0f:d4:7b:c4:6e:33:8b:3d:2c: b8:82:a2:3f:54:22:e8:b4:70:35:ca:c1:ca:17:69:b1:d3:98: 9d:3e:78:c8 -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEhn82ZpyPnMeJoK+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwMjAxNDUzM1oXDTI3MDQwNzAwNDUzM1owLzEtMCsGA1UEAxMk ZjdjMmM5YTYtODk4NC00YzI1LTkxMzYtNmE4Y2E3ZDNmNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluBaFVLNMMYRrsrY7WuuTnWTJvTs0D3FHZSh T6HKFRDqcgZhVWrgTE2ikwW6ErzCH7DPrqyFE2g8Vlggje26U5YLqwI1H+PF6P0R DDhMOl6Yb9kNHFhCVuZE2CCl1Hwrb4yefVFk5oeaFhAIewP+9qWJjQUegvZsoI0K 8s7gJuuO2xdfKhAW+IG5RZoemmEoBsNTLgUQTQCP6pdzHlKd2BN8GLnK9KCq7yqt nG2MUnhbNL8nGkLopvljEaic9EvuO8MKa4AG3HrZHVdittMoX1vF79D6Q4F6lgOV XRX4+HfuswJE2tv6fHrWbjr8lIQ7iwryJzzpFnfbctYWErXbLQIDAQABo4IERDCC BEAwHQYDVR0OBBYEFAtruWBu2irIkg53J4xa0u9oYiRHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9m N2MyYzlhNi04OTg0LTRjMjUtOTEzNi02YThjYTdkM2Y3NTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Y3YzJjOWE2LTg5ODQtNGMyNS05 MTM2LTZhOGNhN2QzZjc1MC9mN2MyYzlhNi04OTg0LTRjMjUtOTEzNi02YThjYTdk M2Y3NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAMXhfgDBAKqzTgwDQQCAAIwBwMFACYC+6IwLgYI KwYBBQUHAQgBAf8EHzAdoBswGQIDAMhwAgMAypACAwDVmQIDAN3oAgMGHhUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAU8dXEn3hjIa5lQg7GJpltFpqsyP2aYwKtzN6vGF2XGREZ9J2arAtcmpo r7eTR2tGzErASi2cCL4Cyeyk0o2X9+Ge1OFdBIPOIlfNjydWcCcw3fAwNZtZMppS RspOehAh0ni3/UzBRJrXfJe9KXOP4Im+lwEh/f/jUTEu6imzW5zA0wmjCSZhGGys L/zx/fzPybPlRxFZhK5g+0/dYEyBwJiY/gqxdVFE5go3oUQ3KdNnYR0xqu1FqXC2 vY8h7knMWCLxm/ooitfQxXsLDxECdNS2BBE+PUHIj+TsKQhe+z9sD9R7xG4ziz0s uIKiP1Qi6LRwNcrByhdpsdOYnT54yA== -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:05 2025 by rpki-client