$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer File: 00fd3378-4bc3-4216-94f7-90c7efb47d80.cer (raw, json) Hash identifier: C9A1jypWlZnUnShy5xQCWXjVFYbbRHYYb0Qfskj3iu4= Subject key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858483B487099A5A75BF9762A9080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Dec 2024 01:45:32 +0000 Certificate not after: Mon 22 Mar 2027 00:45:32 +0000 Subordinate resources: AS: 31852 AS: 46133 IP: 2.57.164.0/22 IP: 208.103.174.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:48:70:99:a5:a7:5b:f9:76:2a:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 17 01:45:32 2024 GMT Not After : Mar 22 00:45:32 2027 GMT Subject: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:cd:5e:82:8d:50:c8:b3:23:15:cd:d8:60: 5d:e3:73:25:f3:c6:75:f5:d0:69:28:8f:66:a4:bc: b6:95:f4:e9:33:cd:ae:3f:78:3c:2f:09:1b:d1:ff: 5d:ca:39:7c:53:81:ea:ed:0c:cb:98:b4:bb:8a:c4: d1:14:d2:69:3c:85:70:c5:88:03:99:c1:74:4b:92: fe:97:82:7f:ce:20:34:3a:e0:47:3b:97:69:d0:c6: 4b:a1:f5:92:73:09:ec:89:2c:3c:0d:fe:84:53:1a: 09:90:a2:df:0e:da:76:a8:95:2d:81:0d:e9:63:72: 0d:d9:02:5b:98:54:7a:2d:84:b8:10:9a:e4:64:43: 1d:e7:4c:54:da:b5:29:47:d0:f7:8c:82:9a:e6:4e: 66:c3:13:51:2e:40:68:a4:a7:1f:75:d9:24:6a:a2: 19:9c:f3:af:df:26:d3:e5:16:9b:c0:b2:2d:a4:e4: ee:73:d9:25:22:62:f4:76:cf:f5:05:be:4e:13:95: 38:19:17:b2:11:81:f1:d3:d8:dc:c6:f0:6a:26:88: 3e:5d:0e:d6:24:35:4b:1d:1d:bf:f8:67:cf:b5:05: af:01:2e:00:dc:36:52:03:fb:91:54:a0:c7:c8:40: c8:2c:49:42:86:5c:27:65:e4:c3:31:8d:c8:48:df: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 2.57.164.0/22 208.103.174.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31852 46133 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ea:f7:a1:f1:5b:9b:0e:9e:27:05:3f:7f:ba:b2:32:0c:56: 64:a9:00:ee:91:eb:0c:0a:0e:19:3f:8d:48:91:34:b2:f3:c8: 59:f6:a7:8e:34:c9:9e:7d:94:77:6d:99:40:2b:f2:9c:8f:6e: 44:00:e6:bd:0b:62:de:e3:ab:a6:2f:ea:93:5d:dc:82:11:2f: b8:f8:85:fb:32:f9:9c:98:75:fc:b6:85:19:cb:26:8a:6d:55: b8:d0:19:e9:63:f5:f8:2a:6a:90:f6:22:f0:47:db:0c:58:a3: 3a:b9:31:10:a9:82:b8:c5:fb:90:e5:3b:d9:73:5a:21:2c:d3: d3:88:d3:5c:20:8c:fd:0a:cf:4a:60:1b:c3:1c:bf:68:5e:6c: 2e:ac:6d:81:14:0f:f4:34:81:1a:19:e2:80:97:4d:f0:74:e5: bc:24:ab:9e:17:e3:ec:85:f3:36:f5:0a:7d:9c:98:c5:ac:ef: 4f:c8:e6:06:a3:e5:92:b0:9a:ef:c4:eb:ff:24:02:13:73:09: aa:8b:6d:9a:0b:52:b1:9d:22:bc:c5:3f:db:1a:f7:fb:ba:cb: 69:61:14:0f:16:ad:7f:67:ee:78:d1:0a:fb:17:f4:33:61:60: 3e:8d:79:a3:bd:d9:62:ad:ad:98:4c:b1:dc:bc:5b:e7:09:9c: d2:3e:fb:ba -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEg7SHCZpadb+XYqkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxNzAxNDUzMloXDTI3MDMyMjAwNDUzMlowLzEtMCsGA1UEAxMk MDBmZDMzNzgtNGJjMy00MjE2LTk0ZjctOTBjN2VmYjQ3ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPLNXoKNUMizIxXN2GBd43Ml88Z19dBpKI9m pLy2lfTpM82uP3g8Lwkb0f9dyjl8U4Hq7QzLmLS7isTRFNJpPIVwxYgDmcF0S5L+ l4J/ziA0OuBHO5dp0MZLofWScwnsiSw8Df6EUxoJkKLfDtp2qJUtgQ3pY3IN2QJb mFR6LYS4EJrkZEMd50xU2rUpR9D3jIKa5k5mwxNRLkBopKcfddkkaqIZnPOv3ybT 5RabwLItpOTuc9klImL0ds/1Bb5OE5U4GReyEYHx09jcxvBqJog+XQ7WJDVLHR2/ +GfPtQWvAS4A3DZSA/uRVKDHyEDILElChlwnZeTDMY3ISN99nwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFE3pn8mDfoNWEzmvkZaakTW9CCJPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w MGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZiNDdkODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzAwZmQzMzc4LTRiYzMtNDIxNi05 NGY3LTkwYzdlZmI0N2Q4MC8wMGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZi NDdkODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAICOaQDBADQZ64wHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfGwCAwC0NTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCd6veh8VubDp4nBT9/urIyDFZkqQDukesM Cg4ZP41IkTSy88hZ9qeONMmefZR3bZlAK/Kcj25EAOa9C2Le46umL+qTXdyCES+4 +IX7MvmcmHX8toUZyyaKbVW40BnpY/X4KmqQ9iLwR9sMWKM6uTEQqYK4xfuQ5TvZ c1ohLNPTiNNcIIz9Cs9KYBvDHL9oXmwurG2BFA/0NIEaGeKAl03wdOW8JKueF+Ps hfM29Qp9nJjFrO9PyOYGo+WSsJrvxOv/JAITcwmqi22aC1KxnSK8xT/bGvf7ustp YRQPFq1/Z+540Qr7F/QzYWA+jXmjvdlira2YTLHcvFvnCZzSPvu6 -----END CERTIFICATE-----Generated at Sun Apr 27 20:59:09 2025 by rpki-client