$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer File: 0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer (raw, json) Hash identifier: BYOnuiWhZfu/jH74kfi/A3TCSXb5QEbMaRLZG6JkQps= Subject key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0 Authority key identifier: 8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF Certificate issuer: /CN=1a4b6836-4e28-439c-9ea2-50482aa15b68 Certificate serial: 010D0C9F43285848519DEBE6892873065D779EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 25 Dec 2024 01:45:33 +0000 Certificate not after: Tue 30 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 40850 AS: 399535 IP: 138.118.116.0/22 IP: 177.128.128.0/22 IP: 191.5.56.0/22 IP: 2607:2ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:9d:eb:e6:89:28:73:06:5d:77:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4b6836-4e28-439c-9ea2-50482aa15b68 Validity Not Before: Dec 25 01:45:33 2024 GMT Not After : Mar 30 00:45:33 2027 GMT Subject: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:32:df:8b:7a:dc:c7:52:c2:3d:3a:a4:19: f5:1d:f9:a1:fd:48:59:75:5b:f9:ad:81:22:ba:9d: 1c:bc:fa:ec:8a:56:88:bd:ad:8b:a2:7f:8c:51:ab: f5:89:eb:ac:ac:8f:1b:1c:9a:c0:d4:93:6b:17:98: e1:b6:29:3b:f5:bf:58:4b:7a:fb:e4:23:86:7c:6d: b0:51:78:6e:ea:49:91:86:74:fc:4a:66:98:99:14: 92:b5:e2:97:1c:49:fe:d2:a9:a8:e6:64:04:1a:77: 4c:83:f6:31:a6:db:43:b8:76:6f:9e:51:45:53:93: 81:0f:f1:1c:99:b3:b4:ac:3c:66:d8:2a:85:0a:27: 1e:1c:79:8f:fa:7c:83:ab:1b:2c:ae:4e:1c:02:a3: 6a:e0:a2:f1:78:b5:00:31:bf:d8:05:26:ef:84:58: 62:14:c8:02:22:e4:85:af:c2:24:66:6e:43:4f:e4: 18:38:c0:6b:9f:1b:c2:8f:7d:25:39:a8:80:23:98: 97:b3:6e:af:72:dc:a0:f0:3f:d2:cc:7e:b3:76:f2: 95:10:7c:27:64:c7:a8:c9:65:08:4c:47:22:b0:1a: 47:34:00:a7:be:64:f3:69:b5:3b:89:f2:b1:e6:f7: 3b:7c:9e:a0:1b:bd:f4:93:b0:8e:10:ad:b7:6a:21: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl X509v3 Authority Key Identifier: keyid:8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer sbgp-ipAddrBlock: critical IPv4: 138.118.116.0/22 177.128.128.0/22 191.5.56.0/22 IPv6: 2607:2ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40850 399535 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:50:c2:23:e6:a2:e6:fa:6f:3c:8d:bd:4e:8e:cb:c7:3e:5d: f2:ff:43:b4:1c:80:1a:19:93:10:9e:33:2e:45:0f:0e:de:de: ac:95:93:a4:3e:4f:f6:eb:f9:1f:ad:0f:45:45:ac:95:ed:36: 05:ab:d6:d8:d5:9f:24:dc:ca:6a:0a:4a:e3:64:4c:7e:f1:a5: e4:81:9c:b2:f5:84:ac:7e:9f:62:51:fe:42:d3:fe:8f:e4:fc: ea:c3:63:c2:c5:01:15:67:ad:2b:28:f9:6d:86:3f:b3:f0:f0: 1b:06:d5:5a:89:aa:51:55:62:ec:89:5a:27:01:cb:53:64:ce: 54:11:cb:3e:11:a4:a0:f2:e5:fc:55:b7:08:1b:28:b2:57:b6: 84:7b:5d:68:e7:96:da:c0:f3:75:8f:41:ef:cf:3a:e0:00:88: fd:94:e4:0d:81:e8:ca:cb:30:e9:cd:2a:a6:f5:00:59:3c:50: 99:67:12:55:f4:ba:bb:dd:c8:dd:d7:4f:03:54:0c:c8:93:23: 72:5b:29:d2:39:c9:c5:a6:a9:cb:e7:fa:4e:40:cd:ac:bb:ec: d7:ea:1d:f3:a6:2c:11:90:82:50:06:88:e8:a2:17:14:12:5e: 0b:9d:52:be:98:4f:fc:4b:d1:91:7e:2f:58:35:9f:03:e5:41: db:13:b8:91 -----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgIUAQ0Mn0MoWEhRnevmiShzBl13nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YjY4MzYtNGUyOC00MzljLTllYTItNTA0ODJhYTE1 YjY4MB4XDTI0MTIyNTAxNDUzM1oXDTI3MDMzMDAwNDUzM1owPTE7MDkGA1UEAxMy MGI3NWViMzQwNzA5Yzg2M2I1ZWUyMTMyODQxZjg2NDRkZDI2ZmFkNGEyMDRhZjc3 MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQjLfi3rcx1LCPTqk GfUd+aH9SFl1W/mtgSK6nRy8+uyKVoi9rYuif4xRq/WJ66ysjxscmsDUk2sXmOG2 KTv1v1hLevvkI4Z8bbBReG7qSZGGdPxKZpiZFJK14pccSf7SqajmZAQad0yD9jGm 20O4dm+eUUVTk4EP8RyZs7SsPGbYKoUKJx4ceY/6fIOrGyyuThwCo2rgovF4tQAx v9gFJu+EWGIUyAIi5IWvwiRmbkNP5Bg4wGufG8KPfSU5qIAjmJezbq9y3KDwP9LM frN28pUQfCdkx6jJZQhMRyKwGkc0AKe+ZPNptTuJ8rHm9zt8nqAbvfSTsI4Qrbdq IVF1AgMBAAGjggPhMIID3TAdBgNVHQ4EFgQUVAtTasGiu4/RIBZitDBIW95PptAw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4OWUwMmU4YjAxOGFiOTVk MWNlYzdhNDEvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4OWUwMmU4YjAxOGFiOTVkMWNlYzdhNDEv MC81NDBCNTM2QUMxQTJCQjhGRDEyMDE2NjJCNDMwNDg1QkRFNEZBNkQwLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZk Zi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFhNGI2ODM2LTRlMjgtNDM5Yy05ZWEy LTUwNDgyYWExNWI2OC8xYTRiNjgzNi00ZTI4LTQzOWMtOWVhMi01MDQ4MmFhMTVi NjguY3JsMB8GA1UdIwQYMBaAFIoNKLjXq6ajPf1xMGXC2fH5owq/MA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1kZmRmLTRjMGMt YjkwZC0zYmM3YTVmZWI4MmIvMWE0YjY4MzYtNGUyOC00MzljLTllYTItNTA0ODJh YTE1YjY4LmNlcjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAop2dAMEArGA gAMEAr8FODANBAIAAjAHAwUAJgcuwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA n5ICAwYYrzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAgUMIj5qLm+m88jb1OjsvHPl3y/0O0HIAaGZMQnjMu RQ8O3t6slZOkPk/26/kfrQ9FRayV7TYFq9bY1Z8k3MpqCkrjZEx+8aXkgZyy9YSs fp9iUf5C0/6P5Pzqw2PCxQEVZ60rKPlthj+z8PAbBtVaiapRVWLsiVonActTZM5U Ecs+EaSg8uX8VbcIGyiyV7aEe11o55bawPN1j0HvzzrgAIj9lOQNgejKyzDpzSqm 9QBZPFCZZxJV9Lq73cjd108DVAzIkyNyWynSOcnFpqnL5/pOQM2su+zX6h3zpiwR kIJQBojoohcUEl4LnVK+mE/8S9GRfi9YNZ8D5UHbE7iR -----END CERTIFICATE-----Generated at Mon Apr 28 00:45:22 2025 by rpki-client