$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer File: 910396e7-2d32-4040-a73d-ad686b8445b3.cer (raw, json) Hash identifier: 1LX3NWuqhdFcJdmPvyip0AsQh32PQ23URC43rKbl/dc= Subject key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858482D530720DCC95719B3D4B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Dec 2024 01:45:33 +0000 Certificate not after: Wed 17 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 63127 IP: 23.168.56.0/24 IP: 110.172.133.0/24 IP: 110.172.149.0/24 IP: 114.69.241.0/24 IP: 2607:6ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:53:07:20:dc:c9:57:19:b3:d4:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 12 01:45:33 2024 GMT Not After : Mar 17 00:45:33 2027 GMT Subject: CN=910396e7-2d32-4040-a73d-ad686b8445b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:91:85:cc:ca:99:41:86:42:96:60:d2:bc: b1:84:73:cc:35:c3:b4:7c:ce:70:3b:76:91:87:c6: 36:1e:f1:34:b0:63:f9:58:67:0c:a5:f4:0b:96:c5: 36:c8:a5:22:3e:c9:f4:24:c7:b3:39:54:d7:61:25: a1:48:86:52:15:7a:0d:4f:f4:cc:4a:60:14:bf:44: ea:be:31:8c:f2:55:9e:e1:aa:61:c0:23:2c:2d:8d: 15:48:41:2f:3c:b3:13:74:51:53:5a:8c:8b:ed:93: ec:ce:5f:b2:67:f9:39:55:18:f5:53:fe:5d:9f:2f: ef:f8:83:bf:2b:3f:51:43:13:44:2f:e2:ec:ad:d1: b0:91:fb:e8:a2:76:af:af:6d:8f:49:2e:91:6d:29: d2:d0:e7:fe:67:cf:e4:9e:25:a6:6c:44:5a:96:3c: 4b:96:13:c8:c4:fb:a4:52:09:89:1f:24:2d:71:38: 35:cb:e8:25:2d:b6:17:e1:23:b7:f3:c4:44:97:06: 64:37:8a:60:75:9e:9a:66:a4:ae:19:ee:4a:1f:61: f3:03:2c:68:a4:34:37:f4:cf:38:c1:9d:18:26:a0: 68:37:4b:f9:58:ab:d6:b4:04:0a:67:04:8c:9a:44: a0:b1:90:77:20:f0:26:2c:09:d6:5b:6e:10:64:c5: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.168.56.0/24 110.172.133.0/24 110.172.149.0/24 114.69.241.0/24 IPv6: 2607:6ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63127 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:39:88:03:83:37:73:23:df:70:aa:3d:22:5e:1f:11:f0:d5: 70:06:25:af:58:aa:57:97:98:8e:41:29:82:d1:3e:e1:b7:d9: 62:d1:b7:f0:91:91:fb:b2:13:41:0a:d1:1b:e0:14:21:cd:ec: 53:ed:74:0e:2e:35:52:df:cf:ea:72:bf:68:b9:28:1d:c8:4c: 48:e8:e4:d0:68:17:07:55:39:74:52:54:d4:42:c8:02:91:80: 9d:55:2b:22:85:c4:04:29:e6:1f:7e:a6:2e:5c:11:27:2a:06: 72:29:e0:df:b8:53:91:a2:62:e9:f0:e0:2e:86:6e:f3:96:5f: ec:5e:28:02:99:db:98:f8:80:6c:67:93:b9:f4:5c:0d:c5:28: 6d:50:c5:b6:5c:e0:64:b9:5c:3f:f4:fe:ba:83:b1:6f:90:c7: 2b:6d:a5:82:80:1d:45:1e:fd:45:6a:3c:2d:a7:42:03:c7:32: 12:e3:0e:9c:86:ff:de:93:58:b2:88:c8:e4:82:f3:57:76:0c: 8f:0d:5e:cf:5d:1e:2f:e1:5c:f5:76:7b:a2:b1:95:71:61:85: e8:12:54:06:19:01:05:71:d0:a0:9b:23:c9:41:0b:8e:30:1e: ad:bf:ac:b8:4b:c1:52:fc:4c:c6:98:10:8d:a1:5d:7a:f3:bb: 20:64:81:cb -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEgtUwcg3MlXGbPUswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMjAxNDUzM1oXDTI3MDMxNzAwNDUzM1owLzEtMCsGA1UEAxMk OTEwMzk2ZTctMmQzMi00MDQwLWE3M2QtYWQ2ODZiODQ0NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq82RhczKmUGGQpZg0ryxhHPMNcO0fM5wO3aR h8Y2HvE0sGP5WGcMpfQLlsU2yKUiPsn0JMezOVTXYSWhSIZSFXoNT/TMSmAUv0Tq vjGM8lWe4aphwCMsLY0VSEEvPLMTdFFTWoyL7ZPszl+yZ/k5VRj1U/5dny/v+IO/ Kz9RQxNEL+LsrdGwkfvoonavr22PSS6RbSnS0Of+Z8/kniWmbERaljxLlhPIxPuk UgmJHyQtcTg1y+glLbYX4SO388RElwZkN4pgdZ6aZqSuGe5KH2HzAyxopDQ39M84 wZ0YJqBoN0v5WKvWtAQKZwSMmkSgsZB3IPAmLAnWW24QZMVsKwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFEtFFlOiKYeVUt3ttq9dzwohhM06MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 MTAzOTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4NmI4NDQ1YjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzkxMDM5NmU3LTJkMzItNDA0MC1h NzNkLWFkNjg2Yjg0NDViMy85MTAzOTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4NmI4 NDQ1YjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAAXqDgDBABurIUDBABurJUDBAByRfEwDQQCAAIw BwMFACYHasAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPaXMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHs5 iAODN3Mj33CqPSJeHxHw1XAGJa9YqleXmI5BKYLRPuG32WLRt/CRkfuyE0EK0Rvg FCHN7FPtdA4uNVLfz+pyv2i5KB3ITEjo5NBoFwdVOXRSVNRCyAKRgJ1VKyKFxAQp 5h9+pi5cEScqBnIp4N+4U5GiYunw4C6GbvOWX+xeKAKZ25j4gGxnk7n0XA3FKG1Q xbZc4GS5XD/0/rqDsW+QxyttpYKAHUUe/UVqPC2nQgPHMhLjDpyG/96TWLKIyOSC 81d2DI8NXs9dHi/hXPV2e6KxlXFhhegSVAYZAQVx0KCbI8lBC44wHq2/rLhLwVL8 TMaYEI2hXXrzuyBkgcs= -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:11 2025 by rpki-client