$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer File: 950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer (raw, json) Hash identifier: uu7kR4wMyFZxZ5z2z+6uEfcyZ8QkZsRHmODWxKsz6W0= Subject key identifier: E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858483B4870CEC5E1398CA8BE7D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Dec 2024 01:45:32 +0000 Certificate not after: Mon 22 Mar 2027 00:45:32 +0000 Subordinate resources: AS: 400512 IP: 23.133.200.0/24 IP: 2602:fba6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:48:70:ce:c5:e1:39:8c:a8:be:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 17 01:45:32 2024 GMT Not After : Mar 22 00:45:32 2027 GMT Subject: CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:35:14:87:c7:31:a2:88:47:58:63:5e:55: 45:11:49:e9:62:30:a3:47:a3:ab:2b:94:58:74:ad: be:8b:69:22:42:4f:c8:78:fa:ea:e2:aa:fa:46:70: 39:20:61:94:63:bf:2c:a7:1a:e2:ca:53:5b:27:ad: 55:e1:6e:b2:c1:e0:fa:2a:34:df:13:e0:9a:a2:84: 59:cd:d1:f5:d7:c9:3d:71:9b:c9:da:2e:2a:3b:e0: 89:7c:38:28:d0:3c:91:4c:c9:34:08:94:4e:3e:56: 68:a2:66:e3:e2:e2:56:48:9e:15:f8:c2:69:dd:25: 8a:fb:4a:b1:54:d1:97:7a:6c:1e:ce:b0:ad:90:9e: 23:02:ad:a8:3b:fc:9e:90:68:cd:7f:28:b1:6c:63: c8:95:3d:8d:22:52:6c:df:f4:5e:e9:4e:4d:e1:80: 62:a1:22:39:bf:5e:df:fc:15:55:fb:47:50:27:3a: 58:59:36:d2:37:bd:1e:f8:7e:d0:86:f6:3b:9b:c4: e0:0b:a0:45:64:85:a3:6b:df:bf:bb:55:fa:8e:ab: a7:32:78:33:68:c3:df:db:9f:be:0f:1f:80:ce:ad: 3a:d2:04:8d:1a:9c:d9:3e:c2:0b:ce:bd:bf:83:ee: 96:a1:69:69:ef:b4:c5:81:bf:b8:a1:d1:86:03:bf: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.133.200.0/24 IPv6: 2602:fba6::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:21:f3:88:2b:f5:ed:98:7f:7b:f9:a9:35:aa:b7:4c:7d:65: d8:f0:8e:0d:0c:e8:c7:03:81:e8:f4:a6:c7:2a:7f:16:81:59: 61:8c:9e:cb:6f:5a:e5:7b:ff:65:ee:d2:13:e4:fb:37:40:ec: 59:19:1d:fd:9a:68:d3:75:2b:dc:1d:ff:1c:70:8e:c0:08:f7: 41:1a:49:64:79:19:90:75:1a:9a:a3:f4:5d:05:10:39:aa:bf: c0:2b:93:a9:0c:96:ce:95:f8:09:39:21:ba:0c:54:75:dc:92: d7:2a:5e:f6:7e:4f:75:dd:f1:72:23:39:d7:cf:58:75:f6:73: 2f:d8:6f:50:e6:18:15:db:28:58:b8:15:58:45:4b:c8:44:44: c0:ec:b9:e0:cd:38:7e:e0:61:af:83:76:9b:4b:93:37:0a:78: cb:73:a1:64:83:ac:6b:f1:75:ef:0e:ab:a9:5c:4b:73:fe:76: 21:ea:e1:1a:fd:24:f1:6c:e8:00:af:a0:31:a3:92:62:39:8a: ef:fc:8a:ff:48:45:5a:50:d9:7e:d0:46:db:fa:ed:44:0f:e5: c2:08:4a:9e:92:3b:33:0a:98:a8:ed:d3:37:06:b1:d5:09:17: c3:c4:25:a7:66:af:a6:d7:35:eb:a4:bd:5a:a0:8d:42:c0:20: ae:f4:e8:fc -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEg7SHDOxeE5jKi+fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxNzAxNDUzMloXDTI3MDMyMjAwNDUzMlowLzEtMCsGA1UEAxMk OTUwZWI0ZmYtY2I2NS00ZThmLTkwYTktMTEzOTJkYWNmYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfg1FIfHMaKIR1hjXlVFEUnpYjCjR6OrK5RY dK2+i2kiQk/IePrq4qr6RnA5IGGUY78spxriylNbJ61V4W6yweD6KjTfE+CaooRZ zdH118k9cZvJ2i4qO+CJfDgo0DyRTMk0CJROPlZoombj4uJWSJ4V+MJp3SWK+0qx VNGXemwezrCtkJ4jAq2oO/yekGjNfyixbGPIlT2NIlJs3/Re6U5N4YBioSI5v17f /BVV+0dQJzpYWTbSN70e+H7QhvY7m8TgC6BFZIWja9+/u1X6jqunMngzaMPf25++ Dx+Azq060gSNGpzZPsILzr2/g+6WoWlp77TFgb+4odGGA7/DMQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOImPXcdubztO5jJJaDDmwY5HvOWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 NTBlYjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5MmRhY2ZhZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk1MGViNGZmLWNiNjUtNGU4Zi05 MGE5LTExMzkyZGFjZmFkMi85NTBlYjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5MmRh Y2ZhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhcgwDgQCAAIwCAMGBCYC+6YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRIfOIK/XtmH97+ak1qrdMfWXY 8I4NDOjHA4Ho9KbHKn8WgVlhjJ7Lb1rle/9l7tIT5Ps3QOxZGR39mmjTdSvcHf8c cI7ACPdBGklkeRmQdRqao/RdBRA5qr/AK5OpDJbOlfgJOSG6DFR13JLXKl72fk91 3fFyIznXz1h19nMv2G9Q5hgV2yhYuBVYRUvIRETA7LngzTh+4GGvg3abS5M3CnjL c6Fkg6xr8XXvDqupXEtz/nYh6uEa/STxbOgAr6Axo5JiOYrv/Ir/SEVaUNl+0Ebb +u1ED+XCCEqekjszCpio7dM3BrHVCRfDxCWnZq+m1zXrpL1aoI1CwCCu9Oj8 -----END CERTIFICATE-----Generated at Sun Apr 27 00:11:28 2025 by rpki-client