$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer File: 43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer (raw, json) Hash identifier: tUP9XFgzNIJnQrNQ3e3tNOaAPTSmcSoobfEmXUK7/0Q= Subject key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Authority key identifier: 9E:7B:CF:16:05:4F:29:AA:44:0C:96:A1:7A:66:07:15:CE:67:01:AB Certificate issuer: /CN=829fb872-15bb-4a4e-9ed9-259960b049bd Certificate serial: 010D0C9F4328584848F1FF0B1E6BA62F47B05B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 21 Dec 2024 23:12:41 +0000 Certificate not after: Fri 26 Mar 2027 22:12:41 +0000 Subordinate resources: AS: 13646 IP: 23.156.104.0/24 IP: 23.174.200.0/24 IP: 198.135.169.0/24 IP: 2602:fa6e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:48:f1:ff:0b:1e:6b:a6:2f:47:b0:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829fb872-15bb-4a4e-9ed9-259960b049bd Validity Not Before: Dec 21 23:12:41 2024 GMT Not After : Mar 26 22:12:41 2027 GMT Subject: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:44:2a:12:6f:c5:ee:ff:d9:c4:1e:d9:06: 21:76:6d:7c:f1:cd:1f:bf:60:da:f6:41:3a:19:b3: cd:ff:4f:72:e7:16:0f:41:2e:39:22:d8:b6:04:61: db:e0:b3:ae:17:d3:52:19:7e:32:a9:32:2d:c0:e7: a7:73:4a:ae:09:1d:8c:5d:35:45:16:0e:ef:0e:73: 2d:02:e0:8d:88:06:04:22:8f:d3:3a:8d:ab:cf:45: 59:ce:d1:49:66:eb:bd:7d:bd:0e:c8:6b:49:6c:47: 6c:ce:49:dd:12:4b:e7:21:87:54:ee:ec:03:bb:f3: 59:06:48:4d:a0:b8:11:08:77:d6:23:b7:b4:86:24: eb:65:34:37:ae:4e:83:64:10:0f:3a:48:a9:e3:0c: a5:f3:5d:57:5e:31:74:81:5e:02:5d:50:a3:38:b2: 7e:b0:fa:09:44:be:c4:d5:6a:8c:89:98:8d:5c:c7: dd:69:6a:01:0e:5e:f7:b3:8c:0b:7e:73:db:8f:b6: ee:1e:a4:ee:32:bb:2f:5a:bd:88:81:e1:6b:4b:9f: 30:70:81:60:80:5c:08:55:15:7e:2e:72:54:36:6a: 0a:fa:71:6f:07:2a:a6:07:98:b0:b3:dd:87:31:3e: 02:9b:bb:07:f2:21:b1:af:04:c0:c3:07:02:c0:e1: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl X509v3 Authority Key Identifier: keyid:9E:7B:CF:16:05:4F:29:AA:44:0C:96:A1:7A:66:07:15:CE:67:01:AB X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer sbgp-ipAddrBlock: critical IPv4: 23.156.104.0/24 23.174.200.0/24 198.135.169.0/24 IPv6: 2602:fa6e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13646 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9a:dd:31:86:2c:e0:d9:23:4e:b4:bf:4c:c3:5d:31:a4:37: 7d:70:a9:0a:ce:f4:2f:37:08:a3:1f:d1:86:ab:ce:13:ab:6f: 3d:d3:75:7b:66:1d:c7:0b:bf:82:f2:fa:c3:5c:b3:81:83:bb: 08:08:0f:d0:fa:82:5a:31:82:b1:97:3d:c6:63:81:19:22:22: 89:36:a8:bb:34:b5:00:22:94:d5:04:c3:40:22:12:29:7f:6c: 80:22:9e:f9:d0:c6:bd:60:ff:27:d4:c4:a8:3e:ac:2a:3c:ba: 35:09:45:c8:6e:a1:f7:df:68:07:0a:09:ae:61:42:1a:79:17: 53:83:3b:62:9f:0c:c4:33:39:f8:21:20:f2:17:60:0d:bd:9d: 41:63:ac:ee:b4:f7:f0:90:a3:d9:38:9c:c6:d9:cb:03:a5:30: 77:c7:54:f1:29:18:51:1d:ef:a7:72:e3:ca:3d:cc:d1:f5:b7: 4e:32:7a:72:df:1d:18:51:b2:3b:2c:11:c4:7c:70:8b:a9:41: 5b:12:d3:db:ec:51:64:cb:c0:11:86:80:9e:24:49:57:cc:91: 7b:12:81:e1:7d:1e:68:4b:74:bb:47:dc:e8:89:c4:b4:d8:e5: 47:c6:18:95:7a:0f:10:a8:26:9a:77:0b:67:97:e0:33:fa:b8: d4:cd:38:60 -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUAQ0Mn0MoWEhI8f8LHmumL0ewW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZmI4NzItMTViYi00YTRlLTllZDktMjU5OTYwYjA0 OWJkMB4XDTI0MTIyMTIzMTI0MVoXDTI3MDMyNjIyMTI0MVowPTE7MDkGA1UEAxMy NDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3OTY2MDExMmJlOWEy ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCen0QqEm/F7v/ZxB7Z BiF2bXzxzR+/YNr2QToZs83/T3LnFg9BLjki2LYEYdvgs64X01IZfjKpMi3A56dz Sq4JHYxdNUUWDu8Ocy0C4I2IBgQij9M6javPRVnO0Ulm6719vQ7Ia0lsR2zOSd0S S+chh1Tu7AO781kGSE2guBEId9Yjt7SGJOtlNDeuToNkEA86SKnjDKXzXVdeMXSB XgJdUKM4sn6w+glEvsTVaoyJmI1cx91pagEOXvezjAt+c9uPtu4epO4yuy9avYiB 4WtLnzBwgWCAXAhVFX4uclQ2agr6cW8HKqYHmLCz3YcxPgKbuwfyIbGvBMDDBwLA 4TYhAgMBAAGjggP4MIID9DAdBgNVHQ4EFgQUam9uwnKl69wYJBwshNHZ/pTBJaow ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2 NS04YTE2LWRiZmM0NTkzYzFhOC83LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00 NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3MkE1RUJEQzE4MjQxQzJD ODREMUQ5RkU5NEMxMjVBQS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBi ODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0yNTk5NjBiMDQ5YmQvODI5ZmI4 NzItMTViYi00YTRlLTllZDktMjU5OTYwYjA0OWJkLmNybDAfBgNVHSMEGDAWgBSe e88WBU8pqkQMlqF6ZgcVzmcBqzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzgy OWZiODcyLTE1YmItNGE0ZS05ZWQ5LTI1OTk2MGIwNDliZC5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXnGgDBAAXrsgDBADGh6kwDgQCAAIwCAMGBCYC +m4AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjVOMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIua3TGGLODZ I060v0zDXTGkN31wqQrO9C83CKMf0YarzhOrbz3TdXtmHccLv4Ly+sNcs4GDuwgI D9D6gloxgrGXPcZjgRkiIok2qLs0tQAilNUEw0AiEil/bIAinvnQxr1g/yfUxKg+ rCo8ujUJRchuofffaAcKCa5hQhp5F1ODO2KfDMQzOfghIPIXYA29nUFjrO609/CQ o9k4nMbZywOlMHfHVPEpGFEd76dy48o9zNH1t04yenLfHRhRsjssEcR8cIupQVsS 09vsUWTLwBGGgJ4kSVfMkXsSgeF9HmhLdLtH3OiJxLTY5UfGGJV6DxCoJpp3C2eX 4DP6uNTNOGA= -----END CERTIFICATE-----Generated at Tue Apr 29 00:34:38 2025 by rpki-client