$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer File: d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer (raw, json) Hash identifier: ZRA4UQhS4lZZUbRotde3unVr6kUlCVl01ufMuecZqIg= Subject key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584940C2E2B15CF1538100110E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 20 Mar 2025 17:38:14 +0000 Certificate not after: Wed 23 Jun 2027 17:38:14 +0000 Subordinate resources: AS: 26561 IP: 23.164.152.0/24 IP: 2602:f9fa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:c2:e2:b1:5c:f1:53:81:00:11:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Mar 20 17:38:14 2025 GMT Not After : Jun 23 17:38:14 2027 GMT Subject: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:c3:8e:9f:a2:c1:25:45:be:45:4f:0f:26: 68:50:1f:8d:30:1b:2d:c1:88:f6:8b:b1:12:4e:f4: b9:dd:02:d1:44:f5:2f:fb:f8:b8:75:4f:4f:3f:af: 26:3c:c6:67:d7:e3:70:e3:7b:5e:b7:ab:88:2a:29: 8a:9f:60:49:ba:58:06:ab:7d:92:b1:95:02:42:a1: c9:08:2c:d6:58:80:14:bd:d6:ae:7a:f3:64:8e:b9: 62:38:68:4b:8d:b9:83:de:40:6e:fd:d9:93:6f:fb: 95:0a:6d:8c:0a:75:70:a1:70:fa:c7:ba:09:7b:71: 27:65:c6:ba:30:36:80:d2:c7:2c:52:47:0a:7c:56: b2:26:03:bc:dd:8d:c7:ed:b8:24:26:01:6a:29:56: 26:34:79:df:62:e9:cd:e5:9d:ad:e8:6c:a8:86:71: 14:c9:0a:e7:e1:40:34:ab:ea:0b:5d:a0:7a:f7:76: 30:8b:1e:ec:18:89:14:86:79:da:4a:b4:06:51:47: d8:49:e7:ad:4b:d2:1d:9c:fd:d7:3d:71:0c:b5:6c: a7:16:d9:81:cf:57:c3:3d:8f:0b:8c:eb:a7:55:e4: 5c:94:93:2f:1b:0c:37:c2:0a:9f:ad:a1:77:5e:4f: 1f:81:78:36:32:ad:29:bd:d9:b9:a5:c2:51:bf:5e: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: 23.164.152.0/24 IPv6: 2602:f9fa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26561 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:00:8a:7c:9f:53:e4:1b:59:62:55:11:12:63:9c:73:fd:90: b9:2f:51:f5:5f:f8:35:7c:c1:b8:77:78:45:13:ce:c8:ba:53: 6a:6e:f5:8c:61:cd:9e:df:74:51:22:94:49:7a:e4:82:3d:a9: df:f5:fb:0f:41:32:6f:00:09:99:e9:4f:42:ab:11:2d:a4:9b: cf:9f:ea:c7:d2:dd:64:b6:31:d0:94:23:32:5f:37:6b:29:7a: ac:0e:fb:42:77:99:e7:50:31:2e:31:9a:3e:02:61:6c:62:95: 64:86:d0:28:ec:b2:d6:44:9c:02:6b:42:7f:d5:41:30:29:37: a6:01:2d:f9:a9:47:8c:f4:58:f5:40:43:b9:e3:ce:43:b7:e7: 52:50:76:1e:c3:0b:84:ad:ab:3c:bf:a7:27:0f:4b:08:63:ce: 42:e3:e6:72:c0:20:36:ed:f6:8b:ed:30:7d:a0:23:b1:c8:b6: 2f:ff:b5:9d:bc:a3:e3:10:28:78:ce:12:7a:01:1d:a5:3d:fe: 9b:ce:16:c7:38:50:3f:b1:65:2f:9d:a4:7a:47:f7:62:71:fa: c1:2a:f0:f6:23:09:c4:92:5b:e5:c6:78:46:3a:a9:bc:17:68: 79:c0:1e:96:a1:6a:bd:9e:3a:47:d3:55:8f:20:da:de:d2:76: 2d:14:2e:e4 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWElAwuKxXPFTgQARDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI1MDMyMDE3MzgxNFoXDTI3MDYyMzE3MzgxNFowPTE7MDkGA1UEAxMy ZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRkMjkwMjJkYmI1ZmUw YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWsOOn6LBJUW+RU8P JmhQH40wGy3BiPaLsRJO9LndAtFE9S/7+Lh1T08/ryY8xmfX43Dje163q4gqKYqf YEm6WAarfZKxlQJCockILNZYgBS91q5682SOuWI4aEuNuYPeQG792ZNv+5UKbYwK dXChcPrHugl7cSdlxrowNoDSxyxSRwp8VrImA7zdjcftuCQmAWopViY0ed9i6c3l na3obKiGcRTJCufhQDSr6gtdoHr3djCLHuwYiRSGedpKtAZRR9hJ561L0h2c/dc9 cQy1bKcW2YHPV8M9jwuM66dV5FyUky8bDDfCCp+toXdeTx+BeDYyrSm92bmlwlG/ XtvXAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQU+1/5K/11Kg5lSw7MewOhffmbh6gw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIx Ny1iYmEzLWE1OTJiMjRkOGViOS8yLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTI5MWM3ZTYtYTQ3Ni00 MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJGRDc1MkEwRTY1NEIwRUND N0IwM0ExN0RGOTlCODdBOC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMy MWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcx NTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQzMGUyLmNybDAfBgNVHSMEGDAWgBTL VH2/JIelcbKwx4iWmec5ID9yYzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBl YzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0MzBlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpJgwDgQCAAIwCAMGBCYC+foAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmfBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACYAinyfU+QbWWJVERJjnHP9kLkv UfVf+DV8wbh3eEUTzsi6U2pu9YxhzZ7fdFEilEl65II9qd/1+w9BMm8ACZnpT0Kr ES2km8+f6sfS3WS2MdCUIzJfN2speqwO+0J3medQMS4xmj4CYWxilWSG0CjsstZE nAJrQn/VQTApN6YBLfmpR4z0WPVAQ7njzkO351JQdh7DC4Stqzy/pycPSwhjzkLj 5nLAIDbt9ovtMH2gI7HIti//tZ28o+MQKHjOEnoBHaU9/pvOFsc4UD+xZS+dpHpH 92Jx+sEq8PYjCcSSW+XGeEY6qbwXaHnAHpahar2eOkfTVY8g2t7Sdi0ULuQ= -----END CERTIFICATE-----Generated at Mon Apr 28 02:03:04 2025 by rpki-client