$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer File: 503450af-ac6f-4861-96c0-24f7e8724111.cer (raw, json) Hash identifier: EuMaxESnH+ZznLR0I6NW9+H5u0SQIVTvM7NY53U4fXI= Subject key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584859FDF8D54C3D290A2CEB29C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Dec 2024 01:45:33 +0000 Certificate not after: Fri 02 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 22961 IP: 23.146.120.0/23 IP: 2602:29d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:59:fd:f8:d5:4c:3d:29:0a:2c:eb:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 28 01:45:33 2024 GMT Not After : Apr 2 00:45:33 2027 GMT Subject: CN=503450af-ac6f-4861-96c0-24f7e8724111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:db:90:f7:0c:50:c6:83:05:18:81:5c:61: 16:45:98:0a:6b:c3:45:5c:9b:0a:71:0d:0d:42:c6: 45:09:1b:83:4a:ef:33:19:e1:47:b4:bc:88:1c:f7: de:02:b9:e5:7f:e2:88:36:f1:e7:54:f1:3e:80:76: 0b:cf:55:9e:5a:aa:ab:16:c5:ae:5b:4a:ba:90:43: c6:78:c0:63:06:04:14:85:9d:10:90:16:7e:98:98: 32:b9:a2:c5:cd:3d:94:10:fd:f1:44:5a:08:a6:e2: 06:ab:8f:4e:56:d1:52:ed:49:a6:ee:0f:87:74:97: fe:f7:9f:53:69:d3:13:4d:c4:dc:39:0f:1e:d8:6a: 3a:ae:d1:ee:55:af:f4:5a:23:f9:79:98:40:5d:c4: 48:0e:9a:e5:15:5e:65:7b:56:18:f1:33:2f:dc:6a: b7:dd:55:06:01:1f:67:86:fa:f7:07:31:89:34:ad: 2a:cb:80:7c:e8:a8:d2:87:6b:ba:d6:5c:ea:fb:b0: a6:19:ff:fc:67:46:bf:6a:4e:62:e1:b3:08:41:c6: 5c:fc:a2:a7:da:4d:50:02:0a:bc:a5:3b:e1:1a:ac: 3a:b8:8c:b0:94:3d:43:c2:2a:28:21:7b:4b:a5:1a: 15:66:d0:d3:01:1b:4e:e1:8d:f1:76:2b:2c:a9:55: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.120.0/23 IPv6: 2602:29d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22961 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1a:cd:44:ae:f7:c5:2c:49:7f:19:37:e1:b0:9b:49:67:44: 9b:51:da:0c:ce:47:6e:da:5e:14:cf:58:a8:84:fb:7b:be:b3: c5:49:64:e5:99:41:2c:b5:9b:f7:88:bc:37:d8:39:a3:4c:0b: ac:2a:2a:28:32:29:fb:d2:b5:5e:72:01:69:61:a3:b5:1d:d7: ef:0c:e0:e6:61:cb:fd:4c:13:0f:29:88:fc:ce:33:8c:d6:9a: 20:3b:dd:73:fd:3b:e5:db:aa:ac:26:d9:42:d6:3e:36:96:02: 3c:08:19:78:4e:92:89:b8:5e:6b:5e:b9:83:e5:70:a0:d0:a5: 4f:6c:df:d2:3b:fd:2b:8b:b4:85:ec:a3:5f:a4:31:54:07:cf: bb:b5:6e:3f:b5:fb:73:c0:b5:a1:9c:a0:4b:57:40:06:9d:6f: da:ff:cc:2c:44:aa:b4:5a:05:31:ab:5d:9f:4b:a9:10:7c:5a: 2b:32:2b:32:fd:7a:dc:42:c0:c5:28:06:3f:24:eb:1f:a2:11: 86:a1:1f:55:6c:91:bd:41:01:07:8f:a9:5c:81:b5:a8:6c:b3: 39:8e:d6:60:eb:36:94:d4:0a:e7:8f:5e:2c:df:93:2c:5e:4d: d3:e2:9f:bd:45:bf:34:cf:68:db:11:f4:3a:4f:83:6f:5e:e2: 38:7f:f9:5d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEhZ/fjVTD0pCizrKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIyODAxNDUzM1oXDTI3MDQwMjAwNDUzM1owLzEtMCsGA1UEAxMk NTAzNDUwYWYtYWM2Zi00ODYxLTk2YzAtMjRmN2U4NzI0MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZXbkPcMUMaDBRiBXGEWRZgKa8NFXJsKcQ0N QsZFCRuDSu8zGeFHtLyIHPfeArnlf+KINvHnVPE+gHYLz1WeWqqrFsWuW0q6kEPG eMBjBgQUhZ0QkBZ+mJgyuaLFzT2UEP3xRFoIpuIGq49OVtFS7Umm7g+HdJf+959T adMTTcTcOQ8e2Go6rtHuVa/0WiP5eZhAXcRIDprlFV5le1YY8TMv3Gq33VUGAR9n hvr3BzGJNK0qy4B86KjSh2u61lzq+7CmGf/8Z0a/ak5i4bMIQcZc/KKn2k1QAgq8 pTvhGqw6uIywlD1DwiooIXtLpRoVZtDTARtO4Y3xdissqVXqBwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPljGpEr96BqXYIxQAwh1f277fq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3MjQxMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzUwMzQ1MGFmLWFjNmYtNDg2MS05 NmMwLTI0ZjdlODcyNDExMS81MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3 MjQxMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXkngwDgQCAAIwCAMGBCYCAp0AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlmxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABEazUSu98UsSX8ZN+Gwm0lnRJtR 2gzOR27aXhTPWKiE+3u+s8VJZOWZQSy1m/eIvDfYOaNMC6wqKigyKfvStV5yAWlh o7Ud1+8M4OZhy/1MEw8piPzOM4zWmiA73XP9O+Xbqqwm2ULWPjaWAjwIGXhOkom4 XmteuYPlcKDQpU9s39I7/SuLtIXso1+kMVQHz7u1bj+1+3PAtaGcoEtXQAadb9r/ zCxEqrRaBTGrXZ9LqRB8WisyKzL9etxCwMUoBj8k6x+iEYahH1Vskb1BAQePqVyB tahsszmO1mDrNpTUCuePXizfkyxeTdPin71FvzTPaNsR9DpPg29e4jh/+V0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:40:59 2025 by rpki-client