$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer File: a7bb872d-e597-498e-8bd5-d2efae320554.cer (raw, json) Hash identifier: qLlyfNumNotD11HOD6Nksxagd2okfINBXmIooMiyav0= Subject key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848EDF43AD531418388315F5190 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: AS: 62890 IP: 23.145.104.0/24 IP: 2606:ed40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:3a:d5:31:41:83:88:31:5f:51:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=a7bb872d-e597-498e-8bd5-d2efae320554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:d1:9f:76:1c:df:ef:55:09:8b:f9:24:5d: 0b:e2:3b:1c:71:1f:3c:57:e3:79:01:c1:f7:4f:50: 4d:d7:41:15:dd:2f:bb:90:84:1c:b5:93:30:e8:69: 25:3b:cd:f8:06:a0:ff:d5:4b:af:a3:45:3d:52:22: 0e:e3:d5:17:db:a0:73:fe:76:40:10:9b:ed:fb:7b: 8e:5a:a8:fc:18:3c:fb:2f:76:7c:24:13:75:5e:8e: d2:65:95:af:25:11:99:e8:8a:1b:67:0b:30:f0:22: 1b:da:c3:73:da:05:ec:4a:d0:b6:ce:0c:3a:74:78: 31:1d:3b:95:c2:58:c1:21:1d:63:64:ee:58:1c:d9: 24:95:fc:1b:44:83:68:51:ce:63:e5:3e:70:c1:6f: b8:00:9a:8f:d2:a0:2d:21:8c:81:88:99:32:0b:30: ca:87:05:a0:bd:31:cf:a4:59:3b:23:54:7e:1d:62: 46:16:23:51:f3:6c:44:a7:c9:ba:b4:a4:51:a3:29: 3e:72:ef:3b:59:d7:8d:a0:05:6a:19:9e:c5:af:c0: df:11:ae:15:94:8c:f4:dc:93:94:aa:33:29:1b:b7: 9f:e9:e3:b4:2f:e7:13:b1:e9:3c:1f:42:01:c0:34: 8c:d8:0b:a4:ee:73:51:08:6a:dc:dd:fa:4f:f1:2f: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.145.104.0/24 IPv6: 2606:ed40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62890 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:93:5c:5f:78:0b:ac:76:8d:53:d0:31:ba:2c:f2:6a:ac:86: e5:83:40:4a:e2:f0:a3:71:30:5a:23:fd:90:1f:be:b2:99:e4: 62:69:55:14:39:7e:d5:be:3b:42:e4:5e:75:d9:6f:73:d5:33: 86:64:e6:9e:78:66:cd:b4:39:21:6c:f2:19:7d:f3:c0:da:76: e9:a6:d3:da:99:91:e5:8a:7c:e9:09:9c:cf:65:a6:36:6f:10: e7:86:fe:87:1f:d2:92:68:3a:5e:7a:ec:05:89:7b:9f:cc:92: 89:b2:00:f1:c9:9c:55:3c:18:07:d7:5e:51:1d:f9:61:81:90: ee:c6:c2:fc:ed:f4:46:5a:3f:bb:1b:ca:5f:b3:b9:dd:d2:7b: 15:44:5b:bd:bd:a0:a9:3d:d0:a0:62:37:4d:1f:9d:86:a4:49: a7:19:03:f7:9e:e6:c3:1c:4e:4c:a3:91:a4:09:92:10:78:76: fe:69:48:17:50:78:76:3f:1b:85:dc:67:21:51:bc:65:a5:56: 84:6a:a7:0a:31:9b:06:05:f2:f3:69:c6:a5:c6:9a:a7:ee:fd: de:77:1d:f7:db:21:8f:28:08:1e:37:59:e0:51:fc:f1:0b:c7: 14:b3:67:2e:9e:ba:49:0f:89:52:15:93:d7:33:9f:4a:17:c0: 0c:97:44:83 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjt9DrVMUGDiDFfUZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk YTdiYjg3MmQtZTU5Ny00OThlLThiZDUtZDJlZmFlMzIwNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo37Rn3Yc3+9VCYv5JF0L4jsccR88V+N5AcH3 T1BN10EV3S+7kIQctZMw6GklO834BqD/1Uuvo0U9UiIO49UX26Bz/nZAEJvt+3uO Wqj8GDz7L3Z8JBN1Xo7SZZWvJRGZ6IobZwsw8CIb2sNz2gXsStC2zgw6dHgxHTuV wljBIR1jZO5YHNkklfwbRINoUc5j5T5wwW+4AJqP0qAtIYyBiJkyCzDKhwWgvTHP pFk7I1R+HWJGFiNR82xEp8m6tKRRoyk+cu87WdeNoAVqGZ7Fr8DfEa4VlIz03JOU qjMpG7ef6eO0L+cTsek8H0IBwDSM2Auk7nNRCGrc3fpP8S9tnwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAvBH055edY/i+JKuE+ZIQN5Qml9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h N2JiODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVmYWUzMjA1NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2E3YmI4NzJkLWU1OTctNDk4ZS04 YmQ1LWQyZWZhZTMyMDU1NC9hN2JiODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVmYWUz MjA1NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXkWgwDQQCAAIwBwMFACYG7UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPWqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEWTXF94C6x2jVPQMbos8mqshuWD QEri8KNxMFoj/ZAfvrKZ5GJpVRQ5ftW+O0LkXnXZb3PVM4Zk5p54Zs20OSFs8hl9 88Dadumm09qZkeWKfOkJnM9lpjZvEOeG/ocf0pJoOl567AWJe5/MkomyAPHJnFU8 GAfXXlEd+WGBkO7Gwvzt9EZaP7sbyl+zud3SexVEW729oKk90KBiN00fnYakSacZ A/ee5sMcTkyjkaQJkhB4dv5pSBdQeHY/G4XcZyFRvGWlVoRqpwoxmwYF8vNpxqXG mqfu/d53HffbIY8oCB43WeBR/PELxxSzZy6eukkPiVIVk9czn0oXwAyXRIM= -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:39 2025 by rpki-client