$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71.cer File: e1513f3d-2793-4f27-8379-364931bdab71.cer (raw, json) Hash identifier: DTmGKRQPO8WtIiJw4W9M91ThT3oUtVnOMmO77ss8bj0= Subject key identifier: 6C:F1:BF:48:60:8E:21:52:13:6E:43:00:1E:5E:E1:CF:32:C9:BA:B3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848C6DEA6F012887C8BA67B1480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/e1513f3d-2793-4f27-8379-364931bdab71.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Feb 2025 01:45:33 +0000 Certificate not after: Tue 11 May 2027 00:45:33 +0000 Subordinate resources: AS: 399898 AS: 401350 IP: 110.239.48.0/20 IP: 147.124.80.0/20 IP: 165.188.64.0/18 IP: 170.62.48.0/20 IP: 2601:b000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:de:a6:f0:12:88:7c:8b:a6:7b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 5 01:45:33 2025 GMT Not After : May 11 00:45:33 2027 GMT Subject: CN=e1513f3d-2793-4f27-8379-364931bdab71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:e1:dd:76:45:5e:be:70:9d:33:25:68:e1: c3:58:cc:1c:fe:d0:bc:69:fa:84:56:79:5a:0b:12: da:59:9b:02:a6:93:d2:98:fa:f4:60:b3:45:93:5f: 7f:86:81:59:d1:0b:6c:09:d7:7d:d9:2e:5b:5c:0c: ef:70:23:b5:ac:86:f0:e9:d5:16:00:a1:6b:6b:6b: 29:f2:51:1c:f9:71:e2:d4:ca:d5:70:2f:07:84:a1: b4:72:ea:f2:f0:65:e8:b4:07:1d:72:d8:6c:38:da: 27:d8:a9:66:13:44:77:48:88:28:92:19:de:bf:e8: 25:4b:fa:03:cf:12:9c:8c:20:c5:74:f2:b0:37:f4: 93:f5:58:3f:1a:e8:31:24:fa:a8:94:29:63:d0:41: ce:16:6b:4f:56:b7:ef:84:53:42:01:0e:94:11:d8: ec:3d:f3:b5:0c:22:9a:62:b5:c5:13:78:f4:5a:00: 2a:8c:d7:c3:71:20:15:50:02:48:ee:26:15:d8:3e: cf:0a:34:2a:12:3e:1e:78:ff:9e:c6:8f:21:f5:54: 9b:c5:7b:82:ba:71:51:34:73:56:59:5e:c4:22:c0: 11:d9:e5:8a:5c:e5:c2:9b:4a:eb:40:1d:b6:f5:bd: 2a:e6:50:81:0f:67:85:34:aa:10:d9:83:53:87:4b: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F1:BF:48:60:8E:21:52:13:6E:43:00:1E:5E:E1:CF:32:C9:BA:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/e1513f3d-2793-4f27-8379-364931bdab71.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 110.239.48.0/20 147.124.80.0/20 165.188.64.0/18 170.62.48.0/20 IPv6: 2601:b000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399898 401350 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:dc:92:10:42:35:2e:ee:e5:c8:55:a1:ff:51:94:4d:02:a6: be:2e:c6:14:c5:10:17:03:bb:96:a0:aa:b0:a5:17:4c:be:4b: 32:f0:33:0d:46:ef:21:c7:a6:76:27:5b:0c:8c:04:e1:1b:04: 2d:48:bb:01:55:90:fc:f3:21:6b:82:79:d2:05:31:20:bf:e3: 43:ba:01:ea:50:00:df:5e:a0:fe:c2:a5:81:43:f4:30:83:5a: ff:f2:ec:47:8a:6c:34:14:f7:80:1a:34:7a:bd:9f:4c:b5:1c: a1:0a:9d:15:f3:66:2d:ab:c0:31:c4:cd:f8:5a:c6:43:fc:66: a5:4d:50:d6:b1:3b:59:43:cc:52:b7:14:2f:3e:d8:f5:11:dd: fa:dc:87:1e:99:3c:71:d6:31:22:cb:4b:5a:ec:32:a7:f5:e1: 3b:05:d6:eb:6a:c6:f9:99:1d:10:02:56:0a:9a:34:5b:b9:a5: 47:bd:cd:b2:3e:bc:fb:3a:9b:e9:dd:ff:0e:2e:71:f7:58:3b: 7b:c0:c4:99:03:91:f1:6f:e4:73:31:02:b3:d3:5e:5a:7f:33: ff:e7:0a:4a:57:12:ce:6c:0c:a3:a2:a8:0f:5d:a4:4b:0b:e7: 20:23:4e:25:06:b8:bc:a9:41:0c:83:1b:cb:73:10:75:cb:62: 5b:d5:1e:93 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEjG3qbwEoh8i6Z7FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIwNTAxNDUzM1oXDTI3MDUxMTAwNDUzM1owLzEtMCsGA1UEAxMk ZTE1MTNmM2QtMjc5My00ZjI3LTgzNzktMzY0OTMxYmRhYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YTh3XZFXr5wnTMlaOHDWMwc/tC8afqEVnla CxLaWZsCppPSmPr0YLNFk19/hoFZ0QtsCdd92S5bXAzvcCO1rIbw6dUWAKFra2sp 8lEc+XHi1MrVcC8HhKG0cury8GXotAcdcthsONon2KlmE0R3SIgokhnev+glS/oD zxKcjCDFdPKwN/ST9Vg/GugxJPqolClj0EHOFmtPVrfvhFNCAQ6UEdjsPfO1DCKa YrXFE3j0WgAqjNfDcSAVUAJI7iYV2D7PCjQqEj4eeP+exo8h9VSbxXuCunFRNHNW WV7EIsAR2eWKXOXCm0rrQB229b0q5lCBD2eFNKoQ2YNTh0vBYQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFGzxv0hgjiFSE25DAB5e4c8yybqzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MTUxM2YzZC0yNzkzLTRmMjctODM3OS0zNjQ5MzFiZGFiNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UxNTEzZjNkLTI3OTMtNGYyNy04 Mzc5LTM2NDkzMWJkYWI3MS9lMTUxM2YzZC0yNzkzLTRmMjctODM3OS0zNjQ5MzFi ZGFiNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMB4EAgABMBgDBARu7zADBASTfFADBAalvEADBASqPjAwDAQCAAIw BgMEACYBsDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMGGhoCAwYfxjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAz3JIQQjUu7uXIVaH/UZRNAqa+LsYUxRAXA7uWoKqwpRdMvksy8DMNRu8hx6Z2 J1sMjAThGwQtSLsBVZD88yFrgnnSBTEgv+NDugHqUADfXqD+wqWBQ/Qwg1r/8uxH imw0FPeAGjR6vZ9MtRyhCp0V82Ytq8AxxM34WsZD/GalTVDWsTtZQ8xStxQvPtj1 Ed363IcemTxx1jEiy0ta7DKn9eE7Bdbrasb5mR0QAlYKmjRbuaVHvc2yPrz7Opvp 3f8OLnH3WDt7wMSZA5Hxb+RzMQKz015afzP/5wpKVxLObAyjoqgPXaRLC+cgI04l Bri8qUEMgxvLcxB1y2Jb1R6T -----END CERTIFICATE-----Generated at Sat Apr 26 21:06:32 2025 by rpki-client