$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer File: 0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer (raw, json) Hash identifier: C5/OO3M/nnT/U2eZ5bfd1OnMHd6rFsUjq7ehbnPUNhk= Subject key identifier: 59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858491509D13A053D770BBBB8F420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 399849 IP: 208.99.54.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d1:3a:05:3d:77:0b:bb:b8:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:40:ec:b4:56:50:a8:b9:55:62:3a:e7:f2: c1:8f:7f:b8:a2:39:bf:d6:ac:d9:cb:4d:00:cc:ac: 92:d8:00:6f:ac:64:ea:ac:aa:f0:d1:2a:fa:4c:2a: 1e:9a:73:98:a5:d8:67:38:cc:9a:55:f6:58:e1:e3: 5e:16:45:b0:1a:4d:0c:1f:5a:9a:13:9d:a1:2f:f8: ab:c7:88:e2:5e:54:28:e0:87:60:30:80:d2:52:b5: 13:c2:11:e0:02:22:bd:18:0e:cb:72:bf:0c:07:0a: 6b:50:0a:e5:91:53:80:9b:38:b1:1b:e4:c5:a2:79: 82:6c:36:fe:e3:83:ea:b6:29:cf:07:86:39:8a:c6: ba:16:dc:5b:79:af:7d:9b:c2:1e:54:e7:ba:08:da: ce:36:fa:0b:5e:4c:17:9b:9b:59:0b:df:47:10:6c: 1c:f4:36:01:2e:5a:78:78:d6:be:a7:f5:1f:30:5b: c6:91:f8:d2:57:53:f0:f6:9f:3a:5d:5c:99:91:53: 3c:f3:ab:3b:3e:42:5c:b1:48:0a:6c:36:50:6f:56: 03:d9:bd:2c:6a:03:ab:52:b2:30:39:21:f4:34:4d: 2f:44:82:c9:23:5e:96:6d:a8:28:6c:97:19:95:62: b6:27:c2:69:69:07:57:73:cc:37:6d:5a:90:25:94: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 208.99.54.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399849 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:40:92:42:15:95:8c:e3:55:9d:08:8a:6d:04:b2:4f:11:28: 63:cb:30:3a:20:bf:84:7c:bc:75:ea:50:93:2e:94:58:9e:9a: 9b:c0:95:91:86:c2:be:7e:0c:32:9b:bd:cd:fe:0b:b7:5c:9e: f0:cf:2a:0c:a8:91:d8:3c:64:fe:97:d1:0e:a1:e8:f3:a8:3e: 28:2b:99:72:7c:e7:79:6b:1a:1e:ac:3e:be:96:14:cb:d4:5f: 0f:bb:e8:2b:c7:cb:0e:6a:d1:c7:ed:81:83:6a:c5:29:ee:67: ce:e7:83:c3:5d:1b:51:10:d0:d7:6d:78:2f:25:89:a6:15:ec: b1:04:34:2c:6e:3a:63:96:a7:b7:d2:7a:e6:b1:ff:08:35:0c: ad:1e:40:a5:38:f3:55:f1:3d:5f:4d:8e:8d:35:5e:a5:41:15: 71:9a:4e:79:f2:ce:48:e3:c3:4d:0a:d1:2c:9a:72:08:a0:9b: 16:2d:72:1d:25:db:2a:77:2b:98:28:e9:d0:d0:c0:67:56:51: be:c0:e7:2d:c1:30:64:3e:d9:1a:f8:4a:56:ae:23:51:4c:4a: 87:1b:05:de:a9:c8:7d:fd:d4:4e:d5:db:b7:ee:c9:e9:05:1f: 6c:2e:bc:41:59:11:0b:46:5f:2a:8e:c2:6c:6e:fd:de:dc:0e: 13:09:0a:29 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkVCdE6BT13C7u49CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk MGU3YzI1MDctZDdiOC00ODEyLWEzMmMtMzkyMWY5OWZlM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVtA7LRWUKi5VWI65/LBj3+4ojm/1qzZy00A zKyS2ABvrGTqrKrw0Sr6TCoemnOYpdhnOMyaVfZY4eNeFkWwGk0MH1qaE52hL/ir x4jiXlQo4IdgMIDSUrUTwhHgAiK9GA7Lcr8MBwprUArlkVOAmzixG+TFonmCbDb+ 44PqtinPB4Y5isa6Ftxbea99m8IeVOe6CNrONvoLXkwXm5tZC99HEGwc9DYBLlp4 eNa+p/UfMFvGkfjSV1Pw9p86XVyZkVM886s7PkJcsUgKbDZQb1YD2b0sagOrUrIw OSH0NE0vRILJI16WbagobJcZlWK2J8JpaQdXc8w3bVqQJZS/5wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFmTZXJLx8HiUDgh9w7I2iCc/BHvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w ZTdjMjUwNy1kN2I4LTQ4MTItYTMyYy0zOTIxZjk5ZmUzZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBlN2MyNTA3LWQ3YjgtNDgxMi1h MzJjLTM5MjFmOTlmZTNkZS8wZTdjMjUwNy1kN2I4LTQ4MTItYTMyYy0zOTIxZjk5 ZmUzZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADQYzYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhnpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE1AkkIVlYzjVZ0Iim0Esk8RKGPLMDogv4R8vHXqUJMulFie mpvAlZGGwr5+DDKbvc3+C7dcnvDPKgyokdg8ZP6X0Q6h6POoPigrmXJ853lrGh6s Pr6WFMvUXw+76CvHyw5q0cftgYNqxSnuZ87ng8NdG1EQ0NdteC8liaYV7LEENCxu OmOWp7fSeuax/wg1DK0eQKU481XxPV9Njo01XqVBFXGaTnnyzkjjw00K0Syacgig mxYtch0l2yp3K5go6dDQwGdWUb7A5y3BMGQ+2Rr4SlauI1FMSocbBd6pyH391E7V 27fuyekFH2wuvEFZEQtGXyqOwmxu/d7cDhMJCik= -----END CERTIFICATE-----Generated at Mon May 12 02:32:01 2025 by rpki-client