$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer File: 72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer (raw, json) Hash identifier: 28l3PN0lx5q2JXwgOfG5jLnyjubDVbWqrJn8SfXmu10= Subject key identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849BF37C4436B3EF589CF06D510 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 22898 IP: 104.192.240.0/22 IP: 192.69.160.0/20 IP: 2604:5b80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c4:43:6b:3e:f5:89:cf:06:d5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:da:0b:86:6c:2d:ea:97:eb:a3:a0:1b:09: 02:2c:d7:cc:9d:0a:22:5b:71:a3:b3:67:55:64:b6: 6e:6f:13:2d:99:7b:56:ea:dc:31:9b:80:0b:98:ca: 6c:54:78:b8:be:6a:74:70:7d:6c:2b:ac:d4:99:ac: 81:c6:4d:11:77:ff:0d:a3:fe:8d:b3:9d:dc:13:fd: e9:1d:01:83:4a:17:81:65:06:80:c0:dd:b5:d3:5e: f2:7d:d6:eb:87:80:84:df:60:91:da:95:2c:45:a3: 10:3f:30:0a:47:68:f3:c7:b1:53:9f:83:17:94:e2: 15:df:2a:6d:12:78:18:7a:2a:dd:24:c3:d7:05:e4: d0:e2:20:44:27:a4:38:f3:a5:53:4e:cf:67:38:58: 82:cb:d3:48:14:31:38:6a:40:09:af:0b:c6:1f:eb: d5:42:b4:d1:13:d2:2f:1c:12:b8:9b:14:55:06:60: ca:00:1d:33:d1:63:cc:2c:22:c7:9b:c3:d1:13:8e: ae:b4:b3:ba:af:29:94:d1:28:52:2f:83:da:dc:98: 2f:9f:4c:d2:38:13:05:25:94:bc:5f:97:d7:d9:a8: 04:db:ef:4a:d5:10:f9:0d:d2:e3:0f:72:ab:9b:00: 02:69:89:42:ad:1f:50:b1:1a:03:7c:30:cc:97:7e: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 104.192.240.0/22 192.69.160.0/20 IPv6: 2604:5b80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22898 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:12:98:af:0f:54:ab:25:94:1a:46:50:47:29:a6:02:01:22: b0:6f:35:97:4e:1f:8b:b9:ed:02:86:4d:d4:a8:d8:39:53:b7: 82:ef:be:52:98:e2:f4:d4:a5:d2:c5:7d:ad:50:73:0a:27:4c: 0f:14:d4:24:17:a3:7a:d5:df:ea:7f:95:3f:a4:fc:46:18:9f: 13:eb:c5:96:6d:3c:6a:c9:7c:3f:ec:cb:d1:1f:4c:12:ee:23: 66:d4:d1:15:36:36:08:1a:ee:7a:b8:0b:53:23:b0:81:d7:f3: b4:58:fb:46:b6:2c:eb:ba:79:3b:84:30:f9:ac:33:62:73:5d: 08:eb:1b:6f:a6:9a:85:bf:ad:79:30:85:d1:81:b6:19:7f:4f: c4:d9:ab:17:69:9a:3e:c4:04:68:22:2f:77:3c:70:ba:6c:3c: f7:cf:4c:36:f0:d9:bd:28:ec:73:0a:ca:2e:5f:90:2a:08:04: 3d:23:04:df:3e:8b:74:7a:e5:44:b3:2e:7c:6c:c7:2b:3c:7f: 09:78:3b:19:84:a5:54:86:2d:cc:ce:8f:5e:95:66:8d:e1:3f: de:5d:23:05:84:5f:aa:ea:a0:b1:7b:46:20:c7:1f:47:4e:89: 2b:49:df:a9:49:a7:90:af:33:5b:dc:8f:a1:af:a1:13:7a:91: b8:1f:2e:d7 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEm/N8RDaz71ic8G1RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk NzJmNTZkMWQtNmY0MC00ZTU0LWI0NjctNjVjM2JiOGYxMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvALaC4ZsLeqX66OgGwkCLNfMnQoiW3Gjs2dV ZLZubxMtmXtW6twxm4ALmMpsVHi4vmp0cH1sK6zUmayBxk0Rd/8No/6Ns53cE/3p HQGDSheBZQaAwN21017yfdbrh4CE32CR2pUsRaMQPzAKR2jzx7FTn4MXlOIV3ypt EngYeirdJMPXBeTQ4iBEJ6Q486VTTs9nOFiCy9NIFDE4akAJrwvGH+vVQrTRE9Iv HBK4mxRVBmDKAB0z0WPMLCLHm8PRE46utLO6rymU0ShSL4Pa3Jgvn0zSOBMFJZS8 X5fX2agE2+9K1RD5DdLjD3KrmwACaYlCrR9QsRoDfDDMl37KwwIDAQABo4IELzCC BCswHQYDVR0OBBYEFL3K3pTyVv593WbkwMuxGRddZkQDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83 MmY1NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMzYmI4ZjEyYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzcyZjU2ZDFkLTZmNDAtNGU1NC1i NDY3LTY1YzNiYjhmMTJiYi83MmY1NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMzYmI4 ZjEyYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJowPADBATARaAwDQQCAAIwBwMFACYEW4AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICWXIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiBKYrw9UqyWUGkZQRymm AgEisG81l04fi7ntAoZN1KjYOVO3gu++Upji9NSl0sV9rVBzCidMDxTUJBejetXf 6n+VP6T8RhifE+vFlm08asl8P+zL0R9MEu4jZtTRFTY2CBruergLUyOwgdfztFj7 RrYs67p5O4Qw+awzYnNdCOsbb6aahb+teTCF0YG2GX9PxNmrF2maPsQEaCIvdzxw umw8989MNvDZvSjscwrKLl+QKggEPSME3z6LdHrlRLMufGzHKzx/CXg7GYSlVIYt zM6PXpVmjeE/3l0jBYRfquqgsXtGIMcfR06JK0nfqUmnkK8zW9yPoa+hE3qRuB8u 1w== -----END CERTIFICATE-----Generated at Mon May 12 03:56:43 2025 by rpki-client