$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer File: aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer (raw, json) Hash identifier: CwMmsYvTigXf2xjtLJRSHoYB+GMse6BMzMFy7d936i8= Subject key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849BC6D16CBE471DB39E32E9E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 04 May 2025 00:45:35 +0000 Certificate not after: Sat 07 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 12243 IP: 23.172.0.0/24 IP: 23.176.16.0/24 IP: 158.51.76.0/23 IP: 198.98.15.0/24 IP: 2606:1040::/32 IP: 2620:11f:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:6d:16:cb:e4:71:db:39:e3:2e:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 4 00:45:35 2025 GMT Not After : Aug 7 00:45:35 2027 GMT Subject: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:da:c2:62:54:b1:46:a3:99:79:d7:e3:8b: 91:de:3f:63:48:ba:7e:47:5b:38:b4:71:14:fe:02: fe:70:19:51:9d:81:29:dd:3f:b6:56:82:5a:87:1e: fa:dd:be:25:35:f2:e8:c0:45:59:11:a6:f9:7e:aa: b0:f8:ee:da:f5:94:9f:9c:46:23:82:89:db:fb:dd: d1:ea:47:05:dc:51:9c:c4:2f:e0:c9:df:e9:0a:e0: 0f:a2:b8:42:2a:0c:6e:c1:18:9e:09:8a:e2:d1:f0: a9:26:cf:a1:ab:a4:7a:9f:fa:3f:42:c7:93:ec:e2: c0:12:4a:29:e3:e7:7c:97:95:e5:d6:cb:dc:b0:dc: 51:de:2b:95:b0:86:e5:05:be:09:b4:c2:5d:23:b5: b7:a0:fa:29:fc:30:00:0d:79:02:c6:95:2a:75:4f: 35:49:08:4f:2f:38:ec:05:c1:d2:7d:1a:46:9b:a7: c6:5c:1d:71:99:c0:41:15:a1:92:80:8c:d0:8d:f0: 84:c4:df:88:75:28:75:d9:97:5e:cd:0f:76:74:9a: e2:91:16:6f:62:a1:12:d5:c2:76:63:56:79:c2:c0: d9:59:81:19:4b:13:73:0b:86:19:11:c1:c4:7c:c8: 08:bb:96:5f:3c:2a:8d:53:44:6d:dc:8c:1c:d1:54: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.172.0.0/24 23.176.16.0/24 158.51.76.0/23 198.98.15.0/24 IPv6: 2606:1040::/32 2620:11f:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12243 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d8:26:26:7a:f1:d2:c6:91:73:bd:39:2e:ca:25:2c:65:30: 51:25:4c:1b:9f:c3:ed:e8:4b:61:fe:34:6e:29:7c:26:77:2f: 4c:3d:e3:b2:3e:6d:8e:58:52:6b:13:84:db:da:e7:a3:20:27: fc:c9:1d:09:7f:ed:ca:9c:79:d8:d0:9b:3e:89:64:77:de:4a: 97:69:b5:09:9a:24:dd:94:85:e5:de:85:a6:49:92:bd:73:91: 21:19:12:3d:04:b5:c6:39:06:0f:3f:ce:71:8f:17:f1:4c:97: 5d:12:e3:01:8f:b4:a0:61:6c:4c:f5:2b:43:75:f8:b7:58:6c: 18:ce:12:09:6b:65:0c:6b:e7:a3:cd:65:86:e6:0c:fe:88:50: 90:f1:2b:d4:51:6f:19:2b:13:d6:c6:d7:37:37:2c:c4:f2:0c: 42:97:23:87:55:6e:2a:0d:95:4e:c4:6b:c2:54:f2:77:de:ca: 1c:69:ee:98:2a:5a:0e:43:6b:4d:81:a6:68:99:26:2b:63:14: 7c:11:96:44:38:aa:f3:c6:fa:be:70:29:05:73:7f:8b:95:10: a1:bb:8e:34:7a:c2:b6:d7:6c:a4:be:28:b0:3d:a9:29:30:b9: f2:3d:0b:fd:58:2c:5b:17:0d:7a:8f:52:09:4e:eb:79:57:17: 51:a4:00:5e -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEm8bRbL5HHbOeMungAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDUwNDAwNDUzNVoXDTI3MDgwNzAwNDUzNVowLzEtMCsGA1UEAxMk YWEzNjNkNTItMjA5Yi00N2FjLWFhMjQtZjhjODZkMTFmY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7awmJUsUajmXnX44uR3j9jSLp+R1s4tHEU /gL+cBlRnYEp3T+2VoJahx763b4lNfLowEVZEab5fqqw+O7a9ZSfnEYjgonb+93R 6kcF3FGcxC/gyd/pCuAPorhCKgxuwRieCYri0fCpJs+hq6R6n/o/QseT7OLAEkop 4+d8l5Xl1svcsNxR3iuVsIblBb4JtMJdI7W3oPop/DAADXkCxpUqdU81SQhPLzjs BcHSfRpGm6fGXB1xmcBBFaGSgIzQjfCExN+IdSh12ZdezQ92dJrikRZvYqES1cJ2 Y1Z5wsDZWYEZSxNzC4YZEcHEfMgIu5ZfPCqNU0Rt3Iwc0VQcLQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFPK8jOnMDAlPUCv0qt7Pzj26QFgwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h YTM2M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4NmQxMWZjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FhMzYzZDUyLTIwOWItNDdhYy1h YTI0LWY4Yzg2ZDExZmNiOS9hYTM2M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4NmQx MWZjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MB4EAgABMBgDBAAXrAADBAAXsBADBAGeM0wDBADGYg8wFQQCAAIw DwMFACYGEEADBgAmIAEf4DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIv0zBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBW2CYmevHSxpFzvTkuyiUsZTBRJUwbn8Pt6Eth/jRuKXwmdy9MPeOyPm2O WFJrE4Tb2uejICf8yR0Jf+3KnHnY0Js+iWR33kqXabUJmiTdlIXl3oWmSZK9c5Eh GRI9BLXGOQYPP85xjxfxTJddEuMBj7SgYWxM9StDdfi3WGwYzhIJa2UMa+ejzWWG 5gz+iFCQ8SvUUW8ZKxPWxtc3NyzE8gxClyOHVW4qDZVOxGvCVPJ33socae6YKloO Q2tNgaZomSYrYxR8EZZEOKrzxvq+cCkFc3+LlRChu440esK212ykviiwPakpMLny PQv9WCxbFw16j1IJTut5VxdRpABe -----END CERTIFICATE-----Generated at Mon May 12 03:41:22 2025 by rpki-client