$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer File: b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer (raw, json) Hash identifier: rQ57vjFwUA4TXTT/nhMYTsFkPR0oXhBJlLeb0UIsJxA= Subject key identifier: 2B:8B:68:E9:63:83:9C:CE:62:11:46:CC:6B:97:61:91:F7:0D:EB:B2 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849B6D7B7E003ACD348C0122280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 00:45:35 +0000 Certificate not after: Thu 05 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 31830 IP: 192.40.157.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:d7:b7:e0:03:ac:d3:48:c0:12:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 2 00:45:35 2025 GMT Not After : Aug 5 00:45:35 2027 GMT Subject: CN=b02b5a1e-c575-48d8-ad0e-3a3e1d032110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:ea:8d:f0:03:45:65:09:c6:56:73:95:9c: d6:82:2e:0d:8f:1d:b6:b5:50:39:64:eb:39:3f:c3: cc:c3:7c:c0:54:d0:e6:91:e1:c7:fc:e6:b0:43:ec: 55:e3:36:5d:52:f3:66:6d:05:2d:72:42:25:8a:81: 02:ed:94:78:ee:d9:7a:a5:66:de:84:ad:cc:46:a2: ff:f5:18:a4:35:c5:01:c0:2d:10:5b:0f:cc:f4:90: e9:41:82:64:92:22:ea:e8:79:93:65:df:86:6a:8a: eb:19:e9:b0:52:ff:23:46:dd:0b:97:81:c7:a9:54: da:ca:96:26:3c:5d:aa:60:84:ae:f3:8b:24:19:93: 45:a3:1f:a9:4d:54:8f:08:ab:31:9c:f2:f7:85:2c: fd:91:10:98:69:37:db:2f:cc:d6:2a:c3:6d:4d:b4: 26:d0:c9:62:ab:ae:85:a5:34:ec:ba:a2:42:47:38: 1a:c1:71:7d:54:13:8a:e8:52:1a:e5:74:b7:26:8e: 51:c7:7e:f3:ce:b8:05:19:38:49:16:84:85:60:81: cd:ed:97:bb:91:26:85:d6:b3:98:51:6d:82:f3:8d: 50:5e:f0:70:ec:21:79:4e:ad:51:10:a2:cb:4d:06: d6:f1:e0:4f:31:71:8d:9f:32:26:90:94:d4:91:ba: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:68:E9:63:83:9C:CE:62:11:46:CC:6B:97:61:91:F7:0D:EB:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.40.157.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31830 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:61:76:60:0b:64:f0:6b:ee:23:d9:1d:44:67:f3:35:54:d2: 05:ae:30:6b:5a:72:b4:6e:49:25:53:2e:71:9f:30:07:39:67: 1e:c3:84:82:9e:9c:e0:1a:a4:7e:94:13:73:41:ca:d7:de:61: 6d:30:1f:d1:cb:3a:5e:bb:6e:16:b4:d9:fd:62:2d:e3:83:32: e6:32:c1:1f:ce:9d:68:bf:36:d7:e9:f1:da:1e:62:f7:a7:85: cd:f3:6c:4c:d0:1d:f6:66:5a:50:75:a6:3c:7a:fd:35:ec:c9: 8d:f6:b7:f0:9e:49:0f:53:a2:5b:ee:ba:39:0a:10:ab:91:60: 2f:e0:35:88:c2:0d:74:f1:b2:a5:fa:4f:98:23:7e:3f:99:ce: b7:bd:ad:4e:ce:d3:d8:1e:ac:6a:ed:1d:73:92:9a:c2:bd:eb: f0:0b:a4:62:89:75:41:3d:61:66:81:fa:8b:63:6a:f5:20:cb: c1:4d:ed:49:8c:67:61:0f:e7:7f:47:b0:d2:94:ef:ee:0a:df: 27:d0:b1:6d:48:7c:e6:e9:eb:af:cd:47:fa:ca:8e:5c:bd:30: 70:e7:f5:6e:55:29:bf:1a:64:4d:e4:df:5e:55:d9:57:a7:bd: 5b:5f:62:7e:b8:b0:69:2d:00:e6:8d:1d:8a:f1:b2:da:11:67: d6:8d:d5:a9 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEm217fgA6zTSMASIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDUwMjAwNDUzNVoXDTI3MDgwNTAwNDUzNVowLzEtMCsGA1UEAxMk YjAyYjVhMWUtYzU3NS00OGQ4LWFkMGUtM2EzZTFkMDMyMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9nqjfADRWUJxlZzlZzWgi4Njx22tVA5ZOs5 P8PMw3zAVNDmkeHH/OawQ+xV4zZdUvNmbQUtckIlioEC7ZR47tl6pWbehK3MRqL/ 9RikNcUBwC0QWw/M9JDpQYJkkiLq6HmTZd+GaorrGemwUv8jRt0Ll4HHqVTaypYm PF2qYISu84skGZNFox+pTVSPCKsxnPL3hSz9kRCYaTfbL8zWKsNtTbQm0Mliq66F pTTsuqJCRzgawXF9VBOK6FIa5XS3Jo5Rx37zzrgFGThJFoSFYIHN7Ze7kSaF1rOY UW2C841QXvBw7CF5Tq1REKLLTQbW8eBPMXGNnzImkJTUkbohzQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCuLaOljg5zOYhFGzGuXYZH3DeuyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i MDJiNWExZS1jNTc1LTQ4ZDgtYWQwZS0zYTNlMWQwMzIxMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2IwMmI1YTFlLWM1NzUtNDhkOC1h ZDBlLTNhM2UxZDAzMjExMC9iMDJiNWExZS1jNTc1LTQ4ZDgtYWQwZS0zYTNlMWQw MzIxMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAKJ0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fFYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWmF2YAtk8GvuI9kdRGfzNVTSBa4wa1pytG5JJVMucZ8wBzln HsOEgp6c4BqkfpQTc0HK195hbTAf0cs6XrtuFrTZ/WIt44My5jLBH86daL821+nx 2h5i96eFzfNsTNAd9mZaUHWmPHr9NezJjfa38J5JD1OiW+66OQoQq5FgL+A1iMIN dPGypfpPmCN+P5nOt72tTs7T2B6sau0dc5Kawr3r8AukYol1QT1hZoH6i2Nq9SDL wU3tSYxnYQ/nf0ew0pTv7grfJ9CxbUh85unrr81H+sqOXL0wcOf1blUpvxpkTeTf XlXZV6e9W19ifriwaS0A5o0divGy2hFn1o3VqQ== -----END CERTIFICATE-----Generated at Mon May 12 02:21:51 2025 by rpki-client