$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer File: fcd81970-919f-4ccd-9c85-01ebf75cf163.cer (raw, json) Hash identifier: ldOWaIgrOL1JBYMabBMmmV3Iqpb+4D/T0X7rYbhnU1k= Subject key identifier: 15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849AE77AA1389F9A4A3902FAC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 00:45:35 +0000 Certificate not after: Mon 02 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 986 IP: 23.142.192.0/24 IP: 23.247.228.0/22 IP: 161.129.140.0/22 IP: 2602:feca::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:77:aa:13:89:f9:a4:a3:90:2f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 29 00:45:35 2025 GMT Not After : Aug 2 00:45:35 2027 GMT Subject: CN=fcd81970-919f-4ccd-9c85-01ebf75cf163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:2c:11:b3:ee:08:53:72:eb:6b:c3:17:ce: ee:fe:7d:31:7f:09:8b:b4:8b:d7:10:f7:7d:44:08: 11:30:08:56:37:67:c5:1c:0c:72:32:aa:aa:79:42: bf:a0:70:04:77:04:d7:9a:f5:86:73:37:df:51:12: 43:10:4c:36:57:13:6f:0f:30:9b:91:43:db:3a:42: 23:5e:c2:84:23:45:51:df:32:29:e6:44:8d:08:ea: 7f:ed:4a:40:68:a4:e0:d6:b4:23:47:c5:b0:a0:ba: 5b:29:fb:20:f2:9a:99:a6:e5:f9:3e:b2:c2:55:fe: 92:b6:c1:19:4f:8b:f1:6d:81:a2:b3:50:6a:64:04: 53:90:eb:64:82:4b:23:7a:1e:e0:42:2b:3c:5c:ec: 8d:18:ae:c6:2e:87:b9:19:64:65:55:fc:ce:e8:b1: af:c6:9f:8c:2d:96:84:ef:c5:5e:c9:61:05:6e:64: c4:fd:00:b0:7b:8f:b0:d1:cd:63:5f:54:e2:1a:20: 7d:1c:2e:4a:75:21:e3:82:63:1a:9a:b7:25:82:92: 02:30:31:b5:55:64:4a:67:83:65:7f:5c:03:51:a2: 60:7b:f2:d6:f4:fc:d6:50:91:b8:aa:30:f9:ca:47: a5:34:72:71:5e:23:bc:6f:bf:7e:09:7f:38:71:94: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.142.192.0/24 23.247.228.0/22 161.129.140.0/22 IPv6: 2602:feca::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 986 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:85:fb:1f:d0:1f:63:4d:6d:3b:6f:b0:bc:b8:5e:9b:cf:51: 2c:56:97:10:25:d2:60:2c:17:f5:61:4b:32:1b:63:86:bd:29: 92:3d:94:fb:65:60:72:c1:85:42:a2:e9:07:a1:5b:8a:92:64: 38:fc:9e:35:c1:93:f0:18:d9:20:36:bf:d9:d1:21:45:ff:6d: 62:66:c9:80:82:11:27:b2:f7:f7:35:48:ab:05:73:6b:18:70: e7:d2:7d:07:1b:5a:00:1c:d0:57:3f:f2:84:cb:5e:64:72:3e: 5b:45:06:b2:0f:31:bd:ec:61:97:9e:df:3a:88:c8:62:92:da: 41:e7:cb:1e:76:27:c3:8a:91:7f:55:f2:4e:af:86:6a:dd:68: ea:31:6d:fe:8e:c4:8b:19:19:57:9e:65:62:ba:4e:ef:16:d6: 80:11:af:57:8e:f2:68:17:ee:c9:16:09:9f:a5:71:fb:fc:81: 57:96:91:5b:29:06:17:4a:a2:d9:99:15:31:73:76:10:06:67: 47:70:49:5e:cd:29:eb:d2:9c:15:42:da:ad:94:dc:4c:43:55: 4f:20:5e:16:4a:dd:80:52:14:f2:fd:e7:12:13:a6:89:e3:62: 58:6a:14:70:e0:7b:7c:d5:e4:d0:bc:76:bc:02:f5:69:4b:7a: c9:04:c9:51 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEmud6oTifmko5AvrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQyOTAwNDUzNVoXDTI3MDgwMjAwNDUzNVowLzEtMCsGA1UEAxMk ZmNkODE5NzAtOTE5Zi00Y2NkLTljODUtMDFlYmY3NWNmMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5ksEbPuCFNy62vDF87u/n0xfwmLtIvXEPd9 RAgRMAhWN2fFHAxyMqqqeUK/oHAEdwTXmvWGczffURJDEEw2VxNvDzCbkUPbOkIj XsKEI0VR3zIp5kSNCOp/7UpAaKTg1rQjR8WwoLpbKfsg8pqZpuX5PrLCVf6StsEZ T4vxbYGis1BqZARTkOtkgksjeh7gQis8XOyNGK7GLoe5GWRlVfzO6LGvxp+MLZaE 78VeyWEFbmTE/QCwe4+w0c1jX1TiGiB9HC5KdSHjgmMamrclgpICMDG1VWRKZ4Nl f1wDUaJge/LW9PzWUJG4qjD5ykelNHJxXiO8b79+CX84cZR9TQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFBVFk4za87o4N6iOIiu+DOkt4F6EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9m Y2Q4MTk3MC05MTlmLTRjY2QtOWM4NS0wMWViZjc1Y2YxNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2ZjZDgxOTcwLTkxOWYtNGNjZC05 Yzg1LTAxZWJmNzVjZjE2My9mY2Q4MTk3MC05MTlmLTRjY2QtOWM4NS0wMWViZjc1 Y2YxNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXjsADBAIX9+QDBAKhgYwwDgQCAAIwCAMGBCYC /soAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgPaMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEyF+x/QH2NN bTtvsLy4XpvPUSxWlxAl0mAsF/VhSzIbY4a9KZI9lPtlYHLBhUKi6QehW4qSZDj8 njXBk/AY2SA2v9nRIUX/bWJmyYCCESey9/c1SKsFc2sYcOfSfQcbWgAc0Fc/8oTL XmRyPltFBrIPMb3sYZee3zqIyGKS2kHnyx52J8OKkX9V8k6vhmrdaOoxbf6OxIsZ GVeeZWK6Tu8W1oARr1eO8mgX7skWCZ+lcfv8gVeWkVspBhdKotmZFTFzdhAGZ0dw SV7NKevSnBVC2q2U3ExDVU8gXhZK3YBSFPL95xITponjYlhqFHDge3zV5NC8drwC 9WlLeskEyVE= -----END CERTIFICATE-----Generated at Mon May 12 03:56:56 2025 by rpki-client