$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7.cer File: 0d9ad6c8-364a-4d16-a834-ed897977f4b7.cer (raw, json) Hash identifier: JMe+550Q+BW3h0bcM6kc8w/y7g9brt2EKZ9cPAiRvp0= Subject key identifier: C5:C8:B1:1B:D8:BE:CE:D7:D2:53:7B:24:F6:EB:B5:14:6A:9D:76:B3 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858482BF2A9F9C7A8E12A4EA23800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/0d9ad6c8-364a-4d16-a834-ed897977f4b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Dec 2024 13:55:35 +0000 Certificate not after: Tue 16 Mar 2027 12:55:35 +0000 Subordinate resources: AS: 8122 IP: 165.190.0.0/16 IP: 192.88.240.0/24 IP: 192.135.79.0/24 IP: 192.135.213.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:f2:a9:f9:c7:a8:e1:2a:4e:a2:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 11 13:55:35 2024 GMT Not After : Mar 16 12:55:35 2027 GMT Subject: CN=0d9ad6c8-364a-4d16-a834-ed897977f4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ac:65:c7:51:f3:7e:31:b6:bf:c0:89:62:aa: 95:fe:b8:28:0f:24:56:87:88:19:73:ed:2e:9a:56: 23:ba:57:78:5e:4c:18:7e:0c:15:9d:15:3d:8b:90: 32:1f:3f:ea:91:75:a5:a6:f4:d0:4d:16:65:80:6f: 68:e6:53:b1:cb:b5:17:7b:0b:81:c8:1e:9c:85:a1: 24:14:8b:78:90:57:38:d1:7e:a1:48:b1:ea:0f:5b: 49:13:16:3e:1a:2d:ee:fa:77:c6:40:21:c2:8e:f2: cc:06:90:36:b0:82:db:21:71:8f:a6:18:7f:ec:e0: de:58:38:64:88:80:0a:d8:dc:5e:c4:0b:ac:90:8b: fb:90:29:19:24:bc:ea:8d:10:30:34:69:4a:23:c9: dd:3a:30:f0:46:40:bd:48:29:ef:34:9b:ae:c9:bd: 43:94:e1:22:ea:0a:66:e7:6b:d1:d2:55:fc:93:92: 9f:66:68:ea:20:4b:e4:aa:78:4d:bb:95:89:bd:a0: a2:56:e5:c4:14:84:78:e6:c4:78:89:e5:b9:36:d7: 65:c7:e8:fb:87:b7:5c:15:19:6a:64:13:6f:04:2a: 5a:ef:f2:ab:c8:0a:bb:85:30:3f:8f:26:58:d3:b0: 95:b3:98:7e:5e:d5:9f:32:fd:b8:d5:b7:56:0e:81: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:B1:1B:D8:BE:CE:D7:D2:53:7B:24:F6:EB:B5:14:6A:9D:76:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/0d9ad6c8-364a-4d16-a834-ed897977f4b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 165.190.0.0/16 192.88.240.0/24 192.135.79.0/24 192.135.213.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8122 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a7:3d:28:e7:b6:82:1c:d0:98:76:82:33:94:4e:08:5d:c7: 50:95:4d:c9:93:09:99:00:cf:f3:64:0e:56:b5:2a:e3:52:55: 73:1b:32:60:38:e8:7f:b3:36:2b:bf:f2:c7:17:80:18:59:dd: 5a:2b:00:ed:be:9d:de:04:65:c4:b6:5f:9c:37:c3:51:3a:a6: d1:47:d3:79:ca:b3:fe:c7:96:67:2a:fa:2f:1d:e8:e0:32:89: e2:9e:3a:20:2f:32:d8:c3:de:36:1c:6f:ec:e9:f2:7a:3e:12: 66:e4:aa:8d:50:5d:aa:71:1d:28:c3:b0:f1:6b:75:01:53:d0: e9:5e:ad:45:6b:3f:47:ef:e1:ac:6b:60:f2:5c:a5:6d:f2:b8: 8f:6e:d9:fb:8b:88:90:5e:b0:d3:76:e3:88:35:da:dd:5e:69: 4e:22:ba:09:9c:00:26:7c:d1:65:53:ed:de:45:ab:76:40:69: db:e1:94:ff:4a:d4:13:dc:82:67:19:3d:ee:f1:98:24:20:a7: 16:ee:31:a5:26:55:24:bb:85:f5:b8:50:59:90:51:d5:ee:7c: e5:40:fa:c1:2d:42:eb:bc:ce:c4:57:28:dc:60:3b:5a:a4:47: 1e:49:52:7f:51:79:2a:5b:81:b0:2b:34:b0:07:57:7a:19:bc: c9:4d:76:fb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEgr8qn5x6jhKk6iOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMTEzNTUzNVoXDTI3MDMxNjEyNTUzNVowLzEtMCsGA1UEAxMk MGQ5YWQ2YzgtMzY0YS00ZDE2LWE4MzQtZWQ4OTc5NzdmNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqxlx1HzfjG2v8CJYqqV/rgoDyRWh4gZc+0u mlYjuld4XkwYfgwVnRU9i5AyHz/qkXWlpvTQTRZlgG9o5lOxy7UXewuByB6chaEk FIt4kFc40X6hSLHqD1tJExY+Gi3u+nfGQCHCjvLMBpA2sILbIXGPphh/7ODeWDhk iIAK2NxexAuskIv7kCkZJLzqjRAwNGlKI8ndOjDwRkC9SCnvNJuuyb1DlOEi6gpm 52vR0lX8k5KfZmjqIEvkqnhNu5WJvaCiVuXEFIR45sR4ieW5Ntdlx+j7h7dcFRlq ZBNvBCpa7/KryAq7hTA/jyZY07CVs5h+XtWfMv241bdWDoES8wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMXIsRvYvs7X0lN7JPbrtRRqnXazMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w ZDlhZDZjOC0zNjRhLTRkMTYtYTgzNC1lZDg5Nzk3N2Y0YjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzBkOWFkNmM4LTM2NGEtNGQxNi1h ODM0LWVkODk3OTc3ZjRiNy8wZDlhZDZjOC0zNjRhLTRkMTYtYTgzNC1lZDg5Nzk3 N2Y0YjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwClvgMEAMBY8AMEAMCHTwMEAMCH1TAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIfujBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBapz0o57aCHNCYdoIzlE4IXcdQ lU3JkwmZAM/zZA5WtSrjUlVzGzJgOOh/szYrv/LHF4AYWd1aKwDtvp3eBGXEtl+c N8NROqbRR9N5yrP+x5ZnKvovHejgMoninjogLzLYw942HG/s6fJ6PhJm5KqNUF2q cR0ow7Dxa3UBU9DpXq1Faz9H7+Gsa2DyXKVt8riPbtn7i4iQXrDTduOINdrdXmlO IroJnAAmfNFlU+3eRat2QGnb4ZT/StQT3IJnGT3u8ZgkIKcW7jGlJlUku4X1uFBZ kFHV7nzlQPrBLULrvM7EVyjcYDtapEceSVJ/UXkqW4GwKzSwB1d6GbzJTXb7 -----END CERTIFICATE-----Generated at Wed May 7 13:21:39 2025 by rpki-client