$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer File: 91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer (raw, json) Hash identifier: uILLjTUi330bjn7KawM+Q3pMyW8BtE9wqxfodwiuY+4= Subject key identifier: E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849B14259737D3740252D5CBE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 00:45:35 +0000 Certificate not after: Tue 03 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 396160 IP: 148.59.186.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:42:59:73:7d:37:40:25:2d:5c:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 30 00:45:35 2025 GMT Not After : Aug 3 00:45:35 2027 GMT Subject: CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:af:6f:0f:4f:3f:d3:fe:61:2f:25:07:5c: d3:63:b1:d1:0f:5b:17:b1:f0:12:f7:64:b8:9a:14: 58:0a:b2:fc:9b:d2:4b:ff:83:a5:82:80:b4:ce:85: fc:59:01:7d:35:0d:38:81:5e:f6:55:0a:d7:d0:ab: 8e:9f:0d:0c:35:18:d8:56:c1:6e:bc:63:4e:10:11: 66:90:2c:1d:cf:b5:1b:d9:b0:41:06:25:ee:a9:6f: a3:90:02:37:b4:dd:09:21:92:4e:92:6e:34:74:75: bc:41:04:3a:03:c0:89:8f:a7:7c:94:b4:d1:70:40: 2a:aa:bd:30:e1:5b:d2:5b:6b:7b:f9:55:9b:1c:39: e1:23:04:37:78:d9:b3:5b:ea:15:b7:ef:35:0f:a1: fe:94:ec:3c:17:a4:ac:ce:01:8d:37:86:a0:c0:cd: 7f:21:96:44:ff:6a:31:08:fe:17:56:5a:ad:f3:bc: 38:9e:3f:9e:84:4b:d2:ec:bd:2f:f2:ae:99:83:7f: e2:78:eb:15:aa:42:a2:92:52:87:72:bf:80:cd:b5: 59:e1:a1:95:c1:56:ab:c0:e1:c9:9e:57:bf:29:8c: 06:b3:e8:be:4f:eb:d6:78:fd:b2:ad:0e:35:66:63: e9:cf:f3:d3:3b:4a:50:03:d6:bb:ce:12:27:5d:7d: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 148.59.186.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396160 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:df:03:8e:9c:d9:5e:d7:67:a9:9a:56:dc:46:a0:27:1d:35: d8:eb:17:92:c1:c8:27:c7:c0:45:25:b2:58:25:8b:2b:1c:ac: d5:d8:51:46:4c:97:0e:60:79:f5:3b:30:69:50:9c:e2:78:a0: ed:b9:31:fd:22:59:b3:b5:38:c7:1f:8f:63:0b:3f:cd:79:19: 86:89:78:ce:49:a7:aa:77:8f:e3:83:6b:42:ee:1f:7f:3f:13: b2:ee:69:11:04:fb:86:b3:30:69:95:f3:86:67:a5:64:e2:39: ff:2b:b8:db:92:f6:80:36:b5:ab:56:3f:98:6d:15:5d:be:08: 95:e1:b9:85:5f:a3:b0:94:2e:bd:78:6d:4e:0a:a9:48:6a:d0: 32:3a:f2:dd:f0:99:52:f6:75:98:5d:bf:18:ba:0f:df:98:d4: 10:f7:d6:70:02:36:f1:a3:60:c5:87:18:28:98:ae:8d:4c:80: 23:7a:d8:cb:c7:1d:4e:cd:e2:5d:e2:33:12:fd:b6:28:88:59: 72:fc:0c:85:58:87:b5:ff:78:a5:3d:10:d2:8a:2d:e9:d2:25: f8:c1:11:e0:53:c0:92:34:f0:09:22:de:9c:a3:ad:44:db:31: 9d:c6:30:e3:ef:62:98:70:e7:1e:f6:dc:56:ba:37:5b:fe:89: 5e:d0:9d:2a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmxQllzfTdAJS1cvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQzMDAwNDUzNVoXDTI3MDgwMzAwNDUzNVowLzEtMCsGA1UEAxMk OTFhY2U2ZTAtYmNhMi00ZGFhLTgxYzMtMmU5MzY4MTRjYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpOvbw9PP9P+YS8lB1zTY7HRD1sXsfAS92S4 mhRYCrL8m9JL/4OlgoC0zoX8WQF9NQ04gV72VQrX0KuOnw0MNRjYVsFuvGNOEBFm kCwdz7Ub2bBBBiXuqW+jkAI3tN0JIZJOkm40dHW8QQQ6A8CJj6d8lLTRcEAqqr0w 4VvSW2t7+VWbHDnhIwQ3eNmzW+oVt+81D6H+lOw8F6SszgGNN4agwM1/IZZE/2ox CP4XVlqt87w4nj+ehEvS7L0v8q6Zg3/ieOsVqkKiklKHcr+AzbVZ4aGVwVarwOHJ nle/KYwGs+i+T+vWeP2yrQ41ZmPpz/PTO0pQA9a7zhInXX0FFQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOL1fC0CllLV00ZzOxOsQ2DnX+nFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 MWFjZTZlMC1iY2EyLTRkYWEtODFjMy0yZTkzNjgxNGNjNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzkxYWNlNmUwLWJjYTItNGRhYS04 MWMzLTJlOTM2ODE0Y2M1ZC85MWFjZTZlMC1iY2EyLTRkYWEtODFjMy0yZTkzNjgx NGNjNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGUO7owGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BguAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACPfA46c2V7XZ6maVtxGoCcdNdjrF5LByCfHwEUlslgliysc rNXYUUZMlw5gefU7MGlQnOJ4oO25Mf0iWbO1OMcfj2MLP815GYaJeM5Jp6p3j+OD a0LuH38/E7LuaREE+4azMGmV84ZnpWTiOf8ruNuS9oA2tatWP5htFV2+CJXhuYVf o7CULr14bU4KqUhq0DI68t3wmVL2dZhdvxi6D9+Y1BD31nACNvGjYMWHGCiYro1M gCN62MvHHU7N4l3iMxL9tiiIWXL8DIVYh7X/eKU9ENKKLenSJfjBEeBTwJI08Aki 3pyjrUTbMZ3GMOPvYphw5x723Fa6N1v+iV7QnSo= -----END CERTIFICATE-----Generated at Sat May 10 05:18:24 2025 by rpki-client