$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer File: cfe58959-04ed-4c71-a14d-8066ccb1353a.cer (raw, json) Hash identifier: mf0QmYs9Lcd46g+m43yaPQ1i+BsjE609zZ5AZEMku5A= Subject key identifier: 13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848EB298CEFA24A113A64EE7F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: AS: 400323 IP: 23.130.88.0/24 IP: 2620:a2:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8c:ef:a2:4a:11:3a:64:ee:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=cfe58959-04ed-4c71-a14d-8066ccb1353a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:d2:61:1c:86:bc:79:74:7c:b0:fb:74:23: 96:40:52:6e:e0:35:6a:24:a8:97:e4:c8:92:57:e4: fe:2b:34:c6:5d:80:57:b0:dc:03:ee:7d:65:0e:92: 1c:76:f9:50:14:a2:e2:cc:72:84:50:08:4f:6c:03: 19:08:e4:9f:54:4d:f1:22:04:ed:ac:d0:5c:c2:0c: 09:d8:60:f1:6d:a9:5a:ca:6c:7c:53:cc:a8:82:cd: c4:b5:a0:c0:c9:a6:16:17:a7:d0:24:dc:8d:84:38: 3c:23:de:b7:0a:5e:29:56:19:27:69:94:09:00:09: b6:1f:4e:9b:26:08:15:f8:d6:1e:f3:cb:b2:7d:10: 15:b0:ba:2c:6b:85:0d:e6:8e:40:96:98:f7:15:59: 18:50:d8:58:0c:b1:14:b9:64:05:c8:9d:4b:79:7a: db:bd:f0:bc:75:30:76:f8:92:60:e2:1e:8e:08:76: 1d:43:0b:e9:9f:32:2e:8f:5c:3f:ba:15:34:e3:fc: b1:49:a4:7f:db:d0:ff:48:db:f1:76:1a:a1:ea:61: fb:24:fd:bd:88:3b:23:ca:b7:8a:d1:f9:44:ea:a0: 73:3e:7d:5c:e4:3c:ea:34:56:e1:0c:56:ed:bf:d0: 8b:cd:67:71:24:f2:91:dc:eb:28:b2:8a:75:7e:b7: a9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.130.88.0/24 IPv6: 2620:a2:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400323 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:3f:fc:97:11:cd:85:2e:74:35:15:78:44:cf:4f:74:9f: 49:75:7e:a7:99:58:2f:f0:be:d2:80:7e:b9:5c:15:91:32:ae: eb:1d:d1:dc:73:c0:03:d4:c9:6a:7d:d7:92:5b:82:79:8a:af: d9:58:bf:b8:e2:ac:51:5a:d7:b6:06:89:c9:db:7c:d3:c0:ed: 24:89:7e:a8:d7:71:04:6b:e4:2a:2c:03:75:e0:bd:0f:84:8d: 96:09:c1:4f:c4:e5:94:43:f1:0f:b9:1b:e5:a1:7f:86:1b:89: 33:44:4f:31:06:8f:6f:c3:a4:23:e3:a2:88:0b:df:17:02:69: b5:d6:ea:d6:03:b5:53:a0:03:a1:3c:a5:b3:8f:4b:29:20:44: ba:23:ec:3b:70:b0:fb:80:97:cc:1a:6a:03:68:c7:0b:01:84: e5:ef:be:0d:32:86:cd:17:a3:52:64:d9:08:3a:c6:e7:ff:0b: 59:18:d5:d2:ed:4b:b3:f2:48:b7:a4:e0:f0:2e:71:c4:f2:d8: e1:37:1d:2a:af:ba:e6:e4:10:44:f2:14:1d:8f:8b:01:22:b4: f6:3f:14:6e:21:84:48:d0:0c:a7:eb:ca:be:a6:32:1d:a1:f1: 48:32:21:06:9a:6b:2d:09:ec:af:55:79:a7:6f:35:9c:85:90: a0:f1:12:80 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEjrKYzvokoROmTuf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk Y2ZlNTg5NTktMDRlZC00YzcxLWExNGQtODA2NmNjYjEzNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZbSYRyGvHl0fLD7dCOWQFJu4DVqJKiX5MiS V+T+KzTGXYBXsNwD7n1lDpIcdvlQFKLizHKEUAhPbAMZCOSfVE3xIgTtrNBcwgwJ 2GDxbalaymx8U8yogs3EtaDAyaYWF6fQJNyNhDg8I963Cl4pVhknaZQJAAm2H06b JggV+NYe88uyfRAVsLosa4UN5o5Alpj3FVkYUNhYDLEUuWQFyJ1LeXrbvfC8dTB2 +JJg4h6OCHYdQwvpnzIuj1w/uhU04/yxSaR/29D/SNvxdhqh6mH7JP29iDsjyreK 0flE6qBzPn1c5DzqNFbhDFbtv9CLzWdxJPKR3Ososop1frepPQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBMPet3cL2mdMnhkl715ultFzcXqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j ZmU1ODk1OS0wNGVkLTRjNzEtYTE0ZC04MDY2Y2NiMTM1M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NmZTU4OTU5LTA0ZWQtNGM3MS1h MTRkLTgwNjZjY2IxMzUzYS9jZmU1ODk1OS0wNGVkLTRjNzEtYTE0ZC04MDY2Y2Ni MTM1M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXglgwDwQCAAIwCQMHACYgAKKgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGG8MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKmo//JcRzYUudDUVeETPT3Sf SXV+p5lYL/C+0oB+uVwVkTKu6x3R3HPAA9TJan3XkluCeYqv2Vi/uOKsUVrXtgaJ ydt808DtJIl+qNdxBGvkKiwDdeC9D4SNlgnBT8TllEPxD7kb5aF/hhuJM0RPMQaP b8OkI+OiiAvfFwJptdbq1gO1U6ADoTyls49LKSBEuiPsO3Cw+4CXzBpqA2jHCwGE 5e++DTKGzRejUmTZCDrG5/8LWRjV0u1Ls/JIt6Tg8C5xxPLY4TcdKq+65uQQRPIU HY+LASK09j8UbiGESNAMp+vKvqYyHaHxSDIhBpprLQnsr1V5p281nIWQoPESgA== -----END CERTIFICATE-----Generated at Fri May 9 02:07:54 2025 by rpki-client