$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer File: 5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer (raw, json) Hash identifier: W8hpfrMvT1VQ/QIuE5ijwrlvt8uj9iEwbtwKrbQqN6E= Subject key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority key identifier: 3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D Certificate issuer: /CN=42b2991f-22c7-42f7-8cf5-4f3138859732 Certificate serial: 010D0C9F432858474F74EFA491177C8AA01383C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/a841823c-a10d-477c-bfdf-4086f0b1594c/notification.xml Certificate not before: Mon 23 Sep 2024 14:24:24 +0000 Certificate not after: Sun 27 Dec 2026 15:24:24 +0000 Subordinate resources: IP: 184.169.128.0/17 IP: 2620:107:3000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:74:ef:a4:91:17:7c:8a:a0:13:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b2991f-22c7-42f7-8cf5-4f3138859732 Validity Not Before: Sep 23 14:24:24 2024 GMT Not After : Dec 27 15:24:24 2026 GMT Subject: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:a6:4f:4f:f7:11:6b:21:b1:97:9a:4e:d1: 5a:9e:22:09:ac:a1:61:d5:fa:0f:0e:20:3e:e2:49: ee:6a:30:19:ec:ec:c1:6b:dd:5b:10:9c:3a:dd:da: 9e:f9:4c:de:b3:fb:eb:34:5f:95:0f:16:b6:ca:42: 73:31:01:9c:5b:67:31:e9:79:3e:8b:20:78:94:e0: af:6b:f7:34:84:18:7b:e2:59:a9:85:99:1e:96:ed: 52:02:f3:a3:54:50:24:ac:a4:f2:7a:44:ee:e6:74: 7c:f1:0d:9c:bb:35:cb:60:bb:ef:36:7e:f0:7f:8e: 72:e3:4c:ed:f5:65:09:cf:9e:6e:9e:92:e2:09:d2: 84:d7:10:5a:1a:08:5e:9d:b6:62:bc:1c:c3:81:9a: eb:72:66:8c:8b:c6:52:99:9a:95:f6:6e:e3:ba:52: bc:08:bd:fa:71:90:27:ea:c2:39:a7:96:b8:ac:96: 7d:6e:28:77:cf:3d:a2:bb:cc:7c:3c:2a:a6:f5:0f: 2e:8c:ab:de:75:54:e9:94:de:c8:08:b0:54:25:03: ed:02:eb:55:9b:dc:98:5f:26:9e:fc:d3:8b:2f:a5: 81:13:6b:b1:ef:4c:e0:2d:6a:cf:d6:16:a9:48:3e: 7d:33:61:62:db:94:68:ba:aa:f3:3e:06:75:83:cf: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/a841823c-a10d-477c-bfdf-4086f0b1594c/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl X509v3 Authority Key Identifier: keyid:3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 IPv6: 2620:107:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5c:14:26:b3:4c:48:61:19:da:c0:45:0f:d0:17:96:c6:d4: 8e:99:bf:62:a7:06:44:7a:3b:dc:a3:28:fc:5a:b9:aa:3e:9e: 89:aa:1a:8a:81:e5:a6:54:b7:03:0e:9a:33:3e:6a:af:d2:a1: 03:01:72:29:e9:a5:97:cd:56:b7:d0:18:c0:b2:be:58:67:40: 17:8b:32:99:a9:13:bc:8c:36:22:57:ab:48:e8:a2:16:24:a6: 0f:d3:bb:1b:08:5e:a9:7f:17:17:99:28:19:c0:91:07:ca:bc: 56:2e:f7:91:22:0b:0d:81:31:75:95:ad:83:2c:2b:8e:83:3a: e6:c5:a7:88:25:35:e2:b6:8a:4d:79:a7:eb:90:94:f2:44:a0: f8:08:98:27:f6:f7:bb:3a:3e:f3:9f:76:09:0b:42:83:d9:c8: 82:cb:93:28:4c:c1:6a:81:f3:9e:ca:9c:64:d1:7b:69:09:04: 99:91:23:34:0f:30:04:8d:9c:66:cb:da:c4:06:2e:89:52:26: 84:1a:bd:f7:3c:2d:63:ce:2f:b6:24:cf:72:e3:60:1d:9f:43: 19:da:f5:c0:84:4e:18:01:e2:69:1d:25:0f:05:48:3f:e4:78: 40:a8:b7:de:60:5e:0e:0e:de:76:7b:a0:3d:d6:7e:06:9f:ce: d4:d2:cb:61 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEdPdO+kkRd8iqATg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiMjk5MWYtMjJjNy00MmY3LThjZjUtNGYzMTM4ODU5 NzMyMB4XDTI0MDkyMzE0MjQyNFoXDTI2MTIyNzE1MjQyNFowPTE7MDkGA1UEAxMy NWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjli NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQKZPT/cRayGxl5pO 0VqeIgmsoWHV+g8OID7iSe5qMBns7MFr3VsQnDrd2p75TN6z++s0X5UPFrbKQnMx AZxbZzHpeT6LIHiU4K9r9zSEGHviWamFmR6W7VIC86NUUCSspPJ6RO7mdHzxDZy7 Nctgu+82fvB/jnLjTO31ZQnPnm6ekuIJ0oTXEFoaCF6dtmK8HMOBmutyZoyLxlKZ mpX2buO6UrwIvfpxkCfqwjmnlrisln1uKHfPPaK7zHw8Kqb1Dy6Mq951VOmU3sgI sFQlA+0C61Wb3JhfJp7804svpYETa7HvTOAtas/WFqlIPn0zYWLblGi6qvM+BnWD z7RZAgMBAAGjggQBMIID/TAdBgNVHQ4EFgQU/iLg9yLMTwYMWFoSb+aiZQA2Xkgw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWEx MGQtNDc3Yy1iZmRmLTQwODZmMGIxNTk0Yy8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4 MjNjLWExMGQtNDc3Yy1iZmRmLTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFn cXJxX20wM19tMlEubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2E4NDE4MjNjLWExMGQtNDc3Yy1i ZmRmLTQwODZmMGIxNTk0Yy9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyLzQyYjI5OTFmLTIyYzctNDJmNy04Y2Y1LTRmMzEzODg1OTczMi80MmIyOTkx Zi0yMmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIuY3JsMB8GA1UdIwQYMBaAFD/W fg8C02/hiTQnpwnrcORO0zudMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJi Mjk5MWYtMjJjNy00MmY3LThjZjUtNGYzMTM4ODU5NzMyLmNlcjAwBggrBgEFBQcB BwEB/wQhMB8wDAQCAAEwBgMEB7ipgDAPBAIAAjAJAwcEJiABBzAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AG1cFCazTEhhGdrARQ/QF5bG1I6Zv2KnBkR6O9yjKPxauao+nomqGoqB5aZUtwMO mjM+aq/SoQMBcinppZfNVrfQGMCyvlhnQBeLMpmpE7yMNiJXq0joohYkpg/TuxsI Xql/FxeZKBnAkQfKvFYu95EiCw2BMXWVrYMsK46DOubFp4glNeK2ik15p+uQlPJE oPgImCf297s6PvOfdgkLQoPZyILLkyhMwWqB857KnGTRe2kJBJmRIzQPMASNnGbL 2sQGLolSJoQavfc8LWPOL7Ykz3LjYB2fQxna9cCEThgB4mkdJQ8FSD/keECot95g Xg4O3nZ7oD3WfgafztTSy2E= -----END CERTIFICATE-----Generated at Sat Apr 5 22:33:24 2025 by rpki-client