$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer File: 1f590187-fc1d-4681-a0a4-aa1d23202e80.cer (raw, json) Hash identifier: llOCb0dtqDGo23nNTRz8mKfCu7wPb1I88xRJp/SVi/s= Subject key identifier: 59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584949F7052AB64265BD83AEC500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 00:45:33 +0000 Certificate not after: Sun 27 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 19945 IP: 216.46.192.0/19 IP: 2620:101:3000::/42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:f7:05:2a:b6:42:65:bd:83:ae:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 24 00:45:33 2025 GMT Not After : Jun 27 00:45:33 2027 GMT Subject: CN=1f590187-fc1d-4681-a0a4-aa1d23202e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:5d:ee:e4:d8:92:d6:98:16:b5:6b:72:df: b7:88:40:e4:da:9e:09:87:3c:5c:f4:e5:48:d3:5e: e0:e9:1b:70:82:45:b1:37:79:09:7c:42:e0:5e:2a: 26:32:6c:1f:c3:4d:ce:1f:1a:38:27:c9:df:f6:4f: d1:8d:c6:3d:67:bf:43:85:6f:56:41:6e:71:4c:d3: 16:04:d4:3e:76:85:86:68:04:fa:61:66:ec:8a:fc: 99:7a:d0:8b:e6:f9:2b:d3:25:5b:12:3b:36:3c:03: 8e:3a:ae:65:b5:21:d7:8b:91:7c:a1:f4:27:c3:3c: b7:7f:2a:2e:3f:23:10:ba:de:43:fb:c7:73:e5:cb: dd:e5:48:26:5b:e0:c8:5a:9c:a6:77:7a:f4:d4:1c: 0a:80:33:b2:f1:f7:38:c8:9c:f7:f1:74:99:f5:74: 85:0f:28:17:a2:2b:ef:60:44:f4:9d:83:f9:1a:3a: 03:3e:0e:08:ff:27:15:27:da:36:a8:d3:ba:38:81: a2:44:da:17:56:82:1b:5b:8d:fd:2e:19:65:e7:34: 13:53:ce:e1:be:e7:c2:fd:bc:3a:5a:c0:99:44:78: 22:76:ba:af:d7:fe:ed:84:aa:e0:d4:e3:46:b0:45: 4b:d8:0a:d0:71:c0:14:49:bc:ab:28:15:ea:1c:90: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 216.46.192.0/19 IPv6: 2620:101:3000::/42 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19945 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:58:fb:37:09:1e:8c:4f:07:03:bd:45:a5:26:5f:94:f2:ef: 38:06:27:0b:03:56:5c:c5:cb:f9:9d:9a:f8:82:bf:06:d9:1a: e6:4a:f1:26:9b:eb:a1:c5:b4:da:3d:97:be:3e:ee:71:19:ad: 09:67:04:d3:3d:35:ff:2b:14:30:c3:ab:4c:7c:54:be:35:f8: 9f:34:b6:c3:1d:08:f5:fc:ec:5a:b6:94:ae:92:6c:b7:f0:72: c4:6e:ff:b0:9f:04:11:44:4a:05:5b:0f:6f:48:d0:c6:bf:d3: cf:7e:84:4b:c3:c0:68:93:58:a1:62:9b:f3:21:e7:08:a8:10: 27:f4:e7:7d:af:22:b3:4c:d5:94:19:2f:63:fd:cf:81:d1:98: a6:5f:6c:d4:ef:29:6d:14:14:93:21:86:7f:a4:2e:b6:52:f5: 87:e4:af:7f:2c:08:2f:d7:70:80:51:2c:33:00:b1:e3:73:1e: 8e:5b:95:3d:06:6d:9a:74:3a:1b:e5:24:75:0b:f2:db:00:83: c0:50:76:28:e5:64:72:6c:16:ff:e0:34:71:0c:b3:1b:9d:f7: 39:4e:c1:1d:a1:33:05:02:4c:4b:f9:82:c1:51:16:77:ee:26: ab:88:25:16:9d:c8:a8:57:d0:99:af:55:38:47:be:f9:65:f9: 15:77:eb:f1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElJ9wUqtkJlvYOuxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDMyNDAwNDUzM1oXDTI3MDYyNzAwNDUzM1owLzEtMCsGA1UEAxMk MWY1OTAxODctZmMxZC00NjgxLWEwYTQtYWExZDIzMjAyZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ld7uTYktaYFrVrct+3iEDk2p4Jhzxc9OVI 017g6RtwgkWxN3kJfELgXiomMmwfw03OHxo4J8nf9k/RjcY9Z79DhW9WQW5xTNMW BNQ+doWGaAT6YWbsivyZetCL5vkr0yVbEjs2PAOOOq5ltSHXi5F8ofQnwzy3fyou PyMQut5D+8dz5cvd5UgmW+DIWpymd3r01BwKgDOy8fc4yJz38XSZ9XSFDygXoivv YET0nYP5GjoDPg4I/ycVJ9o2qNO6OIGiRNoXVoIbW439Lhll5zQTU87hvufC/bw6 WsCZRHgidrqv1/7thKrg1ONGsEVL2ArQccAUSbyrKBXqHJDtoQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFmhLWms/aQFIp5CyUo1q7ihfuCWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x ZjU5MDE4Ny1mYzFkLTQ2ODEtYTBhNC1hYTFkMjMyMDJlODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFmNTkwMTg3LWZjMWQtNDY4MS1h MGE0LWFhMWQyMzIwMmU4MC8xZjU5MDE4Ny1mYzFkLTQ2ODEtYTBhNC1hYTFkMjMy MDJlODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAXYLsAwDwQCAAIwCQMHBiYgAQEwADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJN6TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoWPs3CR6MTwcDvUWlJl+U8u84 BicLA1Zcxcv5nZr4gr8G2RrmSvEmm+uhxbTaPZe+Pu5xGa0JZwTTPTX/KxQww6tM fFS+NfifNLbDHQj1/OxatpSukmy38HLEbv+wnwQRREoFWw9vSNDGv9PPfoRLw8Bo k1ihYpvzIecIqBAn9Od9ryKzTNWUGS9j/c+B0ZimX2zU7yltFBSTIYZ/pC62UvWH 5K9/LAgv13CAUSwzALHjcx6OW5U9Bm2adDob5SR1C/LbAIPAUHYo5WRybBb/4DRx DLMbnfc5TsEdoTMFAkxL+YLBURZ37iariCUWncioV9CZr1U4R775ZfkVd+vx -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:50 2025 by rpki-client