$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer File: 4ed29200-29c7-4b41-a912-206537f29d91.cer (raw, json) Hash identifier: Cki/7P2+wKlm/eJmokfqR3yr4wRRirpeNST1H/uuPEE= Subject key identifier: A9:D3:33:AA:2F:83:8C:EB:ED:27:4F:F2:F0:DC:ED:3C:32:97:14:70 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584811683162AC6E48E141C14F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Dec 2024 01:45:34 +0000 Certificate not after: Sun 07 Mar 2027 01:45:34 +0000 Subordinate resources: IP: 2620:3d:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:68:31:62:ac:6e:48:e1:41:c1:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 2 01:45:34 2024 GMT Not After : Mar 7 01:45:34 2027 GMT Subject: CN=4ed29200-29c7-4b41-a912-206537f29d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:34:f5:52:04:bf:db:6f:70:a7:92:d8:f2: fd:ef:c5:2a:22:ab:a6:cc:9d:8b:e3:32:b5:ea:3e: ed:88:d2:64:64:f3:fe:87:31:f4:f6:6e:87:42:d4: 0e:fa:c8:60:b3:c6:2a:25:03:92:74:bf:2d:f6:93: cb:21:a2:26:be:f7:f4:d1:c8:bb:c2:34:80:d7:06: c8:2d:c1:f0:36:f0:b7:b2:a0:75:8d:62:8e:09:1b: 9e:63:97:2d:c7:c6:6d:46:f1:64:fa:7a:03:8e:39: 3f:0d:f0:68:4f:78:d8:d5:4a:ee:e1:e1:d3:d1:be: b2:de:d4:f9:18:df:d3:82:12:67:b7:f0:66:aa:a4: 90:9b:4c:c3:a5:2e:0b:54:92:7a:10:71:00:6c:90: 24:23:f7:37:a6:ba:50:e5:0c:02:d7:50:95:72:82: 44:08:5d:4f:2e:06:6a:6b:54:6e:af:cd:ea:9c:57: 7c:c9:f0:dd:7f:25:e4:9c:a5:91:11:f2:da:15:8a: 4a:c1:23:c9:6e:ed:62:ec:73:fb:1b:df:3a:a0:61: 9a:d0:32:6f:10:a1:7e:01:58:ab:0c:81:a4:2f:e7: 00:20:a4:3a:31:ab:15:19:c9:36:a0:bb:96:d5:cc: c4:72:4e:88:c7:7d:da:5b:0d:8f:8a:bd:20:f6:3d: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D3:33:AA:2F:83:8C:EB:ED:27:4F:F2:F0:DC:ED:3C:32:97:14:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv6: 2620:3d:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:31:0a:d4:a8:f9:18:96:e8:f3:03:6d:e1:76:85:e9:91:2b: f9:bf:01:a9:eb:64:34:1a:5f:34:3f:f9:d1:b4:37:cb:f8:83: c7:ac:a5:2c:21:18:a7:6a:87:08:a7:c8:32:bc:df:89:c0:83: 8a:02:5a:42:48:76:29:4f:ac:79:1b:d8:40:15:a6:41:69:3c: d9:0d:75:e3:ee:6d:02:e9:21:43:8d:c8:03:81:01:16:9b:98: 19:01:10:86:d5:2f:1c:4d:bf:55:a9:58:e0:12:19:d6:a2:35: b5:1b:7f:7a:e1:52:cc:11:4f:f6:26:51:1f:68:b9:04:eb:50: 2c:02:3f:b8:c3:e0:13:71:00:d1:68:22:95:c4:a4:42:32:e5: 92:23:f7:8a:41:c6:1d:60:f3:a4:99:7b:75:55:ba:e7:05:11: 11:c2:94:5a:2f:26:64:af:cb:72:6f:14:45:9f:14:66:f8:55: 69:0b:7b:96:0d:7e:09:03:20:9a:8d:da:88:3c:29:71:56:93: 87:74:99:77:0a:4c:4b:f7:f2:44:48:1d:37:77:26:2b:1d:1b: b7:e2:72:b0:17:6d:7f:7d:39:6f:9c:4a:48:b5:6f:2b:12:86: 35:03:37:25:f8:6f:11:37:84:35:b0:17:ec:15:3c:3d:f8:ca: 7a:f1:e6:0e -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEgRaDFirG5I4UHBTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTIwMjAxNDUzNFoXDTI3MDMwNzAxNDUzNFowLzEtMCsGA1UEAxMk NGVkMjkyMDAtMjljNy00YjQxLWE5MTItMjA2NTM3ZjI5ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ng09VIEv9tvcKeS2PL978UqIqumzJ2L4zK1 6j7tiNJkZPP+hzH09m6HQtQO+shgs8YqJQOSdL8t9pPLIaImvvf00ci7wjSA1wbI LcHwNvC3sqB1jWKOCRueY5ctx8ZtRvFk+noDjjk/DfBoT3jY1Uru4eHT0b6y3tT5 GN/TghJnt/BmqqSQm0zDpS4LVJJ6EHEAbJAkI/c3prpQ5QwC11CVcoJECF1PLgZq a1Rur83qnFd8yfDdfyXknKWREfLaFYpKwSPJbu1i7HP7G986oGGa0DJvEKF+AVir DIGkL+cAIKQ6MasVGck2oLuW1czEck6Ix33aWw2Pir0g9j3YKQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFKnTM6ovg4zr7SdP8vDc7TwylxRwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ZWQyOTIwMC0yOWM3LTRiNDEtYTkxMi0yMDY1MzdmMjlkOTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlZDI5MjAwLTI5YzctNGI0MS1h OTEyLTIwNjUzN2YyOWQ5MS80ZWQyOTIwMC0yOWM3LTRiNDEtYTkxMi0yMDY1Mzdm MjlkOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAA9wAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmjEK1Kj5GJbo8wNt 4XaF6ZEr+b8BqetkNBpfND/50bQ3y/iDx6ylLCEYp2qHCKfIMrzficCDigJaQkh2 KU+seRvYQBWmQWk82Q114+5tAukhQ43IA4EBFpuYGQEQhtUvHE2/ValY4BIZ1qI1 tRt/euFSzBFP9iZRH2i5BOtQLAI/uMPgE3EA0WgilcSkQjLlkiP3ikHGHWDzpJl7 dVW65wUREcKUWi8mZK/Lcm8URZ8UZvhVaQt7lg1+CQMgmo3aiDwpcVaTh3SZdwpM S/fyREgdN3cmKx0bt+JysBdtf305b5xKSLVvKxKGNQM3JfhvETeENbAX7BU8PfjK evHmDg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:24:03 2025 by rpki-client