$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer File: 5dd53d9e-382d-4f16-b9d4-08067d598d81.cer (raw, json) Hash identifier: CMQXcG/CRSOrMHlPog3q6nC1/VBKC5k24Znhskr9cNI= Subject key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584854689AA3EABAB7D0B1B60380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Dec 2024 01:45:33 +0000 Certificate not after: Wed 31 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 2635 IP: 87.250.160.0/19 IP: 192.0.64.0/18 IP: 198.181.116.0/22 IP: 2620:115:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:68:9a:a3:ea:ba:b7:d0:b1:b6:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 26 01:45:33 2024 GMT Not After : Mar 31 00:45:33 2027 GMT Subject: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:50:f4:32:19:c3:f7:1d:18:63:5b:c8:0f: 63:46:53:d0:b5:1a:f8:ce:ce:3b:8e:16:88:56:89: 9a:2d:06:9c:3a:aa:61:3f:a3:b8:dc:02:55:6a:d8: 9b:de:15:17:24:b9:c3:71:25:a1:67:7d:58:8a:16: 09:2a:6d:28:43:45:76:e6:30:2c:b7:a0:65:5c:1d: 29:54:b9:87:e9:1f:23:fe:9e:7f:9f:05:d3:a4:fa: 0a:23:2b:1b:33:bc:03:09:18:9d:24:03:c2:30:06: 42:86:fc:27:72:ee:1e:c8:49:1e:cc:a8:6c:87:70: 57:31:4d:a8:be:ac:5c:65:fb:3b:b3:43:6e:fa:5f: eb:4d:d7:05:d8:52:52:a2:fb:df:7b:0e:92:ce:b0: fc:6f:e9:95:6b:1c:3e:29:93:18:48:b0:70:4e:b8: d6:0f:84:c0:db:e4:05:4f:d4:f1:84:ba:06:0e:91: c5:6d:7f:72:b1:6d:29:23:0d:78:da:f6:3d:71:56: c9:59:4f:34:7d:40:80:0e:7e:0d:ff:fb:cd:fc:65: 7f:7a:9f:b8:21:fa:17:87:07:7e:31:ee:66:b3:e4: cd:7b:45:8d:fb:e0:54:76:6f:f9:04:07:2b:70:98: 2b:db:76:57:cc:d3:71:8e:66:85:ef:dd:a9:3d:16: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 87.250.160.0/19 192.0.64.0/18 198.181.116.0/22 IPv6: 2620:115:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2635 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1c:50:ba:d9:a0:d7:bb:d3:53:e1:b1:df:50:70:41:e2:c2: 43:db:41:42:37:fe:a2:a7:ae:5a:7f:cc:62:bd:d8:d5:d4:95: df:e1:2e:ba:49:27:7a:89:ea:f7:1b:26:aa:9d:b1:37:14:da: 31:3f:f3:ae:e6:d0:a0:31:80:9e:a7:ef:39:5b:b0:f6:2c:6f: f0:f1:40:86:e8:99:17:01:e4:97:c4:ea:f8:b7:ee:ab:db:bf: 7e:7f:10:a6:ef:68:fe:7e:3e:7e:31:d8:64:07:b7:dc:c1:d6: 46:b7:20:14:3c:cf:d0:1d:68:c8:11:14:46:7f:49:69:55:ff: 21:40:47:2d:7e:7e:ef:b1:a2:cd:ff:41:a3:8d:91:7d:65:b0: 98:a0:d6:4e:6d:6d:ed:2f:c9:d5:5a:dd:a8:7d:5b:d1:a1:f4: c9:3e:8c:9b:c0:00:3b:44:d7:84:a6:af:a9:f2:fc:9d:6e:c7: c8:b9:9a:9c:0f:af:7f:3b:7b:b0:b4:51:50:d5:7e:59:96:c5: 58:37:5f:20:42:7c:cd:a4:1f:48:c0:e5:a8:84:c7:ac:d5:93: a3:25:67:92:19:54:4e:81:5d:47:97:1d:9e:fe:27:cd:91:5d: 37:10:67:b3:05:ad:8d:41:00:d6:08:20:fb:e3:9e:ea:87:4e: bc:43:82:4d -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEhUaJqj6rq30LG2A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTIyNjAxNDUzM1oXDTI3MDMzMTAwNDUzM1owLzEtMCsGA1UEAxMk NWRkNTNkOWUtMzgyZC00ZjE2LWI5ZDQtMDgwNjdkNTk4ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymFQ9DIZw/cdGGNbyA9jRlPQtRr4zs47jhaI VomaLQacOqphP6O43AJVatib3hUXJLnDcSWhZ31YihYJKm0oQ0V25jAst6BlXB0p VLmH6R8j/p5/nwXTpPoKIysbM7wDCRidJAPCMAZChvwncu4eyEkezKhsh3BXMU2o vqxcZfs7s0Nu+l/rTdcF2FJSovvfew6SzrD8b+mVaxw+KZMYSLBwTrjWD4TA2+QF T9TxhLoGDpHFbX9ysW0pIw142vY9cVbJWU80fUCADn4N//vN/GV/ep+4IfoXhwd+ Me5ms+TNe0WN++BUdm/5BAcrcJgr23ZXzNNxjmaF792pPRbTRQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFIztGeKC3DENnaZPN1C7A41S4+4uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 ZGQ1M2Q5ZS0zODJkLTRmMTYtYjlkNC0wODA2N2Q1OThkODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzVkZDUzZDllLTM4MmQtNGYxNi1i OWQ0LTA4MDY3ZDU5OGQ4MS81ZGQ1M2Q5ZS0zODJkLTRmMTYtYjlkNC0wODA2N2Q1 OThkODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAVX+qADBAbAAEADBALGtXQwDgQCAAIwCAMGACYg ARXAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgpLMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGEcULrZoNe7 01Phsd9QcEHiwkPbQUI3/qKnrlp/zGK92NXUld/hLrpJJ3qJ6vcbJqqdsTcU2jE/ 867m0KAxgJ6n7zlbsPYsb/DxQIbomRcB5JfE6vi37qvbv35/EKbvaP5+Pn4x2GQH t9zB1ka3IBQ8z9AdaMgRFEZ/SWlV/yFARy1+fu+xos3/QaONkX1lsJig1k5tbe0v ydVa3ah9W9Gh9Mk+jJvAADtE14Smr6ny/J1ux8i5mpwPr387e7C0UVDVflmWxVg3 XyBCfM2kH0jA5aiEx6zVk6MlZ5IZVE6BXUeXHZ7+J82RXTcQZ7MFrY1BANYIIPvj nuqHTrxDgk0= -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:29 2025 by rpki-client