$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813.cer File: 63b90d45-1618-4bc2-936a-bb30c3c87813.cer (raw, json) Hash identifier: U8VJKANtKgxR10E7NxudPFp0a4hD//hrbRMqcRnDXI8= Subject key identifier: EA:72:CA:FC:82:D8:96:D5:52:07:9A:A1:5B:3F:63:EE:8B:1B:61:95 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847F848099C721830E9CC111050 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/63b90d45-1618-4bc2-936a-bb30c3c87813.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 23 Nov 2024 01:45:34 +0000 Certificate not after: Fri 26 Feb 2027 01:45:34 +0000 Subordinate resources: IP: 192.188.81.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:48:09:9c:72:18:30:e9:cc:11:10:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 23 01:45:34 2024 GMT Not After : Feb 26 01:45:34 2027 GMT Subject: CN=63b90d45-1618-4bc2-936a-bb30c3c87813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:08:0a:d9:7f:7f:2f:f5:d2:7d:16:73:29: ae:16:41:a7:ba:59:b6:5b:38:1f:14:e4:cf:02:85: ca:e6:01:37:c9:3d:ca:bd:60:e1:01:1e:7a:2f:0c: a4:00:76:26:04:85:8b:a0:07:a5:50:dd:69:bc:51: 11:f6:10:c1:90:1b:d6:b6:b4:ed:7d:6d:c5:93:bd: a2:15:ca:50:ec:dd:3b:78:2d:b3:30:20:82:e4:db: c1:23:12:91:8c:d5:e2:a4:43:1b:1f:e7:23:e9:7d: 78:20:07:c6:d9:df:7f:f6:53:dd:53:29:0c:af:bd: 4e:68:b8:58:bf:ae:db:0b:b8:b9:2f:9e:7b:84:72: de:76:68:80:76:20:f4:d6:ca:5b:ae:c1:1d:9c:c5: fe:76:a2:da:71:f2:6c:65:7f:4b:ec:0b:b5:f7:1d: a7:b7:12:90:68:63:43:30:92:ab:c0:cd:11:1c:63: 98:a6:41:39:3b:3d:77:88:21:e9:02:aa:e1:ae:cf: 99:13:5a:42:93:6b:c5:3a:e8:d0:ba:7e:ab:ac:d3: 4a:30:21:c4:2d:04:1e:f2:fd:f7:19:73:d7:4c:1c: bb:90:42:e0:c4:69:18:4a:e6:9a:5a:ce:e1:c9:38: c3:90:6d:1b:05:e0:35:ae:ac:5a:bb:f6:54:f9:fa: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:CA:FC:82:D8:96:D5:52:07:9A:A1:5B:3F:63:EE:8B:1B:61:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63b90d45-1618-4bc2-936a-bb30c3c87813/63b90d45-1618-4bc2-936a-bb30c3c87813.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.188.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:86:23:8d:bd:6e:f6:46:c8:6c:4e:96:e4:a3:b7:b0:ed:80: 1d:0b:62:96:4a:a2:6f:55:3c:91:5a:88:0e:09:58:75:58:d2: 97:d6:43:81:3e:70:3d:07:d5:7d:e1:b5:ba:88:79:a1:ae:22: 1e:31:3a:5f:f9:28:5a:2e:1a:19:4d:d1:2f:78:8e:79:7e:09: 6d:7f:6f:17:47:0c:e0:4f:68:ca:ac:68:62:1a:91:3e:0d:11: 3b:06:bf:4f:68:01:96:5f:3a:21:c6:1a:04:9e:d9:e2:15:9e: 5f:62:be:1a:25:6b:14:9b:62:cd:22:a6:1e:17:9a:79:18:9e: 77:3d:a9:87:29:c0:7d:d0:14:2d:71:de:f5:3a:b7:10:52:7e: 6a:9a:a7:47:12:e5:03:ab:d6:4d:00:11:be:16:b7:ac:fb:2f: 96:a2:f5:aa:d2:b4:93:71:76:c8:33:68:94:8f:53:59:c1:91: 3c:4e:6f:0e:b4:78:73:4e:4c:dd:d0:32:28:61:48:3f:30:eb: 12:89:16:c5:80:e7:89:9c:c4:4e:9b:54:9d:29:e4:31:1a:40: b1:92:54:17:95:d3:41:53:40:8b:be:9d:f1:79:78:7a:a4:67: 40:1f:ce:fe:39:3b:8d:9e:b0:64:58:8c:47:d7:82:be:f4:e0: 47:3b:7b:f9 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEf4SAmcchgw6cwREFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTEyMzAxNDUzNFoXDTI3MDIyNjAxNDUzNFowLzEtMCsGA1UEAxMk NjNiOTBkNDUtMTYxOC00YmMyLTkzNmEtYmIzMGMzYzg3ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp0ICtl/fy/10n0WcymuFkGnulm2WzgfFOTP AoXK5gE3yT3KvWDhAR56LwykAHYmBIWLoAelUN1pvFER9hDBkBvWtrTtfW3Fk72i FcpQ7N07eC2zMCCC5NvBIxKRjNXipEMbH+cj6X14IAfG2d9/9lPdUykMr71OaLhY v67bC7i5L557hHLedmiAdiD01spbrsEdnMX+dqLacfJsZX9L7Au19x2ntxKQaGND MJKrwM0RHGOYpkE5Oz13iCHpAqrhrs+ZE1pCk2vFOujQun6rrNNKMCHELQQe8v33 GXPXTBy7kELgxGkYSuaaWs7hyTjDkG0bBeA1rqxau/ZU+fqNhQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOpyyvyC2JbVUgeaoVs/Y+6LG2GVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 M2I5MGQ0NS0xNjE4LTRiYzItOTM2YS1iYjMwYzNjODc4MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYzYjkwZDQ1LTE2MTgtNGJjMi05 MzZhLWJiMzBjM2M4NzgxMy82M2I5MGQ0NS0xNjE4LTRiYzItOTM2YS1iYjMwYzNj ODc4MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAvFEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnIYjjb1u9kbIbE6W5KO3 sO2AHQtilkqib1U8kVqIDglYdVjSl9ZDgT5wPQfVfeG1uoh5oa4iHjE6X/koWi4a GU3RL3iOeX4JbX9vF0cM4E9oyqxoYhqRPg0ROwa/T2gBll86IcYaBJ7Z4hWeX2K+ GiVrFJtizSKmHheaeRiedz2phynAfdAULXHe9Tq3EFJ+apqnRxLlA6vWTQARvha3 rPsvlqL1qtK0k3F2yDNolI9TWcGRPE5vDrR4c05M3dAyKGFIPzDrEokWxYDniZzE TptUnSnkMRpAsZJUF5XTQVNAi76d8Xl4eqRnQB/O/jk7jZ6wZFiMR9eCvvTgRzt7 +Q== -----END CERTIFICATE-----Generated at Fri Apr 4 16:19:36 2025 by rpki-client