$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer File: 7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer (raw, json) Hash identifier: Ljcsn4f43Ni6a6Ha5uE0WcOHXoENUQRWsxITgrOR52Y= Subject key identifier: DE:ED:C8:81:0C:E5:63:5E:49:30:0D:C5:1F:24:00:10:2B:84:3F:A4 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848897399CE0D71876897A42F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 01:45:33 +0000 Certificate not after: Mon 19 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 50.112.0.0/16 IP: 2620:108:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:73:99:ce:0d:71:87:68:97:a4:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 14 01:45:33 2025 GMT Not After : Apr 19 00:45:33 2027 GMT Subject: CN=7188ac24-09cc-4f20-9dbd-cd9005d2797e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:e6:6f:47:7a:7f:fb:ef:f4:d9:98:38:5e: 92:a9:ae:80:c1:54:74:74:23:c8:f2:ee:11:0f:ed: a5:eb:d2:d7:a9:10:89:31:e3:fb:d8:6c:4c:3a:55: 70:78:c0:59:ac:75:02:a5:fc:74:e2:99:3c:fd:7a: 91:33:61:d8:fd:8f:e8:4a:f6:91:80:ed:4a:29:02: 81:38:34:da:4b:e2:38:30:e9:8c:6d:8e:ed:06:63: 22:81:f1:af:fa:c6:4c:d5:0e:e9:b6:23:1b:ae:35: c4:91:18:ba:b1:37:08:95:6e:26:1f:58:62:af:f1: 8c:7b:86:86:90:77:92:a0:24:a3:2d:80:e6:00:18: 3d:06:12:0c:9e:18:d7:de:65:82:09:58:85:f0:b8: cd:56:ac:4c:53:81:e5:a5:5b:6b:cb:6a:8c:71:6a: 07:9c:94:c6:40:b4:1f:0b:7e:6d:98:3d:a0:6c:0b: 1a:2a:96:16:d0:12:21:4f:bf:12:f2:0f:69:fa:b2: 5d:1f:9b:20:a9:bf:18:d4:95:1f:d4:ae:09:b0:f3: 6b:73:ee:24:8f:1f:4b:cf:4c:b6:45:96:96:89:59: fb:67:f0:d9:0a:b1:3a:1d:68:db:97:00:2e:58:27: 47:3f:f2:41:ba:0b:ec:42:2b:a8:32:6f:c6:2b:72: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:C8:81:0C:E5:63:5E:49:30:0D:C5:1F:24:00:10:2B:84:3F:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/16 IPv6: 2620:108:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:89:2e:2e:1b:85:34:fc:53:e6:a5:e9:50:9b:6d:c2:74:bd: e6:34:91:e1:08:f8:1f:9c:7f:1d:f2:02:0c:83:69:01:7b:d9: 89:ca:85:df:0b:f3:8c:4b:b2:97:5a:fa:90:6f:47:9d:c9:82: 0e:ba:db:18:7a:3e:cc:d9:22:c2:52:e1:f6:7a:41:82:b9:be: 07:ba:58:1b:df:05:19:36:90:98:81:fe:42:cd:13:88:c3:3e: 83:3b:01:fa:ae:d4:c5:b9:ab:47:40:29:91:48:fe:38:ea:50: e8:21:57:eb:28:be:c2:23:b2:97:67:07:cc:52:c7:f5:fc:50: 8d:69:cf:52:ed:d8:32:50:7e:18:16:f0:05:9c:e5:08:ee:b5: bc:87:89:b4:06:0e:80:5d:11:87:b1:2c:5f:df:c7:1d:e3:59: f5:96:28:b3:fc:56:f0:25:7e:75:6e:35:9c:5f:b1:51:b4:ef: 60:1c:e3:0f:8d:60:16:d5:9c:e7:7e:32:5a:4b:2d:c8:e7:85: 63:13:0e:df:a7:e3:cc:47:cc:a3:fe:3f:40:2c:a1:a8:f2:16: b4:62:cf:e5:7b:10:97:7a:ea:a8:8f:ef:40:57:ef:e7:bc:6d: 19:cb:f0:eb:5a:b8:ab:da:8e:e2:45:67:9d:5f:2a:eb:89:0c: a2:0c:26:8f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEiJc5nODXGHaJekL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDExNDAxNDUzM1oXDTI3MDQxOTAwNDUzM1owLzEtMCsGA1UEAxMk NzE4OGFjMjQtMDljYy00ZjIwLTlkYmQtY2Q5MDA1ZDI3OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskPmb0d6f/vv9NmYOF6Sqa6AwVR0dCPI8u4R D+2l69LXqRCJMeP72GxMOlVweMBZrHUCpfx04pk8/XqRM2HY/Y/oSvaRgO1KKQKB ODTaS+I4MOmMbY7tBmMigfGv+sZM1Q7ptiMbrjXEkRi6sTcIlW4mH1hir/GMe4aG kHeSoCSjLYDmABg9BhIMnhjX3mWCCViF8LjNVqxMU4HlpVtry2qMcWoHnJTGQLQf C35tmD2gbAsaKpYW0BIhT78S8g9p+rJdH5sgqb8Y1JUf1K4JsPNrc+4kjx9Lz0y2 RZaWiVn7Z/DZCrE6HWjblwAuWCdHP/JBugvsQiuoMm/GK3Ky8QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFN7tyIEM5WNeSTANxR8kABArhD+kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 MTg4YWMyNC0wOWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzcxODhhYzI0LTA5Y2MtNGYyMC05 ZGJkLWNkOTAwNWQyNzk3ZS83MTg4YWMyNC0wOWNjLTRmMjAtOWRiZC1jZDkwMDVk Mjc5N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwAycDAPBAIAAjAJAwcEJiABCHAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKOJLi4bhTT8U+al6VCbbcJ0veY0keEI+B+cfx3yAgyDaQF72YnKhd8L84xLspda +pBvR53Jgg662xh6PszZIsJS4fZ6QYK5vge6WBvfBRk2kJiB/kLNE4jDPoM7Afqu 1MW5q0dAKZFI/jjqUOghV+sovsIjspdnB8xSx/X8UI1pz1Lt2DJQfhgW8AWc5Qju tbyHibQGDoBdEYexLF/fxx3jWfWWKLP8VvAlfnVuNZxfsVG072Ac4w+NYBbVnOd+ MlpLLcjnhWMTDt+n48xHzKP+P0AsoajyFrRiz+V7EJd66qiP70BX7+e8bRnL8Ota uKvajuJFZ51fKuuJDKIMJo8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:23:47 2025 by rpki-client