$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer File: 7386a5e1-ba73-408c-a7e4-df88e2f52603.cer (raw, json) Hash identifier: MZvzsqwzvWae9E4xyJz9vOP6OYCFOirytIt05H0C27k= Subject key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584800A814554C5AED938E3F6200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Nov 2024 01:45:32 +0000 Certificate not after: Mon 01 Mar 2027 01:45:32 +0000 Subordinate resources: AS: 13910 IP: 96.9.0.0/18 IP: 207.204.0.0 -- 207.204.55.255 IP: 209.16.96.0/20 IP: 216.21.224.0/22 IP: 216.21.231.0 -- 216.21.232.255 IP: 216.21.234.0 -- 216.21.238.255 IP: 2607:f408::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:00:a8:14:55:4c:5a:ed:93:8e:3f:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 26 01:45:32 2024 GMT Not After : Mar 1 01:45:32 2027 GMT Subject: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:0d:53:d5:4c:0c:10:15:de:2b:31:a9:a7: 5d:19:fa:f0:3e:f4:60:04:10:f5:64:4b:08:29:e7: 33:e8:76:7b:cf:12:e3:93:ca:e1:e0:72:c7:22:91: 56:c2:b2:f2:42:7e:ad:1f:7c:d3:cc:fa:2d:8f:b9: c4:ba:02:f7:8a:1e:41:61:aa:8c:fd:2e:6d:6a:4a: 87:48:fa:1c:00:46:d9:1d:a9:77:12:1d:c8:44:33: a3:9b:6f:dc:42:d2:2d:9f:90:0d:df:95:42:b0:53: 19:47:1f:33:92:ea:96:46:61:ba:2a:03:e5:98:a8: 8d:b5:81:83:f7:b9:da:7a:d9:39:65:a6:1c:8f:d0: 93:92:e2:2d:02:31:80:24:9e:75:73:54:57:27:fa: 17:22:12:e3:3b:04:18:b4:3e:bb:42:ec:b1:9a:89: 13:18:3b:b0:33:21:b7:07:67:e1:0d:1a:02:81:33: d4:3e:4a:b5:65:a0:cf:64:aa:37:4d:15:50:bb:1a: a2:c8:5c:17:55:78:5c:e8:5c:5f:9e:74:7c:bc:78: 10:fa:fe:d4:38:4e:29:58:59:0f:11:79:f3:1f:4a: 88:44:57:60:36:6d:14:33:58:d3:a3:e1:36:ef:60: 07:d7:43:91:25:61:6a:13:6f:a3:51:eb:e8:0f:bc: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 96.9.0.0/18 207.204.0.0-207.204.55.255 209.16.96.0/20 216.21.224.0/22 216.21.231.0-216.21.232.255 216.21.234.0-216.21.238.255 IPv6: 2607:f408::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13910 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cf:9d:44:d5:1c:ed:e2:06:37:6e:27:df:bd:de:a7:40:98: 65:9f:09:9c:9c:87:19:f4:1b:e8:96:47:f8:07:e0:fa:22:f5: a6:e6:62:f8:ae:7f:ed:92:43:3e:2c:5f:2a:43:83:86:dd:a6: 16:d8:72:26:57:a1:be:31:49:77:af:5a:95:aa:0f:59:72:ec: 96:8f:dd:42:b3:b8:de:f2:04:19:81:08:b5:93:63:b2:f5:f4: 63:d6:74:c7:96:92:df:75:06:7b:bc:d2:df:17:78:bb:e1:43: 9a:86:e8:47:f8:13:be:fc:80:ce:49:6f:d9:09:e5:cf:8a:65: 4b:77:57:45:cb:f0:aa:93:42:4b:5f:0f:0f:f0:c4:0b:7f:ef: d7:aa:67:c5:e9:d2:94:be:8e:7e:7c:a2:a5:db:96:96:c7:fd: 7a:db:bf:19:ed:d2:57:da:9f:0d:c4:53:12:d8:5c:24:95:de: a0:0d:c6:36:8a:fb:a8:68:64:84:41:67:cd:fa:73:68:7a:63: e0:93:cd:82:79:02:6d:eb:ce:1e:e8:b5:39:17:3a:5d:88:83: 1f:bb:b7:20:a7:55:7c:b8:26:56:1a:11:a1:0c:55:51:dd:06: 15:33:d7:ea:0f:43:8e:ea:3a:83:ac:70:c4:5b:7a:00:4a:b8: 86:db:4e:7a -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUAQ0Mn0MoWEgAqBRVTFrtk44/YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTEyNjAxNDUzMloXDTI3MDMwMTAxNDUzMlowLzEtMCsGA1UEAxMk NzM4NmE1ZTEtYmE3My00MDhjLWE3ZTQtZGY4OGUyZjUyNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA078NU9VMDBAV3isxqaddGfrwPvRgBBD1ZEsI Kecz6HZ7zxLjk8rh4HLHIpFWwrLyQn6tH3zTzPotj7nEugL3ih5BYaqM/S5takqH SPocAEbZHal3Eh3IRDOjm2/cQtItn5AN35VCsFMZRx8zkuqWRmG6KgPlmKiNtYGD 97naetk5ZaYcj9CTkuItAjGAJJ51c1RXJ/oXIhLjOwQYtD67QuyxmokTGDuwMyG3 B2fhDRoCgTPUPkq1ZaDPZKo3TRVQuxqiyFwXVXhc6FxfnnR8vHgQ+v7UOE4pWFkP EXnzH0qIRFdgNm0UM1jTo+E272AH10ORJWFqE2+jUevoD7z2eQIDAQABo4IEXjCC BFowHQYDVR0OBBYEFI76+QW43iGw3r4bM9EaiWLDkASdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJmNTI2MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzczODZhNWUxLWJhNzMtNDA4Yy1h N2U0LWRmODhlMmY1MjYwMy83Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJm NTI2MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwYwYIKwYBBQUH AQcBAf8EVDBSMEEEAgABMDsDBAZgCQAwCwMDAs/MAwQDz8wwAwQE0RBgAwQC2BXg MAwDBADYFecDBADYFegwDAMEAdgV6gMEANgV7jANBAIAAjAHAwUAJgf0CDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgI2VjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHz51E1Rzt4gY3biffvd6n QJhlnwmcnIcZ9Bvolkf4B+D6IvWm5mL4rn/tkkM+LF8qQ4OG3aYW2HImV6G+MUl3 r1qVqg9ZcuyWj91Cs7je8gQZgQi1k2Oy9fRj1nTHlpLfdQZ7vNLfF3i74UOahuhH +BO+/IDOSW/ZCeXPimVLd1dFy/Cqk0JLXw8P8MQLf+/XqmfF6dKUvo5+fKKl25aW x/16278Z7dJX2p8NxFMS2Fwkld6gDcY2ivuoaGSEQWfN+nNoemPgk82CeQJt684e 6LU5FzpdiIMfu7cgp1V8uCZWGhGhDFVR3QYVM9fqD0OO6jqDrHDEW3oASriG2056 -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:34 2025 by rpki-client