$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer File: 7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer (raw, json) Hash identifier: jIVKgni8DKdXY1YI1Y54C8o8tDV3/D8NbrCQcqwsdfo= Subject key identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584824F2FA7A34C6BD111E47F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Dec 2024 01:45:33 +0000 Certificate not after: Sun 14 Mar 2027 01:45:33 +0000 Subordinate resources: AS: 54829 IP: 162.222.20.0/22 IP: 192.40.220.0/22 IP: 198.241.12.0/22 IP: 2606:8c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:f2:fa:7a:34:c6:bd:11:1e:47:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 9 01:45:33 2024 GMT Not After : Mar 14 01:45:33 2027 GMT Subject: CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:77:4f:47:2e:0e:a3:4d:6a:0c:de:f6:c1:a2: 65:38:a9:b0:97:b2:93:16:34:8a:c0:f4:98:b4:df: ca:ff:da:bb:c7:95:bd:f7:b9:d7:b3:5a:6c:a3:74: 0d:f0:8c:e6:0b:bf:2c:75:78:27:83:6f:0c:53:38: df:5b:4d:53:e6:b9:5b:cd:9a:c6:a5:46:7c:a1:db: 96:f2:5e:df:fc:c4:38:72:5b:cc:32:28:72:08:42: 69:bf:05:e0:23:a9:b1:b8:c4:08:48:a4:75:c1:d9: c0:30:fd:57:9e:a8:cb:b2:b8:13:58:a0:61:23:5d: 95:9a:be:36:4d:59:ab:4b:de:9f:a8:a4:5c:cb:02: b9:22:9d:78:c8:a7:47:d0:d5:7f:a0:48:49:5a:5b: fb:cf:61:a5:b6:ff:4f:b3:77:06:d8:9e:da:e0:c4: c4:ef:01:7f:fc:e9:f3:30:5c:71:4d:f4:98:87:58: a7:29:09:38:4c:4d:2a:fb:06:02:cd:07:bc:d8:1d: 46:06:7f:ad:b3:0e:ce:e3:bf:db:4e:5a:a5:0f:61: a5:85:93:f8:ab:5e:f3:69:02:47:2d:ca:d0:f4:07: a9:de:42:3a:c0:82:a5:e6:19:38:90:c6:3a:2e:e8: 93:81:a6:54:e9:d4:7d:c9:13:e9:e4:c7:91:40:94: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.222.20.0/22 192.40.220.0/22 198.241.12.0/22 IPv6: 2606:8c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54829 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a2:3b:fb:44:27:77:b1:9b:93:fd:5f:89:b6:c7:53:77:dc: 8d:9c:30:04:11:9b:b2:2f:f1:ba:6e:85:21:fa:03:76:9c:ed: 73:f4:21:3b:19:51:ce:d6:88:5e:f1:de:5e:f4:51:54:40:33: ad:80:7b:ac:30:ef:f4:f7:98:b3:fa:40:91:f6:34:5b:f6:d5: 4c:8a:d4:23:4b:cb:ec:44:3f:bd:e4:b8:83:00:16:b0:93:36: dd:7c:0f:93:1c:2b:65:a5:9f:31:36:29:65:5c:ce:d0:f2:02: 0f:4e:fe:c1:81:4d:b8:70:6a:3b:d3:b5:00:fd:11:e7:5b:c4: bb:30:dd:68:b1:b4:c2:0f:17:10:20:7b:7e:32:01:e7:fc:61: f6:a0:14:73:e9:be:f3:4b:62:05:5d:71:a4:3f:32:a3:3f:1c: 94:33:c1:50:19:81:d7:f1:75:83:75:ca:77:5f:4a:d1:09:bd: e2:d8:1b:5d:e0:23:a2:78:9b:48:1f:fb:46:d7:44:f3:e8:0b: 45:4b:5a:da:85:1e:4b:d1:5a:e4:3d:54:2e:ac:d2:ee:a3:5e: 6b:e2:01:7d:88:84:33:65:2f:31:15:8b:4b:98:6d:e8:c4:54: d6:56:1a:ac:96:b4:fe:22:e0:10:3a:96:6b:8b:53:b6:54:72: 90:a0:86:d7 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEgk8vp6NMa9ER5H9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTIwOTAxNDUzM1oXDTI3MDMxNDAxNDUzM1owLzEtMCsGA1UEAxMk N2E1ZWEzM2ItZWU4MC00MmQ4LTgyNTUtYjBjNjFmMjhiMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXdPRy4Oo01qDN72waJlOKmwl7KTFjSKwPSY tN/K/9q7x5W997nXs1pso3QN8IzmC78sdXgng28MUzjfW01T5rlbzZrGpUZ8oduW 8l7f/MQ4clvMMihyCEJpvwXgI6mxuMQISKR1wdnAMP1XnqjLsrgTWKBhI12Vmr42 TVmrS96fqKRcywK5Ip14yKdH0NV/oEhJWlv7z2Gltv9Ps3cG2J7a4MTE7wF//Onz MFxxTfSYh1inKQk4TE0q+wYCzQe82B1GBn+tsw7O47/bTlqlD2GlhZP4q17zaQJH LcrQ9Aep3kI6wIKl5hk4kMY6LuiTgaZU6dR9yRPp5MeRQJSmAwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFO3OIRTfPPwMm6zbV9J7vLPUUrIPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYyOGIwNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzdhNWVhMzNiLWVlODAtNDJkOC04 MjU1LWIwYzYxZjI4YjA2Zi83YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYy OGIwNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKi3hQDBALAKNwDBALG8QwwDQQCAAIwBwMFACYG jIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANYtMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJyiO/tEJ3ex m5P9X4m2x1N33I2cMAQRm7Iv8bpuhSH6A3ac7XP0ITsZUc7WiF7x3l70UVRAM62A e6ww7/T3mLP6QJH2NFv21UyK1CNLy+xEP73kuIMAFrCTNt18D5McK2WlnzE2KWVc ztDyAg9O/sGBTbhwajvTtQD9EedbxLsw3WixtMIPFxAge34yAef8YfagFHPpvvNL YgVdcaQ/MqM/HJQzwVAZgdfxdYN1yndfStEJveLYG13gI6J4m0gf+0bXRPPoC0VL WtqFHkvRWuQ9VC6s0u6jXmviAX2IhDNlLzEVi0uYbejEVNZWGqyWtP4i4BA6lmuL U7ZUcpCghtc= -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:20 2025 by rpki-client