$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer File: 811bd2ac-c53d-40a6-bfa4-275c2241af63.cer (raw, json) Hash identifier: EfR3NL0nsfZPwJbdY4twQR734tvTZUEeLG96ZMOoLrU= Subject key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848749842BEB7FCA1369C14DC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jan 2025 14:27:27 +0000 Certificate not after: Wed 06 May 2026 00:45:20 +0000 Subordinate resources: AS: 400597 IP: 23.141.8.0/24 IP: 217.149.96.0/21 IP: 2602:fb1b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:98:42:be:b7:fc:a1:36:9c:14:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 6 14:27:27 2025 GMT Not After : May 6 00:45:20 2026 GMT Subject: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:cc:9e:f1:79:85:e0:37:28:9a:a8:07:70: 40:19:7d:ae:da:3b:03:b4:b8:95:c8:16:bb:c2:7e: 60:d9:7d:20:7f:ef:f4:3b:e7:82:5d:6e:3f:10:bc: ca:95:d8:f9:67:df:ac:e7:23:cd:dd:72:dd:01:5b: 30:90:e4:26:b1:53:d8:35:d7:51:e2:c3:de:9b:eb: d6:22:ff:61:d2:08:82:75:11:0f:2e:56:53:f6:3b: 66:0e:f7:7c:7c:1b:0c:dc:20:87:0a:6d:93:49:b5: 2f:15:d6:7c:01:85:0f:f8:cd:48:b6:42:1f:f5:08: 70:e8:c4:59:ba:43:37:b7:bc:a5:b6:bc:9b:69:04: 3f:d2:0f:dc:a3:85:48:e7:b9:24:b5:bd:50:01:16: 7c:30:5a:a7:23:45:75:84:d9:18:99:b6:fb:14:96: f2:65:f4:3a:c8:d5:48:53:3e:84:25:23:31:1e:85: e9:b4:4a:8f:17:9a:0b:e6:d8:9c:19:14:86:15:91: 83:17:ce:fb:72:ff:a4:db:a8:56:86:79:b9:0e:77: 31:89:60:03:bc:af:c9:81:f4:90:87:03:83:61:2b: 86:c7:d3:33:7f:65:1f:50:f8:37:6c:eb:0f:d1:b6: 52:cd:a2:70:47:1d:3f:3e:a6:cd:6c:10:2c:a3:ca: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.141.8.0/24 217.149.96.0/21 IPv6: 2602:fb1b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400597 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:70:86:f5:22:2d:20:06:cc:6c:31:3c:88:7b:9f:08:72:15: 95:a9:1b:d1:54:3f:80:f3:97:e7:7d:b0:1c:48:5d:35:80:fb: 35:ec:34:a2:17:b3:b7:00:ee:80:4b:6b:ef:66:cc:4e:a1:f7: 1d:ba:4f:db:f2:87:03:18:c1:20:c3:f6:e8:02:c5:22:a6:11: 72:10:09:85:cd:bc:ef:bf:82:6d:c3:64:b7:ca:fc:0e:44:66: 8f:0e:d5:d9:e4:f1:db:52:cc:9f:31:73:40:47:1a:a6:f1:42: 56:5f:f8:00:4f:ef:a7:1a:40:a4:9c:f4:c7:67:0e:69:61:99: 59:03:87:9f:74:28:d5:22:42:ad:22:0c:11:74:f9:cb:b6:8f: b3:5e:6b:0a:03:4c:8e:ce:a7:16:33:ab:4d:15:91:89:99:b6: 50:e0:a7:e1:8a:e9:d7:3d:28:ff:68:e2:59:d3:5d:7c:b8:ac: 44:09:82:e3:06:3d:39:81:7b:dc:81:d9:54:1f:42:3a:b7:3c: 3f:9a:a6:18:3e:56:e1:20:e1:f9:bd:ce:1f:94:a5:d4:0d:3a: 31:88:8b:ce:7d:9b:ac:75:99:57:19:38:ff:32:34:29:52:14: 32:d4:92:3e:e6:76:dc:c6:87:d5:86:cf:6f:30:03:d3:82:0c: 33:c4:20:5c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEh0mEK+t/yhNpwU3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEwNjE0MjcyN1oXDTI2MDUwNjAwNDUyMFowLzEtMCsGA1UEAxMk ODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFhZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnarMnvF5heA3KJqoB3BAGX2u2jsDtLiVyBa7 wn5g2X0gf+/0O+eCXW4/ELzKldj5Z9+s5yPN3XLdAVswkOQmsVPYNddR4sPem+vW Iv9h0giCdREPLlZT9jtmDvd8fBsM3CCHCm2TSbUvFdZ8AYUP+M1ItkIf9Qhw6MRZ ukM3t7yltrybaQQ/0g/co4VI57kktb1QARZ8MFqnI0V1hNkYmbb7FJbyZfQ6yNVI Uz6EJSMxHoXptEqPF5oL5ticGRSGFZGDF877cv+k26hWhnm5DncxiWADvK/JgfSQ hwODYSuGx9Mzf2UfUPg3bOsP0bZSzaJwRx0/PqbNbBAso8pHuwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFC+lcmjDd4h5j9tV3tG7x8aohl2HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgxMWJkMmFjLWM1M2QtNDBhNi1i ZmE0LTI3NWMyMjQxYWY2My84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0 MWFmNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjQgDBAPZlWAwDgQCAAIwCAMGACYC+xsAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYc1TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwcIb1Ii0gBsxsMTyI e58IchWVqRvRVD+A85fnfbAcSF01gPs17DSiF7O3AO6AS2vvZsxOofcduk/b8ocD GMEgw/boAsUiphFyEAmFzbzvv4Jtw2S3yvwORGaPDtXZ5PHbUsyfMXNARxqm8UJW X/gAT++nGkCknPTHZw5pYZlZA4efdCjVIkKtIgwRdPnLto+zXmsKA0yOzqcWM6tN FZGJmbZQ4KfhiunXPSj/aOJZ0118uKxECYLjBj05gXvcgdlUH0I6tzw/mqYYPlbh IOH5vc4flKXUDToxiIvOfZusdZlXGTj/MjQpUhQy1JI+5nbcxofVhs9vMAPTggwz xCBc -----END CERTIFICATE-----Generated at Fri Apr 4 16:20:45 2025 by rpki-client