$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7.cer File: 8287264c-f3cf-454c-9df1-abcefc82b2d7.cer (raw, json) Hash identifier: HprQItJENbAZdaiGebqUHG9pa8DnsnLQiAjChVYZ2U4= Subject key identifier: B1:13:EB:07:00:BA:CE:97:A0:91:B8:3F:0D:34:51:DB:B4:3A:4C:C4 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584920348A25F3D7D9112BB1B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/8287264c-f3cf-454c-9df1-abcefc82b2d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 09 Mar 2025 01:45:32 +0000 Certificate not after: Sat 12 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 47869 AS: 62519 IP: 104.245.124.0/22 IP: 107.178.56.0/21 IP: 162.252.56.0/22 IP: 162.255.136.0/22 IP: 199.71.232.0/22 IP: 208.76.52.0/22 IP: 2606:ed00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:34:8a:25:f3:d7:d9:11:2b:b1:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 9 01:45:32 2025 GMT Not After : Jun 12 00:45:32 2027 GMT Subject: CN=8287264c-f3cf-454c-9df1-abcefc82b2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c5:a5:37:61:35:83:01:d1:3f:d9:e9:60:1e: c0:40:07:d0:a4:d1:7a:57:fd:64:3a:87:42:6a:e4: fb:2c:a6:89:51:a9:df:54:3a:ee:2f:c1:d7:89:d9: c5:28:39:13:55:35:4a:54:2f:95:3c:d0:56:44:77: 4b:27:66:cb:bb:2c:8b:14:42:a6:ee:5d:53:29:78: 80:e7:66:3b:99:e4:54:09:af:bc:0e:c2:70:34:fd: 2e:f8:6c:96:ef:37:90:fc:c9:76:13:e6:2a:2a:5d: 0a:5f:95:93:73:72:36:43:3e:c1:93:f3:ab:5d:45: 38:ad:c6:4c:87:d9:93:a9:90:65:37:70:db:85:88: 98:ab:8f:04:b7:4d:eb:27:a5:44:41:a9:7e:1b:b9: 27:47:03:b0:95:35:8e:c4:c2:0a:a9:d7:53:5d:e9: 96:23:38:3e:43:6d:95:31:26:00:35:61:38:a0:4f: 62:c7:99:0c:25:42:8b:66:29:2f:0a:54:f2:63:f0: 37:fd:90:13:0e:38:55:18:e7:39:53:05:79:74:49: 88:f6:0b:64:9d:44:9a:89:6f:3d:b1:37:64:7f:12: 49:0f:cc:61:16:37:b1:4e:d5:26:53:7d:e3:97:a3: 0e:c5:4a:a1:f6:a9:48:ea:2a:39:44:9a:18:e0:05: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:EB:07:00:BA:CE:97:A0:91:B8:3F:0D:34:51:DB:B4:3A:4C:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/8287264c-f3cf-454c-9df1-abcefc82b2d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.245.124.0/22 107.178.56.0/21 162.252.56.0/22 162.255.136.0/22 199.71.232.0/22 208.76.52.0/22 IPv6: 2606:ed00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47869 62519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a6:58:8f:db:ea:aa:6b:cf:93:62:e6:0e:b2:65:26:b3:83: e3:49:4c:02:2d:cd:a3:4b:3a:53:5f:b8:06:f2:8e:50:7e:1c: 6a:85:1a:fe:49:3f:af:15:2a:30:c6:3c:c2:e9:d8:17:98:ec: 7d:4b:24:ef:4d:4e:ea:81:f8:7e:78:c8:b9:c9:13:38:98:5a: c7:71:53:c6:a8:5f:d0:82:c8:7d:2a:66:14:cc:87:51:d8:0d: 07:1f:d8:30:60:76:17:9a:7a:93:25:c3:79:9a:e4:a1:5a:54: f7:b4:e9:d3:0d:a6:96:ff:1e:95:55:8c:da:5f:39:55:91:8b: 2b:ca:98:bc:4f:18:2e:9f:11:e3:de:0f:9d:b3:b7:74:cf:68: ea:ec:0a:5b:ee:e8:c8:65:83:fa:99:fd:94:15:4d:8a:7c:48: 36:31:ee:d6:e5:41:75:d4:46:55:b9:4f:52:15:f9:d6:c2:27: 36:9a:ec:ab:52:d1:99:4c:74:e2:61:25:ee:28:41:0a:9c:fe: e0:30:a2:32:74:d7:64:bd:68:9b:75:14:e7:4b:03:38:da:b6: 19:f5:f5:f3:eb:fa:d0:05:cb:d6:f5:d3:9c:f4:f1:e4:5a:ee: c1:01:7d:2d:2d:87:66:76:65:98:8d:42:5f:2d:bc:bf:46:a7: f4:01:c9:f9 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEkgNIol89fZESuxtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDMwOTAxNDUzMloXDTI3MDYxMjAwNDUzMlowLzEtMCsGA1UEAxMk ODI4NzI2NGMtZjNjZi00NTRjLTlkZjEtYWJjZWZjODJiMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMWlN2E1gwHRP9npYB7AQAfQpNF6V/1kOodC auT7LKaJUanfVDruL8HXidnFKDkTVTVKVC+VPNBWRHdLJ2bLuyyLFEKm7l1TKXiA 52Y7meRUCa+8DsJwNP0u+GyW7zeQ/Ml2E+YqKl0KX5WTc3I2Qz7Bk/OrXUU4rcZM h9mTqZBlN3DbhYiYq48Et03rJ6VEQal+G7knRwOwlTWOxMIKqddTXemWIzg+Q22V MSYANWE4oE9ix5kMJUKLZikvClTyY/A3/ZATDjhVGOc5UwV5dEmI9gtknUSaiW89 sTdkfxJJD8xhFjexTtUmU33jl6MOxUqh9qlI6io5RJoY4AU0ywIDAQABo4IETTCC BEkwHQYDVR0OBBYEFLET6wcAus6XoJG4Pw00Udu0OkzEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 Mjg3MjY0Yy1mM2NmLTQ1NGMtOWRmMS1hYmNlZmM4MmIyZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzgyODcyNjRjLWYzY2YtNDU0Yy05 ZGYxLWFiY2VmYzgyYjJkNy84Mjg3MjY0Yy1mM2NmLTQ1NGMtOWRmMS1hYmNlZmM4 MmIyZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJo9XwDBANrsjgDBAKi/DgDBAKi/4gDBALHR+gD BALQTDQwDQQCAAIwBwMFACYG7QAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDALr9 AgMA9DcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFKZYj9vqqmvPk2LmDrJlJrOD40lMAi3No0s6U1+4BvKO UH4caoUa/kk/rxUqMMY8wunYF5jsfUsk701O6oH4fnjIuckTOJhax3FTxqhf0ILI fSpmFMyHUdgNBx/YMGB2F5p6kyXDeZrkoVpU97Tp0w2mlv8elVWM2l85VZGLK8qY vE8YLp8R494PnbO3dM9o6uwKW+7oyGWD+pn9lBVNinxINjHu1uVBddRGVblPUhX5 1sInNprsq1LRmUx04mEl7ihBCpz+4DCiMnTXZL1om3UU50sDONq2GfX18+v60AXL 1vXTnPTx5FruwQF9LS2HZnZlmI1CXy28v0an9AHJ+Q== -----END CERTIFICATE-----Generated at Fri Apr 4 19:00:48 2025 by rpki-client