$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer File: 8da2ab18-c7fe-481a-a5e3-31579c83e101.cer (raw, json) Hash identifier: 8Zb7MH+bHeOyeO9NjoBUoF1/dmUK3RMs+i4+SSPq/tk= Subject key identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858480372C428BA65FDD40150F040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Nov 2024 01:45:33 +0000 Certificate not after: Tue 02 Mar 2027 01:45:33 +0000 Subordinate resources: IP: 69.161.208.0/23 IP: 69.161.220.0/24 IP: 69.161.222.0/23 IP: 206.188.192.0/23 IP: 206.188.195.0/24 IP: 206.188.198.0/23 IP: 206.188.204.0 -- 206.188.209.255 IP: 206.188.212.0/22 IP: 206.188.219.0 -- 206.188.223.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:72:c4:28:ba:65:fd:d4:01:50:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 27 01:45:33 2024 GMT Not After : Mar 2 01:45:33 2027 GMT Subject: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f8:a7:9e:32:bc:73:08:bb:e8:2a:a6:0e:f1: 5d:83:e1:93:77:78:e2:db:06:3c:ad:97:61:fb:ef: 84:d2:8b:62:08:7e:e8:5e:69:0c:a5:35:76:d5:20: 07:f0:97:cf:e3:9a:6e:ab:5f:a9:ef:90:d7:ef:75: 08:0a:f7:36:07:9c:e7:3e:a3:13:75:2b:ba:ef:5e: cb:3e:5d:a0:3b:08:5c:51:26:f3:f8:ec:3d:56:97: e4:85:3e:27:2e:4a:d9:df:f7:b8:59:27:22:3f:38: 64:99:c9:2f:67:bf:fa:7a:f4:6a:cb:10:11:ad:1e: d0:4a:76:39:c4:8d:27:69:0d:66:f7:84:67:4e:bb: ad:be:83:ac:ab:30:91:aa:6a:95:2c:e0:03:47:63: 14:b6:8a:a5:16:62:f5:9f:3e:20:4c:bb:be:06:50: 59:78:ab:fe:f3:a3:26:c1:25:c8:c8:7f:07:9a:94: c4:0c:4b:7b:bf:8e:8c:22:54:67:43:ee:38:00:d4: e1:52:4c:53:18:51:73:0f:36:c0:19:77:ba:48:8d: 93:b8:46:8b:18:68:9d:9a:54:8c:b7:9a:f6:69:f4: b9:16:df:3e:46:1c:2b:c6:95:b7:ce:2d:65:d8:01: 6f:2a:09:47:20:fe:d7:b4:a5:8b:63:2e:61:b8:23: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 69.161.208.0/23 69.161.220.0/24 69.161.222.0/23 206.188.192.0/23 206.188.195.0/24 206.188.198.0/23 206.188.204.0-206.188.209.255 206.188.212.0/22 206.188.219.0-206.188.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b0:a2:0c:98:b5:f4:a7:25:53:cc:4d:d6:65:45:11:c5:46: 55:69:22:76:4e:bb:32:44:65:0d:3d:09:19:e9:78:67:bf:96: 09:25:95:04:23:04:a4:64:2d:ae:a8:c7:9c:5c:b0:ce:be:4e: e7:54:dc:b1:02:c1:33:58:55:82:3c:ba:53:62:bb:be:f7:b5: b5:3d:c3:4e:64:e4:ea:4d:c8:36:8e:6d:0d:42:30:d0:bd:76: 44:97:70:78:f7:9e:19:ea:16:e8:1f:f9:b0:1b:ad:cd:dc:05: ab:57:d2:5c:64:2b:92:58:52:8c:1d:73:80:5b:07:33:f0:b1: 5c:bb:20:86:27:8f:7c:24:4d:ef:97:d1:b6:bb:fd:56:d7:eb: b7:d8:13:a0:33:ad:29:f4:eb:d9:cf:95:b8:67:d5:f7:fb:1e: ef:5c:8e:79:2d:f1:75:48:56:b7:0a:44:9c:e2:ea:32:ed:4e: e0:56:f3:c4:fb:1f:c1:cd:38:e4:a8:0c:88:9a:b0:3d:3c:9b: c4:53:84:a6:93:37:b9:86:e7:97:3e:51:43:dc:1b:55:74:bf: fc:cb:aa:be:56:be:c4:ae:fd:8e:bd:6b:28:f0:ff:2e:0e:ff: 5c:08:2f:3a:b5:f4:a5:cb:88:11:4c:00:e5:81:7c:1c:5d:9e: af:44:05:85 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEgDcsQoumX91AFQ8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTEyNzAxNDUzM1oXDTI3MDMwMjAxNDUzM1owLzEtMCsGA1UEAxMk OGRhMmFiMTgtYzdmZS00ODFhLWE1ZTMtMzE1NzljODNlMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/innjK8cwi76CqmDvFdg+GTd3ji2wY8rZdh +++E0otiCH7oXmkMpTV21SAH8JfP45puq1+p75DX73UICvc2B5znPqMTdSu6717L Pl2gOwhcUSbz+Ow9VpfkhT4nLkrZ3/e4WSciPzhkmckvZ7/6evRqyxARrR7QSnY5 xI0naQ1m94RnTrutvoOsqzCRqmqVLOADR2MUtoqlFmL1nz4gTLu+BlBZeKv+86Mm wSXIyH8HmpTEDEt7v46MIlRnQ+44ANThUkxTGFFzDzbAGXe6SI2TuEaLGGidmlSM t5r2afS5Ft8+RhwrxpW3zi1l2AFvKglHIP7XtKWLYy5huCNMXwIDAQABo4IEPzCC BDswHQYDVR0OBBYEFF38XNes7PQkiavw3Qq2Gsb/JrbnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 ZGEyYWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3OWM4M2UxMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhkYTJhYjE4LWM3ZmUtNDgxYS1h NWUzLTMxNTc5YzgzZTEwMS84ZGEyYWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3OWM4 M2UxMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMEwEAgABMEYDBAFFodADBABFodwDBAFFod4DBAHOvMADBADOvMMD BAHOvMYwDAMEAs68zAMEAc680AMEAs681DAMAwQAzrzbAwQFzrzAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGmwogyYtfSnJVPMTdZlRRHFRlVpInZOuzJEZQ09CRnpeGe/lgkllQQjBKRkLa6o x5xcsM6+TudU3LECwTNYVYI8ulNiu773tbU9w05k5OpNyDaObQ1CMNC9dkSXcHj3 nhnqFugf+bAbrc3cBatX0lxkK5JYUowdc4BbBzPwsVy7IIYnj3wkTe+X0ba7/VbX 67fYE6AzrSn069nPlbhn1ff7Hu9cjnkt8XVIVrcKRJzi6jLtTuBW88T7H8HNOOSo DIiasD08m8RThKaTN7mG55c+UUPcG1V0v/zLqr5WvsSu/Y69ayjw/y4O/1wILzq1 9KXLiBFMAOWBfBxdnq9EBYU= -----END CERTIFICATE-----Generated at Fri Apr 4 19:21:02 2025 by rpki-client