$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143.cer File: eb2b9a9d-859f-4c2b-92d7-77b15c837143.cer (raw, json) Hash identifier: cWa8Ip9R6aGLgeIgUOi0rn/mgiivHbO5Z/cPv4oW+j4= Subject key identifier: E8:0B:F7:5B:9E:A0:F8:27:3E:49:3D:B0:DF:5B:69:89:51:ED:74:BA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858489CFE66F3329388133107AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/eb2b9a9d-859f-4c2b-92d7-77b15c837143.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jan 2025 01:45:34 +0000 Certificate not after: Mon 26 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 394264 IP: 192.229.21.0/24 IP: 2620:16:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9c:fe:66:f3:32:93:88:13:31:07:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 21 01:45:34 2025 GMT Not After : Apr 26 00:45:34 2027 GMT Subject: CN=eb2b9a9d-859f-4c2b-92d7-77b15c837143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:3b:3a:23:75:70:db:65:88:bb:88:50:09: 23:41:a4:ee:a8:71:e7:a9:f1:d1:37:f5:62:b7:3e: e7:b5:d5:f8:5d:b4:e5:48:73:6b:d0:d5:da:29:29: 16:cc:40:08:f0:9f:e3:b5:2d:f3:f3:30:07:e3:f7: 5e:fe:42:de:7c:55:21:b5:a6:3a:a2:d7:01:0f:64: 52:5b:8f:3e:76:f9:83:51:f0:d6:ec:d6:5e:1f:64: 64:fc:0c:ef:d4:88:cd:17:46:b1:a4:a3:00:d8:40: fc:c1:66:8f:64:d8:5b:f8:1a:fc:2e:fc:7d:da:9b: 8d:6c:e7:6a:98:a4:58:93:2e:b2:8f:21:b9:20:5a: c1:0b:be:f5:34:fa:10:01:0b:5e:92:61:d4:9f:92: 72:c8:1d:e3:04:5b:6e:f3:f4:d6:c2:3c:4b:18:0f: 61:f2:66:39:c7:5d:65:af:c6:52:57:05:38:1d:8d: 2c:c1:ee:19:bf:b6:47:8e:86:6d:51:bd:77:4f:dc: c5:f0:e6:b5:8b:dd:7e:df:aa:15:8a:50:58:4b:a5: 23:40:db:65:5b:67:bc:c7:7a:49:16:b1:ae:b2:84: 31:a9:60:ba:73:75:47:28:77:51:23:11:a6:93:d0: 54:e4:1f:00:9b:29:0d:bf:ad:d2:b6:b5:30:e2:4e: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:F7:5B:9E:A0:F8:27:3E:49:3D:B0:DF:5B:69:89:51:ED:74:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/eb2b9a9d-859f-4c2b-92d7-77b15c837143.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.229.21.0/24 IPv6: 2620:16:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394264 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:06:fd:1c:14:91:45:32:a5:79:e7:20:8e:59:99:02:89:4b: b6:8d:53:cb:39:eb:7e:ab:00:b1:d9:94:e3:42:81:df:0a:c5: d3:57:f0:0e:92:7b:7b:27:d9:0a:62:43:1b:2d:4b:e9:33:7e: 17:09:4d:54:c7:c9:f8:66:b7:bd:aa:f6:b7:a8:0f:27:fe:e6: 73:b7:c1:f3:ee:d6:54:c0:28:7b:e3:c6:8f:8d:b0:3d:42:15: 65:ee:96:c7:45:1c:3f:05:8d:14:88:80:41:13:46:86:a8:c2: 04:66:2f:fe:05:4a:2b:cb:0d:6b:b9:c6:bc:4d:a3:0f:70:b4: b4:32:54:c5:50:02:d3:79:5e:0f:8a:80:1a:01:b2:cc:8d:68: e0:ea:03:ca:74:0e:af:60:9b:a1:7c:3c:ab:5f:28:2f:e7:73: 8f:87:b7:f2:0e:ca:e2:b1:fe:cf:93:cc:db:d3:4a:4e:0e:f0: b0:3e:d9:d5:f2:7c:ee:d0:53:33:1f:36:ca:87:31:50:2f:69: 31:00:73:84:fa:94:ef:ed:e7:d1:ba:c2:51:f2:21:25:35:2a: 09:2f:a3:61:df:b9:2f:5a:4a:06:aa:8c:18:51:9c:98:68:b8: dd:30:bb:e3:4e:65:1b:b4:a9:26:c5:01:bc:a3:29:db:31:a4: bb:51:fe:d6 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEic/mbzMpOIEzEHr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEyMTAxNDUzNFoXDTI3MDQyNjAwNDUzNFowLzEtMCsGA1UEAxMk ZWIyYjlhOWQtODU5Zi00YzJiLTkyZDctNzdiMTVjODM3MTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZQ7OiN1cNtliLuIUAkjQaTuqHHnqfHRN/Vi tz7ntdX4XbTlSHNr0NXaKSkWzEAI8J/jtS3z8zAH4/de/kLefFUhtaY6otcBD2RS W48+dvmDUfDW7NZeH2Rk/Azv1IjNF0axpKMA2ED8wWaPZNhb+Br8Lvx92puNbOdq mKRYky6yjyG5IFrBC771NPoQAQtekmHUn5JyyB3jBFtu8/TWwjxLGA9h8mY5x11l r8ZSVwU4HY0swe4Zv7ZHjoZtUb13T9zF8Oa1i91+36oVilBYS6UjQNtlW2e8x3pJ FrGusoQxqWC6c3VHKHdRIxGmk9BU5B8AmykNv63StrUw4k5B7wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFOgL91ueoPgnPkk9sN9baYlR7XS6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l YjJiOWE5ZC04NTlmLTRjMmItOTJkNy03N2IxNWM4MzcxNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ViMmI5YTlkLTg1OWYtNGMyYi05 MmQ3LTc3YjE1YzgzNzE0My9lYjJiOWE5ZC04NTlmLTRjMmItOTJkNy03N2IxNWM4 MzcxNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADA5RUwDwQCAAIwCQMHACYgABagADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGBBgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaQb9HBSRRTKleecgjlmZAolL to1TyznrfqsAsdmU40KB3wrF01fwDpJ7eyfZCmJDGy1L6TN+FwlNVMfJ+Ga3var2 t6gPJ/7mc7fB8+7WVMAoe+PGj42wPUIVZe6Wx0UcPwWNFIiAQRNGhqjCBGYv/gVK K8sNa7nGvE2jD3C0tDJUxVAC03leD4qAGgGyzI1o4OoDynQOr2CboXw8q18oL+dz j4e38g7K4rH+z5PM29NKTg7wsD7Z1fJ87tBTMx82yocxUC9pMQBzhPqU7+3n0brC UfIhJTUqCS+jYd+5L1pKBqqMGFGcmGi43TC7405lG7SpJsUBvKMp2zGku1H+1g== -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:27 2025 by rpki-client