$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer File: f29918e2-971b-4c6a-bc57-75bdb88796a9.cer (raw, json) Hash identifier: dut2GPsBS+w4NtM9xQfFyDXHtpSKxPFVVvSOwZ+foiE= Subject key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858491509D12FBAFE1F0412DF33C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 32590 IP: 162.254.192.0/21 IP: 192.69.96.0/22 IP: 205.196.6.0/24 IP: 208.64.200.0/22 IP: 208.78.164.0/22 IP: 2602:801:f000::/40 IP: 2620:f9::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d1:2f:ba:fe:1f:04:12:df:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1f:0e:ea:af:8e:a3:34:ba:ea:2f:97:c3:b6: 6c:48:53:ab:51:4d:54:80:59:4e:e4:d4:34:61:1e: 2c:db:24:18:f1:9b:60:34:5f:06:6b:3f:56:3c:0b: 3a:4a:19:76:fe:a0:43:44:f4:26:5f:53:02:dc:a1: 91:9d:4e:b4:bb:99:03:76:01:ae:3c:05:16:07:90: fb:1f:ad:83:5a:80:07:85:1a:b6:b6:c0:35:ca:1b: fe:4f:b2:52:62:ea:cd:d3:de:ea:40:43:3c:f2:5e: f3:b6:61:aa:9a:2b:21:80:25:f6:68:fe:5c:02:cc: 9f:98:4e:ea:08:ff:c0:66:75:56:d9:46:72:0c:03: 96:f0:61:f9:fe:ac:48:7b:8b:2f:d1:18:21:a3:c2: 01:60:3c:43:90:ce:d5:59:24:fd:5f:2e:bf:19:24: 92:d5:b9:81:11:c5:47:69:3e:f6:6e:4c:2b:ab:b1: b5:c4:48:3a:14:98:50:20:9e:6e:8a:83:7f:c6:a4: c4:e0:4b:f8:c3:ca:a3:55:6b:1b:ca:29:83:3b:13: 98:c3:91:7a:0a:7c:5d:de:15:0c:f6:fc:ae:6f:14: 13:36:b9:62:13:a8:41:07:84:c2:41:87:37:e8:46: a3:21:c1:fc:44:c0:0b:24:73:da:e5:b4:0b:dc:46: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.254.192.0/21 192.69.96.0/22 205.196.6.0/24 208.64.200.0/22 208.78.164.0/22 IPv6: 2602:801:f000::/40 2620:f9::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32590 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0c:8b:7c:d4:51:4f:84:73:3a:51:56:3d:c1:88:31:af:3e: 78:14:51:6f:61:ba:ea:23:94:a0:dc:de:2b:7a:cb:d6:e1:7f: 8a:62:11:72:c9:06:ff:15:23:b4:a6:05:d7:c4:30:b4:15:bc: 77:5f:6b:5d:a3:b0:c0:3d:d5:e5:9c:29:31:97:0c:13:82:26: 67:57:10:56:80:a8:86:69:43:24:2e:c3:f2:00:63:81:40:72: 4b:ca:90:88:92:4b:dc:7f:97:ef:b7:46:b4:71:40:ab:ec:bd: 73:27:6f:9f:3e:4c:3b:10:35:61:4c:5b:54:80:74:eb:aa:9d: 6f:19:f0:93:75:28:b0:80:b9:08:e6:03:d8:90:64:cb:a6:44: d5:d6:3c:0e:4c:cd:6b:5b:53:4d:83:c6:9f:49:00:ed:c3:78: 7e:c8:0a:d6:c3:28:31:fc:c4:39:38:4e:ff:db:b3:e9:a1:1d: 71:fe:69:1e:c2:65:5b:74:fc:fd:09:25:f5:44:d5:ac:e7:b8: 15:ef:71:c6:f3:6c:c5:1f:0e:c3:5f:c3:39:82:c0:2d:1b:8c: 91:69:68:23:87:a2:09:d8:ec:f9:61:c2:69:c2:70:cc:6f:41: 05:7b:ae:0f:e4:12:75:e7:f9:14:be:22:c3:f4:53:da:48:f3: 1f:00:7c:df -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWEkVCdEvuv4fBBLfM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk ZjI5OTE4ZTItOTcxYi00YzZhLWJjNTctNzViZGI4ODc5NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B8O6q+OozS66i+Xw7ZsSFOrUU1UgFlO5NQ0 YR4s2yQY8ZtgNF8Gaz9WPAs6Shl2/qBDRPQmX1MC3KGRnU60u5kDdgGuPAUWB5D7 H62DWoAHhRq2tsA1yhv+T7JSYurN097qQEM88l7ztmGqmishgCX2aP5cAsyfmE7q CP/AZnVW2UZyDAOW8GH5/qxIe4sv0Rgho8IBYDxDkM7VWST9Xy6/GSSS1bmBEcVH aT72bkwrq7G1xEg6FJhQIJ5uioN/xqTE4Ev4w8qjVWsbyimDOxOYw5F6Cnxd3hUM 9vyubxQTNrliE6hBB4TCQYc36EajIcH8RMALJHPa5bQL3Ea6TwIDAQABo4IESzCC BEcwHQYDVR0OBBYEFMSin6VjAlPNh16vohqONeyUc6GFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m Mjk5MThlMi05NzFiLTRjNmEtYmM1Ny03NWJkYjg4Nzk2YTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YyOTkxOGUyLTk3MWItNGM2YS1i YzU3LTc1YmRiODg3OTZhOS9mMjk5MThlMi05NzFiLTRjNmEtYmM1Ny03NWJkYjg4 Nzk2YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MCQEAgABMB4DBAOi/sADBALARWADBADNxAYDBALQQMgDBALQTqQw FwQCAAIwEQMGACYCCAHwAwcEJiAA+QAAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC An9OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEcMi3zUUU+EczpRVj3BiDGvPngUUW9huuojlKDc3it6y9bh f4piEXLJBv8VI7SmBdfEMLQVvHdfa12jsMA91eWcKTGXDBOCJmdXEFaAqIZpQyQu w/IAY4FAckvKkIiSS9x/l++3RrRxQKvsvXMnb58+TDsQNWFMW1SAdOuqnW8Z8JN1 KLCAuQjmA9iQZMumRNXWPA5MzWtbU02Dxp9JAO3DeH7ICtbDKDH8xDk4Tv/bs+mh HXH+aR7CZVt0/P0JJfVE1aznuBXvccbzbMUfDsNfwzmCwC0bjJFpaCOHognY7Plh wmnCcMxvQQV7rg/kEnXn+RS+IsP0U9pI8x8AfN8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:57 2025 by rpki-client