$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer File: f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer (raw, json) Hash identifier: SXuE+hHB/o/t+1RYjzVQvT0o+KUp73mrHtX3/lxuwMo= Subject key identifier: B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847F57D5A7D8EF676BCAEE85E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Nov 2024 01:45:34 +0000 Certificate not after: Thu 25 Feb 2027 01:45:34 +0000 Subordinate resources: AS: 393256 IP: 204.124.152.0/22 IP: 2606:fec0::/32 IP: 2620:c3:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:7d:5a:7d:8e:f6:76:bc:ae:e8:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 22 01:45:34 2024 GMT Not After : Feb 25 01:45:34 2027 GMT Subject: CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:71:d9:5e:2f:5d:29:63:27:6f:98:3f:2f:c4: e9:ad:d4:62:91:98:0c:07:34:ff:39:e1:40:b7:2a: 96:cd:f0:7c:56:2b:72:b7:57:24:eb:55:b2:9a:69: a1:86:fc:b0:4a:30:3a:99:c3:be:1d:ca:62:0a:3f: cf:31:e6:50:85:f5:34:9f:79:6e:bd:a7:01:f6:91: 68:6d:d1:02:21:10:2d:10:26:27:9b:ac:a0:99:7c: 61:da:8c:62:39:ba:05:ad:b0:be:f7:51:b8:b0:48: b8:2a:86:cb:f8:74:55:aa:8c:d4:87:69:95:4e:4a: 32:7f:b8:46:dc:eb:41:55:ab:51:06:ce:6f:90:1e: 91:37:25:3c:12:87:fd:19:d4:51:af:2f:02:a3:bb: 88:a0:34:75:74:85:da:52:67:6e:3f:31:6b:8d:3b: 1a:1c:de:e0:f1:a8:1d:9d:be:3d:41:03:9f:fd:19: c4:1e:0f:a1:54:7e:c2:e4:a9:d2:e6:08:27:55:8b: d6:d1:35:d0:45:2e:b9:87:ad:8f:56:44:09:4c:ba: 42:b8:d7:6d:42:7a:c0:b6:1e:7a:b2:cd:71:35:7e: eb:d5:1f:09:d9:ce:2c:6c:0f:66:d1:8b:8a:a9:f2: 53:aa:73:72:13:40:0d:98:9a:06:fd:6a:33:d4:a6: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 204.124.152.0/22 IPv6: 2606:fec0::/32 2620:c3:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393256 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:78:60:c2:f2:3d:e2:36:03:0a:74:9b:e7:87:ce:fc:7b: 95:d2:fd:5d:e8:c3:af:17:25:6a:f6:dd:e2:c4:e1:36:7b:1a: e9:da:ee:46:b6:7f:a9:59:08:b4:79:c2:b4:c6:66:53:71:e1: c2:a7:da:db:8c:9b:59:d2:0b:2b:47:37:7d:c5:da:c7:c0:5b: ed:d7:0e:20:82:7c:b1:5a:2f:e6:6a:e6:39:33:4e:12:5c:fb: 6f:81:d0:ec:a9:f5:b0:d5:33:e9:c1:b3:92:58:be:a8:a1:82: d7:8b:e9:53:e7:f5:d4:17:0e:61:5d:b6:2d:5f:83:ac:de:df: 87:1c:75:6a:fc:88:a3:10:4f:0e:a0:3a:f9:0a:7c:0d:4f:1a: c3:fe:39:ac:75:3a:f5:c5:56:0d:47:7d:b3:58:a5:45:a4:33: a7:dd:f7:ec:58:8e:00:39:d3:02:35:e5:e7:91:26:7c:d5:3f: 87:70:2f:06:9b:26:9f:2f:13:d9:01:ee:89:64:f7:cc:2e:45: 11:5d:ff:eb:19:4c:a8:0a:17:ea:98:62:fe:7f:58:4f:48:e3: 91:63:c2:94:b6:17:09:62:30:eb:1c:32:2c:2d:f3:b4:f1:ae: c7:b0:1b:fb:7c:7f:cc:e0:6a:b2:5a:b0:24:28:4a:6a:28:73: db:f0:42:b9 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEf1fVp9jvZ2vK7oXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTEyMjAxNDUzNFoXDTI3MDIyNTAxNDUzNFowLzEtMCsGA1UEAxMk ZjU3ZGI1ZDUtZDBkYS00ZWI2LTkzYTQtZTRjMWEzM2RkMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XHZXi9dKWMnb5g/L8TprdRikZgMBzT/OeFA tyqWzfB8Vityt1ck61WymmmhhvywSjA6mcO+HcpiCj/PMeZQhfU0n3luvacB9pFo bdECIRAtECYnm6ygmXxh2oxiOboFrbC+91G4sEi4KobL+HRVqozUh2mVTkoyf7hG 3OtBVatRBs5vkB6RNyU8Eof9GdRRry8Co7uIoDR1dIXaUmduPzFrjTsaHN7g8agd nb49QQOf/RnEHg+hVH7C5KnS5ggnVYvW0TXQRS65h62PVkQJTLpCuNdtQnrAth56 ss1xNX7r1R8J2c4sbA9m0YuKqfJTqnNyE0ANmJoG/Woz1KY2twIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFLBFWkd/vVeh0bkm38FhlFLgLyYtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m NTdkYjVkNS1kMGRhLTRlYjYtOTNhNC1lNGMxYTMzZGQyM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Y1N2RiNWQ1LWQwZGEtNGViNi05 M2E0LWU0YzFhMzNkZDIzYi9mNTdkYjVkNS1kMGRhLTRlYjYtOTNhNC1lNGMxYTMz ZGQyM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMAwEAgABMAYDBALMfJgwFgQCAAIwEAMFACYG/sADBwAmIADDQAAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgAoMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADAreGDC8j3iNgMK dJvnh878e5XS/V3ow68XJWr23eLE4TZ7Guna7ka2f6lZCLR5wrTGZlNx4cKn2tuM m1nSCytHN33F2sfAW+3XDiCCfLFaL+Zq5jkzThJc+2+B0Oyp9bDVM+nBs5JYvqih gteL6VPn9dQXDmFdti1fg6ze34ccdWr8iKMQTw6gOvkKfA1PGsP+Oax1OvXFVg1H fbNYpUWkM6fd9+xYjgA50wI15eeRJnzVP4dwLwabJp8vE9kB7olk98wuRRFd/+sZ TKgKF+qYYv5/WE9I45FjwpS2FwliMOscMiwt87TxrsewG/t8f8zgarJasCQoSmoo c9vwQrk= -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:36 2025 by rpki-client