$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer File: 6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer (raw, json) Hash identifier: x/Gpj9g8mNp3dujcViCtQExXdWwc8lS4nDxY/VRxaFg= Subject key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858483199513BEA4F96231903B000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Dec 2024 14:30:25 +0000 Certificate not after: Thu 23 Apr 2026 14:35:15 +0000 Subordinate resources: IP: 64.239.63.0/24 IP: 162.252.36.0/22 IP: 170.117.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jan 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:31:99:51:3b:ea:4f:96:23:19:03:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Dec 13 14:30:25 2024 GMT Not After : Apr 23 14:35:15 2026 GMT Subject: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:e8:d2:4e:de:dd:65:e3:0a:da:91:e2:85: 4a:aa:00:05:18:31:fe:8a:b2:77:aa:67:f4:ba:08: 0c:d4:45:ef:b6:55:ec:98:99:bd:37:8a:1a:72:e8: da:5b:b6:65:b3:94:45:42:22:aa:8b:8a:cf:19:49: 0f:d4:4c:f8:87:ee:a4:15:38:5a:45:62:c4:e7:63: 3d:b3:be:ee:3c:0a:d3:ce:a8:0e:02:5d:23:3d:8b: ed:f8:17:f2:04:74:3e:3b:32:b3:16:8f:bf:4a:a3: 88:f0:fe:e9:d5:7c:65:25:b5:5e:a5:07:79:4c:04: ce:65:6c:34:82:9b:7c:1a:9a:b7:58:61:99:69:5a: 10:d0:98:3e:1c:8e:6b:56:1c:29:f2:95:67:58:ce: 12:08:95:01:a2:03:a8:6d:ee:b3:18:85:b7:ec:0f: 2c:fc:d1:d2:b1:57:e7:cf:15:e3:e4:9a:12:89:d9: b8:80:5e:1f:c0:f4:e3:8e:df:ad:a2:7e:41:4d:55: 35:ca:44:bf:8a:66:9a:28:78:27:27:4f:47:01:9b: e7:0d:9e:e6:1e:57:9f:e1:88:ba:8e:52:28:8f:a8: 8b:ca:83:2a:8e:65:52:0c:46:90:d4:12:8e:85:fc: 7f:1c:f0:79:a4:c1:19:8f:d8:cd:a1:19:d1:76:7f: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.239.63.0/24 162.252.36.0/22 170.117.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:99:b3:63:42:8c:e7:f9:0e:61:c9:77:a0:08:f2:35:51:ae: 1a:76:a5:d4:f1:49:48:81:ca:67:78:8b:56:b3:be:d5:a5:3d: 2a:1e:d8:63:bd:66:75:79:c1:55:44:66:a7:2e:c2:4b:63:45: d6:88:18:9a:31:60:f1:09:f1:a4:64:7e:a9:51:c1:1b:ab:39: 0b:1b:d6:73:d9:63:52:95:72:3c:a5:7a:f5:f9:8d:a6:e8:99: ac:9b:bd:20:e5:68:63:a9:f4:63:e5:f1:00:14:64:ee:f3:18: 81:34:5e:5d:3f:c1:f4:03:af:fb:5d:1e:fc:f2:06:11:09:2c: 44:14:75:cc:60:d9:d8:e6:6e:7c:96:31:16:d1:90:a8:63:37: 59:91:40:91:19:2f:3a:7b:53:f8:db:57:29:67:89:b1:3a:9a: 72:69:86:cc:f6:e1:23:7a:29:ef:a2:77:d9:09:98:a6:00:ec: ae:7c:fd:bd:1c:dd:64:87:01:bd:75:e5:6e:22:09:85:d8:54: 12:a0:b9:df:6c:c7:6a:a8:0a:b0:34:cc:e9:59:0c:b0:ca:15: 24:d0:ea:61:20:9d:aa:91:16:a6:0a:7a:8d:aa:fb:98:f3:e5: da:a5:26:e2:0b:cb:fb:3f:b6:e9:75:c6:e6:83:04:4c:96:ee: 35:73:76:26 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEgxmVE76k+WIxkDsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MTIxMzE0MzAyNVoXDTI2MDQyMzE0MzUxNVowLzEtMCsGA1UEAxMk Njk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeLo0k7e3WXjCtqR4oVKqgAFGDH+irJ3qmf0 uggM1EXvtlXsmJm9N4oacujaW7Zls5RFQiKqi4rPGUkP1Ez4h+6kFThaRWLE52M9 s77uPArTzqgOAl0jPYvt+BfyBHQ+OzKzFo+/SqOI8P7p1XxlJbVepQd5TATOZWw0 gpt8Gpq3WGGZaVoQ0Jg+HI5rVhwp8pVnWM4SCJUBogOobe6zGIW37A8s/NHSsVfn zxXj5JoSidm4gF4fwPTjjt+ton5BTVU1ykS/imaaKHgnJ09HAZvnDZ7mHlef4Yi6 jlIoj6iLyoMqjmVSDEaQ1BKOhfx/HPB5pMEZj9jNoRnRdn+QwwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFNQJW061/jcu84R2FwYeIvUXnAqEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY5NTJjYzBiLWEzNjUtNDBiOC1h OGIzLTQzNDA4YzRjNmZlMS82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0 YzZmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABA7z8DBAKi/CQDBAKqdaQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkpmz Y0KM5/kOYcl3oAjyNVGuGnal1PFJSIHKZ3iLVrO+1aU9Kh7YY71mdXnBVURmpy7C S2NF1ogYmjFg8QnxpGR+qVHBG6s5CxvWc9ljUpVyPKV69fmNpuiZrJu9IOVoY6n0 Y+XxABRk7vMYgTReXT/B9AOv+10e/PIGEQksRBR1zGDZ2OZufJYxFtGQqGM3WZFA kRkvOntT+NtXKWeJsTqacmmGzPbhI3op76J32QmYpgDsrnz9vRzdZIcBvXXlbiIJ hdhUEqC532zHaqgKsDTM6VkMsMoVJNDqYSCdqpEWpgp6jar7mPPl2qUm4gvL+z+2 6XXG5oMETJbuNXN2Jg== -----END CERTIFICATE-----Generated at Tue Jan 14 19:53:58 2025 by rpki-client on console-ams.rpki-client.org