$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer File: aed2676f-2a52-4e10-9b06-0b423a5503c5.cer (raw, json) Hash identifier: gKzPGMh3eF/XSpS71t96MAM8ITqHXBdlmapRgb/Tki0= Subject key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584861A3E31A00BDEF1355546E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Dec 2024 19:30:31 +0000 Certificate not after: Sun 04 Apr 2027 17:11:23 +0000 Subordinate resources: AS: 11452 IP: 146.203.0.0/16 IP: 2620:12b:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:61:a3:e3:1a:00:bd:ef:13:55:54:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Dec 30 19:30:31 2024 GMT Not After : Apr 4 17:11:23 2027 GMT Subject: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6b:2b:13:1c:28:b0:94:f7:62:bf:27:d5:1b: 79:d1:36:d8:ee:e9:cb:0f:15:1f:24:a7:36:7d:8d: 8e:93:43:87:11:bd:c7:ea:69:13:07:91:90:71:83: 63:d9:4d:11:38:a5:ed:49:8a:6d:0a:3f:09:e2:30: a0:e7:01:6f:e0:76:59:df:3c:3b:8c:29:0c:9e:8c: 63:fa:9a:12:79:9d:2d:13:41:c5:fb:1f:02:f1:49: ea:53:61:94:6d:9d:04:06:64:9f:37:15:41:bd:57: 04:7f:08:30:ba:ae:91:d6:6d:64:a9:df:dc:8e:63: ca:7a:e4:90:b1:0f:7d:35:d8:b2:c6:87:64:82:ce: a7:f1:95:ab:9d:c9:eb:4f:b6:a7:b9:a9:56:56:9c: c6:75:af:a4:f5:55:d9:b7:00:78:de:fd:5d:23:20: fb:ed:44:87:f5:4e:46:c9:51:35:72:82:78:da:d0: 46:39:ba:12:d6:05:6b:da:79:c8:23:ce:9d:58:54: 85:9b:af:3d:9b:99:26:3d:71:e7:5b:01:ce:d8:ea: 42:b8:29:9c:bf:d2:d7:8c:11:a9:71:bd:55:c5:dd: 90:ac:51:f5:1c:9a:6c:f6:35:17:2a:07:e1:22:90: 46:a9:c7:5b:38:72:90:30:2a:94:83:6d:3c:96:f9: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 146.203.0.0/16 IPv6: 2620:12b:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cb:19:3c:65:91:5e:49:90:67:0f:bb:cd:af:ce:0e:0d:17: e2:6e:2b:fc:a0:91:78:54:18:78:c0:06:a3:fd:34:1c:96:ac: 19:d0:5c:4c:71:3f:4c:47:ca:ce:90:9b:e9:ce:50:66:3d:35: d2:47:4d:14:cb:cd:08:c1:21:55:c9:31:e3:09:94:56:b0:49: 1b:03:06:18:2e:bc:7a:43:2b:e6:b4:51:74:8a:31:7c:41:36: 6f:c8:52:9f:36:32:16:6f:63:19:d0:a9:c9:c8:85:27:ba:9e: 4a:4c:21:c9:8e:03:42:db:85:a4:6d:df:db:f4:25:20:f1:3d: 81:15:65:2c:73:3b:91:7b:92:88:d9:99:b4:e2:e5:1e:16:e7: 2c:54:73:25:42:c5:2a:c8:d1:9f:4a:db:18:1e:2b:e3:7a:aa: 03:bd:0d:0f:9b:88:14:c7:e1:84:02:51:61:2f:7f:80:cf:db: 87:9c:86:f5:97:9b:3b:54:54:84:2e:fa:45:cc:d7:3d:5c:28: 2e:0c:ab:43:76:d3:18:3a:d9:f8:e9:c5:4d:ea:e2:fe:ad:f9: 27:5b:85:fd:8e:92:4d:fb:81:6f:66:4a:4d:55:5e:31:8b:9d: c2:29:f5:a6:8e:44:5c:da:fa:c1:7a:50:ee:f0:c0:14:08:b6: e8:25:77:70 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEhho+MaAL3vE1VUboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MTIzMDE5MzAzMVoXDTI3MDQwNDE3MTEyM1owLzEtMCsGA1UEAxMk YWVkMjY3NmYtMmE1Mi00ZTEwLTliMDYtMGI0MjNhNTUwM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72srExwosJT3Yr8n1Rt50TbY7unLDxUfJKc2 fY2Ok0OHEb3H6mkTB5GQcYNj2U0ROKXtSYptCj8J4jCg5wFv4HZZ3zw7jCkMnoxj +poSeZ0tE0HF+x8C8UnqU2GUbZ0EBmSfNxVBvVcEfwgwuq6R1m1kqd/cjmPKeuSQ sQ99Ndiyxodkgs6n8ZWrncnrT7anualWVpzGda+k9VXZtwB43v1dIyD77USH9U5G yVE1coJ42tBGOboS1gVr2nnII86dWFSFm689m5kmPXHnWwHO2OpCuCmcv9LXjBGp cb1Vxd2QrFH1HJps9jUXKgfhIpBGqcdbOHKQMCqUg208lvlvUQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMEZJdqyuwXBt3WWwScW/Gx3r3Z+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h ZWQyNjc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQyM2E1NTAzYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2FlZDI2NzZmLTJhNTItNGUxMC05 YjA2LTBiNDIzYTU1MDNjNS9hZWQyNjc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQyM2E1 NTAzYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCSyzAOBAIAAjAIAwYAJiABK8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLLwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY8sZPGWRXkmQZw+7za/ODg0X4m4r /KCReFQYeMAGo/00HJasGdBcTHE/TEfKzpCb6c5QZj010kdNFMvNCMEhVckx4wmU VrBJGwMGGC68ekMr5rRRdIoxfEE2b8hSnzYyFm9jGdCpyciFJ7qeSkwhyY4DQtuF pG3f2/QlIPE9gRVlLHM7kXuSiNmZtOLlHhbnLFRzJULFKsjRn0rbGB4r43qqA70N D5uIFMfhhAJRYS9/gM/bh5yG9ZebO1RUhC76RczXPVwoLgyrQ3bTGDrZ+OnFTeri /q35J1uF/Y6STfuBb2ZKTVVeMYudwin1po5EXNr6wXpQ7vDAFAi26CV3cA== -----END CERTIFICATE-----Generated at Wed Feb 5 15:49:14 2025 by rpki-client