$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee.cer File: 13b4f4a0-c9bc-489a-ac1e-66fb501f67ee.cer (raw, json) Hash identifier: 73FaQXkYQUlCDVxX9nwMAGCXYtbVtSZocagefiXXd9E= Subject key identifier: 0B:33:6F:FA:1C:2F:C6:21:A2:C3:66:13:DE:D3:76:EE:C2:80:0A:F4 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848FEB95C8184EDD9D2FE3EA580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 01:55:41 +0000 Certificate not after: Mon 31 May 2027 00:55:41 +0000 Subordinate resources: AS: 17077 AS: 399895 IP: 158.51.156.0/22 IP: 167.253.40.0/22 IP: 208.77.160.0/22 IP: 2605:94c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:b9:5c:81:84:ed:d9:d2:fe:3e:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 25 01:55:41 2025 GMT Not After : May 31 00:55:41 2027 GMT Subject: CN=13b4f4a0-c9bc-489a-ac1e-66fb501f67ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:d5:75:0d:9b:21:a8:9b:0b:cb:ab:2b:c8: 8c:21:fb:c8:74:50:24:e4:47:68:90:9f:44:33:4e: f0:18:84:f2:d1:fc:c1:48:96:21:4d:43:7c:3c:ec: 40:27:d0:c4:e2:f6:a4:5b:51:f4:0e:e3:0c:a7:96: 6d:a2:a4:29:3c:2a:ee:43:8c:02:81:1e:0c:1c:f9: e3:40:ab:d1:17:12:f8:89:b6:72:b0:13:99:05:a9: e5:97:43:f1:5c:2e:12:b0:6e:43:75:b5:70:73:19: 41:1b:d4:fd:c5:38:a0:3a:d9:a7:9d:a9:32:14:f3: 2e:14:73:59:49:8f:ce:c8:f6:a1:00:15:ef:5e:62: 47:ec:fa:1a:58:8d:09:8b:f5:b5:f5:73:bd:98:93: 5d:72:b1:ff:5a:0c:3b:98:f7:cc:31:41:ba:99:72: 71:bd:91:6e:41:4e:01:8e:c1:82:9a:0b:e0:d9:95: f6:de:ac:0e:92:9d:66:69:0c:37:25:ac:69:30:55: 42:0d:4e:cd:7c:71:0d:43:94:2c:1f:2f:74:bd:8b: c4:cc:ae:2b:41:4c:1d:0c:d9:f5:9a:72:44:4c:95: 83:75:16:8f:38:1e:cc:1b:9f:3b:1f:ed:49:d8:56: 8d:62:7a:e2:7c:2c:d5:86:08:15:cc:26:b3:aa:e9: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:33:6F:FA:1C:2F:C6:21:A2:C3:66:13:DE:D3:76:EE:C2:80:0A:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee/13b4f4a0-c9bc-489a-ac1e-66fb501f67ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 158.51.156.0/22 167.253.40.0/22 208.77.160.0/22 IPv6: 2605:94c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17077 399895 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:05:e4:16:01:16:81:82:48:fd:0d:6a:fc:de:3b:b0:26:9e: 91:1a:f0:16:84:11:d2:31:a5:aa:a5:81:09:50:6b:ea:0e:d0: a3:3c:07:d3:1d:32:fd:fd:ed:65:e7:28:fc:89:39:33:ed:c5: 56:61:bd:50:85:06:d2:f1:be:c2:2a:52:bb:7d:2f:a8:ba:78: f5:9b:60:fa:ae:c4:9d:67:b4:2b:98:da:6f:32:13:5a:12:a1: 86:c5:c9:cd:68:2e:5c:ed:a9:5c:a2:81:d0:f8:7e:17:01:e7: 32:fd:04:d7:1a:94:7b:b9:85:b3:b8:85:ac:50:47:a8:97:d2: 70:dc:e5:b2:6f:98:32:ec:8e:77:82:32:de:22:c0:24:96:97: 62:44:8c:bd:44:10:98:bc:de:18:12:37:b3:c4:ae:cb:94:ab: 8e:fb:59:8e:24:2c:04:f8:3e:e2:54:64:b4:4f:47:b6:7f:48: a2:d8:85:02:1a:2f:0e:80:e0:75:3a:d6:a4:85:9b:e5:b8:a1: 62:94:61:a0:d2:aa:e2:b5:56:83:27:b9:fb:cf:ae:a6:d1:eb: 79:ea:5a:ca:0b:37:78:ca:a5:48:b4:17:42:58:16:d6:96:14: 06:7a:21:58:00:a7:cb:d2:68:1d:a7:90:54:b0:b4:f3:15:2d: f9:50:2f:8e -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEj+uVyBhO3Z0v4+pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDIyNTAxNTU0MVoXDTI3MDUzMTAwNTU0MVowLzEtMCsGA1UEAxMk MTNiNGY0YTAtYzliYy00ODlhLWFjMWUtNjZmYjUwMWY2N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu7VdQ2bIaibC8urK8iMIfvIdFAk5EdokJ9E M07wGITy0fzBSJYhTUN8POxAJ9DE4vakW1H0DuMMp5ZtoqQpPCruQ4wCgR4MHPnj QKvRFxL4ibZysBOZBanll0PxXC4SsG5DdbVwcxlBG9T9xTigOtmnnakyFPMuFHNZ SY/OyPahABXvXmJH7PoaWI0Ji/W19XO9mJNdcrH/Wgw7mPfMMUG6mXJxvZFuQU4B jsGCmgvg2ZX23qwOkp1maQw3JaxpMFVCDU7NfHENQ5QsHy90vYvEzK4rQUwdDNn1 mnJETJWDdRaPOB7MG587H+1J2FaNYnrifCzVhggVzCazqulVyQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFAszb/ocL8YhosNmE97Tdu7CgAr0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x M2I0ZjRhMC1jOWJjLTQ4OWEtYWMxZS02NmZiNTAxZjY3ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzEzYjRmNGEwLWM5YmMtNDg5YS1h YzFlLTY2ZmI1MDFmNjdlZS8xM2I0ZjRhMC1jOWJjLTQ4OWEtYWMxZS02NmZiNTAx ZjY3ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKeM5wDBAKn/SgDBALQTaAwDQQCAAIwBwMFACYF lMAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICQrUCAwYaFzBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPBeQW ARaBgkj9DWr83juwJp6RGvAWhBHSMaWqpYEJUGvqDtCjPAfTHTL9/e1l5yj8iTkz 7cVWYb1QhQbS8b7CKlK7fS+ounj1m2D6rsSdZ7QrmNpvMhNaEqGGxcnNaC5c7alc ooHQ+H4XAecy/QTXGpR7uYWzuIWsUEeol9Jw3OWyb5gy7I53gjLeIsAklpdiRIy9 RBCYvN4YEjezxK7LlKuO+1mOJCwE+D7iVGS0T0e2f0ii2IUCGi8OgOB1OtakhZvl uKFilGGg0qritVaDJ7n7z66m0et56lrKCzd4yqVItBdCWBbWlhQGeiFYAKfL0mgd p5BUsLTzFS35UC+O -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:16 2025 by rpki-client