$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer File: 1a4b6836-4e28-439c-9ea2-50482aa15b68.cer (raw, json) Hash identifier: YHw2VU0yckyXqai+yMkSDKDxOYW+TYuLXB7ZOCS+pQA= Subject key identifier: 8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848519DEBC948D3AEDD95761200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Dec 2024 01:45:33 +0000 Certificate not after: Tue 30 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 40850 AS: 399535 IP: 138.118.116.0/22 IP: 177.128.128.0/22 IP: 191.5.56.0/22 IP: 2607:2ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:9d:eb:c9:48:d3:ae:dd:95:76:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 25 01:45:33 2024 GMT Not After : Mar 30 00:45:33 2027 GMT Subject: CN=1a4b6836-4e28-439c-9ea2-50482aa15b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:0d:c0:94:90:d3:e6:fa:d1:85:39:2e:e5: 19:05:c2:68:f4:b0:6c:26:05:fc:79:4d:2c:e9:62: 6a:15:a1:50:74:5c:58:a4:86:1d:ce:8f:40:9b:26: aa:ec:83:7b:65:c3:b0:37:9b:2e:06:c4:29:bc:3a: 4e:0a:a4:d4:02:fd:96:b1:fa:0b:09:ec:82:db:d6: ab:a7:b1:99:81:73:58:de:11:eb:92:a7:4a:61:b2: 39:71:15:59:d3:6b:25:70:e5:1f:42:5d:3f:a5:0a: 28:56:91:cc:e4:81:b8:f5:21:88:d0:a5:47:15:4c: f0:e5:16:70:90:60:3f:75:9a:df:37:5e:d5:b6:ec: 96:39:02:42:f0:66:66:fe:c0:32:16:49:3c:d3:93: 23:84:7b:9a:61:75:74:ed:00:70:bc:3b:b8:6c:31: df:01:eb:c0:76:cd:66:c6:72:52:37:98:12:0c:1f: aa:ba:f2:4d:b6:08:d7:0e:93:4b:75:c7:4c:05:3a: 8d:42:d0:6b:28:a1:75:63:51:6c:74:89:b1:8c:40: ef:20:4f:8f:da:5f:e5:7e:d9:2e:ae:77:54:f5:63: c1:f0:de:df:a2:ab:ab:07:8c:42:d7:d7:a0:28:6b: 32:2d:37:c8:d2:c0:b1:a3:4f:ea:c1:4e:15:ea:1e: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 138.118.116.0/22 177.128.128.0/22 191.5.56.0/22 IPv6: 2607:2ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40850 399535 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:67:33:e6:7b:d1:79:ed:6f:44:7a:a5:f8:5f:06:be:c8:ab: 41:7b:3e:2b:35:28:3e:d5:dd:3f:f1:3c:84:ae:50:9d:94:e6: 52:6d:25:3f:aa:fa:91:72:a1:24:72:81:78:c3:3c:fe:a5:e9: 0e:b1:4d:62:e0:9b:31:c5:7d:27:aa:22:8b:46:52:d2:df:94: ab:b1:4d:7a:17:40:0b:de:70:f6:8d:30:25:93:7b:f7:4b:0d: 4e:67:d2:7a:45:2a:0a:64:44:56:e5:d1:72:c7:40:f6:cb:86: 92:29:ef:f4:e1:14:e2:37:dd:ab:53:3b:f1:8c:61:ef:2f:86: 11:d5:68:de:e3:57:66:72:d2:bd:56:4b:6b:1f:f6:78:20:b8: e8:81:c2:9e:9a:a5:74:21:7a:a7:34:0a:09:d3:4f:ab:2e:11: d3:57:e9:dd:c7:3e:30:23:8a:5d:f6:4c:cd:e6:7b:e0:77:d8: ed:0a:8c:44:81:0d:82:18:1f:6f:77:f4:5c:a5:4c:8c:29:4e: 54:e9:eb:81:12:5e:26:4b:08:2a:09:8e:32:57:e2:32:44:81: 77:6f:35:82:64:75:cd:71:67:2d:35:e0:6d:38:57:51:1f:65: 3b:29:b7:69:1c:46:21:e0:90:68:f3:78:4c:12:ee:0e:eb:3e: 56:a8:aa:1d -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEhRnevJSNOu3ZV2EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIyNTAxNDUzM1oXDTI3MDMzMDAwNDUzM1owLzEtMCsGA1UEAxMk MWE0YjY4MzYtNGUyOC00MzljLTllYTItNTA0ODJhYTE1YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva0NwJSQ0+b60YU5LuUZBcJo9LBsJgX8eU0s 6WJqFaFQdFxYpIYdzo9Amyaq7IN7ZcOwN5suBsQpvDpOCqTUAv2WsfoLCeyC29ar p7GZgXNY3hHrkqdKYbI5cRVZ02slcOUfQl0/pQooVpHM5IG49SGI0KVHFUzw5RZw kGA/dZrfN17VtuyWOQJC8GZm/sAyFkk805MjhHuaYXV07QBwvDu4bDHfAevAds1m xnJSN5gSDB+quvJNtgjXDpNLdcdMBTqNQtBrKKF1Y1FsdImxjEDvIE+P2l/lftku rndU9WPB8N7foqurB4xC19egKGsyLTfI0sCxo0/qwU4V6h5QaQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFIoNKLjXq6ajPf1xMGXC2fH5owq/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x YTRiNjgzNi00ZTI4LTQzOWMtOWVhMi01MDQ4MmFhMTViNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFhNGI2ODM2LTRlMjgtNDM5Yy05 ZWEyLTUwNDgyYWExNWI2OC8xYTRiNjgzNi00ZTI4LTQzOWMtOWVhMi01MDQ4MmFh MTViNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKKdnQDBAKxgIADBAK/BTgwDQQCAAIwBwMFACYH LsAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAJ+SAgMGGK8wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAo2cz 5nvRee1vRHql+F8GvsirQXs+KzUoPtXdP/E8hK5QnZTmUm0lP6r6kXKhJHKBeMM8 /qXpDrFNYuCbMcV9J6oii0ZS0t+Uq7FNehdAC95w9o0wJZN790sNTmfSekUqCmRE VuXRcsdA9suGkinv9OEU4jfdq1M78Yxh7y+GEdVo3uNXZnLSvVZLax/2eCC46IHC npqldCF6pzQKCdNPqy4R01fp3cc+MCOKXfZMzeZ74HfY7QqMRIENghgfb3f0XKVM jClOVOnrgRJeJksIKgmOMlfiMkSBd281gmR1zXFnLTXgbThXUR9lOym3aRxGIeCQ aPN4TBLuDus+VqiqHQ== -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:02 2025 by rpki-client