$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f.cer File: 233a398f-fd93-43be-83a8-3760879a302f.cer (raw, json) Hash identifier: rwb6WSPKS/ZC73rNY2Q5/chwaC9eHKShy6mIkET+xFs= Subject key identifier: A9:F4:02:50:3E:14:1A:82:E0:42:79:2A:25:A0:B5:DD:F6:65:BB:21 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858482922FF70F7ED16CB54AB1140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/233a398f-fd93-43be-83a8-3760879a302f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 13:45:33 +0000 Certificate not after: Mon 15 Mar 2027 12:45:33 +0000 Subordinate resources: IP: 192.107.3.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:29:22:ff:70:f7:ed:16:cb:54:ab:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 10 13:45:33 2024 GMT Not After : Mar 15 12:45:33 2027 GMT Subject: CN=233a398f-fd93-43be-83a8-3760879a302f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:39:3a:77:52:85:aa:0b:4c:de:41:80:16: ba:c8:84:76:7c:bc:6a:49:cc:8b:38:69:19:eb:7d: 0d:e8:12:65:5d:64:25:a7:0e:30:d0:d3:9e:e5:45: 7a:f3:58:8d:4e:03:fb:cc:db:c9:b0:df:7b:23:4b: 80:ba:84:64:39:37:35:a2:0c:7f:de:98:4d:1b:8c: aa:6a:f1:c4:d8:01:17:84:0e:a9:f1:8e:bb:89:93: b3:c7:f5:a0:93:e5:05:8f:5d:57:f2:68:d6:95:ad: f9:c0:18:3a:31:a7:b1:52:68:3c:c9:b7:85:e8:a8: dc:00:ab:72:82:71:bb:6f:c8:1c:70:c7:65:df:5a: 00:ff:ae:ec:b5:09:1a:c5:1d:5f:86:58:38:c0:39: 10:33:6a:76:a3:3e:2a:ca:42:45:46:57:d1:18:9d: fc:6f:c9:e9:6b:7b:f4:92:1d:d1:89:c2:41:6e:be: 27:44:39:2a:7f:c1:9f:f3:11:a3:69:52:a6:22:76: a4:af:0d:80:73:4d:77:d2:45:f8:42:62:d7:4f:fa: f0:c4:57:84:2d:3b:8b:b6:c2:2f:4b:ac:d9:90:e9: 3e:f7:41:e4:3b:3c:66:bb:ff:74:94:70:6a:e7:19: 88:75:7c:7f:1b:38:49:63:78:7c:54:dc:f5:65:56: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:02:50:3E:14:1A:82:E0:42:79:2A:25:A0:B5:DD:F6:65:BB:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/233a398f-fd93-43be-83a8-3760879a302f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.107.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9b:f1:19:b9:f8:03:d9:bd:08:f1:01:01:da:d1:92:41:cc: 90:ef:cb:13:d9:2f:cb:0a:32:62:28:ed:f8:37:55:49:b3:72: 7a:32:59:1c:0e:02:dd:db:15:ec:77:5a:9c:41:54:1d:de:7e: c7:8b:be:a5:68:e1:8b:d6:27:30:da:29:cc:0d:75:9a:d4:5b: 31:1f:47:91:46:8f:72:e4:8c:38:19:de:8f:db:24:aa:0e:52: aa:a7:46:42:b7:6c:73:0b:69:ee:23:16:f9:5f:2c:5c:ea:67: 52:83:33:9b:a0:e0:f6:7a:95:07:f8:db:42:2c:be:9c:1a:c1: 3c:be:79:e6:a1:56:1a:56:81:e3:cb:2f:7d:ae:7a:9f:4e:67: 71:7f:6d:dc:bb:97:ed:51:d9:45:4f:57:8d:b2:e0:c3:ea:f7: c0:92:a5:e0:29:18:a8:ba:ba:65:4e:ac:3f:e5:b9:1d:b2:77: 0e:bd:08:09:07:cc:28:a3:db:4f:44:de:07:30:13:65:02:75: 18:f4:84:c6:27:ab:a7:03:a4:a0:ca:84:92:df:77:4c:f9:a7: 3b:00:5f:7b:31:19:51:41:0f:48:63:9f:47:fd:02:3d:ce:e0: 47:dc:3f:3e:0c:81:90:95:64:86:59:3c:69:b1:45:27:16:d9: b2:43:eb:96 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEgpIv9w9+0Wy1SrEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMDEzNDUzM1oXDTI3MDMxNTEyNDUzM1owLzEtMCsGA1UEAxMk MjMzYTM5OGYtZmQ5My00M2JlLTgzYTgtMzc2MDg3OWEzMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmI5OndShaoLTN5BgBa6yIR2fLxqScyLOGkZ 630N6BJlXWQlpw4w0NOe5UV681iNTgP7zNvJsN97I0uAuoRkOTc1ogx/3phNG4yq avHE2AEXhA6p8Y67iZOzx/Wgk+UFj11X8mjWla35wBg6MaexUmg8ybeF6KjcAKty gnG7b8gccMdl31oA/67stQkaxR1fhlg4wDkQM2p2oz4qykJFRlfRGJ38b8npa3v0 kh3RicJBbr4nRDkqf8Gf8xGjaVKmInakrw2Ac0130kX4QmLXT/rwxFeELTuLtsIv S6zZkOk+90HkOzxmu/90lHBq5xmIdXx/GzhJY3h8VNz1ZVbG1wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKn0AlA+FBqC4EJ5KiWgtd32ZbshMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y MzNhMzk4Zi1mZDkzLTQzYmUtODNhOC0zNzYwODc5YTMwMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIzM2EzOThmLWZkOTMtNDNiZS04 M2E4LTM3NjA4NzlhMzAyZi8yMzNhMzk4Zi1mZDkzLTQzYmUtODNhOC0zNzYwODc5 YTMwMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAawMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPZvxGbn4A9m9CPEBAdrR kkHMkO/LE9kvywoyYijt+DdVSbNyejJZHA4C3dsV7HdanEFUHd5+x4u+pWjhi9Yn MNopzA11mtRbMR9HkUaPcuSMOBnej9skqg5SqqdGQrdscwtp7iMW+V8sXOpnUoMz m6Dg9nqVB/jbQiy+nBrBPL555qFWGlaB48svfa56n05ncX9t3LuX7VHZRU9XjbLg w+r3wJKl4CkYqLq6ZU6sP+W5HbJ3Dr0ICQfMKKPbT0TeBzATZQJ1GPSExierpwOk oMqEkt93TPmnOwBfezEZUUEPSGOfR/0CPc7gR9w/PgyBkJVkhlk8abFFJxbZskPr lg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:05 2025 by rpki-client