$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer File: 4ba03064-0288-4ec4-b73f-d6ba1d639961.cer (raw, json) Hash identifier: 5kNl7ZpAIJe6tYTLZ0Du/FU+B+2360lh7VKpS8jn/S8= Subject key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848A3E8ACBB90EC57725B1E16C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jan 2025 13:12:28 +0000 Certificate not after: Fri 26 Feb 2027 13:45:33 +0000 Subordinate resources: AS: 6605 AS: 36090 AS: 54852 IP: 23.160.200.0/23 IP: 149.112.75.0 -- 149.112.76.255 IP: 216.40.92.0/22 IP: 2602:fa3d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:e8:ac:bb:90:ec:57:72:5b:1e:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 23 13:12:28 2025 GMT Not After : Feb 26 13:45:33 2027 GMT Subject: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:38:f6:f7:97:75:dd:03:f1:25:76:b0:e5: 11:87:13:5c:de:18:98:91:57:35:8a:8c:db:6e:bb: 48:54:5d:a9:f0:b2:08:7c:dc:89:cd:c7:32:31:02: d8:44:4b:f4:7b:1c:3e:a7:e4:99:9f:af:f6:7c:af: 61:b1:26:92:ee:41:9a:f2:43:43:de:e5:68:15:8b: 82:62:70:4c:75:7f:74:2a:b8:c1:b4:79:ad:6f:5b: 7a:b1:b0:a0:cc:dc:a2:11:52:19:0e:6f:6b:70:4d: 96:32:cf:ff:9b:0c:2b:f6:1c:d6:81:b2:bf:48:50: a6:04:d7:79:ae:d3:e6:8c:d2:22:c1:ca:ae:b0:36: 8b:c8:0c:f7:c2:12:bc:4b:13:4f:2c:a8:cc:dc:3b: 42:24:94:99:11:ac:d7:76:b0:eb:29:5e:65:18:4c: ad:50:65:de:fb:64:47:5f:2d:c8:da:f4:59:e1:b1: 5f:34:20:db:01:b3:c4:01:29:3a:32:fb:74:92:77: cd:a7:d4:2e:10:c7:89:26:7e:18:d7:33:01:7e:67: 69:82:f6:b9:bb:f0:9d:d8:23:32:34:ab:91:de:c6: 91:b3:fb:b0:af:1d:c5:90:9f:b8:41:bf:f9:6b:d6: d0:7d:97:c6:48:97:74:ce:53:09:cb:30:e1:c9:44: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.200.0/23 149.112.75.0-149.112.76.255 216.40.92.0/22 IPv6: 2602:fa3d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6605 36090 54852 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2e:41:46:ea:f5:95:2f:42:65:86:41:75:ca:2f:30:e8:5b: 52:04:6f:d3:be:51:ad:3c:f7:5f:9a:b1:76:f5:1f:83:41:2b: 0d:bf:70:10:aa:73:34:53:b1:4f:40:98:9e:0b:a4:c9:01:e4: 21:f7:66:39:9e:71:f9:fb:34:e9:7d:aa:c3:0a:81:1b:b7:ac: 05:c0:fa:28:13:78:52:63:b1:bb:7e:3b:76:76:26:2e:48:8a: c8:b4:81:fd:35:97:d2:ec:1c:83:fc:75:23:75:9e:cf:a8:e0: d5:3a:a9:03:58:99:89:b4:53:d7:56:5c:cf:95:27:82:b0:5b: 04:15:e8:77:bf:f0:14:e6:c5:41:13:e7:fa:a8:3f:3f:57:f1: 81:22:a8:a7:33:d2:22:53:99:3b:ea:0c:26:05:7a:96:bb:37: 9f:38:5a:cb:90:0e:30:86:9e:a3:d4:65:43:58:15:92:04:01: 21:f9:6a:3b:dd:78:7b:8a:c1:46:f6:ef:a7:eb:da:33:1c:38: b0:83:cc:7d:1a:bf:a2:b6:99:dc:bc:0c:b0:62:9a:39:8e:92: ab:ae:38:88:eb:b4:a1:e2:01:fd:cd:4d:4f:5a:b9:fc:06:62: 4f:7f:f6:58:fc:28:6e:cf:37:ca:85:d8:90:99:39:83:84:fd: b1:a0:0f:2e -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEij6Ky7kOxXclseFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDEyMzEzMTIyOFoXDTI3MDIyNjEzNDUzM1owLzEtMCsGA1UEAxMk NGJhMDMwNjQtMDI4OC00ZWM0LWI3M2YtZDZiYTFkNjM5OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNE49veXdd0D8SV2sOURhxNc3hiYkVc1iozb brtIVF2p8LIIfNyJzccyMQLYREv0exw+p+SZn6/2fK9hsSaS7kGa8kND3uVoFYuC YnBMdX90KrjBtHmtb1t6sbCgzNyiEVIZDm9rcE2WMs//mwwr9hzWgbK/SFCmBNd5 rtPmjNIiwcqusDaLyAz3whK8SxNPLKjM3DtCJJSZEazXdrDrKV5lGEytUGXe+2RH Xy3I2vRZ4bFfNCDbAbPEASk6Mvt0knfNp9QuEMeJJn4Y1zMBfmdpgva5u/Cd2CMy NKuR3saRs/uwrx3FkJ+4Qb/5a9bQfZfGSJd0zlMJyzDhyUS5PQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFNWwofboyAybDbhvPXggL3t51K3VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2Mzk5NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRiYTAzMDY0LTAyODgtNGVjNC1i NzNmLWQ2YmExZDYzOTk2MS80YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2 Mzk5NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMCAEAgABMBoDBAEXoMgwDAMEAJVwSwMEAJVwTAMEAtgoXDAOBAIA AjAIAwYEJgL6PQAwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICGc0CAwCM+gIDANZE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIuQUbq9ZUvQmWGQXXKLzDoW1IEb9O+Ua0891+asXb1H4NBKw2/ cBCqczRTsU9AmJ4LpMkB5CH3Zjmecfn7NOl9qsMKgRu3rAXA+igTeFJjsbt+O3Z2 Ji5Iisi0gf01l9LsHIP8dSN1ns+o4NU6qQNYmYm0U9dWXM+VJ4KwWwQV6He/8BTm xUET5/qoPz9X8YEiqKcz0iJTmTvqDCYFepa7N584WsuQDjCGnqPUZUNYFZIEASH5 ajvdeHuKwUb276fr2jMcOLCDzH0av6K2mdy8DLBimjmOkquuOIjrtKHiAf3NTU9a ufwGYk9/9lj8KG7PN8qF2JCZOYOE/bGgDy4= -----END CERTIFICATE-----Generated at Sat Apr 5 00:09:56 2025 by rpki-client