$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer File: 5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer (raw, json) Hash identifier: U7nRNGuv8c/OXGGq+Wdzl9wcNbmECHEmw6oAZgDDwQo= Subject key identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847FB12B5BF04DA8BAFA0CE52A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 Nov 2024 01:45:33 +0000 Certificate not after: Sat 27 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 31748 IP: 149.112.8.0/24 IP: 2001:504:101::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fb:12:b5:bf:04:da:8b:af:a0:ce:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 24 01:45:33 2024 GMT Not After : Feb 27 01:45:33 2027 GMT Subject: CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:a7:20:a1:d0:5a:e0:c4:d5:90:73:b5:f8: c1:4b:ba:d0:f7:f0:a4:1d:ac:ad:45:54:ed:04:49: cb:fd:50:59:fa:e1:11:54:df:2d:92:0f:c3:76:e0: 63:27:dc:e1:a4:30:c6:a6:7e:f0:ff:6f:0d:75:6d: 74:50:15:19:25:a5:5e:c6:9e:d4:84:57:26:d1:95: 09:f5:39:75:51:41:db:e9:bb:6d:06:22:61:69:e2: d7:de:b7:e9:2a:f6:6c:82:8f:d1:cc:21:3d:f2:35: 92:ef:4b:ba:79:0e:e8:1d:bd:f5:03:c1:da:c2:f6: 9b:10:0e:97:e2:0f:6e:77:76:e8:f8:23:26:51:a3: a1:8f:59:89:c3:4f:c2:d5:fd:b1:c0:18:fc:db:c7: e5:26:ba:ca:7b:19:01:c8:57:05:61:15:1e:ec:fd: a2:61:7a:f8:ca:a2:ea:b5:36:14:4c:78:1b:65:50: 86:23:70:cf:a9:b1:a0:5e:0f:fc:01:19:e9:72:60: 98:b9:1b:84:2b:e6:a3:61:61:6f:47:a7:e9:c8:60: ef:28:6b:1a:a7:73:d7:38:fd:09:1e:b5:59:34:13: 96:a0:63:ca:5d:c1:af:d4:f2:95:d1:8e:d1:db:cd: 76:13:a8:20:7a:34:eb:18:8e:f4:32:74:0d:c3:b0: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.112.8.0/24 IPv6: 2001:504:101::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31748 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:53:bd:51:62:10:71:0c:00:6b:d4:2d:a4:b5:18:0a:b7:ae: ed:d4:dc:e1:68:62:11:16:d6:02:89:41:32:08:9f:33:6d:46: ed:49:6b:4b:1c:1e:86:b1:05:5b:b1:04:5e:4d:ff:12:6c:25: 46:18:92:9c:07:1e:e1:fc:4e:92:96:20:3c:a9:bc:0f:ad:2b: b0:a2:36:d1:f0:cc:51:91:8f:0f:53:a0:4f:02:8c:ee:7c:00: 66:ae:90:b0:c3:15:40:e2:a7:6f:3f:26:50:24:24:7c:ba:11: 74:ec:ed:6c:2f:ff:46:8d:fc:f4:16:94:40:79:c0:67:42:a8: 98:bd:05:b3:7f:91:0c:fc:4e:9b:96:83:b6:9e:87:6a:fb:6b: b9:01:20:10:50:78:eb:47:7a:22:3a:47:10:d9:18:4c:18:49: 9b:3f:b3:a9:c9:a3:da:1a:da:ac:3e:c4:62:0d:c1:17:1c:ad: ef:de:0c:76:74:e3:6b:e8:f2:2b:fe:ee:6d:b7:fa:20:93:d5: f2:f4:62:ed:f1:a7:b0:80:e5:95:89:a3:ca:3d:0c:04:37:71: 6e:76:26:f4:8e:62:ae:a7:13:49:61:31:bf:a3:d7:eb:57:17: 74:aa:3d:24:1e:d7:6f:16:6b:d7:d2:a7:18:18:2a:bb:da:30: f5:85:25:52 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEf7ErW/BNqLr6DOUqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyNDAxNDUzM1oXDTI3MDIyNzAxNDUzM1owLzEtMCsGA1UEAxMk NWM4OTFjYWEtN2RjOC00NTViLWE1ZTgtNWMwMzcwZDI1YjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdGnIKHQWuDE1ZBztfjBS7rQ9/CkHaytRVTt BEnL/VBZ+uERVN8tkg/DduBjJ9zhpDDGpn7w/28NdW10UBUZJaVexp7UhFcm0ZUJ 9Tl1UUHb6bttBiJhaeLX3rfpKvZsgo/RzCE98jWS70u6eQ7oHb31A8HawvabEA6X 4g9ud3bo+CMmUaOhj1mJw0/C1f2xwBj828flJrrKexkByFcFYRUe7P2iYXr4yqLq tTYUTHgbZVCGI3DPqbGgXg/8ARnpcmCYuRuEK+ajYWFvR6fpyGDvKGsap3PXOP0J HrVZNBOWoGPKXcGv1PKV0Y7R2812E6ggejTrGI70MnQNw7CHTQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFWU7Uvik88pjHp8PUU/QIsSjdqUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 Yzg5MWNhYS03ZGM4LTQ1NWItYTVlOC01YzAzNzBkMjViOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVjODkxY2FhLTdkYzgtNDU1Yi1h NWU4LTVjMDM3MGQyNWI5Yy81Yzg5MWNhYS03ZGM4LTQ1NWItYTVlOC01YzAzNzBk MjViOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACVcAgwDwQCAAIwCQMHACABBQQBATAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ8BDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLU71RYhBxDABr1C2ktRgKt67t 1NzhaGIRFtYCiUEyCJ8zbUbtSWtLHB6GsQVbsQReTf8SbCVGGJKcBx7h/E6SliA8 qbwPrSuwojbR8MxRkY8PU6BPAozufABmrpCwwxVA4qdvPyZQJCR8uhF07O1sL/9G jfz0FpRAecBnQqiYvQWzf5EM/E6bloO2nodq+2u5ASAQUHjrR3oiOkcQ2RhMGEmb P7OpyaPaGtqsPsRiDcEXHK3v3gx2dONr6PIr/u5tt/ogk9Xy9GLt8aewgOWViaPK PQwEN3Fudib0jmKupxNJYTG/o9frVxd0qj0kHtdvFmvX0qcYGCq72jD1hSVS -----END CERTIFICATE-----Generated at Fri Apr 4 16:28:18 2025 by rpki-client