$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer File: 5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer (raw, json) Hash identifier: 6BJ8uzlT1eVueCQ5hY5Z+9YcZqpzGv7WQhFGRj/16AE= Subject key identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858481432DD23A60B9F2CD4B73B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Dec 2024 01:45:32 +0000 Certificate not after: Mon 08 Mar 2027 01:45:32 +0000 Subordinate resources: AS: 31782 IP: 216.249.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:32:dd:23:a6:0b:9f:2c:d4:b7:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 3 01:45:32 2024 GMT Not After : Mar 8 01:45:32 2027 GMT Subject: CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:57:50:b4:23:6b:7f:8e:82:5d:5a:93:63: e6:bd:bf:59:a3:7e:28:48:b0:58:b0:ae:48:81:f8: 9a:8f:14:10:f8:1e:70:46:e3:57:bf:d8:3c:e0:b1: c7:a9:33:77:1a:c8:57:05:8e:d5:f1:9f:78:fb:ea: 7d:c5:c6:a1:d8:ef:1d:02:bd:e4:ae:36:58:21:42: 97:88:4e:43:62:2c:72:e4:a2:b0:09:99:e2:97:72: c5:5e:24:44:3f:cb:a5:6b:78:2a:0a:f6:1e:1a:8d: bd:fe:f3:93:ea:27:4b:6a:a1:46:18:c6:91:c6:12: 47:80:d6:be:38:4b:2f:80:23:56:e9:a3:0f:9c:9a: ec:db:1e:6f:0f:e2:13:f8:91:b8:fe:7a:f5:47:f4: 25:2d:d7:9d:9e:7c:b4:b7:01:e7:5a:73:13:28:00: 20:60:3b:c9:1e:89:f8:a6:f3:3a:75:6f:be:87:ae: 48:a9:83:f4:3e:81:09:46:a7:e1:c1:4f:b2:26:34: 46:7e:6d:db:a1:fc:a3:fe:94:84:a5:35:97:6a:90: e8:e4:fc:51:89:c4:ae:7e:33:83:5b:85:d7:e2:94: 69:30:6c:ab:b4:bf:83:7f:5b:61:c6:08:9b:73:98: 00:4c:c8:f8:56:99:2d:47:8f:d9:ac:f2:dc:6a:71: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 216.249.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31782 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b8:a1:a8:25:04:8c:dd:d9:3a:8d:4f:4e:08:bc:9d:87:f3: 3d:5f:d5:7f:34:f7:a7:f8:9f:95:bc:e2:ac:ae:22:b7:c1:30: 05:1d:56:0c:ad:79:af:c0:c0:1e:8b:1d:21:78:8c:eb:1a:ec: 43:f2:cd:f8:fe:f8:81:33:54:37:bc:1f:22:49:e7:83:ec:cc: 31:16:61:31:27:e7:1a:b2:3d:1e:48:77:c8:48:35:61:25:e8: 32:72:fc:10:62:fe:a0:b2:7e:9f:d2:a2:e8:d5:ec:66:fd:38: 90:fb:fb:80:65:41:7e:37:60:82:1a:90:22:46:93:b6:c2:7b: b6:6a:13:09:cd:6e:8d:a8:3e:4b:04:ff:60:6c:1b:37:be:b5: 2d:0b:33:c1:f2:7e:b5:19:09:01:f6:f1:e0:aa:6b:13:3f:03: ff:44:10:e1:c6:82:df:a0:3c:f5:70:99:af:87:4c:d3:e5:c4: 8c:6d:d5:c9:29:83:5d:e5:67:4a:34:d5:86:ca:4f:b3:d6:15: a5:43:6f:34:06:ff:4f:7e:6a:44:6f:8f:d2:ca:a1:09:c7:d6: f9:1f:34:43:a3:36:34:8e:29:40:b9:45:7b:67:18:8a:c7:6a: 55:83:68:c5:4a:6f:8b:8d:93:73:1d:52:64:b4:77:17:d5:d7: 09:f9:3d:52 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEgUMt0jpgufLNS3O0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIwMzAxNDUzMloXDTI3MDMwODAxNDUzMlowLzEtMCsGA1UEAxMk NWYyYTkxODktYzEyNS00ZTAwLTljOGEtMzQzODA1ZmY2ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdpXULQja3+Ogl1ak2Pmvb9Zo34oSLBYsK5I gfiajxQQ+B5wRuNXv9g84LHHqTN3GshXBY7V8Z94++p9xcah2O8dAr3krjZYIUKX iE5DYixy5KKwCZnil3LFXiREP8ula3gqCvYeGo29/vOT6idLaqFGGMaRxhJHgNa+ OEsvgCNW6aMPnJrs2x5vD+IT+JG4/nr1R/QlLdednny0twHnWnMTKAAgYDvJHon4 pvM6dW++h65IqYP0PoEJRqfhwU+yJjRGfm3bofyj/pSEpTWXapDo5PxRicSufjOD W4XX4pRpMGyrtL+Df1thxgibc5gATMj4VpktR4/ZrPLcanGkewIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHOL+xjr1DIxghyj1zIY3yHxRB0QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVmZjZmYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVmMmE5MTg5LWMxMjUtNGUwMC05 YzhhLTM0MzgwNWZmNmZiOS81ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVm ZjZmYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATY+TAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fCYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALLihqCUEjN3ZOo1PTgi8nYfzPV/VfzT3p/iflbzirK4it8Ew BR1WDK15r8DAHosdIXiM6xrsQ/LN+P74gTNUN7wfIknng+zMMRZhMSfnGrI9Hkh3 yEg1YSXoMnL8EGL+oLJ+n9Ki6NXsZv04kPv7gGVBfjdgghqQIkaTtsJ7tmoTCc1u jag+SwT/YGwbN761LQszwfJ+tRkJAfbx4KprEz8D/0QQ4caC36A89XCZr4dM0+XE jG3VySmDXeVnSjTVhspPs9YVpUNvNAb/T35qRG+P0sqhCcfW+R80Q6M2NI4pQLlF e2cYisdqVYNoxUpvi42Tcx1SZLR3F9XXCfk9Ug== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:10 2025 by rpki-client