$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer File: 9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer (raw, json) Hash identifier: 52MmCjH5z60Y6360enfqNp+EovSZyDg8vNOlwXuMuaU= Subject key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858483F54ADE818EC6E53CABC1B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Dec 2024 12:33:26 +0000 Certificate not after: Thu 21 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 25828 AS: 54885 AS: 394217 AS: 395371 IP: 192.102.16.0/24 IP: 192.207.45.0/24 IP: 2601:3000::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:54:ad:e8:18:ec:6e:53:ca:bc:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 18 12:33:26 2024 GMT Not After : Jan 21 01:45:26 2027 GMT Subject: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:c1:f5:31:a7:e9:63:25:61:b9:c6:b1:f3: 19:5d:f5:1a:22:3e:94:c5:94:ef:e8:05:40:c4:1e: a0:4b:96:6b:80:d2:87:de:cb:21:b6:0e:05:e9:9c: 49:96:61:a4:a6:16:5b:54:0e:21:e4:95:fb:5e:1b: c1:3a:d3:4a:29:fa:e2:38:c6:53:61:df:16:7c:dd: 6e:1a:8f:96:05:8a:ac:fd:0b:16:40:6f:de:ca:90: 36:89:83:aa:a2:95:ed:87:e4:5a:fd:4e:a7:4d:fe: bc:bf:5c:5c:ac:61:07:4a:6f:3a:06:52:59:fd:29: e1:ff:4c:8b:df:38:63:b9:ac:0d:a1:46:df:3f:56: f6:6a:d3:5b:3c:70:e2:63:6e:4d:d3:56:ca:5c:e7: 23:36:55:5f:9d:3e:30:9c:4f:2d:08:8b:da:fc:67: bb:9e:e6:2d:81:51:7e:2e:fe:d3:fe:44:74:55:a3: 6d:9c:2c:4e:57:20:b0:c1:a4:5b:61:6a:0b:2f:63: 55:b1:27:25:27:81:00:6e:f4:17:c3:76:44:d2:b3: e2:8d:41:bb:11:d7:20:98:37:38:f8:a0:78:5c:b3: ae:7b:4c:9d:3f:f9:f5:b5:6c:dd:f4:17:8d:fd:a4: fe:18:69:55:f4:51:e0:59:c9:b1:24:41:bd:59:34: 05:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.102.16.0/24 192.207.45.0/24 IPv6: 2601:3000::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25828 54885 394217 395371 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:3b:89:4c:b7:dc:e3:6d:e3:ea:e5:53:4e:99:72:17:51: 1b:eb:84:b2:2c:55:b8:73:00:9f:ab:d4:ae:78:28:c3:a4:f4: 5f:42:b8:99:33:8a:2f:95:4f:e3:41:a2:87:05:af:aa:51:81: dd:00:81:19:38:d8:ed:ef:40:31:d1:79:53:f0:cd:07:bc:19: 9a:4e:1e:83:d8:31:93:46:38:1e:20:82:43:66:f4:29:47:6d: 9f:a4:5b:d0:ed:e6:51:3c:e4:ec:7a:9f:d0:65:9e:dc:64:52: bc:eb:7a:93:66:a1:66:d8:84:c8:88:63:1d:65:ef:25:bf:dc: 26:15:01:c2:fc:ce:d4:e9:a9:d0:ec:d5:f0:e1:50:c6:8f:dd: 08:10:f3:58:01:10:3c:5e:22:b3:a9:51:c4:35:94:40:63:f8: 63:4f:55:d3:bb:53:d7:0d:77:1d:80:c9:8b:97:a6:21:3c:c6: c1:bb:6b:96:50:e3:ac:b1:a0:b4:33:c5:0e:d4:8e:42:d4:e4: 30:35:f6:d0:41:78:2e:57:dc:44:47:76:fe:d7:71:02:ec:80: af:94:be:17:d0:c4:d0:76:4a:39:23:e9:0f:dd:e5:ce:62:47: fc:46:7f:fa:41:12:49:03:b9:f0:45:ea:60:84:0a:e8:87:ff: 4f:df:f6:7e -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEg/VK3oGOxuU8q8GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxODEyMzMyNloXDTI3MDEyMTAxNDUyNlowLzEtMCsGA1UEAxMk OWE2MzYxZDItYmNlNy00MDlhLThmMTktZGRkODFhMWY2MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmjB9TGn6WMlYbnGsfMZXfUaIj6UxZTv6AVA xB6gS5ZrgNKH3sshtg4F6ZxJlmGkphZbVA4h5JX7XhvBOtNKKfriOMZTYd8WfN1u Go+WBYqs/QsWQG/eypA2iYOqopXth+Ra/U6nTf68v1xcrGEHSm86BlJZ/Snh/0yL 3zhjuawNoUbfP1b2atNbPHDiY25N01bKXOcjNlVfnT4wnE8tCIva/Ge7nuYtgVF+ Lv7T/kR0VaNtnCxOVyCwwaRbYWoLL2NVsSclJ4EAbvQXw3ZE0rPijUG7EdcgmDc4 +KB4XLOue0ydP/n1tWzd9BeN/aT+GGlV9FHgWcmxJEG9WTQFDQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFO2iRk5X7RdmPYywL2GL9HhqS1u5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWExZjYyNDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzlhNjM2MWQyLWJjZTctNDA5YS04 ZjE5LWRkZDgxYTFmNjI0OS85YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWEx ZjYyNDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBADAZhADBADAzy0wDQQCAAIwBwMFBCYBMAAwKAYI KwYBBQUHAQgBAf8EGTAXoBUwEwICZOQCAwDWZQIDBgPpAgMGCGswVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA IWo7iUy33ONt4+rlU06ZchdRG+uEsixVuHMAn6vUrngow6T0X0K4mTOKL5VP40Gi hwWvqlGB3QCBGTjY7e9AMdF5U/DNB7wZmk4eg9gxk0Y4HiCCQ2b0KUdtn6Rb0O3m UTzk7Hqf0GWe3GRSvOt6k2ahZtiEyIhjHWXvJb/cJhUBwvzO1Omp0OzV8OFQxo/d CBDzWAEQPF4is6lRxDWUQGP4Y09V07tT1w13HYDJi5emITzGwbtrllDjrLGgtDPF DtSOQtTkMDX20EF4LlfcREd2/tdxAuyAr5S+F9DE0HZKOSPpD93lzmJH/EZ/+kES SQO58EXqYIQK6If/T9/2fg== -----END CERTIFICATE-----Generated at Fri Apr 4 19:46:37 2025 by rpki-client