$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer File: a91f81ff-5317-40f4-a544-5df2e3358a57.cer (raw, json) Hash identifier: o7PmbrZCkvIasS0qIdfwOzZgGDbv8HscDQwMIwKYzF0= Subject key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584840DDCFD287416395D2313100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Dec 2024 01:45:32 +0000 Certificate not after: Wed 24 Mar 2027 00:45:32 +0000 Subordinate resources: IP: 199.190.128.0/23 IP: 204.62.16.0 -- 204.62.27.255 IP: 204.87.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:dd:cf:d2:87:41:63:95:d2:31:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 19 01:45:32 2024 GMT Not After : Mar 24 00:45:32 2027 GMT Subject: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:ca:dd:52:d4:f5:eb:c6:25:c7:93:11:91: b1:da:73:3d:98:66:d4:96:9d:b2:04:d8:ed:5b:e6: 36:f6:38:06:76:fa:cf:b7:ae:0c:14:af:f6:1f:af: 60:19:5a:d2:5b:c2:b8:45:58:8f:22:07:7f:94:f6: c2:a5:6e:50:8c:c6:ce:04:3a:6c:1b:ca:5b:90:19: ad:7d:5c:1b:17:14:03:1e:29:fd:cc:59:a8:13:20: 1f:81:3e:49:a3:15:ce:ec:6b:79:63:91:f0:12:e8: 56:2b:44:ac:12:75:55:b4:02:b8:87:97:60:b0:db: ab:6e:ff:bc:84:c8:c3:1a:51:d5:f9:f9:2a:73:61: e6:60:24:aa:2f:be:0b:0d:fd:75:5e:35:96:54:2e: c8:c8:59:1f:2a:be:5f:02:36:8e:90:cc:9d:a5:73: 37:2f:45:81:52:d3:5a:87:5f:03:da:1a:09:00:47: 70:17:58:c9:3f:84:24:56:1f:9b:56:7d:48:ed:80: 5f:19:ab:08:18:72:b3:ae:21:1c:e0:0d:93:ab:9e: 5b:c6:ee:9d:29:11:04:d7:97:9d:49:4a:b4:e5:f7: 06:86:8b:02:3b:66:7e:63:0a:46:3f:39:75:29:33: de:90:b7:d8:31:96:da:de:2e:a9:81:84:96:78:bf: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.190.128.0/23 204.62.16.0-204.62.27.255 204.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bc:ad:96:b1:4b:ba:07:ef:fb:96:77:af:80:0f:93:90:7f: c6:f0:e0:18:df:0c:f7:73:b9:57:99:bf:f7:42:92:7e:65:5d: bb:64:4b:95:4d:b0:1e:a7:5e:65:4f:75:4f:9e:74:40:90:d0: c5:b0:b8:88:a2:be:f8:4c:d1:db:59:cb:03:19:29:fc:b3:87: 37:a1:17:f8:b4:f9:94:60:49:76:e9:65:63:08:4d:47:3c:fc: a3:72:d2:22:1c:0d:98:c9:89:18:5c:3c:af:93:4a:5d:6b:c5: 44:10:52:b7:f0:b1:d1:75:82:72:00:d5:fe:ca:0d:07:b6:9e: 66:6d:68:95:5c:58:39:5c:e3:a0:63:02:d8:48:d2:8e:4f:18: f0:43:85:72:3c:d4:4f:5e:e8:41:d5:40:cb:90:d5:22:f3:21: 8e:8d:0d:bf:08:0c:94:56:26:59:84:f6:38:6a:76:29:f6:e6: e3:b4:e2:af:68:c1:dc:1b:dc:d2:3e:b7:bd:5f:88:1d:63:39: d6:bc:c1:ab:b4:6a:a4:81:bb:c9:80:95:98:6b:65:be:51:39: cf:ed:3c:f0:ee:92:bf:bf:a8:89:d4:fc:42:5a:58:32:d6:21: e8:88:37:d4:ae:29:a6:41:a0:3b:4a:42:42:f0:dc:63:85:f7: cd:30:cc:21 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEhA3c/Sh0FjldIxMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxOTAxNDUzMloXDTI3MDMyNDAwNDUzMlowLzEtMCsGA1UEAxMk YTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBTK3VLU9evGJceTEZGx2nM9mGbUlp2yBNjt W+Y29jgGdvrPt64MFK/2H69gGVrSW8K4RViPIgd/lPbCpW5QjMbOBDpsG8pbkBmt fVwbFxQDHin9zFmoEyAfgT5JoxXO7Gt5Y5HwEuhWK0SsEnVVtAK4h5dgsNurbv+8 hMjDGlHV+fkqc2HmYCSqL74LDf11XjWWVC7IyFkfKr5fAjaOkMydpXM3L0WBUtNa h18D2hoJAEdwF1jJP4QkVh+bVn1I7YBfGasIGHKzriEc4A2Tq55bxu6dKREE15ed SUq05fcGhosCO2Z+YwpGPzl1KTPekLfYMZba3i6pgYSWeL+CrwIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFDQHE2cPER2zTLIudb2wbkvUXyJeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h OTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2E5MWY4MWZmLTUzMTctNDBmNC1h NTQ0LTVkZjJlMzM1OGE1Ny9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMz NThhNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAHHvoAwDAMEBMw+EAMEAsw+GAMEBsxXQDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQARvK2WsUu6B+/7lnevgA+TkH/G8OAY3wz3c7lXmb/3QpJ+ZV27ZEuVTbAe p15lT3VPnnRAkNDFsLiIor74TNHbWcsDGSn8s4c3oRf4tPmUYEl26WVjCE1HPPyj ctIiHA2YyYkYXDyvk0pda8VEEFK38LHRdYJyANX+yg0Htp5mbWiVXFg5XOOgYwLY SNKOTxjwQ4VyPNRPXuhB1UDLkNUi8yGOjQ2/CAyUViZZhPY4anYp9ubjtOKvaMHc G9zSPre9X4gdYznWvMGrtGqkgbvJgJWYa2W+UTnP7Tzw7pK/v6iJ1PxCWlgy1iHo iDfUrimmQaA7SkJC8NxjhffNMMwh -----END CERTIFICATE-----Generated at Sat Apr 5 02:27:30 2025 by rpki-client