$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer File: ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer (raw, json) Hash identifier: s9kYOF//MmCMZWRVKace+GE20ZshIUHWdQbvNz3UD1k= Subject key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848B486877B1CA9376455C18100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 12:03:27 +0000 Certificate not after: Tue 16 Mar 2027 14:38:23 +0000 Subordinate resources: AS: 394911 IP: 64.66.244.0/22 IP: 172.82.12.0/22 IP: 206.183.136.0/22 IP: 207.90.228.0/22 IP: 207.166.140.0/22 IP: 2606:d8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:86:87:7b:1c:a9:37:64:55:c1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 29 12:03:27 2025 GMT Not After : Mar 16 14:38:23 2027 GMT Subject: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9c:30:5b:0b:da:c4:5b:1e:f5:57:90:44:9f: 8a:2f:96:73:a9:07:c4:ba:74:55:b8:f3:bd:18:aa: 31:c8:1c:67:a2:65:29:fa:4b:62:66:22:fd:c4:8b: f1:24:6f:1a:af:69:02:a2:95:ce:91:b4:a3:a8:b9: 84:76:2b:a5:64:c4:fb:5f:09:67:f2:bc:eb:c7:75: 07:e1:fb:5a:1d:c7:cd:d6:ff:98:52:b1:80:19:53: e9:ca:41:97:33:0c:21:92:db:80:86:f2:26:d2:bf: 28:73:93:db:23:8a:46:fc:dc:f2:0a:43:73:31:c8: f9:6d:91:72:78:11:23:55:25:8b:24:2b:e5:58:e9: cf:15:9a:51:8e:0f:54:58:cd:82:c7:98:e5:08:a8: ef:fe:87:f6:d5:e4:dc:38:69:84:d3:7d:e8:0d:f1: fd:ff:b8:9e:ab:21:e5:10:8b:ce:87:c2:91:a5:38: 21:8f:77:5c:dc:d9:45:5d:70:60:36:7c:a0:e5:33: 4b:3f:cb:16:cf:6d:cc:7c:bb:a7:b1:59:0a:b1:69: a4:6f:48:af:ea:3c:72:3a:9f:ef:fb:9d:e2:5e:de: 8d:69:bd:0c:0b:23:64:68:76:7d:a8:0f:88:36:d6: ec:e5:93:ef:a7:d6:3b:e6:c6:aa:65:aa:72:ce:80: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.66.244.0/22 172.82.12.0/22 206.183.136.0/22 207.90.228.0/22 207.166.140.0/22 IPv6: 2606:d8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394911 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e5:db:ea:41:49:f6:f5:db:7c:ec:c3:f0:ec:33:6f:fb:b4: 3f:b1:67:91:3e:15:c3:81:ea:96:49:ea:a6:b7:b1:56:7b:a9: 86:e4:87:f1:dc:c5:86:fa:fe:93:f1:d7:b8:53:d3:29:54:8e: 0c:18:74:db:fe:5c:3c:0c:2c:d5:44:a3:b0:e7:2e:ff:6a:de: a5:3f:27:2c:76:c5:40:1e:9e:a5:c5:e5:5f:06:c1:ca:fb:37: d2:b5:33:f6:ae:84:2e:1b:2c:2e:32:63:f0:07:f0:8b:20:57: 57:ab:78:c3:74:b9:79:d7:f8:5c:40:3f:fa:17:4b:9b:e3:09: 07:1a:60:77:e9:e1:3f:62:11:35:ea:08:2f:3a:18:8f:03:49: 8d:3f:92:67:3e:9f:5a:a7:28:4a:90:40:10:7e:52:9f:0a:54: 8b:39:af:aa:69:92:3a:84:35:36:8d:8e:ab:5b:ba:74:79:02: cd:d4:2a:47:cb:f6:ce:33:88:0a:07:39:3c:c5:e9:8b:c1:d4: 94:1b:ae:19:08:f7:97:ca:83:83:99:84:48:fb:7a:1a:5b:96: 14:3c:5e:07:8c:ca:e7:c6:71:b0:18:50:50:1c:bf:db:6d:15: 56:b7:1f:58:b6:d7:51:b8:40:90:5c:4f:42:d2:c2:7a:97:a1: 52:4b:6e:98 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEi0hod7HKk3ZFXBgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDEyOTEyMDMyN1oXDTI3MDMxNjE0MzgyM1owLzEtMCsGA1UEAxMk YWQ1NDY1YTItODJjOC00NDQ3LWI2ZGEtN2NhYmMwMTdlM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5wwWwvaxFse9VeQRJ+KL5ZzqQfEunRVuPO9 GKoxyBxnomUp+ktiZiL9xIvxJG8ar2kCopXOkbSjqLmEdiulZMT7Xwln8rzrx3UH 4ftaHcfN1v+YUrGAGVPpykGXMwwhktuAhvIm0r8oc5PbI4pG/NzyCkNzMcj5bZFy eBEjVSWLJCvlWOnPFZpRjg9UWM2Cx5jlCKjv/of21eTcOGmE033oDfH9/7ieqyHl EIvOh8KRpTghj3dc3NlFXXBgNnyg5TNLP8sWz23MfLunsVkKsWmkb0iv6jxyOp/v +53iXt6Nab0MCyNkaHZ9qA+INtbs5ZPvp9Y75saqZapyzoDAsQIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFFb6T1LT5LZSJpkL+8/N+KFcY+SpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAxN2UzYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkNTQ2NWEyLTgyYzgtNDQ0Ny1i NmRhLTdjYWJjMDE3ZTNhOS9hZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAx N2UzYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJAQvQDBAKsUgwDBALOt4gDBALPWuQDBALPpoww DQQCAAIwBwMFACYG2MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgafMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAEPl2+pBSfb123zsw/DsM2/7tD+xZ5E+FcOB6pZJ6qa3sVZ7qYbkh/HcxYb6 /pPx17hT0ylUjgwYdNv+XDwMLNVEo7DnLv9q3qU/Jyx2xUAenqXF5V8Gwcr7N9K1 M/auhC4bLC4yY/AH8IsgV1ereMN0uXnX+FxAP/oXS5vjCQcaYHfp4T9iETXqCC86 GI8DSY0/kmc+n1qnKEqQQBB+Up8KVIs5r6ppkjqENTaNjqtbunR5As3UKkfL9s4z iAoHOTzF6YvB1JQbrhkI95fKg4OZhEj7ehpblhQ8XgeMyufGcbAYUFAcv9ttFVa3 H1i211G4QJBcT0LSwnqXoVJLbpg= -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:53 2025 by rpki-client