$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f.cer File: ba6df326-d80c-4cb4-91a1-83dda19f144f.cer (raw, json) Hash identifier: Z1K4otEQUQjJvBs2h4e/mQ8O0xZ4+WRRCWT3kXYs7/Y= Subject key identifier: EE:A7:AD:14:39:82:06:B4:AA:93:56:2E:34:F2:56:BB:A0:7C:95:C9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858484ED33CA0963AE4B6EC541500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ba6df326-d80c-4cb4-91a1-83dda19f144f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Dec 2024 01:45:33 +0000 Certificate not after: Mon 29 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 36378 IP: 64.29.24.0/21 IP: 64.35.176.0/20 IP: 64.187.240.0/20 IP: 216.37.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:d3:3c:a0:96:3a:e4:b6:ec:54:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 24 01:45:33 2024 GMT Not After : Mar 29 00:45:33 2027 GMT Subject: CN=ba6df326-d80c-4cb4-91a1-83dda19f144f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:8f:6f:29:88:88:72:0c:cb:8b:79:55:62: a8:a9:66:b0:3a:07:70:0a:85:17:02:b0:c7:eb:64: c7:9b:4f:59:75:5d:98:74:30:04:09:a6:df:24:95: 57:7d:b5:cd:cc:cc:bc:cd:ec:04:1b:fd:55:f7:ac: 7a:a0:19:60:03:41:9c:93:7e:e8:ab:e5:a8:be:f4: 8c:22:2c:6b:b9:c1:ef:3c:15:b4:6b:21:a3:a0:1d: c5:f8:7f:a0:bb:91:8d:a9:d4:59:99:91:ad:67:38: 6d:be:83:ca:b6:46:97:a9:94:71:00:07:38:ff:36: 1b:ff:e0:24:e1:7e:62:e7:74:71:76:9a:9e:ae:4c: a6:63:5c:54:25:f9:af:ed:f5:a6:a8:ac:44:7a:c0: ae:ac:02:49:24:0f:68:d3:98:da:11:ec:86:1f:99: e7:81:05:fe:5e:96:34:e7:d6:40:ef:27:ed:dd:61: ad:08:2d:ae:57:2a:29:87:2f:02:86:99:0f:8d:4a: 6c:27:01:28:74:18:16:03:f1:cf:73:72:bb:df:fe: 50:f2:9f:f9:7f:0b:1d:21:ed:cf:6d:36:cc:fb:93: 15:fb:f8:ed:cb:7d:b1:f3:28:f6:35:36:ed:51:83: 71:52:28:63:58:74:d2:de:a9:d5:fa:ac:77:cf:2d: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:AD:14:39:82:06:B4:AA:93:56:2E:34:F2:56:BB:A0:7C:95:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ba6df326-d80c-4cb4-91a1-83dda19f144f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.29.24.0/21 64.35.176.0/20 64.187.240.0/20 216.37.96.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36378 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:94:ea:c3:32:82:5b:31:d4:f1:2b:f6:00:d0:9c:4f:1c:b0: 81:32:44:ba:50:38:e4:04:6c:ac:37:7b:dd:f6:42:aa:26:74: b2:e6:ab:6c:78:65:1b:ae:c3:6a:13:88:eb:52:8c:2e:d6:91: 02:64:11:38:58:84:51:10:07:6d:92:ff:72:2c:6d:f4:1f:1d: 80:d3:d5:04:9f:bd:ee:4c:4b:90:e4:e6:26:ca:b0:1d:09:1b: 13:17:a4:de:3f:31:26:46:ef:e4:13:83:86:e7:0f:59:87:23: 6f:64:d9:16:2f:86:88:9d:3a:36:64:a3:a5:7a:9b:1b:56:fb: 47:33:9c:44:b2:ed:28:c6:d1:25:cc:57:dd:2a:3a:49:f8:6b: 89:b5:57:2f:70:ed:1c:73:97:57:f0:1e:e8:b5:f4:40:ca:21: c5:0e:c8:c9:e7:ac:a1:d2:40:84:0b:67:77:bf:12:f7:02:8e: cf:9e:92:85:94:cc:55:0c:c6:64:3a:13:3d:2a:e3:5b:ef:21: 8b:a7:54:80:47:94:0d:00:4d:71:2c:41:9a:34:03:3f:da:b3: 3b:c8:e5:c5:09:0c:6b:5a:e9:c8:49:da:2c:70:f3:18:e6:d6: fb:17:37:7d:0a:7e:a3:f8:9d:07:f3:24:01:d5:7d:d4:8c:56: 3f:98:89:0c -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEhO0zygljrktuxUFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIyNDAxNDUzM1oXDTI3MDMyOTAwNDUzM1owLzEtMCsGA1UEAxMk YmE2ZGYzMjYtZDgwYy00Y2I0LTkxYTEtODNkZGExOWYxNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAKPbymIiHIMy4t5VWKoqWawOgdwCoUXArDH 62THm09ZdV2YdDAECabfJJVXfbXNzMy8zewEG/1V96x6oBlgA0Gck37oq+WovvSM IixrucHvPBW0ayGjoB3F+H+gu5GNqdRZmZGtZzhtvoPKtkaXqZRxAAc4/zYb/+Ak 4X5i53RxdpqerkymY1xUJfmv7fWmqKxEesCurAJJJA9o05jaEeyGH5nngQX+XpY0 59ZA7yft3WGtCC2uVyophy8ChpkPjUpsJwEodBgWA/HPc3K73/5Q8p/5fwsdIe3P bTbM+5MV+/jty32x8yj2NTbtUYNxUihjWHTS3qnV+qx3zy0yXwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFO6nrRQ5gga0qpNWLjTyVrugfJXJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i YTZkZjMyNi1kODBjLTRjYjQtOTFhMS04M2RkYTE5ZjE0NGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2JhNmRmMzI2LWQ4MGMtNGNiNC05 MWExLTgzZGRhMTlmMTQ0Zi9iYTZkZjMyNi1kODBjLTRjYjQtOTFhMS04M2RkYTE5 ZjE0NGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBANAHRgDBARAI7ADBARAu/ADBATYJWAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAI4aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADaU6sMyglsx1PEr9gDQnE8c sIEyRLpQOOQEbKw3e932QqomdLLmq2x4ZRuuw2oTiOtSjC7WkQJkEThYhFEQB22S /3IsbfQfHYDT1QSfve5MS5Dk5ibKsB0JGxMXpN4/MSZG7+QTg4bnD1mHI29k2RYv hoidOjZko6V6mxtW+0cznESy7SjG0SXMV90qOkn4a4m1Vy9w7Rxzl1fwHui19EDK IcUOyMnnrKHSQIQLZ3e/EvcCjs+ekoWUzFUMxmQ6Ez0q41vvIYunVIBHlA0ATXEs QZo0Az/aszvI5cUJDGta6chJ2ixw8xjm1vsXN30KfqP4nQfzJAHVfdSMVj+YiQw= -----END CERTIFICATE-----Generated at Fri Apr 4 10:20:05 2025 by rpki-client