$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer File: c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer (raw, json) Hash identifier: qgdFEYRzFem/dw6xXd7yCxBYwLEY5IPraE5Ik1FGI3Y= Subject key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584835B31529026CFAC642CD1F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Dec 2024 01:45:33 +0000 Certificate not after: Sat 20 Mar 2027 00:45:33 +0000 Subordinate resources: IP: 68.170.240.0/20 IP: 147.124.224.0/19 IP: 162.218.4.0/22 IP: 162.247.80.0/21 IP: 198.160.26.0/23 IP: 199.166.248.0/22 IP: 2605:a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:b3:15:29:02:6c:fa:c6:42:cd:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 15 01:45:33 2024 GMT Not After : Mar 20 00:45:33 2027 GMT Subject: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:08:96:db:81:d8:f3:0d:59:1e:d3:f2:c2: 15:69:c4:38:e6:fc:73:3c:f0:88:e7:56:cc:02:48: 07:88:0d:ac:0b:c2:02:ff:d1:97:25:d7:1e:a1:48: 47:db:67:4f:4e:c9:cd:e3:93:f3:ae:ff:1e:9b:ad: 1c:90:7a:94:47:84:52:7a:e0:43:af:7e:b6:8b:44: 9c:75:06:ce:7a:95:18:9e:bd:0f:8c:6c:44:0c:89: dd:9f:9e:58:a1:39:1f:5a:ad:51:dd:cf:ff:50:73: 5f:17:17:67:59:6e:42:ad:17:01:12:7a:76:38:9d: ec:48:33:e7:6e:f6:e8:c1:45:be:04:37:76:ed:ec: cf:4e:e1:f2:c1:7b:db:0d:7b:31:d3:30:86:a0:df: d4:70:60:ae:18:e0:46:e7:32:86:f5:04:b6:9c:ff: 3e:b2:7f:dc:d3:01:29:be:9a:de:b1:d4:44:02:64: 14:98:f9:d1:8d:8d:65:f0:5f:23:c7:d2:9b:07:e4: b1:01:75:d9:56:5c:11:a1:b9:ce:22:85:1e:62:3d: 18:4d:56:d9:b8:14:ed:d5:12:51:29:f5:81:a9:ef: d5:7c:3e:b3:74:10:9c:5a:79:05:bd:0d:c9:43:c1: 94:3f:cb:ac:d2:e0:f1:9c:39:54:fa:13:17:ae:1d: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/20 147.124.224.0/19 162.218.4.0/22 162.247.80.0/21 198.160.26.0/23 199.166.248.0/22 IPv6: 2605:a00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bb:25:23:16:67:9d:72:48:bd:2c:49:10:7c:ea:c0:f5:25: ba:7d:0a:8b:e0:31:60:43:af:74:ad:64:80:f0:bf:b7:77:b3: 4d:e9:81:6d:34:9a:0e:f6:ff:9c:50:18:e3:fa:ad:95:b9:01: 3e:9f:c9:a3:5d:a8:a0:3f:78:8f:77:9a:ec:56:30:0a:5a:a8: de:fc:75:be:91:c1:70:2b:4f:33:56:c7:cd:ae:95:97:90:85: 7c:ad:60:e0:79:65:d2:31:27:09:74:e9:0d:1b:05:cc:3e:8f: cb:a1:b5:bd:55:77:38:2b:15:7b:ba:c6:ae:07:5e:4e:a5:e2: 30:54:7d:84:ad:8e:11:3d:3a:29:56:ba:9e:24:ca:77:78:53: f5:04:7f:70:64:c3:7c:fb:db:0f:92:e1:7a:5c:ac:50:44:1c: a3:f0:ef:40:94:e1:e9:12:31:f7:2b:7e:9f:eb:84:9b:53:55: 7e:f6:43:9c:2f:af:0f:90:bc:28:26:3d:d2:75:25:48:bc:ed: c5:2d:34:74:fe:72:b0:69:0e:97:d4:d4:ef:ee:2d:d2:c0:9c: 22:81:6b:88:1d:ef:59:ca:51:23:63:bb:1a:cb:5c:ce:b1:e4: 4f:fb:55:fd:48:e1:b5:31:b3:28:d0:85:6d:21:8c:57:a0:b3: be:3c:1c:1f -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEg1sxUpAmz6xkLNH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxNTAxNDUzM1oXDTI3MDMyMDAwNDUzM1owLzEtMCsGA1UEAxMk YzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRjZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/8IltuB2PMNWR7T8sIVacQ45vxzPPCI51bM AkgHiA2sC8IC/9GXJdceoUhH22dPTsnN45Pzrv8em60ckHqUR4RSeuBDr362i0Sc dQbOepUYnr0PjGxEDIndn55YoTkfWq1R3c//UHNfFxdnWW5CrRcBEnp2OJ3sSDPn bvbowUW+BDd27ezPTuHywXvbDXsx0zCGoN/UcGCuGOBG5zKG9QS2nP8+sn/c0wEp vpresdREAmQUmPnRjY1l8F8jx9KbB+SxAXXZVlwRobnOIoUeYj0YTVbZuBTt1RJR KfWBqe/VfD6zdBCcWnkFvQ3JQ8GUP8us0uDxnDlU+hMXrh3P0QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFPZJFw0k+8+8Avi5F/qq/k3OVeTWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j NmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M2ZTg2YjUyLWRkMzYtNDZiNy1h ZmU1LTI2NjE5NWJkY2YxYS9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTVi ZGNmMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAREqvADBAWTfOADBAKi2gQDBAOi91ADBAHGoBoD BALHpvgwDQQCAAIwBwMFACYFCgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV7slIxZnnXJIvSxJEHzqwPUl un0Ki+AxYEOvdK1kgPC/t3ezTemBbTSaDvb/nFAY4/qtlbkBPp/Jo12ooD94j3ea 7FYwClqo3vx1vpHBcCtPM1bHza6Vl5CFfK1g4Hll0jEnCXTpDRsFzD6Py6G1vVV3 OCsVe7rGrgdeTqXiMFR9hK2OET06KVa6niTKd3hT9QR/cGTDfPvbD5LhelysUEQc o/DvQJTh6RIx9yt+n+uEm1NVfvZDnC+vD5C8KCY90nUlSLztxS00dP5ysGkOl9TU 7+4t0sCcIoFriB3vWcpRI2O7GstczrHkT/tV/UjhtTGzKNCFbSGMV6CzvjwcHw== -----END CERTIFICATE-----Generated at Fri Apr 4 10:23:20 2025 by rpki-client