$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.cer File: 6ae88fcc-f987-4b2c-abc0-89a278cc29ae.cer (raw, json) Hash identifier: 8jHz387BJqmK7wmu9hahAeSQ8U8BmkVkEwMqmJoLw3U= Subject key identifier: 86:F7:AC:0C:C6:B3:3F:93:49:73:97:29:65:70:FC:1A:3A:90:32:38 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584816FD8F4601F0C90892BC2A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Dec 2024 01:45:33 +0000 Certificate not after: Tue 09 Mar 2027 01:45:33 +0000 Subordinate resources: IP: 24.170.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:16:fd:8f:46:01:f0:c9:08:92:bc:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 4 01:45:33 2024 GMT Not After : Mar 9 01:45:33 2027 GMT Subject: CN=6ae88fcc-f987-4b2c-abc0-89a278cc29ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:39:2b:86:96:16:22:c1:80:61:00:5d:4d: e2:38:8c:06:e9:11:5d:38:c0:7b:39:95:7c:f3:f7: e1:d7:36:db:1f:d5:38:c1:0b:82:af:fb:2e:67:7a: 06:64:0e:54:22:38:4f:24:7f:62:56:23:53:46:f0: 09:81:e5:f2:52:17:d5:b6:71:53:01:e5:04:27:e6: 4e:64:4c:0e:20:08:7f:83:c1:3e:01:a4:d4:6b:66: ea:40:d1:f6:75:0d:29:d9:09:4f:72:43:50:78:d0: 5a:2a:14:49:2b:96:6b:fb:f1:ae:5b:09:5e:de:9b: f8:4e:e9:3b:6a:5f:be:2c:e7:e1:cf:49:4d:e3:74: 8b:21:3b:0d:66:b5:9b:9c:35:1b:77:5a:2f:db:c2: 05:ee:ed:89:0f:c2:13:ae:28:d6:a2:d8:fa:4c:61: 4c:d1:d0:36:06:c7:51:aa:27:cd:24:0d:e3:e9:96: be:c2:bc:d9:03:2b:bf:a6:78:26:1d:fb:2a:17:85: 23:01:29:f2:e4:4a:3b:5b:b3:4c:70:97:47:19:29: 43:e0:df:3e:c9:0d:99:6b:7a:0a:51:94:1c:37:a6: 36:07:b9:8a:68:d6:d5:46:4a:fa:8c:38:1b:cc:0e: 39:70:c2:22:f4:62:b9:bc:27:29:6e:20:10:7e:45: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F7:AC:0C:C6:B3:3F:93:49:73:97:29:65:70:FC:1A:3A:90:32:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 24.170.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9f:0f:49:30:44:2f:f4:7f:2d:e5:d0:c9:7e:04:b0:31:17: 52:1b:72:4e:5f:19:1f:4a:19:66:37:54:cb:a7:52:b2:2e:ba: ce:5c:71:43:a4:46:c6:8f:28:99:e2:f9:fd:ae:23:b5:cb:6b: bf:10:c9:6a:db:75:4a:3f:f0:14:fb:cd:9c:12:b6:2d:2d:01: 61:2e:45:c3:fe:e1:02:ca:27:2c:85:d2:00:63:8f:da:a1:48: 60:b1:25:8f:47:4b:d2:40:b0:60:33:e9:b5:56:fb:f8:16:09: 6b:29:ee:01:fa:01:06:11:0f:e1:59:0b:63:ff:b1:c2:91:ae: bc:4e:38:74:4e:35:2a:21:ca:24:b5:ec:5e:71:26:56:97:72: 3a:fc:e2:ee:5f:6d:2d:7f:0d:d3:a0:5e:4c:74:6f:9e:62:39: ad:2f:df:7c:75:8c:5f:3a:44:06:ff:10:b9:de:d7:66:64:e5: 13:f2:2d:c1:08:fe:27:cb:bc:c4:8e:d4:70:f7:a8:3a:a6:c3: 21:fc:e8:f5:e6:6a:1d:55:3b:4d:46:2d:54:bf:d1:ba:00:a1: bb:7d:45:af:bd:b3:fe:73:43:4d:98:d2:ba:5c:c7:b1:4b:cb: 2d:dd:e7:85:a1:8a:dd:65:20:8c:4d:60:5a:4d:68:9e:7a:81: 43:6c:21:52 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEgW/Y9GAfDJCJK8KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIwNDAxNDUzM1oXDTI3MDMwOTAxNDUzM1owLzEtMCsGA1UEAxMk NmFlODhmY2MtZjk4Ny00YjJjLWFiYzAtODlhMjc4Y2MyOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQs5K4aWFiLBgGEAXU3iOIwG6RFdOMB7OZV8 8/fh1zbbH9U4wQuCr/suZ3oGZA5UIjhPJH9iViNTRvAJgeXyUhfVtnFTAeUEJ+ZO ZEwOIAh/g8E+AaTUa2bqQNH2dQ0p2QlPckNQeNBaKhRJK5Zr+/GuWwle3pv4Tuk7 al++LOfhz0lN43SLITsNZrWbnDUbd1ov28IF7u2JD8ITrijWotj6TGFM0dA2BsdR qifNJA3j6Za+wrzZAyu/pngmHfsqF4UjASny5Eo7W7NMcJdHGSlD4N8+yQ2Za3oK UZQcN6Y2B7mKaNbVRkr6jDgbzA45cMIi9GK5vCcpbiAQfkUilQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIb3rAzGsz+TSXOXKWVw/Bo6kDI4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 YWU4OGZjYy1mOTg3LTRiMmMtYWJjMC04OWEyNzhjYzI5YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZhZTg4ZmNjLWY5ODctNGIyYy1h YmMwLTg5YTI3OGNjMjlhZS82YWU4OGZjYy1mOTg3LTRiMmMtYWJjMC04OWEyNzhj YzI5YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAQYqtAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW58PSTBEL/R/LeXQyX4E sDEXUhtyTl8ZH0oZZjdUy6dSsi66zlxxQ6RGxo8omeL5/a4jtctrvxDJatt1Sj/w FPvNnBK2LS0BYS5Fw/7hAsonLIXSAGOP2qFIYLElj0dL0kCwYDPptVb7+BYJaynu AfoBBhEP4VkLY/+xwpGuvE44dE41KiHKJLXsXnEmVpdyOvzi7l9tLX8N06BeTHRv nmI5rS/ffHWMXzpEBv8Qud7XZmTlE/ItwQj+J8u8xI7UcPeoOqbDIfzo9eZqHVU7 TUYtVL/RugChu31Fr72z/nNDTZjSulzHsUvLLd3nhaGK3WUgjE1gWk1onnqBQ2wh Ug== -----END CERTIFICATE-----Generated at Fri Apr 4 19:23:49 2025 by rpki-client