$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer File: 8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer (raw, json) Hash identifier: FhplJPFRbPllWdoIwzyXmzfUQKfJOesLhwLg9OUTLm4= Subject key identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858484DADD9E9BDBE6A1EBC46AD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Dec 2024 15:54:25 +0000 Certificate not after: Thu 05 Nov 2026 01:45:24 +0000 Subordinate resources: IP: 23.148.216.0/24 IP: 198.144.28.0/22 IP: 2607:2cc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:ad:d9:e9:bd:be:6a:1e:bc:46:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 23 15:54:25 2024 GMT Not After : Nov 5 01:45:24 2026 GMT Subject: CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:98:f0:0f:ec:5d:d9:35:06:6e:4f:99:a4: 6a:6c:85:76:6f:77:64:09:d2:fe:ef:e0:6e:b2:c1: 3e:14:00:59:cb:8d:32:cc:24:37:b3:56:b3:6f:b8: 97:1f:62:74:08:67:18:00:61:35:b7:26:81:29:61: 96:15:a1:0a:87:88:54:0d:cc:19:8c:8c:c2:62:31: 72:68:68:ee:ea:ef:05:60:8a:e5:6b:25:fe:f4:2c: 4d:30:12:9e:8f:ad:c0:11:ab:dd:1b:0b:59:9a:69: 47:a3:67:f1:46:6b:37:fa:83:16:6e:de:ae:d6:1f: 37:db:bc:26:af:87:22:66:2f:36:51:0b:77:30:1a: c2:9e:ac:d8:3f:f4:fe:ef:44:75:7f:f3:f4:5a:af: c1:ed:eb:80:9d:2f:d2:35:ab:93:03:a0:f6:13:5f: b0:a3:e8:47:95:b0:ad:8f:70:81:1c:6c:3c:23:b0: 52:00:1e:73:5a:f4:b0:99:47:f2:e2:57:a3:2c:64: ec:1d:36:c2:e8:01:14:de:8f:10:b0:ea:4f:09:bd: d8:01:ce:92:e3:19:28:eb:73:91:77:fb:3c:78:d9: c9:25:49:34:e8:70:df:f2:ae:84:05:aa:c0:be:e6: 27:5e:83:2c:53:f9:11:31:66:1f:dd:a9:f8:5a:72: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.216.0/24 198.144.28.0/22 IPv6: 2607:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f0:e6:2b:9b:92:8e:b4:ae:c9:bc:18:ec:3a:a2:51:9b:4f: a0:3d:aa:67:8b:1d:7b:76:53:d3:2a:5f:5c:18:97:fa:fc:1e: 31:1d:85:ce:08:92:0c:cb:e2:ac:8f:42:84:92:4d:46:e7:cd: 0c:0f:87:eb:48:08:35:37:93:bb:58:c9:f1:fd:2d:8d:c5:99: 6e:ae:a9:26:62:4d:27:09:21:2a:f4:f2:4a:70:cb:2b:f5:2c: 1c:cf:28:c1:61:27:e5:7b:df:50:9d:2c:54:d4:06:92:3b:de: 07:2a:61:c3:87:b9:0d:e2:bc:13:5e:d7:f5:5c:bd:71:71:69: 04:8b:cc:5d:a9:a0:b5:ff:b4:cb:64:6b:fa:20:2a:30:e9:89: d2:28:ee:fa:cf:4d:cd:c7:e5:01:c5:52:5f:9f:1c:45:f2:2e: 9f:52:63:a6:6d:15:d0:e7:dc:52:47:6d:a7:63:77:23:44:43: 86:f7:f5:55:52:31:e4:52:0d:5c:8f:2f:1c:3f:a3:20:5c:4b: e6:8e:40:73:9d:e3:b3:b3:47:20:05:89:d1:6c:61:43:49:0b: 19:f8:dc:3b:e3:9f:17:df:34:db:cc:51:71:d8:11:57:a6:92: f2:de:6f:e0:fb:c6:5e:d6:2a:27:af:94:ab:cc:ba:8e:c4:5c: d5:2c:ac:82 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEhNrdnpvb5qHrxGrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIyMzE1NTQyNVoXDTI2MTEwNTAxNDUyNFowLzEtMCsGA1UEAxMk ODgxODQ1MWUtMmIxNS00ZGU1LTg5ZjktZjNkMWNiNGQ3MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOKY8A/sXdk1Bm5PmaRqbIV2b3dkCdL+7+Bu ssE+FABZy40yzCQ3s1azb7iXH2J0CGcYAGE1tyaBKWGWFaEKh4hUDcwZjIzCYjFy aGju6u8FYIrlayX+9CxNMBKej63AEavdGwtZmmlHo2fxRms3+oMWbt6u1h8327wm r4ciZi82UQt3MBrCnqzYP/T+70R1f/P0Wq/B7euAnS/SNauTA6D2E1+wo+hHlbCt j3CBHGw8I7BSAB5zWvSwmUfy4lejLGTsHTbC6AEU3o8QsOpPCb3YAc6S4xko63OR d/s8eNnJJUk06HDf8q6EBarAvuYnXoMsU/kRMWYf3an4WnKNJQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFJ588MYtFC1+bb529iDhPh2VeyrNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0ZDczNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg4MTg0NTFlLTJiMTUtNGRlNS04 OWY5LWYzZDFjYjRkNzM2Ni84ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0 ZDczNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXlNgDBALGkBwwDQQCAAIwBwMFACYHLMAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVvDmK5uSjrSuybwY7DqiUZtPoD2qZ4sde3ZT0ypfXBiX+vweMR2FzgiS DMvirI9ChJJNRufNDA+H60gINTeTu1jJ8f0tjcWZbq6pJmJNJwkhKvTySnDLK/Us HM8owWEn5XvfUJ0sVNQGkjveByphw4e5DeK8E17X9Vy9cXFpBIvMXamgtf+0y2Rr +iAqMOmJ0iju+s9NzcflAcVSX58cRfIun1Jjpm0V0OfcUkdtp2N3I0RDhvf1VVIx 5FINXI8vHD+jIFxL5o5Ac53js7NHIAWJ0WxhQ0kLGfjcO+OfF98028xRcdgRV6aS 8t5v4PvGXtYqJ6+Uq8y6jsRc1Sysgg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:05 2025 by rpki-client