$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer File: ae6e260c-421d-48c3-b47d-d76ac074fbba.cer (raw, json) Hash identifier: G4+EXkSNZfJiKifHU0a0cGcqL8I5sCdEcA4yW1psK/Q= Subject key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848B61E8BB3D741E46C36A18200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jan 2025 01:45:33 +0000 Certificate not after: Wed 05 May 2027 00:45:33 +0000 Subordinate resources: IP: 163.245.0.0/16 IP: 205.215.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:1e:8b:b3:d7:41:e4:6c:36:a1:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 30 01:45:33 2025 GMT Not After : May 5 00:45:33 2027 GMT Subject: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:2d:aa:be:8a:0e:8a:9a:df:07:46:af:1a: b9:dd:a8:cf:43:49:6e:4d:28:e7:ee:3b:68:ee:b7: 1f:d6:dc:79:86:f7:d2:e0:8d:d9:ac:5f:30:a6:b5: c5:f8:8c:11:27:77:60:c1:91:25:7b:60:11:82:41: f3:cd:b9:3a:59:d4:36:9a:d1:07:37:a0:7d:25:27: 85:1a:71:d6:e6:8c:fd:44:cb:bf:e1:64:6b:c3:51: 17:b0:a3:b7:ef:03:49:86:0c:c4:18:7a:67:86:2a: 00:96:75:90:c4:65:06:6d:fc:52:e6:21:30:a3:7a: c7:97:ab:e6:50:07:4e:23:9b:35:14:5b:fc:98:c4: ce:6a:de:c8:91:7e:5b:d2:af:53:6a:5a:c5:7b:4d: 32:55:c9:50:69:3d:d4:73:e9:11:a5:e7:7e:bb:f3: 22:bc:e7:79:1a:17:6e:b5:b9:a0:d6:88:14:6d:ef: be:14:1c:da:a7:04:f8:04:24:c5:ed:0b:ec:e3:ab: 2a:4f:13:62:d4:20:77:ec:96:5d:54:90:bc:fd:9d: 96:14:07:74:d0:77:6d:40:80:8b:3a:1e:8f:bb:ae: 07:79:23:64:a0:db:8a:80:76:9e:c6:8b:7c:77:bf: 37:7d:ba:53:99:9a:78:0d:e2:4b:77:a2:36:47:fa: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 163.245.0.0/16 205.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1f:00:e8:f1:03:9b:ee:58:ac:70:51:65:51:35:99:c3:b1: d7:37:b1:89:b4:a7:c6:b3:a2:24:00:ca:04:c5:c2:01:66:16: 75:f0:43:ae:ee:71:33:84:d8:af:ee:10:e8:58:f5:1b:3b:b2: 4f:78:2f:8d:33:cc:af:2a:43:2c:f8:55:1b:ed:27:36:6b:03: 87:6b:70:8c:fe:32:7a:e2:5d:62:be:fc:bb:82:85:40:b3:20: 6b:a5:62:cc:a3:f4:f0:f3:2b:c7:f5:0a:c9:23:56:48:04:c7: a7:44:58:9f:b9:ac:b4:b2:bc:df:af:93:22:cc:83:42:35:ee: 51:8b:3d:28:b3:d3:01:1b:a5:72:a8:f8:45:33:22:8c:44:52: 15:47:a6:7e:31:14:f6:34:45:6c:27:87:a9:9f:41:4f:85:3a: a2:64:4b:31:a5:b1:ff:dc:91:fc:e9:09:1c:25:74:16:fa:74: 1e:bc:71:b8:8f:74:57:cb:d2:10:a6:58:f7:b1:20:d7:08:91: e0:12:e5:d1:b6:f5:0d:03:6b:e8:7c:a3:ec:5c:3a:84:11:3c: 8a:b8:bc:ce:96:b6:c2:9c:ad:fe:33:06:4d:89:a1:7f:08:08: 92:f0:5f:b7:be:cc:60:9a:3d:f2:e7:6e:ba:8a:47:38:2f:7f: 57:bc:47:73 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEi2Houz10HkbDahggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDEzMDAxNDUzM1oXDTI3MDUwNTAwNDUzM1owLzEtMCsGA1UEAxMk YWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRmYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFEtqr6KDoqa3wdGrxq53ajPQ0luTSjn7jto 7rcf1tx5hvfS4I3ZrF8wprXF+IwRJ3dgwZEle2ARgkHzzbk6WdQ2mtEHN6B9JSeF GnHW5oz9RMu/4WRrw1EXsKO37wNJhgzEGHpnhioAlnWQxGUGbfxS5iEwo3rHl6vm UAdOI5s1FFv8mMTOat7IkX5b0q9TalrFe00yVclQaT3Uc+kRped+u/MivOd5Ghdu tbmg1ogUbe++FBzapwT4BCTF7Qvs46sqTxNi1CB37JZdVJC8/Z2WFAd00HdtQICL Oh6Pu64HeSNkoNuKgHaexot8d783fbpTmZp4DeJLd6I2R/r/fQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFHSTYFyspXJjGrq3lS7dZwKD3jzjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlNmUyNjBjLTQyMWQtNDhjMy1i NDdkLWQ3NmFjMDc0ZmJiYS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3 NGZiYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCj9QMEBs3XQDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCHwDo8QOb7lis cFFlUTWZw7HXN7GJtKfGs6IkAMoExcIBZhZ18EOu7nEzhNiv7hDoWPUbO7JPeC+N M8yvKkMs+FUb7Sc2awOHa3CM/jJ64l1ivvy7goVAsyBrpWLMo/Tw8yvH9QrJI1ZI BMenRFifuay0srzfr5MizINCNe5Riz0os9MBG6VyqPhFMyKMRFIVR6Z+MRT2NEVs J4epn0FPhTqiZEsxpbH/3JH86QkcJXQW+nQevHG4j3RXy9IQplj3sSDXCJHgEuXR tvUNA2vofKPsXDqEETyKuLzOlrbCnK3+MwZNiaF/CAiS8F+3vsxgmj3y5266ikc4 L39XvEdz -----END CERTIFICATE-----Generated at Fri Apr 4 18:50:58 2025 by rpki-client