$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer File: 480acd92-824c-4b47-a714-6cab20e4ce2d.cer (raw, json) Hash identifier: Rps36simdAEsDZU+5SUOpfTB9p62VzQsvdIN0UDB3EQ= Subject key identifier: B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848049926EDE909A3FE8CB30700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Nov 2024 11:38:42 +0000 Certificate not after: Tue 02 Mar 2027 11:38:42 +0000 Subordinate resources: IP: 23.129.44.0/24 IP: 2602:f79e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:04:99:26:ed:e9:09:a3:fe:8c:b3:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 27 11:38:42 2024 GMT Not After : Mar 2 11:38:42 2027 GMT Subject: CN=480acd92-824c-4b47-a714-6cab20e4ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:3a:df:64:ae:06:e0:39:8b:2e:5e:33:83: ae:05:e8:4f:65:f7:ed:2d:4c:b3:59:10:75:bd:00: 76:cf:ef:6d:56:32:7c:9a:b7:4a:92:4d:82:f9:13: bb:04:0c:b6:0b:d3:d3:79:5d:5d:51:f4:11:f5:51: fa:0e:bb:43:56:a9:ea:b0:2e:2b:96:2c:6f:8f:58: 8a:95:dd:df:93:5c:b5:45:c4:da:39:24:b1:7c:9f: c4:a0:78:4f:8d:11:d2:be:8e:88:b4:7c:7c:d3:58: 81:ad:80:da:c9:5d:55:12:0e:27:13:9f:b2:b5:48: 8c:d7:40:a8:84:b2:45:3f:f2:6e:a1:54:89:30:da: d1:9d:f3:be:4a:61:b4:46:ae:d3:17:0b:f4:4f:8e: f8:5b:db:a1:59:28:1f:96:e3:40:42:a2:ee:af:c9: c7:38:10:20:71:00:43:f6:01:31:9e:97:e6:d2:db: 9d:21:de:55:60:e4:46:bd:c5:13:fa:77:62:6a:19: e9:f5:22:0d:4c:03:ce:41:25:84:fb:ba:6b:0a:6c: 24:b4:e9:be:19:67:ba:40:0e:58:e5:c5:f5:08:bf: 3d:52:a4:13:d9:81:0a:2e:4d:14:84:fb:f8:c0:2e: 68:a7:9f:f0:c4:3b:2d:82:13:13:df:7c:40:7c:00: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.44.0/24 IPv6: 2602:f79e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:eb:dd:0b:10:13:5b:62:53:11:99:79:0d:a7:65:83:72:b9: ad:4d:50:c3:83:34:1e:f7:f5:67:24:04:76:7b:e8:c1:cf:fd: 26:7a:d9:0e:e7:f4:8f:75:1b:02:d2:95:36:1c:76:c7:0f:67: e7:98:02:60:ef:bc:9d:99:ff:a5:d1:6f:e4:f4:6b:91:ed:67: 46:8c:d0:5f:39:b1:68:fb:b7:33:1f:56:a9:12:cc:e4:50:b1: b6:62:d5:4c:81:e6:20:d6:02:b9:a1:d9:b5:c0:0e:6b:ca:24: 84:7d:96:46:07:fd:82:72:eb:5a:83:43:40:eb:7d:8f:13:ac: 46:65:6b:ed:d4:59:ba:a9:09:4a:d8:c3:70:40:94:1e:1d:6b: c8:fe:a3:67:30:d5:cb:34:78:27:52:47:a4:8e:31:52:d5:bb: ef:18:bb:11:ac:0c:a3:d3:f8:fd:e2:b2:46:05:07:09:20:a7: aa:04:92:4f:fb:f5:33:e1:25:d6:2a:4e:78:8b:ed:a7:64:c2: 16:a5:a3:44:0d:fc:ec:3b:f5:40:a6:df:92:45:8a:7b:38:f7: 86:e8:af:44:a6:40:8a:3b:a4:fc:00:96:8b:35:08:8d:fb:b2: 3b:50:e2:74:d8:00:a7:af:23:03:19:44:b5:df:b3:39:5d:e5: 14:a5:b8:c5 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEgEmSbt6Qmj/oyzBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTEyNzExMzg0MloXDTI3MDMwMjExMzg0MlowLzEtMCsGA1UEAxMk NDgwYWNkOTItODI0Yy00YjQ3LWE3MTQtNmNhYjIwZTRjZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Y632SuBuA5iy5eM4OuBehPZfftLUyzWRB1 vQB2z+9tVjJ8mrdKkk2C+RO7BAy2C9PTeV1dUfQR9VH6DrtDVqnqsC4rlixvj1iK ld3fk1y1RcTaOSSxfJ/EoHhPjRHSvo6ItHx801iBrYDayV1VEg4nE5+ytUiM10Co hLJFP/JuoVSJMNrRnfO+SmG0Rq7TFwv0T474W9uhWSgfluNAQqLur8nHOBAgcQBD 9gExnpfm0tudId5VYORGvcUT+ndiahnp9SINTAPOQSWE+7prCmwktOm+GWe6QA5Y 5cX1CL89UqQT2YEKLk0UhPv4wC5op5/wxDstghMT33xAfAAuXwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLfU4t+0/4kO6LPa2ePmjRnD+CvMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 ODBhY2Q5Mi04MjRjLTRiNDctYTcxNC02Y2FiMjBlNGNlMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQ4MGFjZDkyLTgyNGMtNGI0Ny1h NzE0LTZjYWIyMGU0Y2UyZC80ODBhY2Q5Mi04MjRjLTRiNDctYTcxNC02Y2FiMjBl NGNlMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgSwwDgQCAAIwCAMGACYC954AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD3r3QsQE1tiUxGZeQ2nZYNyua1NUMODNB739WckBHZ76MHP/SZ62Q7n9I91GwLS lTYcdscPZ+eYAmDvvJ2Z/6XRb+T0a5HtZ0aM0F85sWj7tzMfVqkSzORQsbZi1UyB 5iDWArmh2bXADmvKJIR9lkYH/YJy61qDQ0DrfY8TrEZla+3UWbqpCUrYw3BAlB4d a8j+o2cw1cs0eCdSR6SOMVLVu+8YuxGsDKPT+P3iskYFBwkgp6oEkk/79TPhJdYq TniL7adkwhalo0QN/Ow79UCm35JFins494bor0SmQIo7pPwAlos1CI37sjtQ4nTY AKevIwMZRLXfszld5RSluMU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:51 2025 by rpki-client