$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer File: e5a14f8e-0246-4348-b099-d30bc5afba9f.cer (raw, json) Hash identifier: KkA9ADwAOcM4kwmKZfJbzuO/LwMxM6JP/NjTkhGJv50= Subject key identifier: BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C3E0A7DD6C32554C69596080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 00:02:10 +0000 Certificate not after: Sun 09 May 2027 23:02:10 +0000 Subordinate resources: AS: 40442 IP: 162.247.136.0/21 IP: 2605:f980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c3:e0:a7:dd:6c:32:55:4c:69:59:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 4 00:02:10 2025 GMT Not After : May 9 23:02:10 2027 GMT Subject: CN=e5a14f8e-0246-4348-b099-d30bc5afba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:42:7f:80:21:1b:ad:ed:93:5e:14:90:d6: 08:76:f2:c5:60:d1:05:0f:fb:73:7d:d7:4f:57:29: f8:3a:a5:47:36:cd:6a:86:fe:8b:91:0d:31:ad:18: 57:9d:8e:0e:7c:ed:b7:52:df:3f:ff:a4:91:32:6f: 56:e6:4d:fd:82:e8:98:c1:cf:53:c6:0b:3e:95:38: ff:43:5f:6a:d5:4d:66:d2:d7:e1:81:47:5d:0a:6e: 8c:b6:0c:45:e0:0d:ad:b8:97:b2:89:29:c2:85:8b: ed:b1:95:88:e2:fe:70:3a:2c:bb:df:c4:67:04:a1: 50:5f:94:62:be:c8:0f:4f:ca:f5:aa:ed:94:67:b4: c6:08:41:a3:55:3a:db:84:4d:94:0a:31:1a:b4:2d: a4:02:21:ee:fa:39:80:58:9e:84:5b:f9:eb:35:9d: b2:03:77:58:b4:34:0c:c6:3a:67:63:58:a8:6c:70: 92:ec:3d:17:d2:ce:ea:cc:a8:6d:91:11:17:2f:d6: ac:98:20:d4:35:08:6a:bf:02:dc:8b:e3:bd:9b:d4: 2c:77:47:d0:0e:09:9a:8e:e8:0d:dd:da:0d:85:06: a2:23:dd:0a:26:41:51:f8:7d:84:f6:ca:3f:8d:32: 17:7e:07:66:9c:6e:4a:58:d0:52:51:2c:14:62:94: b3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.247.136.0/21 IPv6: 2605:f980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40442 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b4:1b:f4:41:65:1c:19:f3:c3:32:db:1f:b9:45:5a:18:fe: 95:9d:20:e6:5b:1e:a6:20:0a:00:eb:67:5c:f3:6b:da:42:9d: 04:70:79:e7:dd:18:ae:19:85:61:f3:64:88:90:c8:98:d2:d4: 8e:4c:3a:b1:23:9e:49:49:d5:0e:b1:d8:bc:4e:06:8f:c7:7a: 37:b7:b3:8a:d0:18:e8:8c:1f:50:bb:b2:5e:e1:58:8d:fa:7d: 13:14:0a:ca:27:26:43:c0:14:ca:1a:12:0a:37:4b:9b:0a:b3: d8:ea:ec:5e:eb:81:72:75:55:0e:a1:02:d6:e7:1f:18:c0:3c: e6:e3:47:09:27:ab:79:82:e4:d4:ca:9e:97:ce:22:09:c4:f4: ab:35:70:25:a3:99:0f:60:29:6e:f6:a6:d3:b3:63:cf:4b:9f: 8a:70:73:98:3e:e8:bf:28:d9:63:8f:78:c6:b1:88:0c:8b:29: 85:f5:79:47:ee:36:e1:71:8b:38:88:eb:a1:e4:40:5d:c5:ad: a0:ca:37:5c:a4:60:90:36:aa:c9:52:03:cb:60:27:fe:f0:e3: af:78:11:ab:a4:cc:1e:6a:0c:eb:55:80:34:6f:5b:12:10:a3: c2:ff:a6:1f:0d:c1:f4:1e:64:71:13:36:51:f4:74:e7:2a:fa: e7:05:52:7d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjD4KfdbDJVTGlZYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwNDAwMDIxMFoXDTI3MDUwOTIzMDIxMFowLzEtMCsGA1UEAxMk ZTVhMTRmOGUtMDI0Ni00MzQ4LWIwOTktZDMwYmM1YWZiYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqtCf4AhG63tk14UkNYIdvLFYNEFD/tzfddP Vyn4OqVHNs1qhv6LkQ0xrRhXnY4OfO23Ut8//6SRMm9W5k39guiYwc9Txgs+lTj/ Q19q1U1m0tfhgUddCm6MtgxF4A2tuJeyiSnChYvtsZWI4v5wOiy738RnBKFQX5Ri vsgPT8r1qu2UZ7TGCEGjVTrbhE2UCjEatC2kAiHu+jmAWJ6EW/nrNZ2yA3dYtDQM xjpnY1iobHCS7D0X0s7qzKhtkREXL9asmCDUNQhqvwLci+O9m9Qsd0fQDgmajugN 3doNhQaiI90KJkFR+H2E9so/jTIXfgdmnG5KWNBSUSwUYpSzhwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFL33DFtDFhQlh9iOwzfp5P7YvCzsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l NWExNGY4ZS0wMjQ2LTQzNDgtYjA5OS1kMzBiYzVhZmJhOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U1YTE0ZjhlLTAyNDYtNDM0OC1i MDk5LWQzMGJjNWFmYmE5Zi9lNWExNGY4ZS0wMjQ2LTQzNDgtYjA5OS1kMzBiYzVh ZmJhOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOi94gwDQQCAAIwBwMFACYF+YAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ36MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIu0G/RBZRwZ88My2x+5RVoY/pWd IOZbHqYgCgDrZ1zza9pCnQRweefdGK4ZhWHzZIiQyJjS1I5MOrEjnklJ1Q6x2LxO Bo/Heje3s4rQGOiMH1C7sl7hWI36fRMUCsonJkPAFMoaEgo3S5sKs9jq7F7rgXJ1 VQ6hAtbnHxjAPObjRwknq3mC5NTKnpfOIgnE9Ks1cCWjmQ9gKW72ptOzY89Ln4pw c5g+6L8o2WOPeMaxiAyLKYX1eUfuNuFxiziI66HkQF3FraDKN1ykYJA2qslSA8tg J/7w4694EaukzB5qDOtVgDRvWxIQo8L/ph8NwfQeZHETNlH0dOcq+ucFUn0= -----END CERTIFICATE-----Generated at Fri Feb 21 10:39:00 2025 by rpki-client