$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer File: a6ba0fd2-b526-4985-9314-bf6485056a64.cer (raw, json) Hash identifier: ZR8vgwp/jweQfTQs9komMNOyJEGeKgksmf/kA9MC7+o= Subject key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858497F02095210DD8B0CC60DF700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Apr 2025 00:45:35 +0000 Certificate not after: Fri 16 Jul 2027 00:45:35 +0000 Subordinate resources: AS: 2552 IP: 128.252.0.0/16 IP: 192.31.46.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:02:09:52:10:dd:8b:0c:c6:0d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 12 00:45:35 2025 GMT Not After : Jul 16 00:45:35 2027 GMT Subject: CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:54:df:45:7f:06:ba:2b:b5:ce:51:2f:7d: 76:57:c6:b6:1f:30:88:ad:d0:59:3c:96:b3:28:12: 1b:b7:f4:7b:e4:a7:be:de:e6:01:fe:36:36:26:ea: 61:f6:cd:df:86:f7:4a:b7:b9:16:25:b4:d0:9a:5f: 89:3e:e8:bb:48:ed:7a:39:5c:91:d8:1d:df:9b:fd: 6c:26:34:c5:2b:fa:c6:18:f1:28:f9:35:ec:0c:18: a8:37:80:9d:1f:b7:24:bb:b4:bd:26:c4:bc:93:b3: c9:b5:6c:1f:f7:56:ed:ea:72:72:af:4f:a8:9c:ee: 79:0b:4f:25:3c:46:ee:85:9b:65:74:77:5c:ae:e5: 5e:21:33:28:ae:0e:8e:98:c5:fd:38:f1:4a:31:80: da:97:26:db:a9:e1:0a:aa:93:1c:ad:30:3f:21:4b: 7e:ad:04:0e:6a:25:80:6d:04:14:5a:65:00:2e:95: d0:c6:0e:c5:97:78:fa:50:59:01:22:65:20:2e:a4: 74:5a:d5:db:c8:9a:35:b7:9e:d9:99:fb:ba:b0:f5: 26:ad:10:04:20:db:0c:08:21:0b:5a:54:d1:15:e7: 7a:ae:45:3e:6b:65:07:f4:54:24:63:a6:c7:2d:fd: 93:a8:13:e2:51:bb:46:e0:dc:69:ee:8a:23:d5:83: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 128.252.0.0/16 192.31.46.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2552 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:64:ff:10:dd:9d:37:19:be:27:f2:02:fe:97:e3:20:b9:31: f9:9b:ab:8a:4f:c2:aa:07:21:2f:82:e1:c4:25:13:18:61:32: 3e:1c:8e:bb:d6:01:6f:62:94:dc:8d:a4:34:7c:98:8e:58:eb: 57:0a:45:9d:12:75:e2:e4:d3:9b:23:70:3b:a1:63:2f:73:21: ec:c1:d4:9a:7e:33:a8:fe:20:61:5c:43:4e:43:4f:a8:49:be: d0:6c:e4:8c:aa:b7:da:ef:db:6c:8a:ce:e6:65:88:0d:6c:be: d1:1e:b0:71:cb:93:c3:16:be:26:51:6b:ff:a9:43:f2:c6:e7: 06:4b:46:59:e6:fc:93:56:5e:e3:85:be:38:86:06:ca:30:4d: f1:b1:d8:ef:d1:54:89:a6:bd:da:18:be:ff:5c:27:f9:9b:35: 4e:a0:7a:db:7f:cf:fe:e5:33:72:5e:5a:d2:f4:fc:ff:2a:a8: ab:c9:55:c8:2e:c6:41:d5:41:a3:92:47:26:5e:6c:d2:b8:87: cd:16:4c:c2:de:bb:fc:39:7f:94:3f:b3:ea:3e:14:b2:cb:c5: a2:20:d6:8b:3c:0e:7d:df:7d:77:67:28:ed:c7:24:43:b0:d9: 6f:8e:a5:6a:90:fa:00:39:c6:78:92:f8:c0:22:98:46:b6:84: 4c:94:98:3e -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEl/AglSEN2LDMYN9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQxMjAwNDUzNVoXDTI3MDcxNjAwNDUzNVowLzEtMCsGA1UEAxMk YTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NFU30V/Brortc5RL312V8a2HzCIrdBZPJaz KBIbt/R75Ke+3uYB/jY2Juph9s3fhvdKt7kWJbTQml+JPui7SO16OVyR2B3fm/1s JjTFK/rGGPEo+TXsDBioN4CdH7cku7S9JsS8k7PJtWwf91bt6nJyr0+onO55C08l PEbuhZtldHdcruVeITMorg6OmMX9OPFKMYDalybbqeEKqpMcrTA/IUt+rQQOaiWA bQQUWmUALpXQxg7Fl3j6UFkBImUgLqR0WtXbyJo1t57Zmfu6sPUmrRAEINsMCCEL WlTRFed6rkU+a2UH9FQkY6bHLf2TqBPiUbtG4Nxp7ooj1YPpOwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFMwjlXiNArOxOTzYSQnQMWtPHKYSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h NmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E2YmEwZmQyLWI1MjYtNDk4NS05 MzE0LWJmNjQ4NTA1NmE2NC9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUw NTZhNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCA/AMEAMAfLjAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIJ+DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCNZP8Q3Z03Gb4n8gL+l+MguTH5m6uKT8KqByEvguHE JRMYYTI+HI671gFvYpTcjaQ0fJiOWOtXCkWdEnXi5NObI3A7oWMvcyHswdSafjOo /iBhXENOQ0+oSb7QbOSMqrfa79tsis7mZYgNbL7RHrBxy5PDFr4mUWv/qUPyxucG S0ZZ5vyTVl7jhb44hgbKME3xsdjv0VSJpr3aGL7/XCf5mzVOoHrbf8/+5TNyXlrS 9Pz/KqiryVXILsZB1UGjkkcmXmzSuIfNFkzC3rv8OX+UP7PqPhSyy8WiINaLPA59 3313ZyjtxyRDsNlvjqVqkPoAOcZ4kvjAIphGtoRMlJg+ -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:38 2025 by rpki-client