$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer File: a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer (raw, json) Hash identifier: gh8M4FuiVoCEx31CPwP3j24rUXK+QeIABCVT4FX3jO4= Subject key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584883DE39C0289357AA782C2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: AS: 33108 IP: 149.112.96.0/22 IP: 206.81.80.0/22 IP: 2001:504:16::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:39:c0:28:93:57:aa:78:2c:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:eb:2c:43:b5:9e:e5:61:f8:a7:9e:e7:11: 74:b0:d7:ba:ed:8c:c6:8c:1f:0e:cd:14:b5:4b:0f: 6a:a5:eb:89:47:32:d4:47:36:7d:34:d9:c8:ad:f2: 8d:86:b2:c8:a3:b2:9b:35:a9:7b:0f:66:a5:03:bd: 2e:b3:b1:95:f1:39:2a:1f:2b:71:85:4e:f9:e5:91: f1:23:20:d4:1c:00:5b:ba:22:b8:22:b1:4d:3e:63: 8a:e6:5c:ea:68:1b:ea:ac:ac:09:92:63:85:93:3c: 12:46:8c:f9:cd:34:0e:b1:d6:76:51:08:d0:a2:f4: b4:dc:16:0b:08:24:a7:99:41:5c:a6:85:98:8c:3f: 1b:3c:58:f6:e0:a8:9b:13:70:36:8d:7b:c4:dc:3d: 81:be:8f:ed:28:52:e9:a5:3e:0d:14:c3:e0:1e:88: e1:54:c8:6b:49:8a:a5:64:5f:b5:b3:8a:e2:92:6f: ee:79:5a:93:03:12:b8:3c:e8:98:f4:64:76:31:43: ec:58:c2:b3:cb:ef:3a:2c:44:4a:bd:3e:2e:a5:ee: 36:ac:d0:0f:30:20:76:41:c4:02:7a:e8:fe:3e:94: 78:40:eb:7f:05:97:37:30:d3:54:a1:57:1c:18:b4: 20:56:b5:a8:db:f3:f3:61:9e:56:c8:bf:73:67:fd: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 149.112.96.0/22 206.81.80.0/22 IPv6: 2001:504:16::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33108 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8f:8a:04:18:fd:b1:b5:73:da:fb:a5:cb:f8:a5:55:9d:f0: 91:65:15:92:10:8b:14:0b:92:0a:02:49:f2:78:d6:61:8a:65: 76:eb:dd:ac:38:44:40:05:f7:67:f1:b0:39:1c:72:a0:2c:6e: 71:20:b7:3b:91:d9:45:39:9c:b1:8e:31:23:27:cd:a0:42:9b: 2b:51:d0:a5:32:96:9b:24:3c:5e:8e:b2:ed:10:1b:f2:68:28: 25:95:9c:e2:6c:dc:ce:1a:53:90:77:bb:50:aa:e5:20:72:9d: e1:b9:56:3d:14:92:c6:6d:c1:de:9e:78:07:8a:1f:f1:9b:3d: 1a:be:a1:59:1e:88:a2:98:63:10:7e:f6:27:8c:3c:5d:28:32: 2a:a2:97:9c:04:f4:32:be:6a:ff:ca:fd:4a:ac:2b:45:8a:61: 99:f6:17:ac:37:30:d0:1c:12:14:1b:22:61:0e:02:26:d1:58: 22:20:b5:1d:75:c2:98:3c:54:d9:14:8c:d8:36:73:a8:cc:1e: 73:33:5d:90:2d:af:c3:e6:5e:8d:10:a1:8f:48:66:26:65:c4: 8d:74:d1:45:8a:68:1b:0e:be:75:7c:ed:4f:fb:8c:32:74:4b: 7f:24:22:be:25:4a:bd:69:ab:ee:74:72:4e:c3:82:1c:f2:3d: 7d:78:a8:e8 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEiD3jnAKJNXqngsJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk YTZlOWM1MWMtNmNmOS00NThlLWEzYWMtNDdjNDk3YTI2MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPrrLEO1nuVh+Kee5xF0sNe67YzGjB8OzRS1 Sw9qpeuJRzLURzZ9NNnIrfKNhrLIo7KbNal7D2alA70us7GV8TkqHytxhU755ZHx IyDUHABbuiK4IrFNPmOK5lzqaBvqrKwJkmOFkzwSRoz5zTQOsdZ2UQjQovS03BYL CCSnmUFcpoWYjD8bPFj24KibE3A2jXvE3D2Bvo/tKFLppT4NFMPgHojhVMhrSYql ZF+1s4rikm/ueVqTAxK4POiY9GR2MUPsWMKzy+86LERKvT4upe42rNAPMCB2QcQC euj+PpR4QOt/BZc3MNNUoVccGLQgVrWo2/PzYZ5WyL9zZ/1USQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFFhDdFbI9Uh3ikLzc+or1w2GBFI8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h NmU5YzUxYy02Y2Y5LTQ1OGUtYTNhYy00N2M0OTdhMjYxN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E2ZTljNTFjLTZjZjktNDU4ZS1h M2FjLTQ3YzQ5N2EyNjE3Yy9hNmU5YzUxYy02Y2Y5LTQ1OGUtYTNhYy00N2M0OTdh MjYxN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAKVcGADBALOUVAwDwQCAAIwCQMHACABBQQAFjAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAgVQwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAi4+KBBj9sbVz2vul y/ilVZ3wkWUVkhCLFAuSCgJJ8njWYYplduvdrDhEQAX3Z/GwORxyoCxucSC3O5HZ RTmcsY4xIyfNoEKbK1HQpTKWmyQ8Xo6y7RAb8mgoJZWc4mzczhpTkHe7UKrlIHKd 4blWPRSSxm3B3p54B4of8Zs9Gr6hWR6IophjEH72J4w8XSgyKqKXnAT0Mr5q/8r9 SqwrRYphmfYXrDcw0BwSFBsiYQ4CJtFYIiC1HXXCmDxU2RSM2DZzqMweczNdkC2v w+ZejRChj0hmJmXEjXTRRYpoGw6+dXztT/uMMnRLfyQiviVKvWmr7nRyTsOCHPI9 fXio6A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:53 2025 by rpki-client