$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer File: b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer (raw, json) Hash identifier: C/t7WkurphVV+8ouDZ0XfD8bbY78VBw6+u7vrEMIzkk= Subject key identifier: F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848A55E70EED4196B7E593E8180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jan 2025 01:45:33 +0000 Certificate not after: Thu 29 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 63297 IP: 130.51.184.0/22 IP: 192.243.214.0/23 IP: 2605:cf80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:5e:70:ee:d4:19:6b:7e:59:3e:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 24 01:45:33 2025 GMT Not After : Apr 29 00:45:33 2027 GMT Subject: CN=b47dccf7-419a-4049-85b8-a6ede6c8e00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:62:54:c5:1a:7d:ee:d5:5b:d4:23:6c:5b: 1b:31:fa:8b:26:60:04:20:06:c5:da:bb:88:9e:0c: dd:23:f7:fd:ca:60:cc:37:24:78:b2:dc:6e:6d:5c: e3:85:ef:46:d5:39:ff:ae:8f:8a:b4:de:11:63:e2: 89:14:d8:98:1b:7a:97:fe:5a:80:8c:cb:8e:c4:e7: f0:fd:db:c2:f3:49:b8:1f:90:f9:6e:5e:d9:62:67: 6b:95:09:a2:09:a0:e6:79:d2:f3:8b:c6:f5:b7:86: d1:ec:0d:37:a0:29:aa:07:b5:e7:4a:2f:12:c8:70: c8:74:8a:4f:aa:f1:17:ad:00:82:6a:cc:a3:b0:c1: f5:48:d2:f7:f2:3a:ee:35:60:c6:24:10:10:3a:e1: 69:4e:7f:83:f3:6f:93:91:d8:8c:a4:16:ce:42:0b: 1c:05:1a:42:9e:f9:18:52:80:9b:0c:39:85:a0:0b: d3:6c:c1:2b:01:98:bb:11:74:8d:45:23:bc:52:81: 37:d2:56:6a:07:05:ba:fb:0e:b0:8f:74:e2:19:7a: 57:49:4f:a7:0d:8d:81:47:7d:9c:3f:33:0d:ce:78: 2e:75:76:3c:43:c8:4c:9a:f1:46:50:5c:74:df:64: 3e:64:15:88:ea:7d:e1:44:25:e9:07:11:50:88:5d: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 130.51.184.0/22 192.243.214.0/23 IPv6: 2605:cf80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a7:f9:4b:df:26:de:c3:15:f2:56:6f:14:36:b1:c8:30:05: cc:73:62:eb:a7:44:4d:6a:15:bc:46:71:d9:18:68:1d:83:8b: 8f:ec:c6:88:26:10:4c:6a:05:78:95:28:ed:cd:4c:5a:02:6a: 31:57:01:1a:8f:d2:20:82:a3:2d:82:02:d5:7e:67:c4:65:d6: 89:73:f1:8b:58:f6:90:41:0e:93:4a:ec:4b:72:9d:c0:4e:9b: 72:72:f8:04:4c:5a:a6:4e:27:85:f9:e7:23:7b:77:47:cb:29: 65:3a:65:8f:a4:66:d2:a0:af:cf:f9:fb:27:db:7d:e1:5e:38: 58:73:f2:9a:20:b5:23:85:bd:cf:c0:91:f1:38:e9:dd:0c:8d: 41:58:35:77:18:ae:38:b0:84:ee:99:39:2f:ad:8f:73:e1:4c: 77:c6:83:df:0c:41:73:5b:23:a1:49:c7:61:81:9b:94:49:15: 35:fa:45:11:00:3c:de:47:b5:5b:f2:e9:9f:ae:b8:3d:f4:40: 1e:87:3b:9b:aa:9c:a1:cb:12:dd:0f:77:88:fd:89:bf:87:f5: f6:bb:b9:1f:7c:41:10:d5:33:2c:52:60:1a:b8:1a:a5:42:f0: e1:4d:e4:d2:a4:c8:00:10:aa:86:46:c3:72:ae:6e:bd:fb:4a: f8:69:d3:44 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEilXnDu1Blrflk+gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEyNDAxNDUzM1oXDTI3MDQyOTAwNDUzM1owLzEtMCsGA1UEAxMk YjQ3ZGNjZjctNDE5YS00MDQ5LTg1YjgtYTZlZGU2YzhlMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mNiVMUafe7VW9QjbFsbMfqLJmAEIAbF2ruI ngzdI/f9ymDMNyR4stxubVzjhe9G1Tn/ro+KtN4RY+KJFNiYG3qX/lqAjMuOxOfw /dvC80m4H5D5bl7ZYmdrlQmiCaDmedLzi8b1t4bR7A03oCmqB7XnSi8SyHDIdIpP qvEXrQCCasyjsMH1SNL38jruNWDGJBAQOuFpTn+D82+TkdiMpBbOQgscBRpCnvkY UoCbDDmFoAvTbMErAZi7EXSNRSO8UoE30lZqBwW6+w6wj3TiGXpXSU+nDY2BR32c PzMNzngudXY8Q8hMmvFGUFx032Q+ZBWI6n3hRCXpBxFQiF1ugQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPXs4SkVWMw1dpej+QR0PQNGnujhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i NDdkY2NmNy00MTlhLTQwNDktODViOC1hNmVkZTZjOGUwMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0N2RjY2Y3LTQxOWEtNDA0OS04 NWI4LWE2ZWRlNmM4ZTAwZi9iNDdkY2NmNy00MTlhLTQwNDktODViOC1hNmVkZTZj OGUwMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKCM7gDBAHA89YwDQQCAAIwBwMFACYFz4AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPdBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFmn+UvfJt7DFfJWbxQ2 scgwBcxzYuunRE1qFbxGcdkYaB2Di4/sxogmEExqBXiVKO3NTFoCajFXARqP0iCC oy2CAtV+Z8Rl1olz8YtY9pBBDpNK7EtyncBOm3Jy+ARMWqZOJ4X55yN7d0fLKWU6 ZY+kZtKgr8/5+yfbfeFeOFhz8pogtSOFvc/AkfE46d0MjUFYNXcYrjiwhO6ZOS+t j3PhTHfGg98MQXNbI6FJx2GBm5RJFTX6RREAPN5HtVvy6Z+uuD30QB6HO5uqnKHL Et0Pd4j9ib+H9fa7uR98QRDVMyxSYBq4GqVC8OFN5NKkyAAQqoZGw3Kubr37Svhp 00Q= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:25 2025 by rpki-client