$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer File: e102a5ad-786a-444b-bd0b-6bd116f20466.cer (raw, json) Hash identifier: r3zDARJLbWHxVLgsCRo27wWZv8zfFnvFnGlm7EXIObo= Subject key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858496E41EAA22477C206213380B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Apr 2025 00:45:33 +0000 Certificate not after: Sat 10 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 393290 IP: 162.223.108.0/22 IP: 2604:9d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:41:ea:a2:24:77:c2:06:21:33:80:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 6 00:45:33 2025 GMT Not After : Jul 10 00:45:33 2027 GMT Subject: CN=e102a5ad-786a-444b-bd0b-6bd116f20466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:4d:d5:d2:4e:09:e6:08:1b:7d:82:c2:96: 17:a3:31:f5:0e:75:4f:71:a2:4a:22:4e:2d:00:8f: 2b:95:fb:ba:7c:30:57:58:b8:51:57:fa:fc:fa:c2: 1e:d8:53:7d:76:3e:92:1f:89:1e:dd:3e:78:40:20: 39:de:ef:6d:27:b7:4f:20:fc:bb:4a:38:dd:18:98: 82:50:b3:ac:82:3e:2c:b8:6e:11:9f:19:db:da:9f: 1a:91:0e:a7:76:57:6f:de:5c:5b:04:30:f0:10:e3: 79:19:f5:cb:ce:bb:de:68:9f:8b:76:29:04:2b:cd: b8:9e:7c:d2:0c:a9:50:6c:aa:f1:90:0c:0e:b7:c4: ac:e5:30:c3:03:65:00:1f:e1:08:a3:d9:81:2c:5c: 58:bf:06:a6:a8:12:72:95:91:41:bb:51:5c:ef:a1: 0f:56:7c:f1:a6:22:76:ed:d7:77:3c:d9:ff:d4:cd: 73:cf:3f:e8:c0:28:6a:46:b3:ed:dd:fe:ab:64:1a: 41:d4:b2:2f:5a:88:95:33:c2:6f:24:fc:6b:2f:8a: c0:1a:66:1a:9e:5f:c6:ae:6a:62:80:23:63:9c:2b: 70:ae:9c:5a:9b:32:15:ce:6f:be:81:fe:a5:86:ba: f7:bf:a1:a9:da:69:79:54:07:fd:99:01:b7:b1:36: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.223.108.0/22 IPv6: 2604:9d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393290 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:59:eb:05:f4:c0:0f:f4:5f:11:ea:14:fa:9d:e7:08:e6:7b: 91:d2:14:8f:f8:b3:62:78:29:06:f0:ee:66:59:41:90:46:bb: ad:2d:10:b1:83:ee:48:92:c5:74:d2:26:c5:d2:a0:9c:4d:cf: 9b:8f:26:76:cf:1f:96:af:5d:6f:a1:dc:5b:70:17:0f:40:1d: aa:09:43:e4:f2:b2:67:fe:27:6c:1c:6f:e4:db:4c:89:06:9b: 11:fb:90:8e:c3:ca:53:9a:93:8c:71:bc:52:68:27:4c:fd:2d: 8c:12:18:69:f2:cf:3a:ec:92:01:ab:be:01:7b:89:4e:51:99: 1c:cf:22:52:7b:29:d6:1f:ba:97:6b:e3:4c:ea:df:29:80:61: 71:83:d2:3b:05:ab:08:ff:97:1a:cb:22:40:20:d1:05:84:2d: 44:98:be:49:63:53:7d:33:f5:fa:10:9f:f7:2b:0a:ad:ce:da: 6e:90:e8:dc:03:59:a2:c3:b3:32:09:c8:ab:f8:af:da:df:b5: f8:7c:93:14:67:3b:c4:72:0f:db:ec:c1:64:8f:00:d6:de:bd: 99:91:17:ad:9a:b4:de:b3:ee:17:94:f3:0f:02:df:bb:30:bb: b3:7c:77:49:58:c1:2b:35:81:f0:0a:9f:d9:bf:3b:b3:77:ee: b3:8d:cb:7d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEluQeqiJHfCBiEzgLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQwNjAwNDUzM1oXDTI3MDcxMDAwNDUzM1owLzEtMCsGA1UEAxMk ZTEwMmE1YWQtNzg2YS00NDRiLWJkMGItNmJkMTE2ZjIwNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+BN1dJOCeYIG32CwpYXozH1DnVPcaJKIk4t AI8rlfu6fDBXWLhRV/r8+sIe2FN9dj6SH4ke3T54QCA53u9tJ7dPIPy7SjjdGJiC ULOsgj4suG4Rnxnb2p8akQ6ndldv3lxbBDDwEON5GfXLzrveaJ+LdikEK824nnzS DKlQbKrxkAwOt8Ss5TDDA2UAH+EIo9mBLFxYvwamqBJylZFBu1Fc76EPVnzxpiJ2 7dd3PNn/1M1zzz/owChqRrPt3f6rZBpB1LIvWoiVM8JvJPxrL4rAGmYanl/Grmpi gCNjnCtwrpxamzIVzm++gf6lhrr3v6Gp2ml5VAf9mQG3sTb4NQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJjrrpiGlPmdurUke0x2md1LorfvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l MTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZmMjA0NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UxMDJhNWFkLTc4NmEtNDQ0Yi1i ZDBiLTZiZDExNmYyMDQ2Ni9lMTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZm MjA0NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKi32wwDQQCAAIwBwMFACYEnUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgBKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABdZ6wX0wA/0XxHqFPqd5wjme5HS FI/4s2J4KQbw7mZZQZBGu60tELGD7kiSxXTSJsXSoJxNz5uPJnbPH5avXW+h3Ftw Fw9AHaoJQ+Tysmf+J2wcb+TbTIkGmxH7kI7DylOak4xxvFJoJ0z9LYwSGGnyzzrs kgGrvgF7iU5RmRzPIlJ7KdYfupdr40zq3ymAYXGD0jsFqwj/lxrLIkAg0QWELUSY vkljU30z9foQn/crCq3O2m6Q6NwDWaLDszIJyKv4r9rftfh8kxRnO8RyD9vswWSP ANbevZmRF62atN6z7heU8w8C37swu7N8d0lYwSs1gfAKn9m/O7N37rONy30= -----END CERTIFICATE-----Generated at Mon Apr 28 05:42:07 2025 by rpki-client