$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer File: 21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer (raw, json) Hash identifier: 8gF7CS1w7flJlpKxATVdYX5vOQDI2SNPp4GgaXDArD0= Subject key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848493DE0C85EA2CC7EFBF50E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Dec 2024 01:45:34 +0000 Certificate not after: Sat 27 Mar 2027 00:45:34 +0000 Subordinate resources: IP: 205.236.93.0 -- 205.236.95.255 IP: 205.236.144.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:3d:e0:c8:5e:a2:cc:7e:fb:f5:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 22 01:45:34 2024 GMT Not After : Mar 27 00:45:34 2027 GMT Subject: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:0c:a5:2d:a4:c5:d9:7c:90:df:fa:e3:9f: e2:e5:fb:44:dc:c8:93:63:e7:1a:86:52:25:de:f3: 58:fd:5a:80:d8:1a:e3:e9:7c:bd:78:50:88:f8:84: ce:4f:5a:b4:77:98:88:08:f4:35:b3:ab:6c:8d:df: 06:94:d6:f4:f1:c7:e2:c2:43:a5:5f:14:a3:d3:1d: 98:09:e2:21:15:73:c6:3b:49:39:aa:37:2a:28:38: ae:eb:2c:24:db:7f:d1:52:11:af:26:f5:87:74:89: 09:60:d6:2a:93:72:f7:9c:67:e2:93:4b:76:09:79: b5:b2:6f:16:28:c2:91:52:28:25:fc:7c:55:77:35: 38:e7:7b:eb:eb:00:36:7e:27:b4:93:c2:76:f5:fd: ff:55:dd:b2:bb:0b:94:d5:32:b4:8f:04:f6:b6:c1: 2a:55:60:b6:3d:8c:58:3a:fd:8f:dc:c9:01:1a:01: e7:33:67:81:7e:8b:64:29:31:de:8b:78:a6:24:f9: ed:33:6c:2d:c1:24:c9:15:64:5f:62:da:b6:a1:15: 11:d3:2b:b8:75:c6:37:2a:5b:fb:9a:c3:8c:93:b8: af:fd:fa:41:23:81:28:1f:87:42:24:97:d6:5d:34: e6:6b:2c:f6:cc:34:08:ba:39:16:58:39:ac:1f:51: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 205.236.93.0-205.236.95.255 205.236.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c6:cc:3c:2a:f9:3d:44:5b:c7:f2:3d:54:fa:4c:58:9a:28: ec:a4:d6:37:65:00:11:32:c9:f4:cd:ed:74:62:a5:b9:8d:60: cc:55:c5:d9:71:f4:8e:27:58:53:4a:64:a3:a4:b4:90:2d:2c: 82:24:06:94:71:94:6f:f7:7c:31:a5:f7:f9:85:ac:18:58:b9: 9a:11:97:18:48:dc:d4:07:20:db:2f:f4:fe:92:2a:93:fc:4c: 58:88:25:9b:da:22:3b:70:c0:69:ce:a8:04:d9:09:b5:62:fa: ac:09:b8:5b:c0:85:fc:58:88:d5:77:60:c8:53:4b:b9:43:15: 55:08:d6:63:b2:2f:ce:5f:4e:f0:b9:ed:67:bc:66:97:10:a0: 87:60:5d:37:c7:26:02:d5:dc:9f:58:40:3e:fc:de:4c:c1:9f: 67:30:f9:a2:be:1a:b3:31:4d:a0:8b:5d:88:0a:4b:d9:5b:80: b7:77:77:73:2e:b3:64:ba:03:0b:81:45:97:30:b7:c2:6b:99: 61:f2:9c:b8:9e:cd:e7:9d:b5:6b:43:ad:86:d3:c5:7a:a4:46: 25:f6:ea:db:11:14:66:f3:21:3c:b0:03:63:6e:40:ff:fe:4f: 53:b1:f4:f3:3b:c5:41:d2:c3:37:8f:d1:95:c8:5e:c6:9a:90: e3:c6:c9:ac -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEhJPeDIXqLMfvv1DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIyMjAxNDUzNFoXDTI3MDMyNzAwNDUzNFowLzEtMCsGA1UEAxMk MjFkNDQ3NDUtNGVjOS00ZjEzLWEwMWQtNzBiYjJmM2FkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3esMpS2kxdl8kN/645/i5ftE3MiTY+cahlIl 3vNY/VqA2Brj6Xy9eFCI+ITOT1q0d5iICPQ1s6tsjd8GlNb08cfiwkOlXxSj0x2Y CeIhFXPGO0k5qjcqKDiu6ywk23/RUhGvJvWHdIkJYNYqk3L3nGfik0t2CXm1sm8W KMKRUigl/HxVdzU453vr6wA2fie0k8J29f3/Vd2yuwuU1TK0jwT2tsEqVWC2PYxY Ov2P3MkBGgHnM2eBfotkKTHei3imJPntM2wtwSTJFWRfYtq2oRUR0yu4dcY3Klv7 msOMk7iv/fpBI4EoH4dCJJfWXTTmayz2zDQIujkWWDmsH1GwvQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFK00clCxwMXID9TLhpzs39EX7y3nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y MWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYzYWRiOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIxZDQ0NzQ1LTRlYzktNGYxMy1h MDFkLTcwYmIyZjNhZGI4ZC8yMWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYz YWRiOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAM3sXQMEBc3sQAMEAM3skDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz xsw8Kvk9RFvH8j1U+kxYmijspNY3ZQARMsn0ze10YqW5jWDMVcXZcfSOJ1hTSmSj pLSQLSyCJAaUcZRv93wxpff5hawYWLmaEZcYSNzUByDbL/T+kiqT/ExYiCWb2iI7 cMBpzqgE2Qm1YvqsCbhbwIX8WIjVd2DIU0u5QxVVCNZjsi/OX07wue1nvGaXEKCH YF03xyYC1dyfWEA+/N5MwZ9nMPmivhqzMU2gi12ICkvZW4C3d3dzLrNkugMLgUWX MLfCa5lh8py4ns3nnbVrQ62G08V6pEYl9urbERRm8yE8sANjbkD//k9TsfTzO8VB 0sM3j9GVyF7GmpDjxsms -----END CERTIFICATE-----Generated at Sun Apr 27 00:34:29 2025 by rpki-client