$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer File: 79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer (raw, json) Hash identifier: SSF1vagv4Bn79Jap6VCCWmL/dBKkCaC+6srFUE2urGc= Subject key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848387DC1DBC59FBD2B4BC4D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Dec 2024 01:45:32 +0000 Certificate not after: Sun 21 Mar 2027 00:45:32 +0000 Subordinate resources: IP: 149.48.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:7d:c1:db:c5:9f:bd:2b:4b:c4:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 16 01:45:32 2024 GMT Not After : Mar 21 00:45:32 2027 GMT Subject: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:5b:59:07:14:12:d0:85:41:bd:e9:ab:29: 29:4e:45:c1:1f:f1:e2:1a:98:e8:42:31:8f:91:43: c5:df:a6:46:db:61:30:70:12:e1:19:6f:50:42:f4: 7a:fe:bf:a7:44:13:5f:a8:be:98:7c:12:c6:68:54: c1:a5:12:71:a2:b4:20:d5:5d:66:1d:bb:10:75:2b: fc:4d:6d:4d:d3:2e:2f:e8:15:8c:88:a6:1b:75:d8: 9b:35:29:52:3d:51:57:8d:a0:24:d9:dd:a3:be:c6: b0:f8:0a:d3:5a:3f:38:2b:e4:da:93:ed:2b:c7:0b: 4a:a1:15:d5:6e:4c:81:ba:2f:6e:97:8d:7c:69:31: 62:56:ab:9b:cb:23:7a:38:78:1d:cc:05:ac:47:ba: c0:f4:b6:2b:4f:d7:dd:1f:0c:13:30:0f:7a:bf:2a: 16:ab:1a:c5:f6:71:cc:8b:02:42:f9:31:2e:12:b9: 27:1f:04:7e:6c:69:42:50:dd:8f:4c:77:92:57:25: 4e:f2:f1:a6:70:45:1d:e8:88:b4:40:2c:d7:73:e0: b5:ed:eb:55:cf:d6:ae:d1:63:d5:e9:90:60:51:e1: ce:e9:e5:2b:eb:46:c6:10:db:77:fd:88:f7:6e:63: a1:24:18:05:4d:78:12:93:ec:ef:80:87:65:c6:e6: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a3:d3:f8:9a:ef:1b:9e:c8:3b:d1:fa:07:b5:fb:8f:b2:dd: ee:7d:85:aa:bb:59:c4:b1:ba:22:fc:ca:69:a4:8e:be:f1:ff: c7:23:31:a4:22:bc:dd:ee:bc:93:13:0a:eb:58:97:2d:f8:d8: 57:f6:5f:bb:7b:f8:40:5c:8d:4f:09:91:76:17:74:b9:de:03: 34:fa:d5:00:0e:f5:3e:93:5b:ec:e6:b2:02:ba:e3:b2:74:81: 20:0e:6d:d1:55:7c:c5:f5:80:65:3d:08:0c:81:51:dc:75:b9: c6:cc:2b:3e:d5:53:34:16:ce:65:a4:16:42:23:99:bc:b8:61: a2:1e:47:e2:73:d4:8e:ba:c5:57:6d:fa:93:70:12:c0:b2:07: 2a:af:64:be:19:48:21:05:56:c4:6a:7a:0a:7e:79:cf:57:1c: 0c:20:8e:13:d6:45:f7:b2:d4:06:48:74:60:fa:e0:36:57:28: 12:f0:68:33:45:6f:5a:b9:da:a5:2c:c2:73:f3:e9:40:26:c4: a5:e9:19:ea:ef:53:eb:2c:64:0f:14:21:8e:22:9a:75:08:7f: 1f:50:b7:80:82:98:b3:ef:bb:78:d6:93:5b:9d:7c:d7:e4:85: a0:fb:fe:51:75:cd:4a:84:75:fd:21:c9:e2:ac:2f:90:49:bd: b2:1c:fc:2d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEg4fcHbxZ+9K0vE0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxNjAxNDUzMloXDTI3MDMyMTAwNDUzMlowLzEtMCsGA1UEAxMk NzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQNbWQcUEtCFQb3pqykpTkXBH/HiGpjoQjGP kUPF36ZG22EwcBLhGW9QQvR6/r+nRBNfqL6YfBLGaFTBpRJxorQg1V1mHbsQdSv8 TW1N0y4v6BWMiKYbddibNSlSPVFXjaAk2d2jvsaw+ArTWj84K+Tak+0rxwtKoRXV bkyBui9ul418aTFiVqubyyN6OHgdzAWsR7rA9LYrT9fdHwwTMA96vyoWqxrF9nHM iwJC+TEuErknHwR+bGlCUN2PTHeSVyVO8vGmcEUd6Ii0QCzXc+C17etVz9au0WPV 6ZBgUeHO6eUr60bGENt3/Yj3bmOhJBgFTXgSk+zvgIdlxuY9tQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFAxhoZNqRDziETH6QEJo96bnNIQUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzc5YjFmZTdhLWVjYTktNDIyZi05 MDQzLTVhOTNjYTUxNDVjOC83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1 MTQ1YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCVMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/o9P4mu8bnsg70foHtfuP st3ufYWqu1nEsboi/MpppI6+8f/HIzGkIrzd7ryTEwrrWJct+NhX9l+7e/hAXI1P CZF2F3S53gM0+tUADvU+k1vs5rICuuOydIEgDm3RVXzF9YBlPQgMgVHcdbnGzCs+ 1VM0Fs5lpBZCI5m8uGGiHkfic9SOusVXbfqTcBLAsgcqr2S+GUghBVbEanoKfnnP VxwMII4T1kX3stQGSHRg+uA2VygS8GgzRW9audqlLMJz8+lAJsSl6Rnq71PrLGQP FCGOIpp1CH8fULeAgpiz77t41pNbnXzX5IWg+/5Rdc1KhHX9IcnirC+QSb2yHPwt -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:14 2025 by rpki-client