$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer File: 7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer (raw, json) Hash identifier: J1ynNQrWJ1J/MI79dL9zFNunFItBIjh6MRxeYHP4PrQ= Subject key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584827BDA91E131B9FA4CCC46050 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 01:45:33 +0000 Certificate not after: Mon 15 Mar 2027 00:45:33 +0000 Subordinate resources: IP: 192.54.242.0/24 IP: 192.219.236.0 -- 192.219.240.255 IP: 205.189.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:bd:a9:1e:13:1b:9f:a4:cc:c4:60:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 10 01:45:33 2024 GMT Not After : Mar 15 00:45:33 2027 GMT Subject: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:96:97:f8:b1:41:a4:da:f1:77:bf:a4:ee: fb:4b:d2:e6:4c:e7:00:77:43:0d:d1:8d:55:d3:81: e1:63:42:9e:0f:95:15:c4:fc:91:e5:d0:e1:54:99: 9d:2d:a5:b9:b6:9d:82:bf:eb:89:4f:b2:36:a0:3c: e2:08:8f:05:d3:c7:09:a9:9e:48:9b:19:d7:77:08: ad:ee:64:a3:17:6d:69:f1:e6:98:fd:bf:fa:99:fa: b0:6f:eb:7a:06:f5:c1:57:05:a6:81:6d:d7:72:58: 9e:1c:d9:a3:a7:b0:26:f8:89:97:89:9a:60:c9:a4: 4d:b8:0c:9c:27:73:90:9f:33:74:bb:e6:d0:1b:e6: eb:c7:2f:59:af:96:69:7c:ab:9d:58:d6:08:15:d4: 6e:d7:75:d6:f1:09:db:9a:df:90:28:fb:76:76:37: 94:a3:57:a5:27:d0:cc:ac:28:f2:5e:bb:65:c9:24: de:5c:89:2d:f7:39:68:52:7c:46:da:d9:7b:1d:a8: 39:ec:00:e1:3b:d9:49:13:0a:17:fe:b2:6b:27:bd: 1f:7d:a8:bb:a5:74:5a:3f:66:38:e0:26:d1:02:83: 2a:bc:17:b0:0b:cd:23:ca:4e:5d:82:af:5b:5c:62: 08:c5:ea:16:17:d2:b2:b8:eb:57:eb:66:66:00:17: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.54.242.0/24 192.219.236.0-192.219.240.255 205.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:cd:ba:26:cd:c2:2a:f0:06:81:5c:77:69:20:0e:ed:a8:90: 33:e5:73:a2:91:c5:4f:fe:cb:29:ec:da:62:1f:bc:88:b3:d9: aa:37:a9:58:0b:c1:8f:2f:dd:9c:f5:0d:1e:27:1c:03:25:94: 16:59:61:42:1c:e2:70:89:91:4e:dd:d7:18:27:7f:de:ac:6b: b3:55:19:fc:3b:38:ca:1e:09:8e:35:9b:a8:24:37:00:de:b0: 75:6c:ce:b9:7e:f7:cc:ae:0e:60:c5:77:f1:93:fd:39:2c:7c: cd:05:c0:6a:21:bf:c2:bc:ea:a1:4a:f9:aa:76:7d:64:9f:99: 4b:71:a3:4f:1e:fc:d6:bc:5c:38:1e:44:88:68:1d:c1:88:e7: c5:ac:d7:ed:51:4c:db:65:20:9e:38:14:5b:ca:2f:65:21:99: f8:ed:9f:c0:e6:3e:98:92:de:c9:d9:b6:a8:a1:a6:53:a7:26: ff:25:69:dd:a2:c5:51:dd:db:74:36:64:69:f9:f1:e7:01:98: 47:05:fe:e6:96:d4:e6:50:66:23:18:ae:8e:a7:90:3a:c2:9f: c3:bc:c8:e5:1c:fc:83:98:e6:d9:2c:ea:c2:09:50:a2:56:3b: b5:c5:22:c5:0c:df:54:60:90:2b:8e:da:56:64:f3:8c:b9:c3: 77:2a:39:e4 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEgnvakeExufpMzEYFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMDAxNDUzM1oXDTI3MDMxNTAwNDUzM1owLzEtMCsGA1UEAxMk N2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNmNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JuWl/ixQaTa8Xe/pO77S9LmTOcAd0MN0Y1V 04HhY0KeD5UVxPyR5dDhVJmdLaW5tp2Cv+uJT7I2oDziCI8F08cJqZ5ImxnXdwit 7mSjF21p8eaY/b/6mfqwb+t6BvXBVwWmgW3XclieHNmjp7Am+ImXiZpgyaRNuAyc J3OQnzN0u+bQG+brxy9Zr5ZpfKudWNYIFdRu13XW8Qnbmt+QKPt2djeUo1elJ9DM rCjyXrtlySTeXIkt9zloUnxG2tl7Hag57ADhO9lJEwoX/rJrJ70ffai7pXRaP2Y4 4CbRAoMqvBewC80jyk5dgq9bXGIIxeoWF9KyuOtX62ZmABfMqQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFLDfGO15CcM9i2d9Ra/WgfZlPCscMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdjMTRlZjdjLTEyODktNDdlZC04 MTQ0LWM3YjNmZWFjZjVhZi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVh Y2Y1YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADANvIwDAMEAsDb7AMEAMDb8AMEBM29EDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBIzbomzcIq8AaBXHdpIA7tqJAz5XOikcVP/ssp7NpiH7yIs9mqN6lYC8GP L92c9Q0eJxwDJZQWWWFCHOJwiZFO3dcYJ3/erGuzVRn8OzjKHgmONZuoJDcA3rB1 bM65fvfMrg5gxXfxk/05LHzNBcBqIb/CvOqhSvmqdn1kn5lLcaNPHvzWvFw4HkSI aB3BiOfFrNftUUzbZSCeOBRbyi9lIZn47Z/A5j6Ykt7J2baooaZTpyb/JWndosVR 3dt0NmRp+fHnAZhHBf7mltTmUGYjGK6Op5A6wp/DvMjlHPyDmObZLOrCCVCiVju1 xSLFDN9UYJArjtpWZPOMucN3Kjnk -----END CERTIFICATE-----Generated at Sun Apr 27 15:22:13 2025 by rpki-client