$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer File: 83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer (raw, json) Hash identifier: h1+DCYmxEZLgxW/8x28a1D/TJ0Y2vKjNSQFIeLTw7dA= Subject key identifier: 94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848FD4EFAA42386C1AA8B20D180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 13:45:32 +0000 Certificate not after: Sun 30 May 2027 12:45:32 +0000 Subordinate resources: IP: 23.166.24.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:4e:fa:a4:23:86:c1:aa:8b:20:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 24 13:45:32 2025 GMT Not After : May 30 12:45:32 2027 GMT Subject: CN=83ab5212-bed9-4bb3-8d8e-83a8705c4e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:8b:51:4c:5c:94:27:d4:02:92:b8:3f:ff: 3f:ba:35:3e:d3:05:82:2c:49:e1:17:a6:d5:7c:37: ea:ab:86:a5:07:0b:0b:21:ae:e4:f4:ed:25:02:f1: 92:eb:b1:49:1a:fc:9a:8f:ba:d4:6b:40:3b:0b:6f: c9:e6:0a:32:4b:f2:4f:19:42:40:96:7f:fc:1f:4f: 6c:12:09:64:fc:b4:bc:c2:7b:50:d3:92:4b:ac:cd: a1:e8:59:ea:9b:ae:23:04:6c:52:39:7e:ac:33:3f: 7e:6d:c0:4b:de:63:cb:81:47:2d:be:59:74:61:56: e2:d1:a3:3d:f7:d6:8e:3e:ca:80:d8:23:1a:71:0c: 0a:a7:c6:d3:3b:85:c5:a2:e2:f1:ae:48:51:c0:24: 6a:3a:ad:bc:62:fe:a2:a1:87:80:77:43:c9:67:85: 9d:c3:96:8e:88:06:54:54:72:45:f7:77:34:91:ff: 89:b3:09:0d:71:4f:b0:28:b7:93:d6:5c:36:0e:bc: 57:df:1f:4b:d2:8a:a7:82:7a:d3:66:88:dc:a6:67: c7:d0:b5:4e:e5:57:e2:91:0b:ed:bb:b6:ba:d3:3c: 5c:83:13:ce:72:a7:90:c3:77:f8:f9:f8:a7:36:2e: 04:4e:82:0c:93:66:53:36:81:7b:7a:0b:ec:f6:9a: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.166.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8c:55:4e:4d:6b:5e:87:83:9b:a8:9f:b4:42:3e:24:8f:ba: 34:b8:bd:21:27:3b:d3:2b:4b:40:49:7e:70:3e:e7:c1:05:a2: 42:94:52:a1:a1:3f:ed:24:d9:3d:c4:17:9c:17:28:f5:6b:36: 06:61:97:cf:bc:90:6d:97:54:e5:70:28:57:1e:39:02:f3:5f: 5d:0f:85:bd:f1:57:71:bc:58:4f:dc:10:59:86:b6:dc:8d:5f: fc:91:7a:8b:8a:fc:7c:31:46:04:52:2f:5f:ab:a4:0e:10:b0: 4a:6a:c3:9e:63:3a:c3:50:e5:68:e4:d1:00:6e:4b:c3:17:01: 37:e6:27:ee:ae:e8:ff:0b:2d:75:d6:86:e5:f2:a9:6c:45:73: 4c:d6:7e:ab:82:06:33:0b:da:79:16:72:16:ba:83:c1:c7:fd: f3:68:99:3f:3f:5c:0d:69:4c:20:f3:73:f1:fc:47:ea:54:8a: 36:00:9e:82:6b:be:93:86:67:ee:2f:a3:16:99:fe:eb:ff:76: be:e4:01:f6:d9:66:ec:34:c1:7f:91:48:21:b2:93:e9:91:52: 92:3a:57:be:5a:12:0a:5a:aa:70:43:ee:01:ee:c5:dd:f6:d5: c9:f0:8d:17:4f:9e:ca:b5:b5:c6:7d:45:a4:ed:30:ba:e9:39: 42:30:f4:9f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEj9TvqkI4bBqosg0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDIyNDEzNDUzMloXDTI3MDUzMDEyNDUzMlowLzEtMCsGA1UEAxMk ODNhYjUyMTItYmVkOS00YmIzLThkOGUtODNhODcwNWM0ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgiLUUxclCfUApK4P/8/ujU+0wWCLEnhF6bV fDfqq4alBwsLIa7k9O0lAvGS67FJGvyaj7rUa0A7C2/J5goyS/JPGUJAln/8H09s Eglk/LS8wntQ05JLrM2h6Fnqm64jBGxSOX6sMz9+bcBL3mPLgUctvll0YVbi0aM9 99aOPsqA2CMacQwKp8bTO4XFouLxrkhRwCRqOq28Yv6ioYeAd0PJZ4Wdw5aOiAZU VHJF93c0kf+JswkNcU+wKLeT1lw2DrxX3x9L0oqngnrTZojcpmfH0LVO5VfikQvt u7a60zxcgxPOcqeQw3f4+finNi4EToIMk2ZTNoF7egvs9poBqwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJQSpuPjT9uiuDiTloghgfs4tTb8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 M2FiNTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4NzA1YzRlODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgzYWI1MjEyLWJlZDktNGJiMy04 ZDhlLTgzYTg3MDVjNGU4OC84M2FiNTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4NzA1 YzRlODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXphgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh4xVTk1rXoeDm6iftEI+ JI+6NLi9ISc70ytLQEl+cD7nwQWiQpRSoaE/7STZPcQXnBco9Ws2BmGXz7yQbZdU 5XAoVx45AvNfXQ+FvfFXcbxYT9wQWYa23I1f/JF6i4r8fDFGBFIvX6ukDhCwSmrD nmM6w1DlaOTRAG5LwxcBN+Yn7q7o/wstddaG5fKpbEVzTNZ+q4IGMwvaeRZyFrqD wcf982iZPz9cDWlMIPNz8fxH6lSKNgCegmu+k4Zn7i+jFpn+6/92vuQB9tlm7DTB f5FIIbKT6ZFSkjpXvloSClqqcEPuAe7F3fbVyfCNF0+eyrW1xn1FpO0wuuk5QjD0 nw== -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:06 2025 by rpki-client