$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer File: 9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer (raw, json) Hash identifier: 9s5zHf5a3Jkzi2eeYzNWzoiJIpFt2NvoBRu31SG7q6I= Subject key identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858484ED33C97E7B3CABD3C1E5E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Dec 2024 01:45:33 +0000 Certificate not after: Mon 29 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 397140 IP: 64.32.43.0/24 IP: 198.8.74.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:d3:3c:97:e7:b3:ca:bd:3c:1e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 24 01:45:33 2024 GMT Not After : Mar 29 00:45:33 2027 GMT Subject: CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:cc:47:39:c5:10:23:4a:6a:07:72:b1:54: 0a:4f:66:e0:fa:d4:0c:33:51:fa:de:8c:0b:7b:91: f8:7f:40:c1:c0:dc:ec:ae:15:df:1c:e4:5f:c9:cf: cd:c0:c9:0f:85:72:aa:38:56:e5:96:80:95:73:ae: cb:1d:ac:2a:b4:e5:8f:91:60:ef:a7:c8:06:02:c3: 88:47:bf:93:d3:8a:4e:98:a4:80:24:c1:e4:83:44: 0a:1c:33:c4:be:ee:a1:1c:c1:72:47:09:1b:05:94: a1:fb:be:ad:e1:70:3f:71:c0:d4:54:dc:04:84:b8: 9c:41:fd:3c:b2:59:55:fd:46:7a:99:5a:6e:2a:37: 37:87:27:a0:48:c4:9e:b6:f1:79:27:a8:7f:04:53: 11:b7:ad:1b:71:36:87:03:de:1e:53:da:a6:76:64: b8:30:80:21:f4:d5:64:29:12:05:b5:25:86:4e:d8: fd:1e:da:fb:9e:ec:df:6f:d3:6a:e5:cf:a9:2f:e9: 1d:80:9e:a2:d3:49:67:6a:0d:59:60:80:9b:4c:d3: 8b:5e:b6:b2:73:04:26:e7:08:0c:de:37:0d:31:11: 54:ea:55:0d:32:3b:9b:10:64:3c:04:03:73:eb:8a: a0:39:13:5c:29:29:ab:5c:3f:e0:7e:7e:02:7e:57: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.32.43.0/24 198.8.74.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8e:de:cc:93:a9:73:0c:9b:b7:49:00:e0:bd:5d:12:c4:ce: 78:69:64:e2:ee:ba:01:53:31:1c:8b:9a:2d:b4:41:5c:94:34: f0:e6:19:9b:2c:1f:95:12:aa:05:82:52:bf:65:d1:83:df:41: df:2e:69:ea:68:e3:78:75:57:44:b4:a4:64:46:03:4f:25:88: 5a:d9:7d:52:53:ba:39:d1:c2:b7:2d:7f:b5:4b:b0:1d:ad:f6: 4f:ab:12:16:b6:cc:19:7c:48:7d:07:51:20:3e:4b:94:20:4e: b9:5f:54:06:9b:27:1d:ac:cf:0e:81:e2:c8:ef:5a:bd:09:c0: a1:e8:84:8c:40:1c:83:2b:20:0a:fb:8f:c6:6a:fa:be:91:ac: 97:c9:3b:a8:e0:71:ee:33:c6:b3:84:a4:f9:f9:90:b2:47:a5: d9:a1:80:9e:10:44:cf:7d:72:59:02:05:c0:ff:c6:76:f5:9a: 44:dc:f6:3e:82:86:b3:f2:8e:95:b6:9b:3b:4c:78:34:4d:f7: 40:01:d8:35:cf:d0:89:17:7b:82:5d:30:3e:77:00:ef:0b:2d: 72:c4:ef:ee:8b:87:ff:d8:91:f6:74:d3:61:a6:fc:38:c0:e5: 6b:8f:90:73:6e:82:fd:c2:da:32:ed:38:6a:82:70:48:c2:de: 95:d4:56:70 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEhO0zyX57PKvTweXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIyNDAxNDUzM1oXDTI3MDMyOTAwNDUzM1owLzEtMCsGA1UEAxMk OWUwNmNlM2ItNGJiNS00NTk0LWJiNmEtMmVlNWIzNDIzNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrMRznFECNKagdysVQKT2bg+tQMM1H63owL e5H4f0DBwNzsrhXfHORfyc/NwMkPhXKqOFblloCVc67LHawqtOWPkWDvp8gGAsOI R7+T04pOmKSAJMHkg0QKHDPEvu6hHMFyRwkbBZSh+76t4XA/ccDUVNwEhLicQf08 sllV/UZ6mVpuKjc3hyegSMSetvF5J6h/BFMRt60bcTaHA94eU9qmdmS4MIAh9NVk KRIFtSWGTtj9Htr7nuzfb9Nq5c+pL+kdgJ6i00lnag1ZYICbTNOLXraycwQm5wgM 3jcNMRFU6lUNMjubEGQ8BANz64qgORNcKSmrXD/gfn4CflfWwQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGyr6NvTs8UbJS/fksCvVhG1PxOSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 ZTA2Y2UzYi00YmI1LTQ1OTQtYmI2YS0yZWU1YjM0MjM3MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzllMDZjZTNiLTRiYjUtNDU5NC1i YjZhLTJlZTViMzQyMzcwYy85ZTA2Y2UzYi00YmI1LTQ1OTQtYmI2YS0yZWU1YjM0 MjM3MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAICsDBADGCEowGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBg9UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAWO3syTqXMMm7dJAOC9XRLEznhpZOLuugFTMRyL mi20QVyUNPDmGZssH5USqgWCUr9l0YPfQd8uaepo43h1V0S0pGRGA08liFrZfVJT ujnRwrctf7VLsB2t9k+rEha2zBl8SH0HUSA+S5QgTrlfVAabJx2szw6B4sjvWr0J wKHohIxAHIMrIAr7j8Zq+r6RrJfJO6jgce4zxrOEpPn5kLJHpdmhgJ4QRM99clkC BcD/xnb1mkTc9j6ChrPyjpW2mztMeDRN90AB2DXP0IkXe4JdMD53AO8LLXLE7+6L h//YkfZ002Gm/DjA5WuPkHNugv3C2jLtOGqCcEjC3pXUVnA= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:24 2025 by rpki-client