$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer File: a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer (raw, json) Hash identifier: ORvNRJV7MqlPFPdClQaY6DtWP5APOujieegrL4PqXRY= Subject key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848063D74ABD9BB0BB08EBF8D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Nov 2024 01:45:33 +0000 Certificate not after: Wed 03 Mar 2027 01:45:33 +0000 Subordinate resources: IP: 129.19.0.0/16 IP: 129.82.0.0/16 IP: 158.142.0.0/16 IP: 192.55.229.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:06:3d:74:ab:d9:bb:0b:b0:8e:bf:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 28 01:45:33 2024 GMT Not After : Mar 3 01:45:33 2027 GMT Subject: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:4a:ac:19:39:e3:ca:73:81:8b:92:9a:30: 92:9b:8b:68:d0:dd:31:88:01:4d:30:94:f9:4d:50: 52:cd:bb:5a:56:81:02:3c:42:66:b3:67:3a:f1:cf: 74:23:b2:dc:7a:25:21:12:a9:f7:dd:cc:bf:af:a5: cf:bc:6c:af:47:84:83:3c:3e:0f:7e:3f:c3:ab:e0: a8:5d:22:94:86:e8:6f:de:99:07:81:ea:39:88:fc: fb:63:2a:53:9e:86:94:58:c5:f2:38:ac:82:f8:06: 7b:7e:d8:7e:02:71:47:f7:ab:62:27:d8:78:1f:4a: 79:93:63:57:61:08:76:4d:77:f4:70:1a:4e:40:cc: 52:c7:0e:89:a3:7d:19:bf:c2:33:eb:3d:fe:90:0c: cb:73:6d:f2:ad:ec:16:89:df:00:5b:93:6a:56:44: 06:77:a5:a2:88:1c:69:8e:1f:f9:ba:3f:ec:f8:30: 3e:26:72:e7:92:c1:61:06:4e:cf:f7:28:98:1b:fb: 55:eb:ac:eb:dd:a1:55:d3:2a:3d:d6:32:66:ef:1c: c4:ec:6d:3a:ff:12:eb:de:43:1f:a4:68:7f:d8:84: 7b:7c:54:48:3e:d6:ff:6c:a1:6f:bf:64:ab:58:1a: 17:e2:21:07:d1:5f:09:ee:36:66:25:3b:35:11:30: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 129.19.0.0/16 129.82.0.0/16 158.142.0.0/16 192.55.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d9:83:e8:d5:3a:43:15:9f:fc:b5:2c:79:ef:47:b5:e1:5e: b3:5f:6a:9b:ed:a0:aa:24:ba:1a:80:82:15:1c:04:bd:73:21: f2:51:37:40:10:87:7d:0e:38:87:1a:ae:0f:b9:d7:2a:d5:b7: 81:e5:b2:97:e3:2f:0c:60:d1:83:67:2a:12:82:e0:0b:1f:8b: e4:74:ce:83:ee:5e:c0:a4:f7:ce:bc:26:8a:e4:e9:f3:27:6c: a1:62:ef:9f:5c:de:cb:5e:09:5a:58:96:31:15:0c:be:83:17: 5c:60:a4:3b:0d:6b:62:8c:38:3d:27:60:f2:3a:0d:20:a8:23: 9b:d7:23:db:21:75:bc:9d:25:0c:c9:34:f4:b4:91:3c:53:84: 03:6f:86:07:75:43:02:08:51:11:a3:03:9a:d9:e9:7e:d2:55: 95:bd:1a:74:18:e2:20:1f:f7:7c:f6:2f:62:bb:f8:18:74:f6: 65:80:3e:e4:bb:a0:64:98:80:ae:ce:ab:a7:5e:50:3c:7f:bb: f3:f1:29:ee:d7:e9:13:18:ca:20:dc:12:0b:ab:22:be:cf:ab: 31:e6:13:99:37:07:9c:18:0a:aa:d7:1d:a9:cb:6b:7e:5c:5d: dc:c9:b6:f2:68:38:30:be:be:cb:d3:0a:37:fc:ad:5c:bc:87: 93:53:9a:4c -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEgGPXSr2bsLsI6/jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyODAxNDUzM1oXDTI3MDMwMzAxNDUzM1owLzEtMCsGA1UEAxMk YTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUyZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc5KrBk548pzgYuSmjCSm4to0N0xiAFNMJT5 TVBSzbtaVoECPEJms2c68c90I7LceiUhEqn33cy/r6XPvGyvR4SDPD4Pfj/Dq+Co XSKUhuhv3pkHgeo5iPz7YypTnoaUWMXyOKyC+AZ7fth+AnFH96tiJ9h4H0p5k2NX YQh2TXf0cBpOQMxSxw6Jo30Zv8Iz6z3+kAzLc23yrewWid8AW5NqVkQGd6WiiBxp jh/5uj/s+DA+JnLnksFhBk7P9yiYG/tV66zr3aFV0yo91jJm7xzE7G06/xLr3kMf pGh/2IR7fFRIPtb/bKFvv2SrWBoX4iEH0V8J7jZmJTs1ETD/9wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFAMUYg/lDRxt+HgG2HcMEd7AC2/aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ExZDJlMzQ4LWZmYTgtNDU1NS05 OWY3LTM1MjY4MzRlMmZkNS9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0 ZTJmZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMBsEAgABMBUDAwCBEwMDAIFSAwMAno4DBADAN+UwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA ptmD6NU6QxWf/LUsee9HteFes19qm+2gqiS6GoCCFRwEvXMh8lE3QBCHfQ44hxqu D7nXKtW3geWyl+MvDGDRg2cqEoLgCx+L5HTOg+5ewKT3zrwmiuTp8ydsoWLvn1ze y14JWliWMRUMvoMXXGCkOw1rYow4PSdg8joNIKgjm9cj2yF1vJ0lDMk09LSRPFOE A2+GB3VDAghREaMDmtnpftJVlb0adBjiIB/3fPYvYrv4GHT2ZYA+5LugZJiArs6r p15QPH+78/Ep7tfpExjKINwSC6sivs+rMeYTmTcHnBgKqtcdqctrflxd3Mm28mg4 ML6+y9MKN/ytXLyHk1OaTA== -----END CERTIFICATE-----Generated at Sun Jun 15 11:55:38 2025 by rpki-client