$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer File: ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer (raw, json) Hash identifier: J+OSjhq0uHRbnRowEus+PTwnTOLSEOfRrTK/JBg7TaM= Subject key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858482A88580AA246E8CB4C26A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Dec 2024 01:45:33 +0000 Certificate not after: Tue 16 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 53823 IP: 198.15.0.0/21 IP: 209.172.8.0/22 IP: 2606:48c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:88:58:0a:a2:46:e8:cb:4c:26:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 11 01:45:33 2024 GMT Not After : Mar 16 00:45:33 2027 GMT Subject: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:b1:94:b7:b4:37:2c:36:a4:48:6c:00:95: d9:6f:a4:cc:38:a7:ca:29:d1:c2:6f:03:a9:4e:af: f0:e0:d2:28:1f:96:d4:ab:34:56:4e:b5:bb:15:32: 3b:cd:e1:1a:92:01:c0:07:65:27:d6:c7:86:f4:2d: ac:3d:2f:c7:c0:bc:d8:b4:73:27:36:42:fd:a4:9c: ed:19:21:d1:09:b5:61:da:7b:b1:ca:33:10:96:e2: 96:8d:53:c8:d5:f1:e3:4a:30:1f:46:f5:63:36:28: e8:0c:f4:4b:a3:ed:51:3e:33:b6:5e:11:7e:b0:72: 22:61:44:96:e3:bd:06:88:03:9f:57:61:d4:a0:a9: aa:2c:ef:be:d3:93:c0:45:26:04:28:8f:a9:bf:92: 1e:6c:8e:27:c9:d7:ad:de:09:5c:47:f7:3e:1e:5d: 04:0c:d2:a7:ed:6f:26:22:d9:3d:71:1e:df:6d:a0: 7c:c0:f7:0e:f9:69:11:dc:07:d8:18:04:67:bb:03: 1f:2f:74:c5:40:85:11:b2:f5:6c:d2:9a:90:30:40: 0a:de:0a:b5:b0:4b:33:d5:41:6f:8a:87:74:85:93: f8:bc:fc:11:12:a4:88:05:88:46:69:97:69:b5:0c: 5e:26:35:cb:36:db:43:1e:da:47:17:82:f8:0a:e2: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.15.0.0/21 209.172.8.0/22 IPv6: 2606:48c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53823 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:24:ab:71:6a:5b:fd:2a:8a:25:bd:b7:09:72:c0:fc:48:17: 0f:c1:a5:46:19:e9:e3:c7:4b:d7:e8:3a:5d:44:e9:26:1b:07: 0f:4e:7d:89:ef:8d:b2:ca:52:80:ad:bf:cf:ec:94:1e:8e:70: 3a:be:30:7e:79:0f:57:72:f9:a6:84:7a:39:dd:6e:10:ae:6f: 4a:0c:5d:fe:21:f3:d0:6c:3f:9b:f7:c0:76:b8:c4:87:36:8f: 4b:4f:b5:8c:e8:ea:9f:f2:9e:aa:73:6b:58:8e:be:2a:4a:a7: 1e:da:21:d0:eb:01:bd:e1:72:20:e5:07:0b:cb:17:99:4c:1d: 23:df:81:fa:36:8a:10:98:30:f0:96:87:25:3b:64:a0:36:39: 57:cf:63:87:74:2a:0e:70:fa:96:6a:e5:00:be:08:a2:06:7d: 2a:5b:74:c6:aa:1f:c1:95:da:1c:a4:6b:02:63:89:a5:9b:d6: db:3e:b3:f4:c1:21:45:ed:b4:05:b4:23:bd:4c:12:e1:68:be: d1:2a:69:c6:43:61:5e:f7:9b:4b:47:64:91:c8:a6:90:c2:00: 46:75:1c:cb:fd:d9:da:7b:e9:ef:a6:d2:cf:d2:73:71:e1:77: ef:72:8f:8a:f2:b1:ba:1f:88:ea:e2:37:c7:a6:50:8f:1e:a6: fd:98:8d:d9 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEgqiFgKokboy0wmqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMTAxNDUzM1oXDTI3MDMxNjAwNDUzM1owLzEtMCsGA1UEAxMk YWQ2ZTVkZGItMDNmZi00MTM5LThhNTEtYjkxOGJjODRmNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WOxlLe0Nyw2pEhsAJXZb6TMOKfKKdHCbwOp Tq/w4NIoH5bUqzRWTrW7FTI7zeEakgHAB2Un1seG9C2sPS/HwLzYtHMnNkL9pJzt GSHRCbVh2nuxyjMQluKWjVPI1fHjSjAfRvVjNijoDPRLo+1RPjO2XhF+sHIiYUSW 470GiAOfV2HUoKmqLO++05PARSYEKI+pv5IebI4nydet3glcR/c+Hl0EDNKn7W8m Itk9cR7fbaB8wPcO+WkR3AfYGARnuwMfL3TFQIURsvVs0pqQMEAK3gq1sEsz1UFv iod0hZP4vPwREqSIBYhGaZdptQxeJjXLNttDHtpHF4L4CuLlQwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFH9shEdJpzxOVXOfWkYXJCj4K3eoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4NGY3MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkNmU1ZGRiLTAzZmYtNDEzOS04 YTUxLWI5MThiYzg0ZjczMi9hZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4 NGY3MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPGDwADBALRrAgwDQQCAAIwBwMFACYGSMAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANI/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABQkq3FqW/0qiiW9twly wPxIFw/BpUYZ6ePHS9foOl1E6SYbBw9OfYnvjbLKUoCtv8/slB6OcDq+MH55D1dy +aaEejndbhCub0oMXf4h89BsP5v3wHa4xIc2j0tPtYzo6p/ynqpza1iOvipKpx7a IdDrAb3hciDlBwvLF5lMHSPfgfo2ihCYMPCWhyU7ZKA2OVfPY4d0Kg5w+pZq5QC+ CKIGfSpbdMaqH8GV2hykawJjiaWb1ts+s/TBIUXttAW0I71MEuFovtEqacZDYV73 m0tHZJHIppDCAEZ1HMv92dp76e+m0s/Sc3Hhd+9yj4rysbofiOriN8emUI8epv2Y jdk= -----END CERTIFICATE-----Generated at Sun Apr 27 12:33:42 2025 by rpki-client