$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer File: aed16f9a-e18e-4208-b0e0-80650f76a403.cer (raw, json) Hash identifier: szjc16pPvMzNHcQgzvCbqBmNjqoIj4dExIVFGM44OoA= Subject key identifier: 5F:13:6E:CA:A7:4B:D0:BE:2F:AA:82:A5:0D:79:C6:92:7B:4A:F2:B1 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584827BDA8FD9241C5726110B180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 01:45:33 +0000 Certificate not after: Mon 15 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 55003 IP: 162.210.160.0/21 IP: 2606:f080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:bd:a8:fd:92:41:c5:72:61:10:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 10 01:45:33 2024 GMT Not After : Mar 15 00:45:33 2027 GMT Subject: CN=aed16f9a-e18e-4208-b0e0-80650f76a403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:21:62:97:11:e4:a7:bc:36:0f:7f:c3:a3: 53:7d:ae:60:ce:4e:5b:4d:11:db:35:56:e3:1b:f1: be:cd:7d:24:33:d5:df:c6:1c:64:d0:95:83:ce:34: 2f:b2:c1:1b:b9:dc:86:16:8d:92:07:be:5d:b1:26: 84:04:16:da:65:44:dd:db:3b:bb:b6:20:fb:1f:15: bc:ab:ba:b7:e6:e6:50:2a:f7:34:dd:d2:07:3a:cb: db:80:36:86:11:04:6b:82:a1:74:00:48:3c:e3:7c: a3:ab:5e:0c:16:1a:4e:1b:ca:67:e4:d9:74:c5:e6: fe:2b:81:92:87:49:ab:d9:4e:b3:c7:a7:5c:4f:e8: a7:a3:52:1b:ed:be:dc:04:dd:fb:cd:8f:24:ab:89: 5e:5a:72:ec:cd:f9:f7:6a:2a:3c:2d:8d:b3:0d:0a: ca:37:86:82:c4:ab:91:0b:6d:fc:79:0d:7e:88:3e: fb:e6:59:ea:f9:08:e3:99:b3:f9:30:82:44:9c:48: ea:39:b1:65:f6:c0:95:89:51:47:04:54:e5:e3:5f: 27:90:c8:e3:2b:1f:8c:ca:ac:33:77:9e:ec:f9:ae: dc:d0:ca:01:3d:c6:ee:92:9a:33:5a:7f:46:c2:1e: 04:44:ba:01:b3:51:39:c7:a9:4e:b0:ad:e4:5c:47: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:13:6E:CA:A7:4B:D0:BE:2F:AA:82:A5:0D:79:C6:92:7B:4A:F2:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 162.210.160.0/21 IPv6: 2606:f080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55003 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3e:4a:a4:ef:f4:94:eb:ad:8a:4e:d6:47:48:37:94:6d:86: cc:da:d2:79:f1:14:74:65:7b:c6:1b:66:4f:b3:b1:e8:08:7e: 30:37:e6:f4:4d:f9:b5:cc:38:68:69:42:64:55:1b:0a:80:b6: ed:95:74:c1:18:d3:b0:8f:3c:d0:8c:2b:2d:48:e8:54:73:c7: f1:8f:a0:1e:df:3e:9e:fe:39:d6:02:b3:69:d8:ca:7b:54:68: 19:9d:1e:90:74:cc:cf:6c:59:43:0a:2a:43:39:5a:49:5f:64: 25:7b:63:7f:8b:76:b0:20:af:c2:c5:c6:e8:27:d5:9d:48:32: 77:04:e4:83:f7:75:28:ad:0c:64:1a:70:2e:75:c2:1c:86:4c: fe:37:26:e3:cc:f9:51:b5:6e:dc:9d:7f:6a:17:c1:71:30:1c: cf:9f:7b:32:3c:1f:ba:08:49:66:c6:33:93:f0:d4:7c:6f:ee: cd:1a:7e:1d:14:12:30:31:90:91:6a:29:94:9f:34:9c:53:53: 63:20:0b:33:7a:fc:88:52:c3:06:4c:f7:4b:5a:15:45:2e:be: 81:e7:b5:25:ae:ca:a6:36:d6:c8:0b:2a:42:05:7d:43:32:f6: 2d:a2:83:a4:79:25:a8:6c:87:13:be:18:22:fa:45:15:0e:7b: 8a:56:67:8a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEgnvaj9kkHFcmEQsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMDAxNDUzM1oXDTI3MDMxNTAwNDUzM1owLzEtMCsGA1UEAxMk YWVkMTZmOWEtZTE4ZS00MjA4LWIwZTAtODA2NTBmNzZhNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt30hYpcR5Ke8Ng9/w6NTfa5gzk5bTRHbNVbj G/G+zX0kM9Xfxhxk0JWDzjQvssEbudyGFo2SB75dsSaEBBbaZUTd2zu7tiD7HxW8 q7q35uZQKvc03dIHOsvbgDaGEQRrgqF0AEg843yjq14MFhpOG8pn5Nl0xeb+K4GS h0mr2U6zx6dcT+ino1Ib7b7cBN37zY8kq4leWnLszfn3aio8LY2zDQrKN4aCxKuR C238eQ1+iD775lnq+QjjmbP5MIJEnEjqObFl9sCViVFHBFTl418nkMjjKx+Myqwz d57s+a7c0MoBPcbukpozWn9Gwh4ERLoBs1E5x6lOsK3kXEerjwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFF8TbsqnS9C+L6qCpQ15xpJ7SvKxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZWQxNmY5YS1lMThlLTQyMDgtYjBlMC04MDY1MGY3NmE0MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FlZDE2ZjlhLWUxOGUtNDIwOC1i MGUwLTgwNjUwZjc2YTQwMy9hZWQxNmY5YS1lMThlLTQyMDgtYjBlMC04MDY1MGY3 NmE0MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOi0qAwDQQCAAIwBwMFACYG8IAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANbbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADI+SqTv9JTrrYpO1kdIN5Rthsza 0nnxFHRle8YbZk+zsegIfjA35vRN+bXMOGhpQmRVGwqAtu2VdMEY07CPPNCMKy1I 6FRzx/GPoB7fPp7+OdYCs2nYyntUaBmdHpB0zM9sWUMKKkM5WklfZCV7Y3+LdrAg r8LFxugn1Z1IMncE5IP3dSitDGQacC51whyGTP43JuPM+VG1btydf2oXwXEwHM+f ezI8H7oISWbGM5Pw1Hxv7s0afh0UEjAxkJFqKZSfNJxTU2MgCzN6/IhSwwZM90ta FUUuvoHntSWuyqY21sgLKkIFfUMy9i2ig6R5JahshxO+GCL6RRUOe4pWZ4o= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:30 2025 by rpki-client