$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer File: b94accf0-8067-4a9a-ba69-832d3d95402d.cer (raw, json) Hash identifier: OKplsrnEvp3HmTim3oat17fRZrsHw/eMjEqQfyXwh7M= Subject key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858480908237E5855C82B00A97C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Nov 2024 01:45:33 +0000 Certificate not after: Thu 04 Mar 2027 01:45:33 +0000 Subordinate resources: IP: 170.62.37.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:08:23:7e:58:55:c8:2b:00:a9:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 29 01:45:33 2024 GMT Not After : Mar 4 01:45:33 2027 GMT Subject: CN=b94accf0-8067-4a9a-ba69-832d3d95402d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:fa:50:4c:a8:ef:e9:f7:28:28:03:b7:60: 92:53:2d:81:96:29:9f:d2:bb:5b:e7:60:80:01:41: 09:25:8a:47:5a:af:92:41:4e:8a:43:b5:a9:58:8c: 2b:2f:63:d1:54:a5:e8:ed:ab:0f:fd:62:57:3c:bf: ad:4a:f6:a0:e9:0c:ad:3d:11:14:58:28:c5:15:59: fb:bb:0b:7d:90:16:e1:98:9d:f9:0d:7b:1a:18:e3: 32:6c:6c:6b:07:1d:99:96:67:41:b3:86:be:db:07: 38:75:f4:68:55:f5:35:49:c6:b2:b9:4c:d2:6e:0f: 9e:7c:c0:e7:88:79:8e:c5:d0:80:f3:40:e5:ff:78: 01:be:25:89:80:2c:b9:5d:b7:4a:c3:92:50:94:ca: 8c:3b:3c:bc:41:43:b8:9f:6e:1d:d0:27:65:35:2e: 40:35:1e:69:04:8d:d3:f0:89:23:09:28:98:92:8e: 1b:bf:e0:a5:c6:ea:08:37:e9:a7:fc:42:36:8b:00: 15:44:9c:fc:55:f8:87:54:91:3f:bb:80:e4:9b:c4: e0:31:69:d9:7b:2f:bd:c2:76:1a:db:72:e8:94:3c: ba:dd:11:09:96:0f:eb:09:f0:15:58:82:88:9b:1d: db:d7:ca:61:25:96:b9:a9:e5:e9:a1:bc:85:dc:c9: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 170.62.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:82:90:a5:27:4a:b8:1e:0a:ca:a3:ab:20:0a:fb:92:be:af: 6e:e2:11:b4:cf:2f:49:7b:b0:c7:3b:4c:5a:49:93:72:be:de: f0:97:b1:c9:c6:ad:45:54:86:c2:9f:2b:00:48:1d:5a:1d:d1: f0:58:24:40:1b:d5:3a:c4:4a:55:df:59:ba:22:7a:29:a9:3e: ca:27:27:4e:d2:70:40:89:c0:cc:d9:17:50:d3:d9:13:cc:ae: 98:77:48:4a:8f:cc:37:d2:49:bb:28:0d:43:87:e7:ce:2b:4a: 7f:6a:bc:7d:5b:b5:7b:da:17:d9:11:ea:e4:4c:9d:b2:24:a3: 4c:55:42:db:58:26:fd:fc:61:d4:34:ec:1c:d7:b2:16:2b:55: f3:cf:0e:b2:bf:10:6d:23:97:cc:75:b9:c5:5e:18:84:8e:05: 3f:2d:34:58:15:d3:75:f3:3d:ef:97:ed:44:a9:f9:04:83:43: c8:73:74:2e:11:dd:64:23:e1:23:dd:b9:c2:c1:bf:75:2a:aa: 61:31:52:57:23:4c:76:ab:61:95:16:18:19:5a:8e:8a:86:8c: 93:c0:2e:a8:1f:21:d6:39:48:72:ea:f4:b5:bc:b4:94:16:dc: ef:fd:66:79:d9:d3:33:db:35:b9:cf:13:11:f9:56:a1:e8:a2: bf:c8:09:f4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEgJCCN+WFXIKwCpfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyOTAxNDUzM1oXDTI3MDMwNDAxNDUzM1owLzEtMCsGA1UEAxMk Yjk0YWNjZjAtODA2Ny00YTlhLWJhNjktODMyZDNkOTU0MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ76UEyo7+n3KCgDt2CSUy2Blimf0rtb52CA AUEJJYpHWq+SQU6KQ7WpWIwrL2PRVKXo7asP/WJXPL+tSvag6QytPREUWCjFFVn7 uwt9kBbhmJ35DXsaGOMybGxrBx2ZlmdBs4a+2wc4dfRoVfU1ScayuUzSbg+efMDn iHmOxdCA80Dl/3gBviWJgCy5XbdKw5JQlMqMOzy8QUO4n24d0CdlNS5ANR5pBI3T 8IkjCSiYko4bv+ClxuoIN+mn/EI2iwAVRJz8VfiHVJE/u4Dkm8TgMWnZey+9wnYa 23LolDy63REJlg/rCfAVWIKImx3b18phJZa5qeXpobyF3MkE3wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK6OFsbNR/cBj2KNDDMkxKmkXm4uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i OTRhY2NmMC04MDY3LTRhOWEtYmE2OS04MzJkM2Q5NTQwMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I5NGFjY2YwLTgwNjctNGE5YS1i YTY5LTgzMmQzZDk1NDAyZC9iOTRhY2NmMC04MDY3LTRhOWEtYmE2OS04MzJkM2Q5 NTQwMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqPiUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUoKQpSdKuB4KyqOrIAr7 kr6vbuIRtM8vSXuwxztMWkmTcr7e8JexycatRVSGwp8rAEgdWh3R8FgkQBvVOsRK Vd9ZuiJ6Kak+yicnTtJwQInAzNkXUNPZE8yumHdISo/MN9JJuygNQ4fnzitKf2q8 fVu1e9oX2RHq5EydsiSjTFVC21gm/fxh1DTsHNeyFitV888Osr8QbSOXzHW5xV4Y hI4FPy00WBXTdfM975ftRKn5BINDyHN0LhHdZCPhI925wsG/dSqqYTFSVyNMdqth lRYYGVqOioaMk8AuqB8h1jlIcur0tby0lBbc7/1mednTM9s1uc8TEflWoeiiv8gJ 9A== -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:33 2025 by rpki-client