$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer File: c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer (raw, json) Hash identifier: qrinMTOw2uu0PZ93f+Kv2fC5Hp0mE1TAlKJVzTJztSI= Subject key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847FDDD6A0D0E0D766DA12B3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Nov 2024 01:45:35 +0000 Certificate not after: Sun 28 Feb 2027 01:45:35 +0000 Subordinate resources: IP: 151.179.0.0/16 IP: 198.50.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fd:dd:6a:0d:0e:0d:76:6d:a1:2b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 25 01:45:35 2024 GMT Not After : Feb 28 01:45:35 2027 GMT Subject: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:de:b4:a6:18:71:d5:84:4b:50:75:2a:67: 6e:cc:26:8d:de:4f:72:c6:eb:dd:19:fa:ae:9d:d1: ae:a7:d4:5e:ff:52:f8:ab:79:65:be:67:ce:a5:5e: ec:7b:d5:1b:fd:a7:71:70:b8:78:e0:be:e1:3b:41: 7a:1d:2f:71:0c:e3:a7:9d:6e:f9:e8:af:f8:d6:2f: 97:3b:0a:d0:4b:e0:c3:ab:ad:e4:74:88:cd:01:0d: 24:ed:8f:53:1e:87:ae:06:85:10:fb:5b:43:b8:d1: 75:ca:69:e8:3e:18:d8:cc:59:e0:a4:17:56:f2:6c: 44:08:79:f5:d7:3a:38:ab:16:06:2c:b2:36:cf:04: 2c:0e:23:54:22:98:ca:18:bf:0a:a2:0f:dd:22:0a: e9:42:08:0b:8c:4b:ff:83:9e:48:ac:27:ec:02:8c: bc:60:86:08:9b:ea:2f:4b:ed:ce:f8:48:c8:30:e4: ce:fc:9a:d6:ea:d2:71:c1:42:33:af:ef:b1:7c:a7: 1b:1b:3f:4b:b7:04:8a:a5:68:95:1b:9b:d8:64:b7: fc:ec:5a:09:bb:36:e9:99:90:63:5e:81:b8:fc:ad: 52:35:27:b3:a0:b6:55:84:4b:11:6f:c7:f1:93:36: c2:17:5b:90:c3:48:57:81:61:9d:63:ca:1a:8e:ad: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 151.179.0.0/16 198.50.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ea:d0:ca:fa:e7:30:21:c4:c5:34:61:45:1e:0a:41:eb:a9: 50:c3:db:c2:ae:01:ab:33:ba:d8:02:3e:e6:95:d8:b7:34:00: 6f:45:eb:cd:41:ba:1f:1b:2f:13:cc:a3:c1:f1:2c:bd:57:b8: 12:4b:04:7f:bb:f6:42:83:ac:35:fe:cb:ce:f4:63:c9:b8:de: 44:77:88:1d:5a:1b:41:1b:f9:1a:3d:1b:eb:a5:70:2f:6e:1b: 44:05:95:dd:39:63:2e:d6:d6:fc:9a:a5:07:24:56:81:ef:a6: 80:c9:66:10:c9:6b:c1:82:ca:93:35:da:88:a5:41:81:86:3e: b6:c9:4f:0a:a8:db:78:24:e8:75:d4:3a:4b:96:3e:df:f8:aa: b8:78:83:df:b2:c6:99:00:5e:88:0f:e9:f2:2d:60:3f:d7:5b: 2a:57:79:78:54:e8:42:e2:bb:0e:20:90:38:7d:3f:de:ab:a6: 7b:55:cf:7f:60:9f:4d:65:1d:98:ab:21:86:9c:e6:e9:7f:bf: 21:34:44:41:ff:99:af:42:7a:f5:e0:09:9d:b1:b2:a2:70:e2: 2c:17:45:7e:a1:06:53:1b:2c:51:15:33:1d:43:33:10:d2:15: 91:ab:42:85:56:fd:0e:20:f7:8b:1c:12:ea:4a:72:72:c8:da: 19:f7:40:1c -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEf93WoNDg12baErM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyNTAxNDUzNVoXDTI3MDIyODAxNDUzNVowLzEtMCsGA1UEAxMk YzJlNTMzOTgtZDg3Ny00MzgxLThmZGItMmVjN2RiNTNmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcPetKYYcdWES1B1KmduzCaN3k9yxuvdGfqu ndGup9Re/1L4q3llvmfOpV7se9Ub/adxcLh44L7hO0F6HS9xDOOnnW756K/41i+X OwrQS+DDq63kdIjNAQ0k7Y9THoeuBoUQ+1tDuNF1ymnoPhjYzFngpBdW8mxECHn1 1zo4qxYGLLI2zwQsDiNUIpjKGL8Kog/dIgrpQggLjEv/g55IrCfsAoy8YIYIm+ov S+3O+EjIMOTO/JrW6tJxwUIzr++xfKcbGz9LtwSKpWiVG5vYZLf87FoJuzbpmZBj XoG4/K1SNSezoLZVhEsRb8fxkzbCF1uQw0hXgWGdY8oajq2VfQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFCvhuP5OdNsnS45fzp0wZufaDepRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j MmU1MzM5OC1kODc3LTQzODEtOGZkYi0yZWM3ZGI1M2ZjNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2MyZTUzMzk4LWQ4NzctNDM4MS04 ZmRiLTJlYzdkYjUzZmM1ZS9jMmU1MzM5OC1kODc3LTQzODEtOGZkYi0yZWM3ZGI1 M2ZjNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCXswMEBcYyIDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD6tDK+ucwIcTF NGFFHgpB66lQw9vCrgGrM7rYAj7mldi3NABvRevNQbofGy8TzKPB8Sy9V7gSSwR/ u/ZCg6w1/svO9GPJuN5Ed4gdWhtBG/kaPRvrpXAvbhtEBZXdOWMu1tb8mqUHJFaB 76aAyWYQyWvBgsqTNdqIpUGBhj62yU8KqNt4JOh11DpLlj7f+Kq4eIPfssaZAF6I D+nyLWA/11sqV3l4VOhC4rsOIJA4fT/eq6Z7Vc9/YJ9NZR2YqyGGnObpf78hNERB /5mvQnr14AmdsbKicOIsF0V+oQZTGyxRFTMdQzMQ0hWRq0KFVv0OIPeLHBLqSnJy yNoZ90Ac -----END CERTIFICATE-----Generated at Sun Jun 15 11:55:43 2025 by rpki-client