$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer File: cc16c3db-6181-4312-8911-054e81ccea5f.cer (raw, json) Hash identifier: ncNZ9U8V3wOwSIdO/NbQmrkF/H9Xyz6x1xob62bbI6c= Subject key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848976906CC618AFC8923C16800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jan 2025 01:45:34 +0000 Certificate not after: Sat 24 Apr 2027 00:45:34 +0000 Subordinate resources: IP: 2620:101::/46 IP: 2620:10d:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:69:06:cc:61:8a:fc:89:23:c1:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 19 01:45:34 2025 GMT Not After : Apr 24 00:45:34 2027 GMT Subject: CN=cc16c3db-6181-4312-8911-054e81ccea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:2a:d9:64:1e:fc:91:3b:4c:f2:10:ea:69: 49:f9:2b:41:d3:eb:21:98:48:fc:18:50:a3:31:28: b1:22:5e:6e:57:23:79:35:82:96:d6:0c:74:da:e6: dd:38:75:f5:a1:b0:d5:3d:6e:d9:32:5a:05:34:c0: cc:ef:72:c0:25:1c:72:54:33:cb:97:0a:28:22:42: e7:60:5f:a8:9d:14:c9:6c:97:6d:7e:4c:bc:ee:e3: 28:14:6f:f0:97:3c:b5:40:0f:57:cb:b5:da:76:90: 75:26:ee:f1:10:44:ed:a2:b3:a9:55:1a:b3:cb:95: f0:a5:a1:c8:6f:32:8b:6a:8e:78:da:dd:63:28:e8: f6:22:5a:5b:ca:d9:83:2e:01:b2:12:e6:d7:eb:a4: 61:94:af:0a:65:f6:dc:47:f7:06:f7:42:16:85:39: 33:66:18:35:8b:3f:6d:49:d0:24:f2:0d:ac:aa:78: 71:78:16:f4:f2:e7:78:61:f4:ec:dd:f4:8e:5b:97: 48:87:28:82:5a:a0:af:b6:40:e4:c2:23:33:70:76: 02:d3:7e:09:36:a3:24:74:1f:1f:5a:ca:5d:29:c9: ee:58:65:ab:0d:6e:a4:e3:ab:7c:27:e5:14:2a:f0: 49:72:03:dd:29:62:84:87:b8:12:b6:aa:da:ef:93: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2620:101::/46 2620:10d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:65:e8:43:92:85:29:0f:9d:9c:fe:33:6f:fb:ef:ed:8b:ba: 91:9e:b9:b8:a9:9b:e3:99:c5:f7:b6:5b:1d:51:54:d5:eb:b9: ae:84:07:f1:75:59:4f:6c:ad:b5:60:70:a4:28:57:98:4b:6b: 2c:16:9f:99:5b:8a:67:0c:38:01:da:f3:0a:ff:8f:f6:94:55: a3:4e:ba:b4:6d:b0:33:f9:a5:d4:60:6a:53:54:d4:ae:c6:3b: b0:70:74:3b:aa:78:06:90:44:f2:1b:d2:8c:12:7b:1b:c2:a5: 1e:f5:5f:c1:ee:54:9a:5c:9e:ae:3d:7e:52:b3:4f:62:b9:29: 39:b6:93:d7:84:e9:8d:7a:99:01:28:9d:ae:f5:64:90:b2:24: 7c:d6:da:51:49:dc:d1:ea:94:c9:6b:3c:cc:5e:bd:61:e0:b6: 8e:f9:1d:a2:3c:76:03:91:3c:c7:c2:6e:9b:89:39:14:b8:cd: 75:2e:b2:48:25:c4:f3:7a:a3:2a:ba:88:9a:35:fc:99:da:fc: 5e:61:57:13:35:6d:04:1e:b9:64:29:9c:3e:a8:1c:a1:d7:41: db:87:1e:88:2a:d0:94:64:b9:81:c3:db:27:93:87:58:9e:38: cb:ce:c5:12:e6:b0:49:bf:c8:15:da:88:e5:6f:6f:39:72:e0: ae:db:f5:1f -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEiXaQbMYYr8iSPBaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDExOTAxNDUzNFoXDTI3MDQyNDAwNDUzNFowLzEtMCsGA1UEAxMk Y2MxNmMzZGItNjE4MS00MzEyLTg5MTEtMDU0ZTgxY2NlYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvAq2WQe/JE7TPIQ6mlJ+StB0+shmEj8GFCj MSixIl5uVyN5NYKW1gx02ubdOHX1obDVPW7ZMloFNMDM73LAJRxyVDPLlwooIkLn YF+onRTJbJdtfky87uMoFG/wlzy1QA9Xy7XadpB1Ju7xEETtorOpVRqzy5XwpaHI bzKLao542t1jKOj2IlpbytmDLgGyEubX66RhlK8KZfbcR/cG90IWhTkzZhg1iz9t SdAk8g2sqnhxeBb08ud4YfTs3fSOW5dIhyiCWqCvtkDkwiMzcHYC034JNqMkdB8f WspdKcnuWGWrDW6k46t8J+UUKvBJcgPdKWKEh7gStqra75NjdQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFNhxVP5aWTiBqxtMN6D9IZc86S1IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFjY2VhNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NjMTZjM2RiLTYxODEtNDMxMi04 OTExLTA1NGU4MWNjZWE1Zi9jYzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFj Y2VhNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgACMBIDBwImIAEBAAADBwQmIAENEAAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVGXo Q5KFKQ+dnP4zb/vv7Yu6kZ65uKmb45nF97ZbHVFU1eu5roQH8XVZT2yttWBwpChX mEtrLBafmVuKZww4AdrzCv+P9pRVo066tG2wM/ml1GBqU1TUrsY7sHB0O6p4BpBE 8hvSjBJ7G8KlHvVfwe5Umlyerj1+UrNPYrkpObaT14TpjXqZASidrvVkkLIkfNba UUnc0eqUyWs8zF69YeC2jvkdojx2A5E8x8Jum4k5FLjNdS6ySCXE83qjKrqImjX8 mdr8XmFXEzVtBB65ZCmcPqgcoddB24ceiCrQlGS5gcPbJ5OHWJ44y87FEuawSb/I FdqI5W9vOXLgrtv1Hw== -----END CERTIFICATE-----Generated at Sun Apr 27 00:32:17 2025 by rpki-client