$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer File: d7a960e2-9fa8-4b77-8609-5ee424f44087.cer (raw, json) Hash identifier: NzSCwwE4FmU0NkRCYOD9KzY5JbmU1c+wzKvCZZV9KJ0= Subject key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858480A6D79880AF88538AE0C9B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Nov 2024 13:45:33 +0000 Certificate not after: Thu 04 Mar 2027 13:45:33 +0000 Subordinate resources: IP: 67.217.48.0/20 IP: 69.164.240.0/20 IP: 74.50.64.0/19 IP: 205.209.96.0/19 IP: 216.219.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0a:6d:79:88:0a:f8:85:38:ae:0c:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 29 13:45:33 2024 GMT Not After : Mar 4 13:45:33 2027 GMT Subject: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:be:84:23:86:24:95:82:93:ef:22:2c:7e: ce:7f:81:b7:03:0c:e9:56:e8:ae:18:19:c2:1e:77: e6:62:9e:bd:6c:e3:70:3f:14:62:b2:12:de:d7:a7: c7:7a:27:ad:6b:e8:f7:71:33:af:12:08:91:8e:5a: ba:64:5f:4f:d3:84:9d:63:ea:20:61:81:5a:8d:d5: 38:83:da:82:45:90:c0:d6:6e:2e:88:43:b8:e6:1c: 72:7b:f4:31:ae:b2:ce:5b:c0:97:3a:19:93:8c:bd: c4:30:6d:47:6e:2d:84:f7:c6:f4:03:38:94:45:46: 81:9f:c0:52:4b:e6:f8:da:1c:33:88:ae:52:c2:20: aa:e3:89:06:f9:77:b6:89:1a:df:58:27:14:e9:85: 22:ce:cb:13:5e:48:a1:ff:69:aa:c0:91:1a:fa:ae: 53:1c:bf:46:af:98:00:7a:20:b9:ba:2c:dc:9a:ef: c2:c2:e5:d9:c0:fc:91:64:06:35:32:84:ed:d0:4b: 14:42:bb:69:f2:1d:c8:51:3b:80:6e:a9:e1:2f:4f: ab:9a:e3:3c:d4:58:5c:bb:7c:d1:b3:cd:80:61:1d: dc:a8:f9:e6:47:7c:e4:39:c6:a6:e6:dd:04:2b:e2: 1e:82:7b:a3:bf:de:ca:bf:30:01:fe:52:81:26:64: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 67.217.48.0/20 69.164.240.0/20 74.50.64.0/19 205.209.96.0/19 216.219.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b8:94:b2:47:8f:99:c0:71:65:8d:e0:25:ce:77:e2:37:70: 9f:d5:e5:91:23:e6:ed:6a:41:5c:b6:50:db:9b:c6:c1:53:c5: d4:56:df:8e:b4:80:26:fa:aa:94:b0:be:15:1b:09:fe:37:08: 05:be:01:c6:21:3c:a6:28:14:2b:57:4b:53:cb:a1:81:ab:4f: 89:fd:88:33:62:74:d1:3f:0a:13:62:82:b5:9b:2d:c7:33:10: 29:04:fe:3f:34:96:54:1b:4c:08:26:e5:b7:14:c9:48:a1:86: a3:3e:d0:e0:06:a6:dd:ca:24:28:31:4a:7c:ef:1b:d0:8d:15: 2e:48:cb:12:8e:5c:82:fb:c4:14:5e:51:1e:ac:20:07:8f:8d: 71:e6:d7:e1:97:42:22:41:06:56:d5:f8:c9:8a:25:7c:59:de: 75:48:c5:f4:29:de:ca:97:fb:a3:73:ae:94:96:91:06:87:97: 85:c0:57:a2:84:72:79:2f:d6:53:8b:d9:73:d2:e0:0b:1a:cf: 64:46:3a:2a:d3:17:b0:fb:16:4a:70:43:4f:00:a0:a5:f2:a9: 0c:74:6f:f1:26:cf:57:b1:cd:d9:7d:d2:e4:7c:67:28:5d:f1: 58:ba:ff:08:61:1d:b2:94:b5:42:32:1b:e5:a1:f1:42:21:b8: d1:7e:d6:05 -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEgKbXmICviFOK4Mm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyOTEzNDUzM1oXDTI3MDMwNDEzNDUzM1owLzEtMCsGA1UEAxMk ZDdhOTYwZTItOWZhOC00Yjc3LTg2MDktNWVlNDI0ZjQ0MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HC+hCOGJJWCk+8iLH7Of4G3AwzpVuiuGBnC HnfmYp69bONwPxRishLe16fHeieta+j3cTOvEgiRjlq6ZF9P04SdY+ogYYFajdU4 g9qCRZDA1m4uiEO45hxye/QxrrLOW8CXOhmTjL3EMG1Hbi2E98b0AziURUaBn8BS S+b42hwziK5SwiCq44kG+Xe2iRrfWCcU6YUizssTXkih/2mqwJEa+q5THL9Gr5gA eiC5uizcmu/CwuXZwPyRZAY1MoTt0EsUQrtp8h3IUTuAbqnhL0+rmuM81Fhcu3zR s82AYR3cqPnmR3zkOcam5t0EK+Iegnujv97KvzAB/lKBJmTt+QIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFKKm78tEOpSFMwUbJcyBqEp+NFseMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k N2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRmNDQwODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q3YTk2MGUyLTlmYTgtNGI3Ny04 NjA5LTVlZTQyNGY0NDA4Ny9kN2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRm NDQwODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBARD2TADBARFpPADBAVKMkADBAXN0WADBATY21Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAl7iUskePmcBxZY3gJc534jdwn9XlkSPm7WpBXLZQ25vGwVPF1Fbf jrSAJvqqlLC+FRsJ/jcIBb4BxiE8pigUK1dLU8uhgatPif2IM2J00T8KE2KCtZst xzMQKQT+PzSWVBtMCCbltxTJSKGGoz7Q4Aam3cokKDFKfO8b0I0VLkjLEo5cgvvE FF5RHqwgB4+NcebX4ZdCIkEGVtX4yYolfFnedUjF9Cneypf7o3OulJaRBoeXhcBX ooRyeS/WU4vZc9LgCxrPZEY6KtMXsPsWSnBDTwCgpfKpDHRv8SbPV7HN2X3S5Hxn KF3xWLr/CGEdspS1QjIb5aHxQiG40X7WBQ== -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:43 2025 by rpki-client