$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer File: 5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer (raw, json) Hash identifier: sPO/NIIReLglxuS8b9hS2pSeSgQ+cXEOh3Q3RLDSB7k= Subject key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858482A35885084E34595C0D0B840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 22:58:42 +0000 Certificate not after: Mon 15 Mar 2027 21:58:42 +0000 Subordinate resources: IP: 64.40.128.0/20 IP: 2607:9240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:35:88:50:84:e3:45:95:c0:d0:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Dec 10 22:58:42 2024 GMT Not After : Mar 15 21:58:42 2027 GMT Subject: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:70:56:f4:04:1e:87:88:59:27:93:a6:24: ae:ae:ef:62:a3:34:c8:3e:5e:7b:a3:22:80:29:f4: 7e:19:6d:91:9d:3b:13:56:fc:e9:5d:9d:18:30:3a: 96:b9:1f:ae:14:53:50:30:12:99:da:a6:48:68:20: f1:89:53:ec:ff:17:ab:ee:4d:90:c4:df:31:b3:27: 8d:1f:f9:58:f7:9f:df:87:f2:f4:56:e8:94:6f:ed: 10:96:b2:9d:8b:a8:3d:69:bc:fa:2b:61:e9:cb:01: ac:a1:67:26:cd:d5:3d:24:89:11:17:70:17:60:0c: f1:3e:83:b1:0a:18:57:ad:64:2f:bd:0e:2f:4d:9a: 99:d2:8d:5d:38:53:27:50:e8:43:89:77:41:06:3a: 62:59:34:53:c5:62:f2:4c:85:56:8c:66:c5:e7:a5: f6:6f:69:31:78:8d:f2:73:dd:36:83:5a:c5:91:34: f8:79:dd:93:7b:23:ca:14:f0:e7:c3:8c:b1:0d:5c: 9b:a9:0d:c1:02:2a:e0:cc:15:71:1a:0a:6c:cd:b9: 59:1e:f2:d8:c4:57:3c:de:76:78:51:18:ea:50:43: 36:d7:c2:bc:db:67:d6:81:ed:ce:8d:26:68:49:fd: c4:18:87:04:f0:8d:f3:e0:4e:97:b1:7b:e0:ff:22: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.40.128.0/20 IPv6: 2607:9240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c8:19:45:7b:c3:51:3b:4b:81:a6:ac:05:ff:c2:02:49:ac: cf:93:82:84:a7:9e:f2:74:d3:7b:18:eb:a1:9a:a4:70:e2:84: d6:53:ba:fa:3b:7e:e2:e0:4c:89:a4:10:31:db:de:0c:50:02: 7e:42:62:91:88:de:04:83:4c:72:4b:38:3a:2b:75:2d:c4:13: 5b:dc:fe:c8:e7:74:8e:cb:00:13:66:ec:7b:a2:5e:be:15:e7: 6f:9b:19:77:5a:e6:8a:f0:eb:5d:e9:a3:24:16:75:db:47:11: a0:0a:8d:4c:4b:97:f6:16:2f:62:c1:41:9b:3f:bd:35:25:0d: 2e:6b:e4:9b:2b:58:29:fd:47:00:0b:81:4c:35:14:29:60:81: ec:b8:e8:73:66:3e:46:2c:ce:90:58:25:77:8a:8c:18:b9:a1: 7e:c6:08:88:7f:7c:68:17:e5:c3:c2:6e:33:8d:08:a7:53:e8: 36:c1:66:64:e4:ba:1f:fe:d7:cc:fe:28:54:7e:33:60:fd:23: 28:83:eb:c1:43:df:7c:f4:a2:50:3b:56:08:66:74:e7:2e:8f: 8b:e0:a1:e3:b2:7a:86:92:5b:da:aa:1e:b7:ca:29:cb:85:17: e9:b6:c3:b2:8f:e8:aa:7c:40:77:12:36:17:a7:4d:df:48:ab: 9a:d4:5f:7c -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEgqNYhQhONFlcDQuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MTIxMDIyNTg0MloXDTI3MDMxNTIxNTg0MlowLzEtMCsGA1UEAxMk NWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIVwVvQEHoeIWSeTpiSuru9iozTIPl57oyKA KfR+GW2RnTsTVvzpXZ0YMDqWuR+uFFNQMBKZ2qZIaCDxiVPs/xer7k2QxN8xsyeN H/lY95/fh/L0VuiUb+0QlrKdi6g9abz6K2HpywGsoWcmzdU9JIkRF3AXYAzxPoOx ChhXrWQvvQ4vTZqZ0o1dOFMnUOhDiXdBBjpiWTRTxWLyTIVWjGbF56X2b2kxeI3y c902g1rFkTT4ed2TeyPKFPDnw4yxDVybqQ3BAirgzBVxGgpszblZHvLYxFc83nZ4 URjqUEM218K822fWge3OjSZoSf3EGIcE8I3z4E6XsXvg/yIYlQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFGCxZh8iGmMVOnNBEHKuDszXujRoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVlMjJkN2FlLTEyMjQtNDNmYi05 MDdhLTY2OTBmN2JkOWEyZS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdi ZDlhMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARAKIAwDQQCAAIwBwMFACYHkkAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA WcgZRXvDUTtLgaasBf/CAkmsz5OChKee8nTTexjroZqkcOKE1lO6+jt+4uBMiaQQ MdveDFACfkJikYjeBINMcks4Oit1LcQTW9z+yOd0jssAE2bse6JevhXnb5sZd1rm ivDrXemjJBZ120cRoAqNTEuX9hYvYsFBmz+9NSUNLmvkmytYKf1HAAuBTDUUKWCB 7Ljoc2Y+RizOkFgld4qMGLmhfsYIiH98aBflw8JuM40Ip1PoNsFmZOS6H/7XzP4o VH4zYP0jKIPrwUPffPSiUDtWCGZ05y6Pi+Ch47J6hpJb2qoet8opy4UX6bbDso/o qnxAdxI2F6dN30irmtRffA== -----END CERTIFICATE-----Generated at Tue Apr 29 01:37:46 2025 by rpki-client