$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer File: 8b56caea-2136-4342-baff-6f31268d4cc4.cer (raw, json) Hash identifier: Nq5On4yNl+VAaVFMtC4sBE/p+rDe7o/ABA1BUecnk3I= Subject key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848A55E7119182236F5EEF4B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jan 2025 01:45:33 +0000 Certificate not after: Thu 29 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 23.146.24.0/24 IP: 140.235.4.0/22 IP: 2602:faaf::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:5e:71:19:18:22:36:f5:ee:f4:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 24 01:45:33 2025 GMT Not After : Apr 29 00:45:33 2027 GMT Subject: CN=8b56caea-2136-4342-baff-6f31268d4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:d1:4d:5a:d2:d9:d1:ea:e6:2b:64:4c:8f: 80:9b:a6:6e:d6:b9:27:a7:3d:e0:d9:94:84:1c:ef: 5c:af:26:c8:6d:20:f8:28:c8:24:01:2e:a0:59:e5: 82:9c:61:ea:94:2b:e0:30:c6:9d:5d:a7:1f:84:ad: 65:4b:86:8e:37:c6:ec:62:ba:3f:91:86:8e:e8:6a: ab:95:67:0d:f7:3c:34:57:2c:83:6d:80:19:80:5b: fb:6e:2c:d6:8f:c8:93:1f:0e:80:15:3c:52:1d:9b: 21:d2:2b:d6:69:3e:68:8d:a7:b7:5a:27:17:ed:5e: 8e:f8:6a:14:25:2b:fa:68:78:97:d0:24:45:94:42: f7:26:a0:94:50:f6:71:42:30:12:86:fa:71:dc:50: 55:84:36:41:6b:fb:c1:ac:a7:40:97:96:68:7b:7a: cf:63:c5:ef:f1:87:ac:67:60:b6:15:4d:78:df:55: 70:60:31:ca:3f:25:ae:ae:8b:46:5c:94:7d:69:c3: 31:3b:20:1e:e1:dd:00:31:38:7f:52:5f:8b:f3:c3: 09:e4:5a:a1:33:e0:36:5c:81:1e:ce:84:92:fb:20: ed:e1:f3:0b:af:c2:59:65:dc:54:15:a7:db:99:9c: 17:aa:ae:0c:fc:f8:fa:81:d5:f5:ce:12:da:aa:df: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.24.0/24 140.235.4.0/22 IPv6: 2602:faaf::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cd:cb:6e:e9:28:2b:1b:c7:b8:cc:d8:ad:08:01:db:f3:d0: 1d:3a:99:6c:53:7f:a8:31:b7:23:8b:b8:91:60:07:d4:2b:46: df:9d:c7:7f:ed:ce:5e:70:56:c7:f3:0c:f5:2f:f7:07:9f:15: 38:1a:a3:1c:87:a4:c6:be:8a:69:db:08:4d:a0:bf:56:66:b2: 49:22:5d:e2:71:0a:ee:db:86:73:bc:97:cd:ba:ac:68:a8:f8: b6:3b:52:24:68:c1:07:c3:66:31:99:ef:bd:ab:c2:be:d7:7f: 69:0b:ef:86:70:25:53:54:90:ce:f9:96:ad:c9:34:bd:7b:36: f8:4b:a5:73:7d:16:84:57:7d:6f:c3:d8:43:30:80:0f:9e:66: 75:c1:da:63:c8:47:08:b9:de:1a:72:65:ee:bd:84:09:81:99: 3e:73:e2:a5:20:8a:e4:81:54:7b:dd:69:01:af:ac:37:be:50: 0c:f2:5e:65:cd:9a:27:7a:41:82:bf:19:59:23:38:cb:4e:8e: b7:ae:ae:d3:9a:e7:dc:a8:c0:4a:90:c9:d0:36:db:ff:7f:4a: a0:fa:3f:e0:b4:8a:46:e9:af:08:34:50:63:ac:58:61:45:67: 8e:d7:0a:f7:d4:4a:48:84:0b:ac:16:3b:e3:b9:d9:c9:af:f0: 4b:fd:42:9b -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEilXnEZGCI29e70tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDEyNDAxNDUzM1oXDTI3MDQyOTAwNDUzM1owLzEtMCsGA1UEAxMk OGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwvRTVrS2dHq5itkTI+Am6Zu1rknpz3g2ZSE HO9crybIbSD4KMgkAS6gWeWCnGHqlCvgMMadXacfhK1lS4aON8bsYro/kYaO6Gqr lWcN9zw0VyyDbYAZgFv7bizWj8iTHw6AFTxSHZsh0ivWaT5ojae3WicX7V6O+GoU JSv6aHiX0CRFlEL3JqCUUPZxQjAShvpx3FBVhDZBa/vBrKdAl5Zoe3rPY8Xv8Yes Z2C2FU1431VwYDHKPyWurotGXJR9acMxOyAe4d0AMTh/Ul+L88MJ5FqhM+A2XIEe zoSS+yDt4fMLr8JZZdxUFafbmZwXqq4M/Pj6gdX1zhLaqt/vswIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFFuUaT0IzkiCFeY5lnEhIw2QqMPdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhiNTZjYWVhLTIxMzYtNDM0Mi1i YWZmLTZmMzEyNjhkNGNjNC84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4 ZDRjYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkhgDBAKM6wQwDgQCAAIwCAMGACYC+q8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnNy27pKCsbx7jM2K0IAdvz0B06mWxTf6gxtyOLuJFgB9QrRt+dx3/t zl5wVsfzDPUv9wefFTgaoxyHpMa+imnbCE2gv1ZmskkiXeJxCu7bhnO8l826rGio +LY7UiRowQfDZjGZ772rwr7Xf2kL74ZwJVNUkM75lq3JNL17NvhLpXN9FoRXfW/D 2EMwgA+eZnXB2mPIRwi53hpyZe69hAmBmT5z4qUgiuSBVHvdaQGvrDe+UAzyXmXN mid6QYK/GVkjOMtOjreurtOa59yowEqQydA22/9/SqD6P+C0ikbprwg0UGOsWGFF Z47XCvfUSkiEC6wWO+O52cmv8Ev9Qps= -----END CERTIFICATE-----Generated at Sun Apr 27 01:56:35 2025 by rpki-client