$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer File: e0b35546-769e-41a6-987e-2a9732555de4.cer (raw, json) Hash identifier: wxhzeResEM4xNkI+DV2RcZeyhGAL2UEnPeDWdXlQseA= Subject key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848F91EF7EC89F4E5665CCCB740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Feb 2025 01:45:33 +0000 Certificate not after: Sat 29 May 2027 00:45:33 +0000 Subordinate resources: IP: 23.146.72.0/24 IP: 23.162.120.0/24 IP: 64.49.44.0/22 IP: 2602:faac::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:1e:f7:ec:89:f4:e5:66:5c:cc:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 23 01:45:33 2025 GMT Not After : May 29 00:45:33 2027 GMT Subject: CN=e0b35546-769e-41a6-987e-2a9732555de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:5f:a4:c4:c4:6e:84:54:5f:de:df:64:2e: 7c:6c:e9:11:38:13:d2:34:fd:9a:8e:06:8c:44:52: b7:5a:a6:7e:22:bf:5a:4a:d3:3c:9c:ab:0a:04:48: 61:ea:8a:e0:49:ac:be:d8:b5:a5:cd:43:96:f5:26: 44:51:99:09:bc:17:cb:b0:cc:33:c2:41:e6:b6:4d: aa:b0:8a:6e:f7:15:da:4b:03:45:27:7c:dc:01:10: 58:69:bc:76:8e:98:e2:65:0f:4d:56:be:0f:53:6c: 5e:c5:03:91:3d:89:f6:b4:12:66:d5:bb:33:b8:a9: a4:f1:36:25:75:f1:00:67:cb:a1:b7:8e:6a:f4:19: 67:3d:d6:c1:de:7f:88:01:f1:23:44:4e:62:68:30: bd:fe:6e:54:61:90:ff:7e:38:ce:fc:dc:6a:19:ec: 29:06:21:fe:68:a2:67:af:99:c4:c0:a5:2f:98:86: 8c:c2:60:df:2e:a6:16:8e:b9:48:49:f7:b5:47:c7: 00:a6:31:c3:c5:1e:97:b7:0e:7d:2a:35:3d:27:05: ec:bd:f0:34:d0:41:45:7b:d7:ad:05:f4:49:97:4f: 0e:80:1c:0b:13:0e:18:22:fc:de:e9:32:16:16:e1: f2:c8:86:4d:9b:8d:12:94:3e:05:1a:b2:96:c1:05: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.72.0/24 23.162.120.0/24 64.49.44.0/22 IPv6: 2602:faac::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c0:ef:dc:27:e7:be:9e:4b:32:fe:c4:85:6b:05:8f:f1:81: e1:a3:10:bf:63:3f:d3:6a:c9:02:d8:0c:59:16:fc:dc:89:47: de:ad:26:f7:9c:6b:17:04:43:4e:08:84:32:dc:ba:f8:88:70: 9c:bb:72:47:e8:10:88:61:ac:91:42:85:17:89:9c:bf:d1:53: 28:9d:06:e3:e7:79:e0:3b:95:75:a9:d7:11:58:1b:9b:06:da: 03:02:61:15:cf:97:fc:04:0a:26:c6:96:ce:d1:0b:17:08:0d: 6b:57:a8:0c:e1:a3:ce:f7:ad:48:22:61:51:d4:6b:f6:67:b6: 96:ca:21:95:5d:d1:40:0b:3e:53:59:dc:1c:ed:01:34:7c:bb: 52:8f:4b:ed:6d:81:ab:d3:4b:62:a8:bc:27:fa:df:b2:6d:fa: 64:62:d8:e9:a9:c8:ff:92:64:ce:2c:b7:c3:b2:d5:26:02:e9: 0e:aa:0a:53:86:6d:02:66:da:e9:88:fc:ae:eb:da:de:a7:c4: 25:52:a0:2a:cb:47:b3:c0:8a:96:7f:fa:30:c5:4c:3d:f0:8a: cd:61:64:83:bf:2e:f9:ce:0e:ae:b6:e5:76:47:46:cc:a4:1c: 00:12:7f:f2:dc:5a:bf:4b:f7:b4:d0:8b:b5:f9:93:9b:f0:e7: cf:bb:47:76 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEj5HvfsifTlZlzMt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIyMzAxNDUzM1oXDTI3MDUyOTAwNDUzM1owLzEtMCsGA1UEAxMk ZTBiMzU1NDYtNzY5ZS00MWE2LTk4N2UtMmE5NzMyNTU1ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPtfpMTEboRUX97fZC58bOkROBPSNP2ajgaM RFK3WqZ+Ir9aStM8nKsKBEhh6orgSay+2LWlzUOW9SZEUZkJvBfLsMwzwkHmtk2q sIpu9xXaSwNFJ3zcARBYabx2jpjiZQ9NVr4PU2xexQORPYn2tBJm1bszuKmk8TYl dfEAZ8uht45q9BlnPdbB3n+IAfEjRE5iaDC9/m5UYZD/fjjO/NxqGewpBiH+aKJn r5nEwKUvmIaMwmDfLqYWjrlISfe1R8cApjHDxR6Xtw59KjU9JwXsvfA00EFFe9et BfRJl08OgBwLEw4YIvze6TIWFuHyyIZNm40SlD4FGrKWwQXuFQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFP32F6WBfLMYt+MR/7D839PszAioMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1NTVkZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UwYjM1NTQ2LTc2OWUtNDFhNi05 ODdlLTJhOTczMjU1NWRlNC9lMGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1 NTVkZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXkkgDBAAXongDBAJAMSwwDgQCAAIwCAMGBCYC +qwAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAnA79wn576eSzL+xIVrBY/xgeGjEL9jP9NqyQLYDFkW/NyJ R96tJvecaxcEQ04IhDLcuviIcJy7ckfoEIhhrJFChReJnL/RUyidBuPneeA7lXWp 1xFYG5sG2gMCYRXPl/wECibGls7RCxcIDWtXqAzho873rUgiYVHUa/ZntpbKIZVd 0UALPlNZ3BztATR8u1KPS+1tgavTS2KovCf637Jt+mRi2OmpyP+SZM4st8Oy1SYC 6Q6qClOGbQJm2umI/K7r2t6nxCVSoCrLR7PAipZ/+jDFTD3wis1hZIO/LvnODq62 5XZHRsykHAASf/LcWr9L97TQi7X5k5vw58+7R3Y= -----END CERTIFICATE-----Generated at Sun Apr 27 16:32:14 2025 by rpki-client