$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84f15114-c274-45b9-8049-dfecd0a557c2.cer File: 84f15114-c274-45b9-8049-dfecd0a557c2.cer (raw, json) Hash identifier: 8y7WDa1U/Lyhr5/lg7TD1QgdHnpWx1wXRPCy8ninuto= Subject key identifier: 36:DA:8B:A6:7C:21:98:01:9A:29:D2:B3:72:EE:10:7E:E3:A8:7B:83 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858499DB794F56097BA85C4106240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84f15114-c274-45b9-8049-dfecd0a557c2/84f15114-c274-45b9-8049-dfecd0a557c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84f15114-c274-45b9-8049-dfecd0a557c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 26156 IP: 208.84.72.0/22 IP: 2606:4880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:94:f5:60:97:ba:85:c4:10:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=84f15114-c274-45b9-8049-dfecd0a557c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:c3:94:64:ac:ba:a4:80:3f:28:d8:f9:7c: c3:b9:d7:69:b1:5a:a1:f3:51:14:af:b7:42:5f:a0: db:50:e2:12:8b:39:7d:12:a6:cb:ea:b6:56:7f:48: 00:9b:08:d5:c1:5d:7b:19:5c:f1:d1:e7:20:de:66: 51:95:99:5d:6f:cf:16:8d:f2:9d:ee:8f:c7:54:10: a3:c3:73:02:ad:88:7e:ea:72:96:9b:e5:d2:68:00: 0d:b7:e0:c3:2a:37:bc:f7:93:ec:68:85:8f:5c:34: a9:1f:6f:04:e1:5a:e9:06:c5:8f:49:8c:89:1e:1c: 87:6e:af:05:b5:01:79:e5:bb:37:6e:0b:75:6e:2a: 6b:41:49:34:4a:4f:92:05:57:d4:18:d4:1f:d7:5a: 41:20:5f:32:9d:74:ae:cf:2e:83:14:a6:c5:ab:b8: e6:f1:18:ed:2b:b6:a1:e2:9d:7b:72:26:0e:05:33: 84:7d:5f:a6:3d:29:fd:c9:83:42:a7:f9:d6:b7:d3: fd:3d:83:69:03:4e:f0:42:76:05:16:70:ab:28:a8: 15:04:f8:d3:a2:25:97:9d:b2:73:9f:d6:0e:c9:fa: 18:42:6a:c0:61:90:d5:46:58:95:fd:f9:95:a0:3d: 28:53:99:dc:4a:ae:ac:e5:67:29:59:fc:19:e2:94: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DA:8B:A6:7C:21:98:01:9A:29:D2:B3:72:EE:10:7E:E3:A8:7B:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84f15114-c274-45b9-8049-dfecd0a557c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84f15114-c274-45b9-8049-dfecd0a557c2/84f15114-c274-45b9-8049-dfecd0a557c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 208.84.72.0/22 IPv6: 2606:4880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26156 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:37:78:40:a6:df:ef:74:89:9b:47:9f:ea:d6:18:f7:d4:15: c9:16:c9:ed:36:04:88:46:f8:b5:92:13:68:24:fc:e6:d7:2b: 59:05:fa:2a:ca:d3:ac:03:52:c0:f9:56:35:72:7e:9f:13:e8: 88:2f:51:72:ba:6c:18:6f:fd:1f:74:4f:8d:56:f2:d0:5c:24: fd:2b:18:c4:65:c1:d8:29:f2:d0:a9:5d:0a:f7:3c:45:e6:b7: 6d:f4:9b:ab:6a:b8:7b:7b:f4:c0:64:22:3f:b1:bc:03:ce:26: 1a:d3:33:60:1a:a3:09:ca:94:24:fa:22:3d:e7:90:73:54:74: 4e:69:fc:f7:14:b9:93:5f:bd:4c:b8:ac:76:1c:d8:a5:f3:94: cc:9f:94:f9:fd:0f:1d:12:0b:f0:d5:a0:d7:1c:d6:cf:3b:43: 60:f1:97:32:d9:e4:33:69:e6:17:c5:61:73:6f:96:55:41:7a: a9:23:0b:78:49:18:6e:0a:c6:c6:94:73:2b:b6:2e:bf:cd:18: 37:f8:ef:de:2a:8d:b8:b2:80:98:c8:dc:50:92:93:74:4f:b4: 33:a9:a6:bd:f6:a9:61:e4:cc:aa:41:c9:7b:d3:8a:1a:12:e8: 70:5f:35:f5:98:5b:5c:cb:90:9e:7a:11:7c:5c:34:64:33:2c: c2:6f:bc:9a -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEmdt5T1YJe6hcQQYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk ODRmMTUxMTQtYzI3NC00NWI5LTgwNDktZGZlY2QwYTU1N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlDDlGSsuqSAPyjY+XzDuddpsVqh81EUr7dC X6DbUOISizl9EqbL6rZWf0gAmwjVwV17GVzx0ecg3mZRlZldb88WjfKd7o/HVBCj w3MCrYh+6nKWm+XSaAANt+DDKje895PsaIWPXDSpH28E4VrpBsWPSYyJHhyHbq8F tQF55bs3bgt1biprQUk0Sk+SBVfUGNQf11pBIF8ynXSuzy6DFKbFq7jm8RjtK7ah 4p17ciYOBTOEfV+mPSn9yYNCp/nWt9P9PYNpA07wQnYFFnCrKKgVBPjToiWXnbJz n9YOyfoYQmrAYZDVRliV/fmVoD0oU5ncSq6s5WcpWfwZ4pSWUwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDbai6Z8IZgBminSs3LuEH7jqHuDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 NGYxNTExNC1jMjc0LTQ1YjktODA0OS1kZmVjZDBhNTU3YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg0ZjE1MTE0LWMyNzQtNDViOS04 MDQ5LWRmZWNkMGE1NTdjMi84NGYxNTExNC1jMjc0LTQ1YjktODA0OS1kZmVjZDBh NTU3YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALQVEgwDQQCAAIwBwMFACYGSIAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZiwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPDd4QKbf73SJm0ef6tYY99QVyRbJ 7TYEiEb4tZITaCT85tcrWQX6KsrTrANSwPlWNXJ+nxPoiC9RcrpsGG/9H3RPjVby 0Fwk/SsYxGXB2Cny0KldCvc8Rea3bfSbq2q4e3v0wGQiP7G8A84mGtMzYBqjCcqU JPoiPeeQc1R0Tmn89xS5k1+9TLisdhzYpfOUzJ+U+f0PHRIL8NWg1xzWzztDYPGX MtnkM2nmF8Vhc2+WVUF6qSMLeEkYbgrGxpRzK7Yuv80YN/jv3iqNuLKAmMjcUJKT dE+0M6mmvfapYeTMqkHJe9OKGhLocF819ZhbXMuQnnoRfFw0ZDMswm+8mg== -----END CERTIFICATE-----Generated at Fri May 9 03:00:21 2025 by rpki-client