$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer File: 9e246efa-84c5-416a-bc6c-a7163432845f.cer (raw, json) Hash identifier: MtoP4xB8/NBBn1H+W2MqcQ3lvwpa2tsgNHz+ZlgENeA= Subject key identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848A8291F99BD480651CE061880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jan 2025 01:45:33 +0000 Certificate not after: Fri 30 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 64.93.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:29:1f:99:bd:48:06:51:ce:06:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 25 01:45:33 2025 GMT Not After : Apr 30 00:45:33 2027 GMT Subject: CN=9e246efa-84c5-416a-bc6c-a7163432845f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:66:b8:9b:4f:08:bb:5e:9d:0a:30:35:a4: 56:fd:ed:00:3e:53:f8:5a:87:6f:de:a6:2c:67:06: cd:56:af:78:a3:62:03:8c:24:04:57:6e:e6:65:01: 14:47:14:28:9d:39:92:93:71:c5:53:b5:11:ca:f9: a9:0d:aa:8c:fe:34:8d:f0:60:13:77:5c:24:ba:12: d4:20:86:51:7c:2f:56:84:2b:c9:81:fc:0f:12:76: f4:d5:21:95:1c:3c:85:f2:d5:b2:77:21:b0:c3:e9: 70:4c:57:f2:86:29:9d:f4:d1:2b:d2:95:6a:4e:58: 80:8a:a5:0f:06:4c:c2:fb:f3:35:90:e4:a3:64:bb: 8f:d7:1a:f1:6e:45:b0:29:34:4f:7d:8b:9a:64:b5: 3f:81:84:b0:9e:c1:ab:11:28:31:ca:0f:07:b9:ac: 05:f5:42:c0:c2:0a:12:18:23:38:78:4c:52:ad:87: 43:2d:7c:d0:32:23:15:54:18:a6:1b:53:12:0c:96: 48:5f:a9:0a:84:cc:ef:9a:b8:58:44:0b:14:54:96: 36:cb:d7:fa:74:57:5e:c6:a2:4b:0a:a4:e8:f4:cc: d7:c7:56:65:be:1e:13:eb:cd:db:d2:2e:a7:d4:e4: 07:23:89:7a:ed:5b:93:24:3d:50:bd:e1:73:5d:55: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.93.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f2:05:9f:54:b5:cc:cf:b3:f0:d7:eb:92:0a:c8:cf:03:ea: ac:0f:5b:25:2a:3d:45:13:d3:92:84:67:2a:85:0e:46:90:47: bc:8e:46:ee:97:30:95:65:e7:43:0f:f3:46:0f:ff:87:52:c3: 01:3e:9e:a6:9f:3b:c3:69:19:57:d6:45:bb:65:71:54:12:89: e0:e4:74:b5:4a:04:07:f8:c9:6b:88:9e:ee:5f:ae:63:20:d8: 69:9d:69:cb:f2:c3:1d:e3:4b:df:88:c6:b3:a3:98:cf:4f:6d: e7:e7:bf:76:87:f4:bf:b6:68:cb:61:16:48:96:e6:59:ad:4e: c6:89:1e:fe:b2:75:dc:de:35:29:50:e2:f8:2c:1b:53:5a:5c: be:02:7d:c8:d3:77:81:f3:7a:bc:12:72:29:a2:b6:dd:9f:8d: 08:3c:9b:f3:a4:2e:16:93:4c:26:ac:e3:ca:6b:d6:0f:05:15: e9:35:06:c1:7a:d5:98:e6:eb:d3:6c:7c:4b:ae:fc:06:02:72: cb:d4:c1:22:ff:f5:cb:6b:5e:d2:e9:d4:fb:89:53:2a:c1:4b: ff:d3:81:12:d4:31:63:04:da:ed:e9:9a:94:c7:5e:ef:93:4f: 44:b4:ba:e8:08:1f:d7:41:4e:5d:c9:3d:f0:d2:54:c0:29:b3: 7e:9b:3d:df -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEioKR+ZvUgGUc4GGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEyNTAxNDUzM1oXDTI3MDQzMDAwNDUzM1owLzEtMCsGA1UEAxMk OWUyNDZlZmEtODRjNS00MTZhLWJjNmMtYTcxNjM0MzI4NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd1muJtPCLtenQowNaRW/e0APlP4Wodv3qYs ZwbNVq94o2IDjCQEV27mZQEURxQonTmSk3HFU7URyvmpDaqM/jSN8GATd1wkuhLU IIZRfC9WhCvJgfwPEnb01SGVHDyF8tWydyGww+lwTFfyhimd9NEr0pVqTliAiqUP BkzC+/M1kOSjZLuP1xrxbkWwKTRPfYuaZLU/gYSwnsGrESgxyg8HuawF9ULAwgoS GCM4eExSrYdDLXzQMiMVVBimG1MSDJZIX6kKhMzvmrhYRAsUVJY2y9f6dFdexqJL CqTo9MzXx1Zlvh4T683b0i6n1OQHI4l67VuTJD1QveFzXVUhkQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGvpH1KGUeLZ+bRb8fGPckNphQofMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 ZTI0NmVmYS04NGM1LTQxNmEtYmM2Yy1hNzE2MzQzMjg0NWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzllMjQ2ZWZhLTg0YzUtNDE2YS1i YzZjLWE3MTYzNDMyODQ1Zi85ZTI0NmVmYS04NGM1LTQxNmEtYmM2Yy1hNzE2MzQz Mjg0NWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAXVwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbfIFn1S1zM+z8NfrkgrI zwPqrA9bJSo9RRPTkoRnKoUORpBHvI5G7pcwlWXnQw/zRg//h1LDAT6epp87w2kZ V9ZFu2VxVBKJ4OR0tUoEB/jJa4ie7l+uYyDYaZ1py/LDHeNL34jGs6OYz09t5+e/ dof0v7Zoy2EWSJbmWa1Oxoke/rJ13N41KVDi+CwbU1pcvgJ9yNN3gfN6vBJyKaK2 3Z+NCDyb86QuFpNMJqzjymvWDwUV6TUGwXrVmObr02x8S678BgJyy9TBIv/1y2te 0unU+4lTKsFL/9OBEtQxYwTa7emalMde75NPRLS66Agf10FOXck98NJUwCmzfps9 3w== -----END CERTIFICATE-----Generated at Sat May 10 19:16:08 2025 by rpki-client