$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer File: 4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer (raw, json) Hash identifier: oC9GXXldJBE9ipxa0FfWO9iOjJm6J0JumrtCT9csbQQ= Subject key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858483E1324180EEC5D3D7DE94280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Dec 2024 01:45:34 +0000 Certificate not after: Tue 23 Mar 2027 00:45:34 +0000 Subordinate resources: AS: 21713 IP: 66.172.64.0/19 IP: 104.160.48.0/20 IP: 168.182.64.0/18 IP: 216.14.64.0/20 IP: 2605:c380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:13:24:18:0e:ec:5d:3d:7d:e9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 18 01:45:34 2024 GMT Not After : Mar 23 00:45:34 2027 GMT Subject: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:b7:dc:0a:4f:e2:6b:cb:02:f6:03:2f:cc: 42:1c:40:ba:30:14:18:ef:78:67:14:75:8b:f3:09: 26:ed:ca:00:6e:66:2b:e2:1f:0d:5d:93:91:0c:80: 3f:25:b5:d6:15:50:2c:30:87:ab:a2:f9:ea:cf:a6: 31:5f:04:c4:b6:44:43:dd:35:fa:d8:fc:54:db:d6: b8:55:b0:b5:73:04:37:7c:f9:08:0d:fd:14:25:4e: b6:31:40:eb:ee:87:eb:d9:f0:ad:45:02:69:bb:65: 42:6e:c3:c4:6f:92:a4:13:fe:00:b5:71:b0:65:eb: 36:af:cc:15:20:dd:df:57:18:60:df:b4:11:aa:42: 9a:c2:eb:4e:53:3f:44:f1:03:3c:58:b1:ff:1c:9b: 68:77:bd:1c:bb:bf:ec:b6:31:6a:b1:a4:4b:b2:04: 42:21:14:03:7e:b4:42:82:44:bf:d6:f6:97:db:f9: cb:e2:e1:c0:bd:92:ad:6e:a7:2b:46:31:8b:ac:a1: 24:eb:77:2a:24:8f:32:d7:35:35:6f:0b:d7:75:46: 76:e0:84:86:0b:33:1e:ab:ea:9e:33:e2:f0:36:34: d3:d5:7b:30:8e:a4:37:d3:c8:dc:02:16:8f:79:85: 6e:f8:b3:90:93:f1:44:14:ea:3e:1c:15:dc:54:7b: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 66.172.64.0/19 104.160.48.0/20 168.182.64.0/18 216.14.64.0/20 IPv6: 2605:c380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21713 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0f:f0:b1:85:57:83:a5:10:40:c6:d3:f9:62:10:98:ec:02: cf:b8:22:2d:5f:ec:03:60:ef:89:58:b9:12:b4:d8:5d:a4:3d: 10:ab:ca:fd:f3:d4:52:03:bb:2c:59:75:57:96:65:f0:21:9f: 91:d1:5a:6f:cf:10:bb:c8:72:61:d4:af:e3:4b:d3:5f:e1:27: ac:89:52:ff:f6:91:28:2f:06:c4:ef:3d:a0:8c:a5:c4:ed:37: 87:b8:cc:f0:c6:df:46:ff:f0:a5:88:9e:ba:1d:fa:bb:0f:d9: a9:af:18:bd:ac:09:9d:4f:76:61:d4:50:46:51:c8:e1:cb:6b: 2a:c0:b3:41:42:58:fc:9f:9e:28:bb:42:41:b2:4c:7f:61:e3: 68:14:9f:b1:24:4d:f4:2a:86:5c:99:51:5b:07:29:c5:ff:fe: d1:05:71:e0:b5:53:d1:71:1d:e4:a3:b7:10:7d:c0:85:2d:2b: ba:a9:84:df:75:9a:40:59:fd:9a:69:58:7b:b1:00:ae:8b:d2: 3f:6a:f9:6c:ad:66:cd:ea:77:49:8b:c4:10:ea:07:8f:10:4c: 25:ae:eb:e0:f3:0d:54:ab:c6:e2:34:73:7c:35:bd:90:52:36: b0:60:90:6d:13:60:a1:40:00:71:25:ea:c2:10:52:c4:36:d5: 11:7e:b7:6a -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEg+EyQYDuxdPX3pQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxODAxNDUzNFoXDTI3MDMyMzAwNDUzNFowLzEtMCsGA1UEAxMk NDkzMWU3MTctYzFkMS00ZGQ4LTg2M2QtNWMwNmZiNzZmNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2K33ApP4mvLAvYDL8xCHEC6MBQY73hnFHWL 8wkm7coAbmYr4h8NXZORDIA/JbXWFVAsMIerovnqz6YxXwTEtkRD3TX62PxU29a4 VbC1cwQ3fPkIDf0UJU62MUDr7ofr2fCtRQJpu2VCbsPEb5KkE/4AtXGwZes2r8wV IN3fVxhg37QRqkKawutOUz9E8QM8WLH/HJtod70cu7/stjFqsaRLsgRCIRQDfrRC gkS/1vaX2/nL4uHAvZKtbqcrRjGLrKEk63cqJI8y1zU1bwvXdUZ24ISGCzMeq+qe M+LwNjTT1XswjqQ308jcAhaPeYVu+LOQk/FEFOo+HBXcVHvoCQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFM5C/nERccNJG422e3TkH0/ikd6MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3NmY0N2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ5MzFlNzE3LWMxZDEtNGRkOC04 NjNkLTVjMDZmYjc2ZjQ3Yi80OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3 NmY0N2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVCrEADBARooDADBAaotkADBATYDkAwDQQCAAIw BwMFACYFw4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVNEwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVQ/w sYVXg6UQQMbT+WIQmOwCz7giLV/sA2DviVi5ErTYXaQ9EKvK/fPUUgO7LFl1V5Zl 8CGfkdFab88Qu8hyYdSv40vTX+EnrIlS//aRKC8GxO89oIylxO03h7jM8MbfRv/w pYieuh36uw/Zqa8YvawJnU92YdRQRlHI4ctrKsCzQUJY/J+eKLtCQbJMf2HjaBSf sSRN9CqGXJlRWwcpxf/+0QVx4LVT0XEd5KO3EH3AhS0ruqmE33WaQFn9mmlYe7EA rovSP2r5bK1mzep3SYvEEOoHjxBMJa7r4PMNVKvG4jRzfDW9kFI2sGCQbRNgoUAA cSXqwhBSxDbVEX63ag== -----END CERTIFICATE-----Generated at Mon May 5 11:23:12 2025 by rpki-client