$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer File: 613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer (raw, json) Hash identifier: lta2OXlWFxgd/gcpEw/gYDRsfpjHUjvp/zfRg6dYgFw= Subject key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847FDDD69AC8E04E6B01B72A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Nov 2024 01:45:35 +0000 Certificate not after: Sun 28 Feb 2027 01:45:35 +0000 Subordinate resources: AS: 16801 AS: 46945 AS: 46960 IP: 64.22.91.0/24 IP: 104.255.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fd:dd:69:ac:8e:04:e6:b0:1b:72:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 25 01:45:35 2024 GMT Not After : Feb 28 01:45:35 2027 GMT Subject: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:0e:45:b4:39:74:c8:fc:78:3f:39:4c:6b: 91:16:db:74:a2:50:28:b0:c8:66:67:71:e9:95:7a: 00:eb:80:7d:b7:ba:48:18:26:4b:8c:1d:eb:28:3c: 80:8d:5a:4c:f3:47:0d:7c:13:ad:53:32:0b:66:d6: d9:91:e7:ba:69:2f:b8:65:0f:48:3c:97:9e:ce:c9: 81:e4:12:c1:d3:cb:cd:9b:1e:eb:ba:58:46:1a:9a: b4:2f:d4:8e:4b:2f:35:43:1e:ad:82:7f:e1:c0:3b: a9:98:b4:da:5e:c2:1a:34:64:9f:27:68:88:0b:9e: 62:71:bb:f4:50:46:62:06:fd:e7:b6:c7:c2:54:d1: 02:c8:9d:e1:b7:22:37:58:38:a4:ba:a4:f7:95:4b: 1e:c3:ea:78:e2:48:f1:a6:ac:cf:73:b7:90:b9:9b: 65:72:2d:bd:d8:0e:0d:c2:1a:78:f7:88:b6:19:0b: 1f:30:59:4f:b6:2b:c4:58:fb:ad:52:6b:87:ac:eb: 9b:ce:34:82:ba:fa:44:f9:17:12:3b:23:65:e1:5d: d1:cc:8e:97:7f:83:90:1b:e4:14:3f:07:c4:42:a3: 3d:e7:0e:af:b3:30:78:52:50:f5:67:b8:25:23:b9: cd:3e:5e:23:7d:39:57:0a:26:e8:1a:a4:47:40:ef: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.22.91.0/24 104.255.120.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16801 46945 46960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6d:06:3c:01:72:0b:04:8a:64:a0:5c:c4:6c:10:a0:7b:a2: db:c0:84:1e:69:95:05:01:a5:7d:10:91:d0:db:7b:14:86:63: 9e:ef:3b:87:c0:cd:8e:0b:ec:a0:ed:09:1a:6c:23:c5:88:2d: 59:aa:26:4a:d3:a7:df:6f:0a:3d:76:f5:e4:1f:45:92:3a:9c: 76:4b:3f:dc:aa:ed:0d:bc:7c:23:b2:70:99:23:39:d2:f4:8d: 08:13:1e:a2:09:1a:f1:bd:d1:fb:e9:17:bc:95:a8:40:2d:64: d0:58:93:46:b9:c4:2c:33:88:4a:9c:46:a7:44:7d:0e:b1:ac: 63:ac:59:cc:d8:a6:a8:eb:fd:8e:59:5c:7f:80:01:20:3c:0c: 3d:ad:eb:11:99:c6:98:f3:36:40:c7:00:91:ef:66:ff:67:16: 6c:3a:82:3d:bb:69:93:6f:ae:bf:44:68:26:27:3a:d0:44:4b: 29:db:84:13:3a:8e:41:ea:05:7d:1b:df:b4:ac:33:6f:a6:8c: b3:e3:52:18:5e:c8:24:5c:3e:f9:7c:11:50:3f:01:9d:90:69: 7b:93:dc:db:c1:17:5c:6f:83:b2:ed:64:7a:d4:60:d2:68:e6: 91:74:0c:58:ec:75:a4:ac:27:12:9c:f2:13:77:0e:cc:96:0f: 9a:e2:9f:a2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEf93WmsjgTmsBtypgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyNTAxNDUzNVoXDTI3MDIyODAxNDUzNVowLzEtMCsGA1UEAxMk NjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlkN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wORbQ5dMj8eD85TGuRFtt0olAosMhmZ3Hp lXoA64B9t7pIGCZLjB3rKDyAjVpM80cNfBOtUzILZtbZkee6aS+4ZQ9IPJeezsmB 5BLB08vNmx7rulhGGpq0L9SOSy81Qx6tgn/hwDupmLTaXsIaNGSfJ2iIC55icbv0 UEZiBv3ntsfCVNECyJ3htyI3WDikuqT3lUsew+p44kjxpqzPc7eQuZtlci292A4N whp494i2GQsfMFlPtivEWPutUmuHrOubzjSCuvpE+RcSOyNl4V3RzI6Xf4OQG+QU PwfEQqM95w6vszB4UlD1Z7glI7nNPl4jfTlXCiboGqRHQO8ndwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEBO1730PvYMfdgMnS//CKf0YmV7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzYxM2JkZDY3LTc0YjUtNDI2OC05 NmU3LWIzY2JiMDQ5ZDdhYS82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0 OWQ3YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAFlsDBAJo/3gwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICQaECAwC3YQIDALdwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZtBjwBcgsEimSgXMRsEKB7otvA hB5plQUBpX0QkdDbexSGY57vO4fAzY4L7KDtCRpsI8WILVmqJkrTp99vCj129eQf RZI6nHZLP9yq7Q28fCOycJkjOdL0jQgTHqIJGvG90fvpF7yVqEAtZNBYk0a5xCwz iEqcRqdEfQ6xrGOsWczYpqjr/Y5ZXH+AASA8DD2t6xGZxpjzNkDHAJHvZv9nFmw6 gj27aZNvrr9EaCYnOtBESynbhBM6jkHqBX0b37SsM2+mjLPjUhheyCRcPvl8EVA/ AZ2QaXuT3NvBF1xvg7LtZHrUYNJo5pF0DFjsdaSsJxKc8hN3DsyWD5rin6I= -----END CERTIFICATE-----Generated at Mon May 5 06:21:45 2025 by rpki-client