$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533.cer File: f1a0a79d-3ae8-4653-88b5-bb348a028533.cer (raw, json) Hash identifier: sw7ADjyQ4fKDqo0tut50eyTNAw/j1q5rXxqKu9vdSXs= Subject key identifier: AE:AA:99:C5:CC:54:FE:01:0C:8E:7A:C9:90:51:03:E9:8A:08:59:D2 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858480E9D819C3CAD5F049BAD5100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/f1a0a79d-3ae8-4653-88b5-bb348a028533.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Dec 2024 01:45:33 +0000 Certificate not after: Sat 06 Mar 2027 01:45:33 +0000 Subordinate resources: AS: 7963 IP: 199.89.192.0/23 IP: 204.152.114.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:9d:81:9c:3c:ad:5f:04:9b:ad:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 1 01:45:33 2024 GMT Not After : Mar 6 01:45:33 2027 GMT Subject: CN=f1a0a79d-3ae8-4653-88b5-bb348a028533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:4a:a7:f8:92:9d:3f:66:ed:77:82:4c:b6: ab:17:74:87:b5:6d:eb:54:52:ea:8f:20:e6:64:69: 5a:2b:a9:5a:51:af:7c:8a:aa:ed:86:66:40:bf:a6: 4c:f0:42:5e:9d:f0:ef:79:7d:17:a1:a6:ee:39:07: 24:29:86:13:a4:96:ed:1c:45:45:f5:62:af:53:eb: 0f:9d:5c:9e:ba:9f:b5:42:d0:1f:7e:45:34:3d:40: 19:4e:c6:83:a4:de:af:18:69:fd:15:62:8d:17:0d: 77:4e:be:c1:af:ad:ac:13:dd:f7:a8:ba:c7:44:d3: 1d:b8:8c:27:d8:37:6d:03:84:ac:fb:ad:c8:1c:ff: 99:3a:fa:57:ca:50:0d:b3:12:4e:a8:61:84:94:75: 5b:8c:ee:74:a8:8a:f6:3e:fe:55:d4:09:f5:3f:d3: 02:4d:d1:2e:bc:83:66:e6:21:8b:ac:33:a7:f3:e5: da:c0:df:46:9c:d5:ca:9f:8e:40:7d:2e:3b:92:10: d9:24:f4:da:dd:da:86:38:8b:dc:d2:59:21:d9:e8: 86:c4:5f:8b:42:9d:30:59:a0:7a:a7:51:f1:30:78: 67:68:4c:1b:32:69:bb:78:3d:19:bd:d3:fb:f8:be: 1d:c2:97:0d:6e:79:72:ed:01:bf:da:b5:ef:5e:e8: c4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:99:C5:CC:54:FE:01:0C:8E:7A:C9:90:51:03:E9:8A:08:59:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/f1a0a79d-3ae8-4653-88b5-bb348a028533.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.192.0/23 204.152.114.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7963 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:9f:b3:7d:85:0c:51:26:37:6d:cf:09:ae:4a:a9:d3:44:aa: 76:5e:81:33:31:6f:60:8f:62:73:af:99:47:94:82:95:89:15: c3:f6:14:ef:3b:3a:06:0b:be:d6:9a:6f:ba:d9:f2:a3:c6:be: 09:2a:3a:24:5e:f3:5d:98:d7:58:b7:95:45:56:c0:14:53:56: cf:69:24:6f:3d:07:9d:0a:71:59:5b:e2:fb:94:c0:d5:3f:e6: 3b:ff:aa:46:a7:45:2e:45:86:5c:c6:38:2b:8c:e5:21:e7:7f: bf:3f:b9:66:5e:b1:03:3c:c1:ef:cd:b9:66:6e:b4:73:de:6c: ab:fb:e4:82:2b:52:99:ea:71:4a:a9:d6:a2:83:cf:bc:96:98: f6:87:79:dc:13:83:ba:28:dc:4c:08:52:b8:1d:98:ef:a6:89: 65:98:59:05:a2:30:04:33:cb:e8:d6:b5:0e:5b:2b:64:19:d1: 3c:e9:e8:93:20:5b:90:28:ab:c8:db:66:fe:c0:06:d8:16:7c: aa:be:5b:68:6f:ae:a6:55:be:84:ca:11:03:6e:02:a3:9c:1b: ab:bd:33:c9:17:1a:5b:35:07:2e:ff:09:cd:7a:61:ba:99:4e: 01:19:71:c0:5a:98:2d:40:cf:72:7b:44:05:d3:d7:c1:e0:75: 95:73:3c:c1 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEgOnYGcPK1fBJutUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIwMTAxNDUzM1oXDTI3MDMwNjAxNDUzM1owLzEtMCsGA1UEAxMk ZjFhMGE3OWQtM2FlOC00NjUzLTg4YjUtYmIzNDhhMDI4NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFZKp/iSnT9m7XeCTLarF3SHtW3rVFLqjyDm ZGlaK6laUa98iqrthmZAv6ZM8EJenfDveX0XoabuOQckKYYTpJbtHEVF9WKvU+sP nVyeup+1QtAffkU0PUAZTsaDpN6vGGn9FWKNFw13Tr7Br62sE933qLrHRNMduIwn 2DdtA4Ss+63IHP+ZOvpXylANsxJOqGGElHVbjO50qIr2Pv5V1An1P9MCTdEuvINm 5iGLrDOn8+XawN9GnNXKn45AfS47khDZJPTa3dqGOIvc0lkh2eiGxF+LQp0wWaB6 p1HxMHhnaEwbMmm7eD0ZvdP7+L4dwpcNbnly7QG/2rXvXujEsQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFK6qmcXMVP4BDI56yZBRA+mKCFnSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m MWEwYTc5ZC0zYWU4LTQ2NTMtODhiNS1iYjM0OGEwMjg1MzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2YxYTBhNzlkLTNhZTgtNDY1My04 OGI1LWJiMzQ4YTAyODUzMy9mMWEwYTc5ZC0zYWU4LTQ2NTMtODhiNS1iYjM0OGEw Mjg1MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHHWcADBAHMmHIwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICHxswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAo5+zfYUMUSY3bc8Jrkqp00Sqdl6BMzFvYI9ic6+Z R5SClYkVw/YU7zs6Bgu+1ppvutnyo8a+CSo6JF7zXZjXWLeVRVbAFFNWz2kkbz0H nQpxWVvi+5TA1T/mO/+qRqdFLkWGXMY4K4zlIed/vz+5Zl6xAzzB7825Zm60c95s q/vkgitSmepxSqnWooPPvJaY9od53BODuijcTAhSuB2Y76aJZZhZBaIwBDPL6Na1 DlsrZBnRPOnokyBbkCiryNtm/sAG2BZ8qr5baG+uplW+hMoRA24Co5wbq70zyRca WzUHLv8JzXphuplOARlxwFqYLUDPcntEBdPXweB1lXM8wQ== -----END CERTIFICATE-----Generated at Sun Jun 29 13:45:02 2025 by rpki-client