$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer File: cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer (raw, json) Hash identifier: +YPXibb8TvAlasyDtZCAqcIUaCd/8UbstYHa9VZnw+Q= Subject key identifier: A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848F91EF75F9CAD5C3B5C3AB280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Feb 2025 01:45:33 +0000 Certificate not after: Sat 29 May 2027 00:45:33 +0000 Subordinate resources: AS: 62948 AS: 393916 IP: 65.110.32.0/21 IP: 74.119.4.0/22 IP: 162.254.128.0/22 IP: 198.212.36.0/24 IP: 209.131.232.0/22 IP: 2602:fedb::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:1e:f7:5f:9c:ad:5c:3b:5c:3a:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 23 01:45:33 2025 GMT Not After : May 29 00:45:33 2027 GMT Subject: CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:ba:88:ad:26:24:19:89:63:be:6b:49:3c: f6:5d:d0:29:ca:62:81:eb:97:7f:5f:30:1b:60:bc: 2a:b3:2d:bd:fe:b3:7b:35:4c:bf:05:2f:ff:bd:94: 4d:05:37:f7:f8:e9:ba:6a:7f:56:4d:80:a8:a2:15: 58:70:f1:fb:a8:66:97:44:57:6f:76:67:45:e7:66: a6:68:61:9c:91:3c:bf:58:bd:56:68:2e:b0:9f:08: bb:30:87:cb:97:3d:dc:20:65:b2:c6:1d:6c:b6:8a: bb:9d:30:52:3a:be:b4:37:4e:17:dc:f5:35:b7:04: 9a:1d:60:75:ad:16:6b:8f:0e:14:15:cf:0b:d1:f3: 04:de:1d:06:61:ea:97:46:36:69:22:96:12:03:12: 2b:92:9b:cb:d8:63:b4:bf:62:94:87:0c:32:da:e5: a9:ed:3f:03:a5:c8:49:2d:c9:46:78:78:49:ca:21: c0:58:f1:fb:62:60:86:c0:96:5d:fe:4a:0c:66:5f: 94:91:42:ff:d6:78:c2:bb:7c:96:d7:f3:8d:52:13: 68:3e:ec:62:e4:9f:5a:39:85:13:97:ae:e1:1a:d2: f6:ca:26:b1:29:1e:33:16:84:4e:99:f8:88:28:ee: 2a:80:85:1e:8b:d7:72:ba:0f:73:11:30:a2:e9:b6: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 65.110.32.0/21 74.119.4.0/22 162.254.128.0/22 198.212.36.0/24 209.131.232.0/22 IPv6: 2602:fedb::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62948 393916 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:42:c7:07:8b:52:54:da:be:b1:79:30:a0:c7:e9:c3:e3:a7: 61:df:64:27:09:5f:67:3c:f5:5f:c5:50:2a:a9:e2:ff:23:1b: 61:8d:64:87:f5:c8:09:32:00:0d:a2:18:4b:4a:15:44:e8:43: 89:99:a8:f1:db:13:a8:4e:5f:19:52:0c:a3:0f:d1:8f:9f:3b: 40:9a:5c:14:89:82:a1:bc:7d:f5:9f:0e:fe:1c:3d:65:60:c4: a3:bb:ba:f4:fe:de:8d:24:80:6d:de:17:4f:34:9b:e7:a4:5a: bb:21:a1:fa:27:03:b2:92:30:a7:a6:c2:d5:61:26:19:fa:7c: 21:85:cb:78:b3:83:b6:26:8b:11:74:ad:17:4e:ef:36:6d:1a: 24:02:da:44:33:cf:51:ff:98:37:0a:68:52:40:02:5a:06:72: 14:33:86:b6:eb:b0:9e:13:3e:34:c9:3d:99:eb:d6:4d:5a:ee: 02:83:67:60:0e:e5:88:3a:f7:b8:50:b5:47:73:76:ed:57:52: 96:5f:12:fb:75:cd:d8:f4:00:70:59:8a:d4:17:51:d8:5a:9c: b9:7d:68:fd:6c:58:21:f5:ee:b0:2b:a2:c7:9f:55:4c:90:5a: 5f:9e:83:1f:7f:33:3a:cf:79:6a:8f:bd:f1:df:b7:aa:61:c7: 6a:d5:64:65 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEj5HvdfnK1cO1w6soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDIyMzAxNDUzM1oXDTI3MDUyOTAwNDUzM1owLzEtMCsGA1UEAxMk Y2FiYjM4YmYtYmQwZi00Mzc0LTk3ZDUtMmI2MjJmYWZkMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVK6iK0mJBmJY75rSTz2XdApymKB65d/XzAb YLwqsy29/rN7NUy/BS//vZRNBTf3+Om6an9WTYCoohVYcPH7qGaXRFdvdmdF52am aGGckTy/WL1WaC6wnwi7MIfLlz3cIGWyxh1stoq7nTBSOr60N04X3PU1twSaHWB1 rRZrjw4UFc8L0fME3h0GYeqXRjZpIpYSAxIrkpvL2GO0v2KUhwwy2uWp7T8DpchJ LclGeHhJyiHAWPH7YmCGwJZd/koMZl+UkUL/1njCu3yW1/ONUhNoPuxi5J9aOYUT l67hGtL2yiaxKR4zFoROmfiIKO4qgIUei9dyug9zETCi6bYCYQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFKbzx/EruGfdbsKq0I3NPoNziXkSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j YWJiMzhiZi1iZDBmLTQzNzQtOTdkNS0yYjYyMmZhZmQwYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NhYmIzOGJmLWJkMGYtNDM3NC05 N2Q1LTJiNjIyZmFmZDBhZi9jYWJiMzhiZi1iZDBmLTQzNzQtOTdkNS0yYjYyMmZh ZmQwYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBANBbiADBAJKdwQDBAKi/oADBADG1CQDBALRg+gw DgQCAAIwCAMGBCYC/tsAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwD15AIDBgK8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhCxweLUlTavrF5MKDH6cPjp2HfZCcJX2c89V/FUCqp4v8jG2GN ZIf1yAkyAA2iGEtKFUToQ4mZqPHbE6hOXxlSDKMP0Y+fO0CaXBSJgqG8ffWfDv4c PWVgxKO7uvT+3o0kgG3eF080m+ekWrshofonA7KSMKemwtVhJhn6fCGFy3izg7Ym ixF0rRdO7zZtGiQC2kQzz1H/mDcKaFJAAloGchQzhrbrsJ4TPjTJPZnr1k1a7gKD Z2AO5Yg697hQtUdzdu1XUpZfEvt1zdj0AHBZitQXUdhanLl9aP1sWCH17rArosef VUyQWl+egx9/MzrPeWqPvfHft6phx2rVZGU= -----END CERTIFICATE-----Generated at Fri Apr 4 10:38:31 2025 by rpki-client