$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6.cer File: 9cbe10a0-2935-48b8-8e13-29a34fb07db6.cer (raw, json) Hash identifier: +Deqyvg40gn5+WCS1z5MIetRTpxK/sbD5SOME++v6jg= Subject key identifier: 40:33:6E:DA:44:51:64:F4:2B:CD:88:78:66:E2:BF:EA:85:91:61:37 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858493936EC611DD7427E8A3EE380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/9cbe10a0-2935-48b8-8e13-29a34fb07db6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 00:45:33 +0000 Certificate not after: Mon 21 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 11624 IP: 75.127.16.0/20 IP: 162.252.128.0/22 IP: 2605:af80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:36:ec:61:1d:d7:42:7e:8a:3e:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 18 00:45:33 2025 GMT Not After : Jun 21 00:45:33 2027 GMT Subject: CN=9cbe10a0-2935-48b8-8e13-29a34fb07db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:3a:d4:40:a9:51:38:74:72:25:f3:ab:c0: 8c:9d:c0:78:64:17:bd:62:6b:0b:59:8d:e4:46:68: 87:9f:ce:2f:95:43:22:b8:2c:b4:37:0c:8d:a2:1b: b8:48:09:e6:07:21:a4:54:a5:64:c2:82:ac:6f:11: 18:5b:f2:44:d1:d1:7b:b3:9c:e1:18:5c:19:ec:2d: dd:28:9e:ea:e2:66:db:b8:5d:ff:a0:69:f9:7b:aa: 35:73:b3:14:19:33:6d:47:32:67:af:ec:bf:b8:03: 37:5c:c0:39:8d:1d:db:52:12:1e:7d:fb:fb:e0:be: eb:9c:36:83:2a:3c:ce:e5:18:ee:f0:e3:82:aa:a6: a9:ea:c7:05:87:03:84:be:c2:d3:28:1f:0e:20:0b: fd:f3:37:e5:78:21:4e:c6:be:24:05:14:c1:95:99: b9:5b:c7:8b:0b:95:a3:d8:b7:ba:fb:a0:ee:0e:0b: 28:0c:94:c6:dc:52:14:a9:bf:9a:14:68:6f:cb:5b: df:22:33:20:5e:b0:29:76:c9:77:d4:8c:98:61:80: 07:35:0f:d4:82:d1:f2:95:6e:9d:0e:42:14:7b:eb: 62:ec:a2:83:ad:12:c6:0e:85:1c:b0:cb:69:70:b5: c8:f5:02:c0:f9:83:73:02:77:b9:87:f3:41:33:4a: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:6E:DA:44:51:64:F4:2B:CD:88:78:66:E2:BF:EA:85:91:61:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/9cbe10a0-2935-48b8-8e13-29a34fb07db6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 75.127.16.0/20 162.252.128.0/22 IPv6: 2605:af80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11624 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a1:a1:59:68:14:ee:3b:30:d6:37:2b:63:31:38:e4:d0:b5: 0e:07:67:43:0e:89:6c:81:8b:53:49:35:44:c1:24:6b:bb:61: 61:7d:84:ed:52:02:aa:1b:03:41:e9:5b:19:28:58:1c:8d:ff: 17:b2:c8:0f:b7:10:fc:af:8c:87:2b:fe:dd:3d:c0:4e:10:a5: 00:d8:0f:97:54:d1:07:1d:13:fc:ed:6c:7b:58:c5:da:12:27: 6c:2e:52:de:3a:81:e6:8c:e9:1e:63:f8:16:8f:00:3a:a4:0a: 96:db:46:cd:0f:c7:7b:5b:bf:0d:e3:6e:80:da:36:d0:30:81: b4:cf:49:7f:bf:e5:87:e6:63:bc:6e:e9:55:13:96:dd:79:52: 20:06:68:93:6c:b2:ef:8c:d0:2b:6b:13:23:64:c2:9d:22:4f: 2d:45:c7:80:a3:dc:e8:fe:62:64:c8:e5:89:20:cd:83:d2:50: 6e:81:78:0a:9b:b5:10:53:fb:3c:b6:5e:2c:95:ea:e7:68:91: ce:41:87:32:39:67:6b:86:17:03:00:4d:68:cf:10:16:9a:02: f8:58:0e:ff:dc:df:67:62:2e:ad:81:f1:75:77:fa:4c:ca:7a: cf:f3:45:37:a6:2f:b3:e8:59:cd:ce:70:64:3b:c6:b2:69:91: e2:1e:78:1a -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEk5NuxhHddCfoo+44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDMxODAwNDUzM1oXDTI3MDYyMTAwNDUzM1owLzEtMCsGA1UEAxMk OWNiZTEwYTAtMjkzNS00OGI4LThlMTMtMjlhMzRmYjA3ZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaU61ECpUTh0ciXzq8CMncB4ZBe9YmsLWY3k RmiHn84vlUMiuCy0NwyNohu4SAnmByGkVKVkwoKsbxEYW/JE0dF7s5zhGFwZ7C3d KJ7q4mbbuF3/oGn5e6o1c7MUGTNtRzJnr+y/uAM3XMA5jR3bUhIeffv74L7rnDaD KjzO5Rju8OOCqqap6scFhwOEvsLTKB8OIAv98zfleCFOxr4kBRTBlZm5W8eLC5Wj 2Le6+6DuDgsoDJTG3FIUqb+aFGhvy1vfIjMgXrApdsl31IyYYYAHNQ/UgtHylW6d DkIUe+ti7KKDrRLGDoUcsMtpcLXI9QLA+YNzAne5h/NBM0qXTwIDAQABo4IELzCC BCswHQYDVR0OBBYEFEAzbtpEUWT0K82IeGbiv+qFkWE3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 Y2JlMTBhMC0yOTM1LTQ4YjgtOGUxMy0yOWEzNGZiMDdkYjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzljYmUxMGEwLTI5MzUtNDhiOC04 ZTEzLTI5YTM0ZmIwN2RiNi85Y2JlMTBhMC0yOTM1LTQ4YjgtOGUxMy0yOWEzNGZi MDdkYjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARLfxADBAKi/IAwDQQCAAIwBwMFACYFr4AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLWgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABKGhWWgU7jsw1jcrYzE4 5NC1DgdnQw6JbIGLU0k1RMEka7thYX2E7VICqhsDQelbGShYHI3/F7LID7cQ/K+M hyv+3T3AThClANgPl1TRBx0T/O1se1jF2hInbC5S3jqB5ozpHmP4Fo8AOqQKlttG zQ/He1u/DeNugNo20DCBtM9Jf7/lh+ZjvG7pVROW3XlSIAZok2yy74zQK2sTI2TC nSJPLUXHgKPc6P5iZMjliSDNg9JQboF4Cpu1EFP7PLZeLJXq52iRzkGHMjlna4YX AwBNaM8QFpoC+FgO/9zfZ2IurYHxdXf6TMp6z/NFN6Yvs+hZzc5wZDvGsmmR4h54 Gg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:25:07 2025 by rpki-client