$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer File: 5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer (raw, json) Hash identifier: eG1302+G75XDL3s45DSCaXT37tWA3AJ2uke6ZZrtLgg= Subject key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285848CB178858DA8E2CBDED464F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Feb 2025 14:03:24 +0000 Certificate not after: Thu 11 Feb 2027 21:25:43 +0000 Subordinate resources: AS: 18771 AS: 36186 AS: 396422 AS: 400087 IP: 23.159.64.0/24 IP: 23.190.240.0/23 IP: 64.112.44.0/22 IP: 136.175.4.0/22 IP: 172.82.80.0/22 IP: 198.212.8.0/22 IP: 199.21.104.0/21 IP: 2604:81c0::/32 IP: 2606:3300::/32 IP: 2606:7fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:17:88:58:da:8e:2c:bd:ed:46:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 6 14:03:24 2025 GMT Not After : Feb 11 21:25:43 2027 GMT Subject: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:3b:d0:64:53:91:cc:6f:04:5a:32:67:04: 89:db:17:c0:6a:74:74:13:0d:e3:d9:aa:32:54:d6: 52:0c:76:e3:cb:2c:5e:ee:ac:9f:79:b5:82:fa:23: cf:f7:8f:cc:f7:42:a1:8e:ee:3e:3a:97:71:fc:78: 3d:49:36:69:5c:86:80:7f:b5:0f:17:db:18:33:d3: 41:8b:de:78:00:cc:2e:ce:13:56:9d:f4:6b:f7:03: 51:d5:dd:87:20:fc:e0:9a:03:79:62:6d:41:86:b0: 97:53:7a:a8:54:ac:71:1c:fe:0d:02:d6:e1:68:8b: 44:99:31:bf:7e:7b:9c:ef:a8:44:fe:3f:56:a8:33: 60:b1:fe:cb:15:b7:a9:f3:43:8b:3b:fd:ff:37:be: 3d:93:33:6d:2e:cb:2b:ec:b6:73:c2:1a:35:be:fa: d1:1c:8c:ef:21:0b:41:cb:87:78:e1:8a:29:d2:4f: 3e:95:e2:32:1e:93:7b:00:68:8b:a6:d5:1f:66:f8: c3:33:dc:7b:f3:e7:0e:ef:f3:ee:77:86:41:d4:0b: 40:52:b9:2a:7c:c3:7d:37:8d:e1:f7:e0:b4:70:c8: 41:b8:1f:08:ed:92:70:37:5b:17:fe:62:3e:87:84: c4:7e:8b:19:7f:ab:85:da:d7:36:18:78:c9:49:82: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.159.64.0/24 23.190.240.0/23 64.112.44.0/22 136.175.4.0/22 172.82.80.0/22 198.212.8.0/22 199.21.104.0/21 IPv6: 2604:81c0::/32 2606:3300::/32 2606:7fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18771 36186 396422 400087 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:51:2a:2c:ed:51:5a:d3:5a:c2:d5:13:8b:3e:71:f6:0c:00: ae:03:df:19:10:23:f0:2b:01:5c:b6:db:3b:a4:16:bd:ee:c4: 5a:79:15:0b:a3:87:a5:4f:4a:fb:41:28:f1:0b:9e:63:7f:a4: e5:ed:3f:48:2f:e6:e4:38:00:5a:c3:22:85:ed:4c:5a:5a:50: ee:ea:84:d4:ad:2d:1d:be:52:61:a5:41:1b:68:29:32:57:c7: 15:62:91:d8:d5:18:96:f1:e1:91:da:d2:eb:f9:10:92:f0:c0: a4:15:e5:1c:0e:35:1d:04:c9:a0:0b:49:ca:ff:a5:bb:b7:39: 15:7b:c4:c5:6b:3c:05:f8:cb:b1:d0:72:5e:0a:16:41:4c:ea: e6:96:f4:4b:ef:81:e8:2d:4b:ef:2c:1d:84:9e:43:eb:19:52: 20:e1:59:30:af:3e:68:bd:ed:f3:6b:bc:37:19:61:44:c8:54: 9e:7d:31:72:be:d4:17:c9:14:9d:8f:27:82:23:cb:79:52:b5: c1:59:5f:26:0a:06:6b:87:f8:89:c0:76:1e:18:77:93:69:39: df:84:cc:8a:1b:47:c7:de:f1:37:16:ca:4c:3b:ee:39:23:0b: 2e:66:96:be:7f:fa:d9:7f:e5:f2:c4:50:1b:7d:32:21:0f:b3: 38:91:35:b2 -----BEGIN CERTIFICATE----- MIIHWDCCBkCgAwIBAgIUAQ0Mn0MoWEjLF4hY2o4sve1GTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDIwNjE0MDMyNFoXDTI3MDIxMTIxMjU0M1owLzEtMCsGA1UEAxMk NWU2MzQ2ZjItNjZmYi00YWM5LThiMGMtMWY4YmJiZmM4NTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI870GRTkcxvBFoyZwSJ2xfAanR0Ew3j2aoy VNZSDHbjyyxe7qyfebWC+iPP94/M90Khju4+Opdx/Hg9STZpXIaAf7UPF9sYM9NB i954AMwuzhNWnfRr9wNR1d2HIPzgmgN5Ym1BhrCXU3qoVKxxHP4NAtbhaItEmTG/ fnuc76hE/j9WqDNgsf7LFbep80OLO/3/N749kzNtLssr7LZzwho1vvrRHIzvIQtB y4d44Yop0k8+leIyHpN7AGiLptUfZvjDM9x78+cO7/Pud4ZB1AtAUrkqfMN9N43h 9+C0cMhBuB8I7ZJwN1sX/mI+h4TEfosZf6uF2tc2GHjJSYIMgwIDAQABo4IEajCC BGYwHQYDVR0OBBYEFCZAiv0W24cRxtnGcGVKntzyu5NmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJmYzg1OTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzVlNjM0NmYyLTY2ZmItNGFjOS04 YjBjLTFmOGJiYmZjODU5My81ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJm Yzg1OTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwYAYIKwYBBQUH AQcBAf8EUTBPMDAEAgABMCoDBAAXn0ADBAEXvvADBAJAcCwDBAKIrwQDBAKsUlAD BALG1AgDBAPHFWgwGwQCAAIwFQMFACYEgcADBQAmBjMAAwUAJgZ/wDAoBggrBgEF BQcBCAEB/wQZMBegFTATAgJJUwIDAI1aAgMGDIYCAwYa1zBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9USos 7VFa01rC1ROLPnH2DACuA98ZECPwKwFctts7pBa97sRaeRULo4elT0r7QSjxC55j f6Tl7T9IL+bkOABawyKF7UxaWlDu6oTUrS0dvlJhpUEbaCkyV8cVYpHY1RiW8eGR 2tLr+RCS8MCkFeUcDjUdBMmgC0nK/6W7tzkVe8TFazwF+Mux0HJeChZBTOrmlvRL 74HoLUvvLB2EnkPrGVIg4Vkwrz5ove3za7w3GWFEyFSefTFyvtQXyRSdjyeCI8t5 UrXBWV8mCgZrh/iJwHYeGHeTaTnfhMyKG0fH3vE3FspMO+45IwsuZpa+f/rZf+Xy xFAbfTIhD7M4kTWy -----END CERTIFICATE-----Generated at Sat Apr 5 02:41:19 2025 by rpki-client