$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer File: c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer (raw, json) Hash identifier: OThtZqyEMS6oz2RMJ3G9gBbLSJ3tEtbkLS0Ls8Givzo= Subject key identifier: 72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858486D191D5DF8C2B67CD21B49C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jan 2025 22:00:36 +0000 Certificate not after: Mon 16 Nov 2026 19:39:31 +0000 Subordinate resources: AS: 22519 AS: 36224 AS: 62778 IP: 162.221.96.0/22 IP: 192.8.0.0/19 IP: 192.8.44.0 -- 192.8.115.255 IP: 192.8.120.0 -- 192.8.159.255 IP: 192.8.177.0 -- 192.8.178.255 IP: 192.8.181.0/24 IP: 192.8.183.0/24 IP: 199.168.25.0/24 IP: 2620:10c:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:19:1d:5d:f8:c2:b6:7c:d2:1b:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 3 22:00:36 2025 GMT Not After : Nov 16 19:39:31 2026 GMT Subject: CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:4d:c3:55:58:b5:db:71:ef:66:0b:50:29: 61:82:f5:0b:f1:11:2c:c1:ab:fa:af:74:f7:c2:28: 50:bf:ca:4b:10:2b:3c:1e:ef:46:92:a5:6e:d1:d3: da:d6:9e:e3:db:2c:56:8e:8e:91:7a:c6:25:fd:6e: 12:6a:66:7f:b3:dd:b4:54:77:d1:fd:7b:fa:4d:80: 1b:bd:0e:93:1c:94:85:d2:8f:a4:1b:7b:71:2d:d7: 87:fc:ec:d0:bd:56:68:7c:a5:5c:08:80:ea:24:60: 61:02:d9:d2:cd:9f:a7:d2:ef:94:b3:a2:44:9a:b7: 99:bd:b6:7a:ef:00:9f:e7:a8:af:70:e3:4b:c0:89: ed:5b:03:45:d8:2e:38:1b:95:61:1b:b2:d5:9f:e5: be:76:eb:06:c7:63:4c:30:52:5a:67:43:8f:a8:06: 37:95:92:14:bd:13:c0:f0:17:59:09:76:46:91:31: ec:45:c8:09:ab:95:d6:15:0a:5d:42:74:45:9f:3e: fb:67:f7:7a:1d:d0:22:27:df:7a:f3:35:16:a7:fd: fc:da:b0:06:3e:d9:c5:49:48:b8:b0:ce:f1:e1:ba: a3:69:10:47:f6:70:14:e0:46:8b:b7:d4:3b:98:89: 80:3f:6d:4e:3b:94:53:17:c0:39:85:2e:a3:4f:55: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 162.221.96.0/22 192.8.0.0/19 192.8.44.0-192.8.115.255 192.8.120.0-192.8.159.255 192.8.177.0-192.8.178.255 192.8.181.0/24 192.8.183.0/24 199.168.25.0/24 IPv6: 2620:10c:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22519 36224 62778 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5e:3f:dd:53:1e:f7:ec:83:95:6f:75:69:34:5a:7d:f8:b6: a1:46:bc:0c:91:b9:a8:df:2f:08:8c:2b:16:5b:5d:99:b3:30: b2:67:0e:36:5d:d6:4b:a5:8c:68:ac:9d:6a:f4:6c:4b:02:27: 23:f1:f2:5b:72:de:a4:2d:a2:66:b7:80:19:5d:78:e1:bc:66: 64:c9:14:59:dc:28:8f:b9:6e:ee:cb:42:9e:af:92:0d:8b:73: 84:da:af:31:32:13:f0:b7:4f:35:39:28:1b:21:83:84:77:d6: 27:54:03:98:8d:37:81:86:98:c6:3f:4e:5e:db:6e:6f:f5:47: 6f:7c:89:fc:1b:34:40:ab:6c:2f:91:8e:d8:8e:57:1d:44:0c: 09:17:bb:29:14:41:43:72:93:b5:c4:61:e6:99:65:2a:12:ad: 18:08:ce:c9:c9:07:50:c8:f1:fe:27:98:25:60:31:4b:3f:a2: f9:8c:b0:f8:15:d1:24:c9:87:1e:6f:5b:3e:63:bd:6d:54:d8: c5:9c:ea:06:42:eb:99:26:cd:e6:3a:30:ec:d2:84:6e:fe:6c: fe:e2:f8:02:37:13:a2:df:43:02:fa:dd:98:c3:eb:60:21:37: 6f:78:36:16:aa:05:81:e6:d6:b0:f2:16:c6:6c:b6:7c:b4:eb: 8c:e4:ea:5f -----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWEhtGR1d+MK2fNIbScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDEwMzIyMDAzNloXDTI2MTExNjE5MzkzMVowLzEtMCsGA1UEAxMk YzNhZDRmMmYtODdjMy00MzZlLWIwZTUtMzUzMmUyMTA5ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt65Nw1VYtdtx72YLUClhgvUL8REswav6r3T3 wihQv8pLECs8Hu9GkqVu0dPa1p7j2yxWjo6ResYl/W4SamZ/s920VHfR/Xv6TYAb vQ6THJSF0o+kG3txLdeH/OzQvVZofKVcCIDqJGBhAtnSzZ+n0u+Us6JEmreZvbZ6 7wCf56ivcONLwIntWwNF2C44G5VhG7LVn+W+dusGx2NMMFJaZ0OPqAY3lZIUvRPA 8BdZCXZGkTHsRcgJq5XWFQpdQnRFnz77Z/d6HdAiJ9968zUWp/382rAGPtnFSUi4 sM7x4bqjaRBH9nAU4EaLt9Q7mImAP21OO5RTF8A5hS6jT1WcEwIDAQABo4IEdzCC BHMwHQYDVR0OBBYEFHK/f6JJGdAa09fGJ7XRuf3P2tOZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9j M2FkNGYyZi04N2MzLTQzNmUtYjBlNS0zNTMyZTIxMDlmOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2MzYWQ0ZjJmLTg3YzMtNDM2ZS1i MGU1LTM1MzJlMjEwOWY5Zi9jM2FkNGYyZi04N2MzLTQzNmUtYjBlNS0zNTMyZTIx MDlmOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwcgYIKwYBBQUH AQcBAf8EYzBhME4EAgABMEgDBAKi3WADBAXACAAwDAMEAsAILAMEAsAIcDAMAwQD wAh4AwQFwAiAMAwDBADACLEDBADACLIDBADACLUDBADACLcDBADHqBkwDwQCAAIw CQMHBCYgAQxgADAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgJX9wIDAI2AAgMA9Tow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARl4/3VMe9+yDlW91aTRaffi2oUa8DJG5qN8vCIwrFltdmbMwsmcO Nl3WS6WMaKydavRsSwInI/HyW3LepC2iZreAGV144bxmZMkUWdwoj7lu7stCnq+S DYtzhNqvMTIT8LdPNTkoGyGDhHfWJ1QDmI03gYaYxj9OXttub/VHb3yJ/Bs0QKts L5GO2I5XHUQMCRe7KRRBQ3KTtcRh5pllKhKtGAjOyckHUMjx/ieYJWAxSz+i+Yyw +BXRJMmHHm9bPmO9bVTYxZzqBkLrmSbN5jow7NKEbv5s/uL4AjcTot9DAvrdmMPr YCE3b3g2FqoFgebWsPIWxmy2fLTrjOTqXw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:18:53 2025 by rpki-client