$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer File: 1add3b23-5fb0-4412-be17-98450d352516.cer (raw, json) Hash identifier: tux931KH5mjB/fotxJHfOrkBYWWjQctc93dwftPPauc= Subject key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858492E0C2E9B3F3593F2084BF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 00:45:33 +0000 Certificate not after: Thu 17 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 11100 AS: 17054 AS: 53976 IP: 64.72.128.0/19 IP: 64.255.240.0/20 IP: 66.11.0.0/19 IP: 66.159.64.0/19 IP: 66.181.64.0/19 IP: 66.230.64.0/20 IP: 69.7.96.0/20 IP: 206.41.192.0/19 IP: 206.183.0.0/19 IP: 206.210.64.0/19 IP: 206.223.22.0/24 IP: 207.54.128.0/18 IP: 207.114.0.0/17 IP: 208.40.128.0 -- 208.40.207.255 IP: 208.40.224.0/19 IP: 209.114.128.0/18 IP: 209.143.64.0/18 IP: 209.166.128.0/18 IP: 209.190.128.0/18 IP: 209.221.0.0/19 IP: 216.37.0.0/18 IP: 216.82.64.0/18 IP: 216.130.0.0/19 IP: 216.151.64.0/18 IP: 216.183.160.0/19 IP: 216.230.96.0/19 IP: 216.239.240.0/20 IP: 2607:f4d0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:0c:2e:9b:3f:35:93:f2:08:4b:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 14 00:45:33 2025 GMT Not After : Jun 17 00:45:33 2027 GMT Subject: CN=1add3b23-5fb0-4412-be17-98450d352516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:68:79:ae:4c:81:3e:5d:53:3f:ea:1d:2b: 2a:d0:4f:a3:06:e3:f1:b9:fe:ee:c7:6a:bd:f4:f1: c5:35:3f:c6:bf:c8:63:7d:45:12:fe:11:0b:8b:f3: ae:e0:bb:e4:9c:9f:d6:e8:92:e2:68:e9:6a:30:62: d2:21:6b:d5:23:58:58:91:61:8f:79:17:d9:66:f7: e7:8a:dc:5c:c2:5d:a9:85:98:6d:cb:4f:f0:2f:8c: a0:4b:bd:94:f5:0c:34:72:0f:90:57:66:41:37:62: 21:2d:3b:a0:30:30:3f:9a:ee:77:2a:e5:22:ea:ff: 09:5d:ec:12:e5:58:41:5b:3b:4e:1b:5f:c9:51:65: a9:65:7d:0f:0d:a2:88:3e:19:ef:6d:b1:64:cb:84: 02:b5:1b:32:97:38:47:63:e4:86:18:79:c6:14:90: b7:a8:c1:b9:59:c9:37:7c:b4:39:4d:29:8f:8f:f9: 69:ab:2d:b4:4a:63:38:36:97:4f:b7:96:26:36:46: 84:55:d4:4b:9a:16:b3:df:d3:94:72:6a:bd:ca:52: 74:88:fe:e7:5d:d0:09:17:5f:fd:61:3c:18:58:41: 57:63:38:a3:fd:6d:47:a4:23:b9:65:2a:53:ab:43: 99:48:97:27:b7:6b:24:27:27:a8:4b:e7:51:c6:94: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.72.128.0/19 64.255.240.0/20 66.11.0.0/19 66.159.64.0/19 66.181.64.0/19 66.230.64.0/20 69.7.96.0/20 206.41.192.0/19 206.183.0.0/19 206.210.64.0/19 206.223.22.0/24 207.54.128.0/18 207.114.0.0/17 208.40.128.0-208.40.207.255 208.40.224.0/19 209.114.128.0/18 209.143.64.0/18 209.166.128.0/18 209.190.128.0/18 209.221.0.0/19 216.37.0.0/18 216.82.64.0/18 216.130.0.0/19 216.151.64.0/18 216.183.160.0/19 216.230.96.0/19 216.239.240.0/20 IPv6: 2607:f4d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11100 17054 53976 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9a:5e:54:07:bb:f0:a9:34:6b:33:d3:24:aa:09:51:63:64: fb:e3:c4:14:07:ae:96:6a:52:37:dc:27:c5:17:51:81:fb:30: be:2c:b6:93:37:2b:7e:fd:e5:28:e1:e3:a4:56:e1:3b:33:a6: df:14:7e:52:92:0c:b8:60:a6:66:23:77:fa:db:1d:ca:a9:d8: b1:ce:75:5f:58:6c:8a:22:02:9b:35:95:12:ca:30:88:cd:c1: e0:6c:6a:d3:c0:01:cc:45:30:fd:2f:af:f6:f4:83:a1:d0:f4: ca:5c:ff:9f:1e:67:88:73:9c:09:16:7b:59:fe:10:91:91:22: 0e:d5:27:d9:df:f4:76:16:b0:d9:ec:b7:9a:b4:66:68:e1:46: 8e:32:77:dc:ae:43:68:79:61:f4:4f:bd:db:31:e8:95:7e:27: 5f:72:8e:2c:24:a1:e2:64:8f:74:be:59:6e:95:47:e9:77:6d: 46:56:92:7e:2f:44:ae:95:cc:d8:03:8a:52:7d:fd:bc:9a:e7: d2:da:1a:fa:e1:24:86:0e:6a:d3:51:8a:17:46:04:ba:36:bc: bf:e3:2d:ce:4d:68:19:f6:39:8f:9a:4c:06:91:5b:61:26:eb: 1c:67:33:26:50:fe:ce:7a:c7:ff:cc:81:5a:11:f8:53:d9:8a: 60:f1:f6:f4 -----BEGIN CERTIFICATE----- MIIHyTCCBrGgAwIBAgIUAQ0Mn0MoWEkuDC6bPzWT8ghL8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxNDAwNDUzM1oXDTI3MDYxNzAwNDUzM1owLzEtMCsGA1UEAxMk MWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUyNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Voea5MgT5dUz/qHSsq0E+jBuPxuf7ux2q9 9PHFNT/Gv8hjfUUS/hELi/Ou4LvknJ/W6JLiaOlqMGLSIWvVI1hYkWGPeRfZZvfn itxcwl2phZhty0/wL4ygS72U9Qw0cg+QV2ZBN2IhLTugMDA/mu53KuUi6v8JXewS 5VhBWztOG1/JUWWpZX0PDaKIPhnvbbFky4QCtRsylzhHY+SGGHnGFJC3qMG5Wck3 fLQ5TSmPj/lpqy20SmM4NpdPt5YmNkaEVdRLmhaz39OUcmq9ylJ0iP7nXdAJF1/9 YTwYWEFXYzij/W1HpCO5ZSpTq0OZSJcnt2skJyeoS+dRxpRicQIDAQABo4IE2zCC BNcwHQYDVR0OBBYEFN/WqzUIxGejaY5LXeqHeMB6HY4mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFhZGQzYjIzLTVmYjAtNDQxMi1i ZTE3LTk4NDUwZDM1MjUxNi8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQz NTI1MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwgdYGCCsGAQUF BwEHAQH/BIHGMIHDMIGxBAIAATCBqgMEBUBIgAMEBED/8AMEBUILAAMEBUKfQAME BUK1QAMEBELmQAMEBEUHYAMEBc4pwAMEBc63AAMEBc7SQAMEAM7fFgMEBs82gAME B89yADAMAwQH0CiAAwQE0CjAAwQF0CjgAwQG0XKAAwQG0Y9AAwQG0aaAAwQG0b6A AwQF0d0AAwQG2CUAAwQG2FJAAwQF2IIAAwQG2JdAAwQF2LegAwQF2OZgAwQE2O/w MA0EAgACMAcDBQAmB/TQMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAitcAgJCngID ANLYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGKaXlQHu/CpNGsz0ySqCVFjZPvjxBQHrpZqUjfcJ8UXUYH7 ML4stpM3K3795Sjh46RW4Tszpt8UflKSDLhgpmYjd/rbHcqp2LHOdV9YbIoiAps1 lRLKMIjNweBsatPAAcxFMP0vr/b0g6HQ9Mpc/58eZ4hznAkWe1n+EJGRIg7VJ9nf 9HYWsNnst5q0ZmjhRo4yd9yuQ2h5YfRPvdsx6JV+J19yjiwkoeJkj3S+WW6VR+l3 bUZWkn4vRK6VzNgDilJ9/bya59LaGvrhJIYOatNRihdGBLo2vL/jLc5NaBn2OY+a TAaRW2Em6xxnMyZQ/s56x//MgVoR+FPZimDx9vQ= -----END CERTIFICATE-----Generated at Fri Apr 4 19:33:59 2025 by rpki-client