$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer File: 5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer (raw, json) Hash identifier: xHX1izyLXJIGMTkPrpbzA6BisL1rjDWc25HVUzrV6x8= Subject key identifier: 1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584930D6DCCC2C940A2CF593B9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Mar 2025 00:45:33 +0000 Certificate not after: Fri 18 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 14936 IP: 69.5.48.0/22 IP: 161.129.62.0/24 IP: 2620:30:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:d6:dc:cc:2c:94:0a:2c:f5:93:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 15 00:45:33 2025 GMT Not After : Jun 18 00:45:33 2027 GMT Subject: CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:61:ca:6f:c0:77:6a:6a:f7:66:2a:4a:5f: 15:1e:ba:85:c2:80:ae:ba:13:da:b6:7b:94:45:54: 2f:ab:ae:cf:24:2a:12:60:c7:e4:7e:9b:d4:7c:bd: b1:25:e9:51:b0:f4:b2:2b:83:cc:51:68:f7:e4:ae: 1f:27:0d:d3:8e:5d:d7:27:7d:01:8d:a6:9f:f5:d0: 3a:e3:18:16:8c:62:71:54:98:15:fd:82:44:6b:39: 21:42:7d:e5:f8:ed:0f:f9:a3:7c:0a:cd:fa:83:65: ac:d2:c5:ec:b3:48:3f:7a:92:85:2d:5f:e7:24:26: f0:20:ef:b3:dd:ed:28:51:10:15:2b:a7:85:18:55: 81:f5:de:1c:37:0a:60:42:eb:ba:12:68:f5:27:bf: 96:af:b2:65:b6:e3:68:05:18:bf:8f:5e:42:ad:51: 4b:ce:52:9f:f7:6e:a6:30:3c:63:29:3a:d4:59:a7: fd:a6:2d:c0:9a:d9:f9:10:b2:33:b3:18:6e:97:4a: 30:fc:40:0e:d4:1c:8d:eb:74:cd:47:4f:e1:0f:d1: 75:ca:e4:a2:18:42:c7:e2:1a:c0:24:5b:f7:84:0e: cb:2b:16:6f:51:44:fa:29:a9:ee:2f:2a:b7:08:75: 2d:b3:72:f0:69:db:38:b9:68:ee:3f:29:66:5e:c0: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 69.5.48.0/22 161.129.62.0/24 IPv6: 2620:30:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:38:16:65:be:de:f4:d6:b6:6e:9c:3a:be:63:70:a7:d9:4f: b2:3f:b3:7a:56:04:40:f8:c7:ba:53:96:7d:36:f1:a3:f0:79: 3e:1d:65:c0:91:42:f0:1a:48:2a:50:6b:d1:17:47:1d:ae:f7: 32:dc:c5:72:bf:28:09:3f:da:9b:a2:82:9c:eb:2e:38:1e:fe: 27:ba:d9:46:fe:8d:04:ab:43:46:9c:83:d2:c6:69:19:10:22: 31:6e:dc:7e:67:96:d8:93:5a:ab:a6:74:43:6d:c1:b8:a9:62: b6:55:a2:f3:aa:90:a9:b8:f6:e7:1e:68:e6:33:02:8a:2d:d2: 2a:ce:d4:f5:b7:e4:8d:cc:16:d3:5d:dc:62:49:c8:30:04:10: a2:1e:f1:95:7c:80:34:5f:80:74:2c:77:55:59:31:d4:ac:fa: 5d:3f:8a:18:ef:ad:62:83:da:a3:51:db:a4:77:6f:35:98:23: 36:0c:0a:88:9f:f3:b7:7c:1e:30:94:d1:c9:da:30:68:6a:f5: 73:67:ee:94:75:c0:b3:93:e6:41:3f:e6:7e:3f:a8:51:b2:1c: 98:f2:36:09:f4:4b:e0:5e:7f:4e:83:44:08:04:f9:cc:f0:96: 5b:d8:7c:cc:9f:74:78:6e:4a:cb:93:e7:5b:2b:37:b1:d4:a1: 7b:3a:dd:e5 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEkw1tzMLJQKLPWTucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxNTAwNDUzM1oXDTI3MDYxODAwNDUzM1owLzEtMCsGA1UEAxMk NTc4MWE3MWQtZDVlYy00NjAxLThmNDMtNTkwMmE5N2JhNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGdhym/Ad2pq92YqSl8VHrqFwoCuuhPatnuU RVQvq67PJCoSYMfkfpvUfL2xJelRsPSyK4PMUWj35K4fJw3Tjl3XJ30Bjaaf9dA6 4xgWjGJxVJgV/YJEazkhQn3l+O0P+aN8Cs36g2Ws0sXss0g/epKFLV/nJCbwIO+z 3e0oURAVK6eFGFWB9d4cNwpgQuu6Emj1J7+Wr7JltuNoBRi/j15CrVFLzlKf926m MDxjKTrUWaf9pi3Amtn5ELIzsxhul0ow/EAO1ByN63TNR0/hD9F1yuSiGELH4hrA JFv3hA7LKxZvUUT6KanuLyq3CHUts3Lwads4uWjuPylmXsCmSwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFB47s6SEmA6ABfxePUJluXEceWrQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 NzgxYTcxZC1kNWVjLTQ2MDEtOGY0My01OTAyYTk3YmE2ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU3ODFhNzFkLWQ1ZWMtNDYwMS04 ZjQzLTU5MDJhOTdiYTZlZi81NzgxYTcxZC1kNWVjLTQ2MDEtOGY0My01OTAyYTk3 YmE2ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAJFBTADBAChgT4wDwQCAAIwCQMHACYgADBgADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgI6WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvOBZlvt701rZunDq+ Y3Cn2U+yP7N6VgRA+Me6U5Z9NvGj8Hk+HWXAkULwGkgqUGvRF0cdrvcy3MVyvygJ P9qbooKc6y44Hv4nutlG/o0Eq0NGnIPSxmkZECIxbtx+Z5bYk1qrpnRDbcG4qWK2 VaLzqpCpuPbnHmjmMwKKLdIqztT1t+SNzBbTXdxiScgwBBCiHvGVfIA0X4B0LHdV WTHUrPpdP4oY761ig9qjUdukd281mCM2DAqIn/O3fB4wlNHJ2jBoavVzZ+6UdcCz k+ZBP+Z+P6hRshyY8jYJ9EvgXn9Og0QIBPnM8JZb2HzMn3R4bkrLk+dbKzex1KF7 Ot3l -----END CERTIFICATE-----Generated at Fri Apr 4 16:26:00 2025 by rpki-client