$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer File: 820e56e8-763b-4037-929e-b01c8d786e75.cer (raw, json) Hash identifier: D9Nrf09ldKpkaJ3VbS6Y9DRS+XtIgBEBz4PTPqeRU28= Subject key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858491509D05AAB49C66A148845E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 399275 IP: 165.140.116.0/22 IP: 167.253.64.0/22 IP: 172.81.56.0/22 IP: 2602:fcc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d0:5a:ab:49:c6:6a:14:88:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=820e56e8-763b-4037-929e-b01c8d786e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:99:33:8f:74:79:27:13:e9:84:c0:e5:36: ce:6d:ec:1b:8a:90:67:56:9a:76:c3:38:e9:56:58: 0a:09:b9:47:71:80:89:55:0b:b4:9f:37:af:e2:23: cd:6f:7f:7d:88:30:aa:a4:3b:aa:89:b9:09:0f:38: c5:63:3c:8f:ad:62:01:b7:aa:84:bc:bd:2e:e3:72: cc:76:ec:63:b7:a2:85:6c:df:28:c3:a0:fe:b1:66: c3:13:0a:0c:8a:ce:94:be:46:db:a6:3d:26:ab:c4: c2:d0:f1:03:8c:12:3e:9b:e2:ea:91:62:e3:73:2d: b0:fe:4f:81:e3:21:9b:48:64:2e:3c:a8:33:da:d2: a1:36:72:a7:39:3f:44:97:b0:97:37:aa:53:a1:5c: 84:00:38:92:ab:b9:82:2e:e2:bd:35:ee:90:5e:0b: a5:5e:0d:b7:3a:01:fb:99:e7:4c:8a:6c:ef:33:21: e6:45:ef:14:1a:e9:01:38:c6:39:ea:ee:87:a4:8c: d9:e1:e8:78:b2:39:ea:9a:15:40:38:70:9e:75:24: 4e:d1:47:40:09:49:2e:d3:15:a2:6a:5d:3f:c4:2e: 76:37:f2:2d:d4:82:81:69:b1:b0:7b:4c:2a:b6:f6: 75:d6:f0:dc:02:2b:f2:d8:77:67:5c:49:cd:ac:ea: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 165.140.116.0/22 167.253.64.0/22 172.81.56.0/22 IPv6: 2602:fcc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399275 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:02:7d:c0:e9:d9:ec:bd:83:d3:0c:85:0e:f8:88:cb:be:49: 68:30:a2:06:a7:40:1a:7a:7b:1a:72:d9:0e:bd:96:47:43:a5: b9:18:43:48:a5:ad:e8:73:46:25:08:cd:69:53:f8:5d:ee:92: c4:dc:77:e9:af:5f:fd:f4:c7:0c:a3:07:cd:d9:3a:82:1d:34: 77:d5:30:58:c1:fd:2f:6e:6d:a3:e2:84:b8:89:7a:ca:72:f8: 95:7d:a4:a9:6c:49:9b:a1:ad:a2:72:6e:07:f5:10:0a:5a:b3: 11:da:81:c9:01:b1:2e:e9:48:a0:b0:40:ee:ef:96:29:f2:07: 1f:af:98:75:b1:fc:46:bb:6f:44:15:8c:82:e8:a5:cc:55:71: a6:4e:0a:6b:56:c0:fb:91:ff:dc:a7:47:f0:33:18:ee:53:f1: f5:7f:4f:8c:7d:71:52:a8:72:f0:5f:33:fd:80:53:75:c2:a0: bc:a2:37:80:ce:f1:37:63:c3:f6:a1:e8:92:7e:c8:1d:c1:19: 19:2e:7c:c4:78:42:8c:57:d4:7b:74:f7:f2:cd:56:46:bb:26: 77:4e:26:1f:87:4b:30:47:60:e8:ae:64:92:d3:66:6e:da:6a: cd:f1:c7:5c:d6:59:81:0e:db:92:4e:37:76:38:dc:46:eb:e3: 78:24:5b:89 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEkVCdBaq0nGahSIReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk ODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAiZM490eScT6YTA5TbObewbipBnVpp2wzjp VlgKCblHcYCJVQu0nzev4iPNb399iDCqpDuqibkJDzjFYzyPrWIBt6qEvL0u43LM duxjt6KFbN8ow6D+sWbDEwoMis6Uvkbbpj0mq8TC0PEDjBI+m+LqkWLjcy2w/k+B 4yGbSGQuPKgz2tKhNnKnOT9El7CXN6pToVyEADiSq7mCLuK9Ne6QXgulXg23OgH7 medMimzvMyHmRe8UGukBOMY56u6HpIzZ4eh4sjnqmhVAOHCedSRO0UdACUku0xWi al0/xC52N/It1IKBabGwe0wqtvZ11vDcAivy2HdnXEnNrOrqfwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFD99Nd6lbNoO7G8YbhEDvGyH1tMtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzgyMGU1NmU4LTc2M2ItNDAzNy05 MjllLWIwMWM4ZDc4NmU3NS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3 ODZlNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKljHQDBAKn/UADBAKsUTgwDQQCAAIwBwMFACYC /MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBherMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADMCfcDp2ey9 g9MMhQ74iMu+SWgwoganQBp6expy2Q69lkdDpbkYQ0ilrehzRiUIzWlT+F3uksTc d+mvX/30xwyjB83ZOoIdNHfVMFjB/S9ubaPihLiJespy+JV9pKlsSZuhraJybgf1 EApasxHagckBsS7pSKCwQO7vlinyBx+vmHWx/Ea7b0QVjILopcxVcaZOCmtWwPuR /9ynR/AzGO5T8fV/T4x9cVKocvBfM/2AU3XCoLyiN4DO8Tdjw/ah6JJ+yB3BGRku fMR4QoxX1Ht09/LNVka7JndOJh+HSzBHYOiuZJLTZm7aas3xx1zWWYEO25JON3Y4 3Ebr43gkW4k= -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:12 2025 by rpki-client