$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer File: 83451658-cf40-47b6-b4dc-03c0565c4a64.cer (raw, json) Hash identifier: fRBFv/+plTuCjqgdj96oQUDs5x6TMUUSaH1TsS10xck= Subject key identifier: 2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584922E17441ED2890B210276080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 00:45:33 +0000 Certificate not after: Sun 13 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 40345 IP: 204.44.138.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:22:e1:74:41:ed:28:90:b2:10:27:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 10 00:45:33 2025 GMT Not After : Jun 13 00:45:33 2027 GMT Subject: CN=83451658-cf40-47b6-b4dc-03c0565c4a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:70:e6:b7:da:0a:50:60:20:db:d8:9f:6d: 74:c9:2e:65:71:98:e3:c9:c3:0d:8e:63:bb:cf:cc: 94:f6:6e:f7:61:b5:9b:a5:a7:2b:14:13:47:08:5f: 15:28:02:ba:89:0f:21:d4:cd:9f:52:04:76:f3:03: 15:36:93:1f:ac:e1:56:29:22:34:a2:e8:96:68:49: 1b:5c:89:c8:f4:60:65:d9:2d:9e:91:17:c2:8b:97: 2d:89:d4:8e:f6:7d:ed:f1:51:eb:4a:1f:d3:b9:dd: cf:86:fa:9c:e6:96:97:c1:ec:70:6a:17:00:e1:c9: c8:45:d8:68:50:8b:8e:f7:4d:2b:07:c2:f0:fc:a8: 09:a0:a4:76:1e:3d:26:b1:8b:38:59:ba:1f:42:b3: 40:c9:c6:e5:53:c0:20:ec:e1:79:3d:7e:b3:2a:07: c0:8c:5e:cb:cc:64:f6:7f:f0:75:34:4e:15:8b:8b: 9b:bb:00:50:29:49:ab:6d:95:50:c0:8c:78:7a:5e: 0d:13:9b:8c:69:9b:66:ba:68:9f:b9:47:41:51:50: f0:da:b4:5d:3d:4f:e8:76:47:44:93:cf:fc:71:b9: e2:67:d0:53:a3:cd:6c:55:cb:8c:3d:18:73:f5:10: 1d:1f:41:ec:02:9c:e8:6f:a7:e0:f7:28:94:bc:00: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.44.138.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40345 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f0:55:ee:8f:86:4d:76:97:a8:be:57:fa:34:b3:4e:72:f0: 7b:65:6c:b8:99:f8:82:a0:f8:ae:60:4a:d0:f3:37:65:2c:dc: 79:96:e4:99:05:5a:84:96:5f:cc:45:7a:16:78:76:4a:1d:cd: d6:6d:08:05:28:db:91:f1:7a:c6:f4:58:ac:4f:e3:dc:e7:e0: c5:ca:ba:ca:9e:b0:05:db:af:af:2e:4f:35:98:5e:7d:e6:db: 33:08:e3:de:bf:3c:07:5d:0f:90:a8:92:10:9a:3a:db:12:1f: b7:23:37:83:63:07:27:38:0a:b8:3d:0b:51:6d:72:3d:a9:f4: 71:06:57:73:ae:8f:7d:3f:36:cc:5e:ea:1f:c5:49:f5:9a:86: 49:10:f1:51:cc:e1:a2:34:4a:ab:54:bb:4c:22:ac:e2:ff:34: 57:60:58:e0:86:4b:0e:b3:f2:bc:33:2f:33:bb:9d:85:47:fa: c3:44:a5:fa:bb:0a:99:9b:02:e6:5b:65:f6:2e:0f:12:68:a5: 64:bf:91:67:37:07:43:2c:c0:66:d5:f3:72:15:a9:03:34:80: 07:02:fd:11:29:1e:2a:c0:48:95:27:6c:9b:13:f4:26:b3:04: 55:56:e1:19:5a:e3:3c:61:ac:eb:7b:ac:ed:6e:b8:09:fa:cb: b3:4f:a3:74 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEki4XRB7SiQshAnYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxMDAwNDUzM1oXDTI3MDYxMzAwNDUzM1owLzEtMCsGA1UEAxMk ODM0NTE2NTgtY2Y0MC00N2I2LWI0ZGMtMDNjMDU2NWM0YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKxw5rfaClBgINvYn210yS5lcZjjycMNjmO7 z8yU9m73YbWbpacrFBNHCF8VKAK6iQ8h1M2fUgR28wMVNpMfrOFWKSI0ouiWaEkb XInI9GBl2S2ekRfCi5ctidSO9n3t8VHrSh/Tud3Phvqc5paXwexwahcA4cnIRdho UIuO900rB8Lw/KgJoKR2Hj0msYs4WbofQrNAycblU8Ag7OF5PX6zKgfAjF7LzGT2 f/B1NE4Vi4ubuwBQKUmrbZVQwIx4el4NE5uMaZtmumifuUdBUVDw2rRdPU/odkdE k8/8cbniZ9BTo81sVcuMPRhz9RAdH0HsApzob6fg9yiUvACfLwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFC0ZWejJVhsy3qXQDLriCaLNJPOAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 MzQ1MTY1OC1jZjQwLTQ3YjYtYjRkYy0wM2MwNTY1YzRhNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzgzNDUxNjU4LWNmNDAtNDdiNi1i NGRjLTAzYzA1NjVjNGE2NC84MzQ1MTY1OC1jZjQwLTQ3YjYtYjRkYy0wM2MwNTY1 YzRhNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMLIowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ2ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEvwVe6Phk12l6i+V/o0s05y8HtlbLiZ+IKg+K5gStDzN2Us 3HmW5JkFWoSWX8xFehZ4dkodzdZtCAUo25Hxesb0WKxP49zn4MXKusqesAXbr68u TzWYXn3m2zMI496/PAddD5CokhCaOtsSH7cjN4NjByc4Crg9C1Ftcj2p9HEGV3Ou j30/Nsxe6h/FSfWahkkQ8VHM4aI0SqtUu0wirOL/NFdgWOCGSw6z8rwzLzO7nYVH +sNEpfq7CpmbAuZbZfYuDxJopWS/kWc3B0MswGbV83IVqQM0gAcC/REpHirASJUn bJsT9CazBFVW4Rla4zxhrOt7rO1uuAn6y7NPo3Q= -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:32 2025 by rpki-client