$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.cer File: 8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.cer (raw, json) Hash identifier: mm9+ZQBh3h+VBb/PZwLRkeFF0mywA/5O5Uuf/pfi1X0= Subject key identifier: BC:5E:2C:CF:11:F9:9B:A5:23:D0:EE:7F:1F:7F:73:FB:E0:A8:60:76 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584943BF4AD958554A9726596000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 19:18:25 +0000 Certificate not after: Wed 17 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 19818 IP: 50.20.96.0/20 IP: 64.239.104.0/22 IP: 66.56.64.0/20 IP: 198.59.136.0/22 IP: 216.120.132.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:bf:4a:d9:58:55:4a:97:26:59:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 21 19:18:25 2025 GMT Not After : Feb 17 01:45:33 2027 GMT Subject: CN=8c8dc77f-caa8-4bb5-be39-fe8ad71f8765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:50:39:c9:5b:ac:d3:06:7f:96:52:e2:28: ed:58:29:6c:21:bf:85:1f:6a:3b:fe:86:8b:1c:e5: b7:32:a2:c0:7b:09:e8:df:66:7e:dc:f7:6a:7c:d4: 35:40:13:d3:ff:a9:38:c8:46:e8:42:b1:d3:1a:6e: 01:35:0d:db:6f:74:71:77:fa:ba:79:70:64:1e:58: b3:10:1b:31:8e:be:c1:f1:b8:ba:6f:39:23:d9:ac: 60:a7:e3:ca:fc:f2:34:04:d6:ed:9c:3e:db:1c:34: 68:3c:1d:f4:a9:a1:ed:91:93:e1:20:34:0f:74:db: f4:11:5c:47:8c:90:f9:63:fb:af:31:43:a7:78:63: cc:44:20:67:42:20:78:0a:b2:47:6c:fe:74:54:7b: 9e:78:ef:3b:98:38:e9:2c:05:ab:f2:06:8d:7f:0d: ba:c7:f3:9a:78:a4:c4:da:6d:22:d8:74:ff:9e:e1: d3:6e:1a:98:e3:dc:af:dd:6e:dd:60:7d:c0:0f:86: fe:f8:49:00:d0:92:bd:26:f3:77:e8:5a:e7:db:54: 32:f0:72:ee:4b:50:33:16:8f:32:1c:ef:58:c6:fa: 3b:96:f3:5c:9f:b1:2b:5c:b9:e8:39:36:ce:bf:6a: a4:9c:ab:cf:f1:fa:5f:b2:dc:61:31:9b:a0:6d:0b: b2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5E:2C:CF:11:F9:9B:A5:23:D0:EE:7F:1F:7F:73:FB:E0:A8:60:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 50.20.96.0/20 64.239.104.0/22 66.56.64.0/20 198.59.136.0/22 216.120.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19818 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:41:51:2a:e0:6d:21:bb:87:91:5b:2a:1d:d7:2f:63:24:fb: 02:6b:1c:b2:9e:51:06:78:52:eb:d9:0f:d7:71:ef:d8:87:f5: 45:68:8f:81:65:6a:03:df:0b:37:7d:4f:05:78:81:10:3e:d7: 28:f2:4e:00:27:9a:2a:a0:44:8e:07:f1:31:64:df:b5:46:9c: db:c5:49:dc:35:fb:68:0a:f0:59:22:ca:bf:af:0f:09:d0:a9: 90:cf:89:51:1b:d1:0d:ba:f2:70:8e:23:5a:f5:bb:7f:f7:a1: a8:92:3b:29:bf:43:17:b4:19:04:13:0c:b9:66:e1:15:d2:0f: c0:9e:e8:09:64:25:dd:f5:fe:c5:20:42:d8:35:15:6b:18:09: a6:dc:49:3b:39:f5:3b:a2:f0:68:17:af:e7:10:ac:d6:7a:c5: 9b:bf:c7:0d:29:9a:37:36:fd:66:27:1f:24:f4:53:1a:8b:ce: e2:7f:bd:f1:62:11:99:be:cb:a5:c2:23:c8:2d:6f:f9:6e:24: 6e:b0:0f:08:60:d9:b7:15:b9:7e:87:0a:d0:70:01:17:23:1a: 52:ed:4e:53:43:ea:c0:89:97:c1:42:aa:c9:ab:c7:22:9b:d7: 4e:06:75:f4:a2:69:5a:1c:d9:06:53:de:ce:ee:67:c6:12:35: 21:b7:0a:fa -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWElDv0rZWFVKlyZZYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMyMTE5MTgyNVoXDTI3MDIxNzAxNDUzM1owLzEtMCsGA1UEAxMk OGM4ZGM3N2YtY2FhOC00YmI1LWJlMzktZmU4YWQ3MWY4NzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCtQOclbrNMGf5ZS4ijtWClsIb+FH2o7/oaL HOW3MqLAewno32Z+3PdqfNQ1QBPT/6k4yEboQrHTGm4BNQ3bb3Rxd/q6eXBkHliz EBsxjr7B8bi6bzkj2axgp+PK/PI0BNbtnD7bHDRoPB30qaHtkZPhIDQPdNv0EVxH jJD5Y/uvMUOneGPMRCBnQiB4CrJHbP50VHueeO87mDjpLAWr8gaNfw26x/OaeKTE 2m0i2HT/nuHTbhqY49yv3W7dYH3AD4b++EkA0JK9JvN36Frn21Qy8HLuS1AzFo8y HO9Yxvo7lvNcn7ErXLnoOTbOv2qknKvP8fpfstxhMZugbQuyUwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFLxeLM8R+ZulI9Dufx9/c/vgqGB2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YzhkYzc3Zi1jYWE4LTRiYjUtYmUzOS1mZThhZDcxZjg3NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhjOGRjNzdmLWNhYTgtNGJiNS1i ZTM5LWZlOGFkNzFmODc2NS84YzhkYzc3Zi1jYWE4LTRiYjUtYmUzOS1mZThhZDcx Zjg3NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAQyFGADBAJA72gDBARCOEADBALGO4gDBALYeIQw GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTWowVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK0FRKuBtIbuHkVsq HdcvYyT7Amscsp5RBnhS69kP13Hv2If1RWiPgWVqA98LN31PBXiBED7XKPJOACea KqBEjgfxMWTftUac28VJ3DX7aArwWSLKv68PCdCpkM+JURvRDbrycI4jWvW7f/eh qJI7Kb9DF7QZBBMMuWbhFdIPwJ7oCWQl3fX+xSBC2DUVaxgJptxJOzn1O6LwaBev 5xCs1nrFm7/HDSmaNzb9ZicfJPRTGovO4n+98WIRmb7LpcIjyC1v+W4kbrAPCGDZ txW5focK0HABFyMaUu1OU0PqwImXwUKqyavHIpvXTgZ19KJpWhzZBlPezu5nxhI1 IbcK+g== -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:34 2025 by rpki-client