$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer File: b927dc15-9316-467a-b50d-d6b361478436.cer (raw, json) Hash identifier: Y5NjH6EYddS4BaGGPmlc3fGkaYoWSCCCvNDkk+cu/5w= Subject key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849472C57B4C17FB47CB3703040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Mar 2025 00:45:33 +0000 Certificate not after: Sat 26 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 2901 AS: 11173 AS: 26640 IP: 192.133.99.0/24 IP: 192.150.253.0/24 IP: 198.49.160.0/24 IP: 198.59.96.0/24 IP: 198.59.98.0 -- 198.59.105.255 IP: 198.59.109.0 -- 198.59.114.255 IP: 198.59.116.0 -- 198.59.127.255 IP: 198.187.251.0/24 IP: 2605:800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:2c:57:b4:c1:7f:b4:7c:b3:70:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 23 00:45:33 2025 GMT Not After : Jun 26 00:45:33 2027 GMT Subject: CN=b927dc15-9316-467a-b50d-d6b361478436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:0e:ff:da:41:59:f2:69:e1:a6:7e:05:b5: f0:61:4e:c2:24:f3:66:21:ba:97:25:07:d6:2e:a0: f1:3e:13:cb:c9:ae:52:e6:4b:4b:71:c0:58:1c:e3: 68:e6:77:04:f0:47:e2:0f:98:15:64:0d:06:ee:45: 60:70:68:53:26:7d:9b:ba:44:43:50:57:34:35:f8: d2:85:6c:28:15:00:82:b3:7a:2d:bb:06:01:e5:07: 8b:5b:30:4c:1f:fd:72:1c:41:ab:b2:a0:2e:87:90: d2:33:02:b7:33:35:53:0d:7a:6f:79:3e:88:c5:67: dd:33:e5:c7:57:6d:b7:be:ae:58:e0:b8:6c:02:db: 62:03:d9:17:6f:08:2e:29:b3:a1:74:09:d9:5a:c5: dd:56:aa:50:74:16:c8:39:68:32:07:81:27:22:77: 10:db:eb:eb:3d:f9:a5:a1:10:f4:9d:60:4c:b5:71: ae:cb:3c:1a:40:0b:73:6e:7d:c4:fa:9d:2a:62:62: ca:14:4a:52:98:ca:50:5d:77:87:34:f6:4c:45:34: fe:6b:b6:90:3e:e4:e9:c9:76:35:96:fd:8c:c8:3b: 24:33:ed:c1:bf:b8:3d:15:cd:c8:cd:c1:ba:d9:e5: bb:91:7e:83:d0:60:40:89:7a:51:68:21:4c:76:18: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.133.99.0/24 192.150.253.0/24 198.49.160.0/24 198.59.96.0/24 198.59.98.0-198.59.105.255 198.59.109.0-198.59.114.255 198.59.116.0-198.59.127.255 198.187.251.0/24 IPv6: 2605:800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2901 11173 26640 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ae:cb:10:17:d5:24:72:51:db:e5:8f:4e:33:ec:34:5b:2e: f8:df:86:ea:51:1a:ac:71:3d:ab:19:f5:f0:87:59:da:50:7c: 2d:a7:8e:5f:73:2e:88:5c:3f:33:e0:60:2d:bb:70:d1:24:bf: 98:fa:41:de:ef:b2:d4:f2:ef:24:65:d4:22:fa:e6:c2:e5:9e: 9d:49:24:de:94:36:3c:4e:7b:22:06:2b:72:13:4d:74:ab:42: 33:f8:c1:fd:2f:0c:bf:8f:f5:8b:27:fb:25:f7:ed:5b:47:f0: 93:79:f0:b0:12:e8:59:76:b5:05:17:f8:33:5b:13:93:2e:ff: 99:d4:50:2f:dc:e8:8c:37:e6:15:1e:1b:84:ce:d9:01:65:a0: 3f:9f:28:92:62:d8:c6:be:83:8a:d2:11:62:8e:47:cd:38:6b: d5:52:c8:43:6c:89:95:9b:a2:5b:de:45:63:8f:9d:67:eb:c5: 3f:cf:05:79:b5:0a:57:44:cb:52:5d:c3:49:2a:cf:9b:33:73: af:45:ed:df:f5:3b:90:db:e5:4a:29:73:d8:9a:7f:46:cb:df: 88:76:72:a4:24:04:dd:77:cc:cc:8f:6a:18:e9:f6:c4:b3:0c: fb:23:06:86:be:ff:b8:aa:07:23:37:bc:d3:17:b1:ce:90:81: c9:af:6a:17 -----BEGIN CERTIFICATE----- MIIHYTCCBkmgAwIBAgIUAQ0Mn0MoWElHLFe0wX+0fLNwMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMyMzAwNDUzM1oXDTI3MDYyNjAwNDUzM1owLzEtMCsGA1UEAxMk YjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4NDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwO/9pBWfJp4aZ+BbXwYU7CJPNmIbqXJQfW LqDxPhPLya5S5ktLccBYHONo5ncE8EfiD5gVZA0G7kVgcGhTJn2bukRDUFc0NfjS hWwoFQCCs3otuwYB5QeLWzBMH/1yHEGrsqAuh5DSMwK3MzVTDXpveT6IxWfdM+XH V223vq5Y4LhsAttiA9kXbwguKbOhdAnZWsXdVqpQdBbIOWgyB4EnIncQ2+vrPfml oRD0nWBMtXGuyzwaQAtzbn3E+p0qYmLKFEpSmMpQXXeHNPZMRTT+a7aQPuTpyXY1 lv2MyDskM+3Bv7g9Fc3IzcG62eW7kX6D0GBAiXpRaCFMdhglCQIDAQABo4IEczCC BG8wHQYDVR0OBBYEFJpbgqgA39YjKkWeektVF/QY5YPiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i OTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2I5MjdkYzE1LTkzMTYtNDY3YS1i NTBkLWQ2YjM2MTQ3ODQzNi9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0 Nzg0MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBADAhWMDBADAlv0DBADGMaADBADGO2AwDAMEAcY7 YgMEAcY7aDAMAwQAxjttAwQAxjtyMAwDBALGO3QDBAfGOwADBADGu/swDQQCAAIw BwMFACYFCAAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICC1UCAiulAgJoEDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQABrssQF9UkclHb5Y9OM+w0Wy7434bqURqscT2rGfXwh1naUHwtp45fcy6I XD8z4GAtu3DRJL+Y+kHe77LU8u8kZdQi+ubC5Z6dSSTelDY8TnsiBityE010q0Iz +MH9Lwy/j/WLJ/sl9+1bR/CTefCwEuhZdrUFF/gzWxOTLv+Z1FAv3OiMN+YVHhuE ztkBZaA/nyiSYtjGvoOK0hFijkfNOGvVUshDbImVm6Jb3kVjj51n68U/zwV5tQpX RMtSXcNJKs+bM3OvRe3f9TuQ2+VKKXPYmn9Gy9+IdnKkJATdd8zMj2oY6fbEswz7 IwaGvv+4qgcjN7zTF7HOkIHJr2oX -----END CERTIFICATE-----Generated at Fri Apr 4 16:24:03 2025 by rpki-client