$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer File: c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer (raw, json) Hash identifier: VTIevkrLYwz/ZxVenanTTY14mHb3dZBhTngATM7+5Xo= Subject key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848FEB4579F68113D95424CF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 01:45:34 +0000 Certificate not after: Mon 31 May 2027 00:45:34 +0000 Subordinate resources: AS: 63210 IP: 104.244.96.0/22 IP: 199.34.243.0/24 IP: 199.48.208.0/22 IP: 199.116.176.0/22 IP: 208.71.104.0/22 IP: 2605:2c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:b4:57:9f:68:11:3d:95:42:4c:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 25 01:45:34 2025 GMT Not After : May 31 00:45:34 2027 GMT Subject: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:83:45:b4:23:3d:b2:63:b8:26:6f:3f:89: 45:9d:ef:5e:67:f4:2e:7c:a6:50:27:b5:26:ef:83: 8a:6a:48:f7:57:76:a5:96:5d:c0:d2:31:e5:bb:01: 1d:63:0e:00:57:44:70:41:b6:1b:8b:db:52:88:9d: f7:fe:dd:e9:a8:d6:de:d5:70:53:01:aa:38:a2:10: 07:0e:de:2b:d5:c2:aa:26:cc:13:90:30:9c:c3:b7: b0:de:e6:7a:a4:bc:7d:7e:76:30:ab:d5:53:f0:7f: 8f:7e:cc:8c:ca:62:ca:17:7c:ab:2e:af:63:c1:b6: 4a:07:05:1d:64:ba:bc:d2:bd:10:7b:f6:67:2e:18: 01:25:55:6b:b3:09:fb:c4:9f:a4:a0:14:86:67:84: cd:4a:92:20:44:14:c1:5b:56:46:38:7d:51:14:39: 80:79:d8:6e:00:32:d3:d7:7f:a9:97:6f:95:b8:0b: a2:1c:d1:97:1d:46:2f:9b:28:1c:39:79:b1:ab:fc: d4:4c:d1:1b:53:d7:80:35:9b:5e:0d:fd:c6:d7:e8: 76:5b:39:fe:cf:4c:3c:69:4f:2d:7c:15:34:45:d4: f6:53:ca:33:0b:2d:90:8d:32:ef:a3:87:a9:57:d4: a0:e4:3a:ff:8a:36:51:3c:bf:de:ed:f1:3b:e5:c3: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.244.96.0/22 199.34.243.0/24 199.48.208.0/22 199.116.176.0/22 208.71.104.0/22 IPv6: 2605:2c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:42:bf:3d:fa:ab:3b:a7:25:bf:36:aa:82:da:32:72:2e:a3: d4:cb:4b:1a:82:55:b9:c6:43:23:81:c1:bc:1f:15:5d:67:c4: ce:2a:23:92:e5:4c:86:e4:b9:3c:6f:1c:9a:20:3e:9b:5b:19: fa:33:ec:44:00:cb:7f:28:37:a9:f6:ae:e0:38:46:4a:f0:35: 51:dc:a3:6d:30:92:f6:da:fe:4b:ea:58:f6:c0:70:d9:a2:56: 43:81:fe:54:e4:c0:57:dc:a5:80:00:8a:44:6b:b0:8d:e5:3c: 77:0f:07:05:d4:58:15:ab:39:51:95:a4:4d:97:73:f3:05:0a: 42:01:36:d6:58:16:6f:f6:26:70:2f:b1:e8:d2:a3:24:be:0b: d6:b3:57:fe:a0:03:f5:84:17:47:e8:9b:53:0d:96:92:18:7f: 2d:f2:61:aa:e2:81:37:a3:d3:8b:81:6a:8b:1b:9d:ee:e5:ce: 34:c8:0f:33:da:96:8b:ea:d8:f8:87:37:ad:ab:5e:eb:fd:5e: 30:c4:02:ad:eb:92:07:3e:45:56:9d:2a:07:f1:6f:ef:d0:e8: d4:a7:21:ab:02:3e:67:9f:4c:b8:6a:3a:72:d4:c2:90:f3:ca: 50:21:06:ac:03:8c:85:8f:81:6c:bd:86:96:4b:98:0f:90:33: d0:66:e3:9e -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEj+tFefaBE9lUJM9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIyNTAxNDUzNFoXDTI3MDUzMTAwNDUzNFowLzEtMCsGA1UEAxMk YzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWeDRbQjPbJjuCZvP4lFne9eZ/QufKZQJ7Um 74OKakj3V3alll3A0jHluwEdYw4AV0RwQbYbi9tSiJ33/t3pqNbe1XBTAao4ohAH Dt4r1cKqJswTkDCcw7ew3uZ6pLx9fnYwq9VT8H+PfsyMymLKF3yrLq9jwbZKBwUd ZLq80r0Qe/ZnLhgBJVVrswn7xJ+koBSGZ4TNSpIgRBTBW1ZGOH1RFDmAedhuADLT 13+pl2+VuAuiHNGXHUYvmygcOXmxq/zUTNEbU9eANZteDf3G1+h2Wzn+z0w8aU8t fBU0RdT2U8ozCy2QjTLvo4epV9Sg5Dr/ijZRPL/e7fE75cPw1QIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFPbindzzmGl8E7noUh1AB4gdIU0IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j OWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M5YWExNTY3LTg5YTktNGNlNC04 YmQ3LWU2MjQ5OTkwOTFlMy9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5 MDkxZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJo9GADBADHIvMDBALHMNADBALHdLADBALQR2gw DQQCAAIwBwMFACYFLEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPbqMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBACRCvz36qzunJb82qoLaMnIuo9TLSxqCVbnGQyOBwbwfFV1nxM4qI5LlTIbk uTxvHJogPptbGfoz7EQAy38oN6n2ruA4RkrwNVHco20wkvba/kvqWPbAcNmiVkOB /lTkwFfcpYAAikRrsI3lPHcPBwXUWBWrOVGVpE2Xc/MFCkIBNtZYFm/2JnAvsejS oyS+C9azV/6gA/WEF0fom1MNlpIYfy3yYarigTej04uBaosbne7lzjTIDzPalovq 2PiHN62rXuv9XjDEAq3rkgc+RVadKgfxb+/Q6NSnIasCPmefTLhqOnLUwpDzylAh BqwDjIWPgWy9hpZLmA+QM9Bm454= -----END CERTIFICATE-----Generated at Fri Apr 4 19:00:48 2025 by rpki-client