$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer File: d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer (raw, json) Hash identifier: TsKaRc8akIh62UH+PUbdonP/vL8Lm461NM5o2aMGKeI= Subject key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848E5942C4A7122EC6459466780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 01:45:32 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: AS: 46505 IP: 23.187.248.0/24 IP: 104.225.208.0/24 IP: 2602:fa89::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:94:2c:4a:71:22:ec:64:59:46:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 16 01:45:32 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:f9:82:0c:5d:96:06:1c:ce:ab:df:0e:4e: df:ee:bb:f3:ba:31:c1:95:50:2f:98:b1:c3:4d:9a: ee:f0:55:81:9b:da:b4:02:51:45:9f:8a:6e:39:72: 65:7f:70:b1:8f:0f:35:43:54:f0:49:e1:be:03:dd: 4d:e7:7a:d1:76:96:e9:fb:09:cb:24:4d:32:49:a0: 41:59:68:45:7d:ba:3f:f8:1a:a9:63:01:89:ad:38: a1:2e:ca:ad:e0:ba:f8:f2:2c:0c:7c:cc:46:8b:e7: a4:e0:3e:7e:e9:27:a6:f4:48:cb:4b:50:bf:d0:a8: 9d:a8:40:15:08:13:10:5f:51:e9:e7:c1:3f:be:19: b3:d2:71:94:cd:ac:ad:9e:ff:ba:e0:6e:6b:6a:46: e0:89:90:69:03:09:b3:4b:3f:71:cf:91:5b:72:76: 31:4f:5c:56:e6:27:c3:2e:0f:05:27:d0:ff:8c:20: 3c:04:36:0b:51:a0:bf:77:13:b0:b2:e2:92:8a:35: 26:30:d9:52:56:bc:40:af:43:4e:67:0f:17:f0:ce: 7f:38:e2:60:90:47:42:61:7d:f8:3c:5b:f3:ac:67: 62:5d:ee:27:37:f8:66:bb:45:40:72:e7:39:48:bc: 49:33:59:90:ac:ad:d0:0f:0e:7f:77:7c:73:26:4e: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.187.248.0/24 104.225.208.0/24 IPv6: 2602:fa89::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46505 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fd:c8:d0:ef:37:7f:3c:9a:cb:c9:3b:73:b5:bd:ee:53:17: c2:86:7e:f1:4b:57:77:8c:21:5a:06:57:1d:3e:19:1a:22:d4: 53:14:da:ea:49:74:01:3b:21:3e:38:8b:2d:9a:f3:8d:27:c4: 46:eb:8f:b2:fa:79:8f:5c:c5:27:e3:05:d2:0d:3c:06:ef:cd: 56:f9:95:4d:d0:4c:a3:38:71:46:a9:93:d7:02:2c:75:36:08: fc:d7:4a:a9:1e:01:39:a6:78:f9:18:25:ab:db:1c:3b:ff:ff: 18:51:b9:24:90:f5:57:fd:4e:80:5c:fa:54:6b:2f:05:a9:10: 0a:2f:ec:41:eb:28:89:9c:3e:fb:62:f4:0d:23:bc:b3:81:b3: e9:c0:a1:2c:ec:f3:5c:ed:35:b3:d7:8d:46:03:11:40:f9:bf: a3:af:f4:91:2f:59:99:2d:50:68:fc:e3:9b:a9:41:d6:12:dc: 85:22:d9:56:1c:6d:2d:41:68:c4:d0:e2:e4:e6:89:a2:b6:12: 9e:42:f7:b0:fc:00:fb:c9:5b:fd:90:07:97:55:92:c4:c8:fd: d9:05:ab:79:9e:13:a2:77:6a:43:5b:f0:86:8e:25:13:6f:4d: 5a:eb:4d:d4:df:43:16:a9:21:54:1a:42:e2:2d:28:e9:a5:a4: 9c:93:48:92 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEjllCxKcSLsZFlGZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIxNjAxNDUzMloXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk ZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJhZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLf5ggxdlgYczqvfDk7f7rvzujHBlVAvmLHD TZru8FWBm9q0AlFFn4puOXJlf3Cxjw81Q1TwSeG+A91N53rRdpbp+wnLJE0ySaBB WWhFfbo/+BqpYwGJrTihLsqt4Lr48iwMfMxGi+ek4D5+6Sem9EjLS1C/0KidqEAV CBMQX1Hp58E/vhmz0nGUzaytnv+64G5rakbgiZBpAwmzSz9xz5FbcnYxT1xW5ifD Lg8FJ9D/jCA8BDYLUaC/dxOwsuKSijUmMNlSVrxAr0NOZw8X8M5/OOJgkEdCYX34 PFvzrGdiXe4nN/hmu0VAcuc5SLxJM1mQrK3QDw5/d3xzJk57DQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFNwG643UhgRhmCTggTnfmBqsVDl2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0NTU4ZWZmLTZjMjYtNGExNy1i YjllLTU0Mzc3ZWEyYWVmMS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2Vh MmFlZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXu/gDBABo4dAwDgQCAAIwCAMGBCYC+okAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC1qTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1/cjQ7zd/PJrLyTtz tb3uUxfChn7xS1d3jCFaBlcdPhkaItRTFNrqSXQBOyE+OIstmvONJ8RG64+y+nmP XMUn4wXSDTwG781W+ZVN0EyjOHFGqZPXAix1Ngj810qpHgE5pnj5GCWr2xw7//8Y UbkkkPVX/U6AXPpUay8FqRAKL+xB6yiJnD77YvQNI7yzgbPpwKEs7PNc7TWz141G AxFA+b+jr/SRL1mZLVBo/OObqUHWEtyFItlWHG0tQWjE0OLk5omithKeQvew/AD7 yVv9kAeXVZLEyP3ZBat5nhOid2pDW/CGjiUTb01a603U30MWqSFUGkLiLSjppaSc k0iS -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:29 2025 by rpki-client