$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer File: d651f6e5-66de-4793-8c12-2261d5e62118.cer (raw, json) Hash identifier: K5kciE6rX3AvFlz4dD6fSpwIIKPVd6wY8oTALu0g954= Subject key identifier: 02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584925AC1FE1DDD035D33DAEC100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 00:45:32 +0000 Certificate not after: Mon 14 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 26721 IP: 23.130.128.0/23 IP: 23.168.0.0/24 IP: 162.218.232.0/21 IP: 209.40.64.0/20 IP: 2606:6380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:ac:1f:e1:dd:d0:35:d3:3d:ae:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 11 00:45:32 2025 GMT Not After : Jun 14 00:45:32 2027 GMT Subject: CN=d651f6e5-66de-4793-8c12-2261d5e62118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fa:ff:4e:8d:98:4d:3d:7a:98:2a:b1:eb:0e: c8:c0:17:63:b9:59:8b:f4:2e:21:42:54:db:e5:57: 94:ce:e1:32:ea:6d:96:7d:46:c9:12:c6:ee:2a:6a: 57:65:bd:c8:14:6a:e5:e3:e8:b1:ca:ca:c7:9f:8b: db:27:96:a8:b3:86:d1:f4:5f:00:e4:3d:69:b3:ad: 20:b2:dc:9c:1b:fc:e4:dc:87:33:f0:93:e8:98:e0: 66:eb:ce:04:1e:39:5b:22:23:59:de:11:bb:46:91: d7:aa:a1:f8:ba:25:fe:6b:87:bf:9a:1d:31:bf:f8: 86:da:c3:4e:ed:61:c5:78:f7:31:b1:d7:bc:64:90: a3:1a:7a:90:39:25:10:bd:c5:43:e9:63:db:b3:41: 9d:61:1d:74:1b:a8:9d:c6:55:4a:8d:14:af:99:24: d0:e4:4a:dd:cc:e1:c9:0a:36:0d:e5:b2:4b:01:80: 34:fb:8f:ad:c7:83:10:2e:ba:0d:ee:57:88:6a:03: 6e:2c:58:9c:93:7e:25:57:4a:dc:06:9e:3b:77:53: fc:ee:46:a0:aa:d4:c4:31:81:69:e5:02:6c:05:78: 8a:9b:e1:50:f0:b6:b1:65:b7:d0:d1:d6:26:a6:23: 66:1c:0a:ab:2a:96:9c:0e:12:9f:ef:c3:81:1c:a8: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.130.128.0/23 23.168.0.0/24 162.218.232.0/21 209.40.64.0/20 IPv6: 2606:6380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26721 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d0:06:cc:ec:67:9e:a1:04:63:e0:c6:8b:0b:3d:4b:8b:c2: 06:b7:21:ca:33:78:20:22:58:71:fd:a9:c6:9d:cf:ae:fd:56: 08:1c:ac:a5:7f:70:9f:24:d9:9e:40:15:0f:c1:86:a3:c5:86: ec:96:c6:f5:9f:f0:68:04:af:5e:12:a8:45:04:77:ab:97:d9: f0:6e:32:bf:10:ac:85:db:95:ad:b9:59:8d:89:41:6c:b9:3e: b7:64:89:1f:ca:47:8e:ae:6c:87:f3:70:67:3d:7e:de:83:1b: 43:9b:30:a7:f3:6f:c0:64:8a:4f:06:d1:2f:39:bb:88:58:7f: 81:05:35:b6:ab:b7:a3:a6:de:df:96:02:93:8a:f1:d4:1e:bb: 70:98:5d:b4:28:74:fa:1d:a2:6d:45:e0:d5:0a:e1:0e:7f:af: 6a:bd:ca:c7:f0:00:0f:67:81:29:76:89:48:d1:b6:bf:69:f0: d3:6b:83:c1:b3:82:61:89:17:0c:da:67:d7:62:6e:6f:9f:79: 6c:c7:f8:52:78:ff:e3:fe:74:5d:2d:88:21:d4:87:3d:6e:5d: 11:0b:d7:8d:55:2a:4f:b5:b3:c9:6f:ba:68:b1:6f:72:60:85: 8d:7e:37:21:65:66:e9:c2:f1:8b:af:58:62:f0:97:dd:21:89: 0f:c9:fc:31 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEklrB/h3dA10z2uwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxMTAwNDUzMloXDTI3MDYxNDAwNDUzMlowLzEtMCsGA1UEAxMk ZDY1MWY2ZTUtNjZkZS00NzkzLThjMTItMjI2MWQ1ZTYyMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/r/To2YTT16mCqx6w7IwBdjuVmL9C4hQlTb 5VeUzuEy6m2WfUbJEsbuKmpXZb3IFGrl4+ixysrHn4vbJ5aos4bR9F8A5D1ps60g stycG/zk3Icz8JPomOBm684EHjlbIiNZ3hG7RpHXqqH4uiX+a4e/mh0xv/iG2sNO 7WHFePcxsde8ZJCjGnqQOSUQvcVD6WPbs0GdYR10G6idxlVKjRSvmSTQ5ErdzOHJ CjYN5bJLAYA0+4+tx4MQLroN7leIagNuLFick34lV0rcBp47d1P87kagqtTEMYFp 5QJsBXiKm+FQ8LaxZbfQ0dYmpiNmHAqrKpacDhKf78OBHKhv+QIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFAKTbg6hR8perVQlwnLqeO7awDpnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NjUxZjZlNS02NmRlLTQ3OTMtOGMxMi0yMjYxZDVlNjIxMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q2NTFmNmU1LTY2ZGUtNDc5My04 YzEyLTIyNjFkNWU2MjExOC9kNjUxZjZlNS02NmRlLTQ3OTMtOGMxMi0yMjYxZDVl NjIxMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAEXgoADBAAXqAADBAOi2ugDBATRKEAwDQQCAAIw BwMFACYGY4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICaGEwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASdAG zOxnnqEEY+DGiws9S4vCBrchyjN4ICJYcf2pxp3Prv1WCByspX9wnyTZnkAVD8GG o8WG7JbG9Z/waASvXhKoRQR3q5fZ8G4yvxCshduVrblZjYlBbLk+t2SJH8pHjq5s h/NwZz1+3oMbQ5swp/NvwGSKTwbRLzm7iFh/gQU1tqu3o6be35YCk4rx1B67cJhd tCh0+h2ibUXg1QrhDn+var3Kx/AAD2eBKXaJSNG2v2nw02uDwbOCYYkXDNpn12Ju b595bMf4Unj/4/50XS2IIdSHPW5dEQvXjVUqT7WzyW+6aLFvcmCFjX43IWVm6cLx i69YYvCX3SGJD8n8MQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:22 2025 by rpki-client