$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer File: d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer (raw, json) Hash identifier: ht4iUt2vZLVo9WTO9YTo0BmhEd5/5n+L1V/qcrK6BkQ= Subject key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848A689A4B5B7CDED83B7E34C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jan 2025 11:48:24 +0000 Certificate not after: Sat 15 Aug 2026 00:45:19 +0000 Subordinate resources: AS: 7257 IP: 23.149.248.0/24 IP: 149.112.53.0/24 IP: 2602:fa90::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:89:a4:b5:b7:cd:ed:83:b7:e3:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 24 11:48:24 2025 GMT Not After : Aug 15 00:45:19 2026 GMT Subject: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:d4:ff:61:ea:f1:09:67:74:99:6c:75:bb: 52:c5:29:53:dc:53:d5:64:33:e6:21:df:d7:f6:46: e3:db:b0:49:4d:03:cd:a3:1a:c7:d5:5d:8e:0a:49: 54:f8:1c:70:ef:67:35:2f:ba:5f:d5:08:df:0b:46: 8d:97:21:1d:01:62:e5:69:19:4c:e4:34:06:54:47: af:96:82:bd:a5:6f:ec:81:f5:8c:df:a3:77:5e:c3: 10:76:4d:9c:1a:c2:92:a6:01:79:4d:d4:c4:03:77: 77:2d:83:df:60:6a:cd:33:1d:74:05:84:b7:e0:29: a0:bd:11:11:1e:57:db:ac:29:4d:48:0a:41:dd:37: c9:1b:ad:7e:fc:75:59:38:0b:75:ef:4c:bd:7c:8e: 09:0b:0e:8f:9c:d0:1f:53:7b:a7:93:37:67:3c:53: 55:bd:37:36:38:37:b8:dd:c5:c4:2d:ec:cc:36:76: d7:d3:a7:fd:64:2d:1b:da:6c:6b:db:58:17:81:2b: 9e:e8:25:d6:3f:b9:ff:6c:c0:b0:ba:e2:e2:47:fc: be:35:72:1a:98:a8:8e:c2:ae:4b:b1:2e:f2:e4:c9: 6d:56:59:b5:53:89:69:45:b8:35:a6:9e:63:3c:d0: e9:89:1c:5c:e1:f1:66:03:18:34:64:4c:88:8f:a1: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.149.248.0/24 149.112.53.0/24 IPv6: 2602:fa90::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7257 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c3:60:34:79:df:d2:99:af:9e:d9:7b:f2:88:97:a8:1d:05: 07:ba:06:55:34:93:ec:00:a5:bc:fb:66:b4:a6:97:0f:37:4d: 0a:8b:07:bd:c9:fe:6b:18:1e:9a:a6:cf:bd:25:72:88:0c:6f: 38:f6:51:59:78:e5:50:dc:9f:0b:25:a1:c6:20:ec:53:b7:ca: 30:0a:b5:56:0f:b2:57:d5:ec:ce:54:05:91:70:a2:51:69:1c: 18:48:92:60:45:20:4f:c8:cd:b5:0e:e8:01:89:6c:13:1d:31: f9:c3:b7:11:37:2f:8d:6d:a8:8c:54:1b:44:6b:ae:99:36:9c: e3:2d:0b:d6:e9:f9:06:c3:1f:b8:28:0a:a3:f6:b7:ee:29:65: b1:f4:04:0b:43:25:8f:68:a2:e2:ed:2e:35:ea:c5:dc:4b:1a: c8:31:90:49:b4:30:de:6b:8e:b3:96:9b:59:bb:b8:ef:66:41: b3:9c:2b:ef:c9:9a:b5:3e:2d:54:76:d7:70:d5:7b:05:44:f5: e7:f9:b2:cb:0a:2c:23:b0:24:db:c6:68:a9:38:81:a3:c8:cc: 3f:c4:6f:58:4b:05:82:1b:2d:e9:f5:e2:58:95:e7:40:8e:53: 97:86:90:4f:41:a3:27:2d:b5:6a:59:16:ae:02:04:7f:03:5e: 62:18:dc:30 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEimiaS1t83tg7fjTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDEyNDExNDgyNFoXDTI2MDgxNTAwNDUxOVowLzEtMCsGA1UEAxMk ZDhlYTEwODEtYmNjYi00MWQ1LWIwZmUtMWI5NzI0Y2NlZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwODU/2Hq8QlndJlsdbtSxSlT3FPVZDPmId/X 9kbj27BJTQPNoxrH1V2OCklU+Bxw72c1L7pf1QjfC0aNlyEdAWLlaRlM5DQGVEev loK9pW/sgfWM36N3XsMQdk2cGsKSpgF5TdTEA3d3LYPfYGrNMx10BYS34CmgvRER HlfbrClNSApB3TfJG61+/HVZOAt170y9fI4JCw6PnNAfU3unkzdnPFNVvTc2ODe4 3cXELezMNnbX06f9ZC0b2mxr21gXgSue6CXWP7n/bMCwuuLiR/y+NXIamKiOwq5L sS7y5MltVlm1U4lpRbg1pp5jPNDpiRxc4fFmAxg0ZEyIj6GxNwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFINmz3vf10Bscg5VPwJemM0N48z4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k OGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRjY2VkM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4ZWExMDgxLWJjY2ItNDFkNS1i MGZlLTFiOTcyNGNjZWQzZi9kOGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRj Y2VkM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlfgDBACVcDUwDgQCAAIwCAMGBCYC+pAAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhxZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAArDYDR539KZr57Ze/KI l6gdBQe6BlU0k+wApbz7ZrSmlw83TQqLB73J/msYHpqmz70lcogMbzj2UVl45VDc nwslocYg7FO3yjAKtVYPslfV7M5UBZFwolFpHBhIkmBFIE/IzbUO6AGJbBMdMfnD txE3L41tqIxUG0Rrrpk2nOMtC9bp+QbDH7goCqP2t+4pZbH0BAtDJY9oouLtLjXq xdxLGsgxkEm0MN5rjrOWm1m7uO9mQbOcK+/JmrU+LVR213DVewVE9ef5sssKLCOw JNvGaKk4gaPIzD/Eb1hLBYIbLen14liV50COU5eGkE9BoycttWpZFq4CBH8DXmIY 3DA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:38 2025 by rpki-client