$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer File: f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer (raw, json) Hash identifier: Oqfsdm3jY1UwXx7RE02ZysOG3uHh6t6ZGXmKpVjmNGs= Subject key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584891D3A63A2B2EC5F1E3AA7040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jan 2025 01:45:32 +0000 Certificate not after: Thu 22 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 26512 IP: 104.244.16.0/22 IP: 162.221.24.0/22 IP: 168.245.152.0/23 IP: 185.79.164.0/22 IP: 192.197.221.0 -- 192.197.222.255 IP: 199.119.132.0/22 IP: 2605:6500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:d3:a6:3a:2b:2e:c5:f1:e3:aa:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 17 01:45:32 2025 GMT Not After : Apr 22 00:45:32 2027 GMT Subject: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:63:c8:3e:47:c4:3f:04:47:91:75:40:89: 24:9e:99:8f:68:f6:d9:dc:17:47:84:f7:b9:8c:94: b3:2f:de:86:57:a6:f7:b1:5e:44:21:56:d0:4a:53: 51:c2:cb:21:b6:cb:a0:e2:3d:e9:82:7e:f3:03:a9: 57:28:64:18:2e:32:c0:e3:c0:83:09:3c:3d:6e:d5: 2f:10:82:99:d7:90:50:8a:4a:15:fc:18:60:22:b7: bf:69:85:10:de:7d:82:14:b9:69:4c:28:0b:05:30: 35:9d:8f:59:ca:59:11:b4:6b:c9:fc:2b:2e:f0:27: 25:a8:cb:4e:eb:66:03:8a:5b:dc:7f:24:31:bc:8c: fe:c3:94:c1:c6:28:cf:39:55:13:e6:51:6f:b0:98: d7:27:58:13:b2:03:b5:fa:55:66:4e:de:ff:17:5f: 88:bc:a4:58:ce:52:4a:67:bd:5e:f8:06:31:06:8a: 8b:c7:16:a0:c0:8d:80:20:4b:06:73:a4:eb:91:83: 1f:bb:02:ae:6a:31:e9:29:78:f9:a9:b7:d7:4e:55: 1c:c8:0c:bd:0b:75:01:d2:ca:e2:66:e6:6a:98:7a: 42:f9:28:e3:e8:07:6d:cc:16:4c:c5:fe:a8:58:6f: ff:c4:af:af:76:4b:cc:2f:96:ec:a8:a0:b5:59:a4: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.244.16.0/22 162.221.24.0/22 168.245.152.0/23 185.79.164.0/22 192.197.221.0-192.197.222.255 199.119.132.0/22 IPv6: 2605:6500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:34:d5:ac:0a:7d:3b:6d:29:85:8f:28:1a:c0:e4:e7:c6:66: 41:57:ec:27:a4:c8:d4:41:00:81:7f:a0:f8:f7:18:26:6c:b0: 17:46:35:96:64:e8:e4:d0:21:3c:2b:a1:76:0c:d3:9f:ea:03: ec:44:90:39:0f:e3:e7:bb:ed:55:cf:14:20:09:b5:08:53:4c: 5e:f2:cf:4b:e8:2e:8f:25:52:32:5d:f2:35:16:e6:16:98:d5: 64:31:1c:93:99:91:d7:21:4e:2d:60:2b:7c:37:1c:ad:85:b5: 68:a4:0d:01:9c:44:05:75:d3:47:b8:9c:f4:62:4e:a0:e6:38: 0b:91:48:40:9a:e3:54:e0:50:b3:75:af:42:29:26:f4:bc:c2: b6:8c:48:46:cd:cf:9e:84:9b:27:d7:25:ff:3f:32:7c:5c:a8: fc:cd:f7:a5:1b:cb:78:b3:a5:c7:2e:6a:a7:af:c4:fa:6c:e5: 1c:c6:e5:a9:af:db:b4:2b:1d:93:11:03:1e:85:ce:87:3e:35: 7f:70:f2:a1:08:bf:91:7b:55:69:98:b2:c8:70:a8:c0:f5:7d: 06:bf:a1:ef:a4:08:bb:71:be:52:48:bb:a9:a0:da:2d:2d:84: 31:87:3c:43:b0:2e:f1:df:7b:65:1a:d0:67:fa:2e:3d:5a:43: c1:74:e3:e6 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEiR06Y6Ky7F8eOqcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDExNzAxNDUzMloXDTI3MDQyMjAwNDUzMlowLzEtMCsGA1UEAxMk ZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZRjyD5HxD8ER5F1QIkknpmPaPbZ3BdHhPe5 jJSzL96GV6b3sV5EIVbQSlNRwsshtsug4j3pgn7zA6lXKGQYLjLA48CDCTw9btUv EIKZ15BQikoV/BhgIre/aYUQ3n2CFLlpTCgLBTA1nY9ZylkRtGvJ/Csu8CclqMtO 62YDilvcfyQxvIz+w5TBxijPOVUT5lFvsJjXJ1gTsgO1+lVmTt7/F1+IvKRYzlJK Z71e+AYxBoqLxxagwI2AIEsGc6TrkYMfuwKuajHpKXj5qbfXTlUcyAy9C3UB0sri ZuZqmHpC+Sjj6AdtzBZMxf6oWG//xK+vdkvML5bsqKC1WaTxYwIDAQABo4IETzCC BEswHQYDVR0OBBYEFMRgH5e59on0zzm9eT/YPSN17EIhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m NWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Y1ZjJjODA0LWIzYjktNGI1Ni1h NzE5LWRkNzIyNjJhN2E2ZC9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYy YTdhNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwDBAJo9BADBAKi3RgDBAGo9ZgDBAK5T6QwDAMEAMDF 3QMEAMDF3gMEAsd3hDANBAIAAjAHAwUAJgVlADAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJnkDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBXNNWsCn07bSmFjygawOTnxmZBV+wnpMjUQQCBf6D4 9xgmbLAXRjWWZOjk0CE8K6F2DNOf6gPsRJA5D+Pnu+1VzxQgCbUIU0xe8s9L6C6P JVIyXfI1FuYWmNVkMRyTmZHXIU4tYCt8NxythbVopA0BnEQFddNHuJz0Yk6g5jgL kUhAmuNU4FCzda9CKSb0vMK2jEhGzc+ehJsn1yX/PzJ8XKj8zfelG8t4s6XHLmqn r8T6bOUcxuWpr9u0Kx2TEQMehc6HPjV/cPKhCL+Re1VpmLLIcKjA9X0Gv6HvpAi7 cb5SSLupoNotLYQxhzxDsC7x33tlGtBn+i49WkPBdOPm -----END CERTIFICATE-----Generated at Fri Apr 4 16:09:01 2025 by rpki-client