$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer File: 03b51393-7784-45a0-9621-168719782436.cer (raw, json) Hash identifier: G7e08ZSNWbLYKE87QNqrlc1LOMYjDL/0urXQbF17EiM= Subject key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494C5D680085C81F1F9EA3C1E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 21:23:28 +0000 Certificate not after: Sun 27 Jun 2027 21:23:28 +0000 Subordinate resources: AS: 10384 IP: 152.85.0.0/16 IP: 152.87.0.0/16 IP: 2604:700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:5d:68:00:85:c8:1f:1f:9e:a3:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 24 21:23:28 2025 GMT Not After : Jun 27 21:23:28 2027 GMT Subject: CN=03b51393-7784-45a0-9621-168719782436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:8a:92:e0:0d:35:37:c4:7e:7d:29:86:6f: c0:a5:05:31:ff:75:61:cd:a9:7d:ed:66:db:26:c0: 31:32:6e:82:7d:b4:3f:8c:2e:d2:06:cf:34:7a:72: ee:46:05:c7:9f:60:61:46:e1:b3:39:a2:9c:77:d1: 45:7c:11:84:29:82:ee:8c:1b:ce:56:97:a3:64:02: c3:17:92:5b:eb:44:b1:05:2e:a9:e9:39:a4:0d:38: 68:f6:05:4e:ab:1f:fb:90:cd:cf:c6:41:c2:a0:d4: fb:12:b8:93:f0:97:be:97:c2:39:e1:3c:88:89:a8: c6:fa:12:57:7e:cb:4c:e4:27:32:ae:8a:b3:bc:8b: c2:64:ac:94:2c:6d:46:f5:3d:a3:c1:c6:60:23:a9: 30:11:3f:e4:d7:06:d9:79:2b:58:26:68:d6:7f:09: 6b:c4:08:b1:d7:86:eb:b1:59:22:9e:07:e5:93:60: ad:7c:74:7d:9b:23:fa:ca:11:9e:05:6b:ed:d3:e8: b4:a0:17:29:24:b0:4a:a4:07:64:e9:86:80:79:85: 1f:19:7b:25:54:e7:c2:38:b2:5c:10:66:a3:46:4b: 2e:d1:6b:3f:14:8f:53:36:13:d3:ea:8c:50:e1:93: 7c:2d:f9:6c:14:86:72:da:8e:c3:96:ce:7e:c2:80: c7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 152.85.0.0/16 152.87.0.0/16 IPv6: 2604:700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10384 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:96:b6:e0:18:e2:ce:2e:ca:f2:f1:c6:ea:11:b3:04:e5: dc:31:b4:b6:34:7d:3b:aa:ac:ee:6d:14:7b:31:34:91:32:2e: e4:87:3a:ee:b2:92:28:d1:eb:9c:84:5f:f8:0c:aa:7b:a3:40: 61:0c:8d:67:58:63:4f:21:b3:49:22:39:67:4f:91:a9:20:64: fc:97:5e:39:b2:35:a1:1e:a2:8b:fe:69:53:a0:58:99:93:0f: 2b:1f:ec:35:ac:42:41:94:cd:63:3f:dc:ea:05:41:d8:2d:89: c0:6e:3d:20:3c:0e:7c:a3:4e:45:08:14:d7:8e:4c:14:54:17: 6a:50:b7:52:b4:75:f5:35:c9:4b:64:2b:38:93:fb:f1:37:cb: 04:5c:0a:22:b5:e5:c4:8b:71:cc:b8:71:41:fa:50:fb:95:89: 19:dd:82:36:dd:38:5b:2b:97:07:0e:4c:3b:80:87:52:75:90: 15:5b:e1:c8:40:50:4f:89:ea:05:cd:9b:50:61:67:d6:a1:a0: ce:fc:6a:f0:9f:bd:ee:56:2f:10:fb:c8:a1:41:c0:87:4b:bb: 35:de:83:75:cf:31:4a:7d:61:8a:93:6b:6a:5c:a1:20:a0:c1: f9:40:17:d8:a8:28:54:63:a6:6d:89:98:a1:ea:2f:d1:67:20: 8d:9a:1a:de -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWElMXWgAhcgfH56jweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNDIxMjMyOFoXDTI3MDYyNzIxMjMyOFowLzEtMCsGA1UEAxMk MDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5NzgyNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcmKkuANNTfEfn0phm/ApQUx/3Vhzal97Wbb JsAxMm6CfbQ/jC7SBs80enLuRgXHn2BhRuGzOaKcd9FFfBGEKYLujBvOVpejZALD F5Jb60SxBS6p6TmkDTho9gVOqx/7kM3PxkHCoNT7EriT8Je+l8I54TyIiajG+hJX fstM5CcyroqzvIvCZKyULG1G9T2jwcZgI6kwET/k1wbZeStYJmjWfwlrxAix14br sVkingflk2CtfHR9myP6yhGeBWvt0+i0oBcpJLBKpAdk6YaAeYUfGXslVOfCOLJc EGajRksu0Ws/FI9TNhPT6oxQ4ZN8LflsFIZy2o7Dls5+woDHtQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFOyZS5mblCYFdMMxUuy50vqOPwUiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w M2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzAzYjUxMzkzLTc3ODQtNDVhMC05 NjIxLTE2ODcxOTc4MjQzNi8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3 ODI0MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwMgYIKwYBBQUH AQcBAf8EIzAhMBAEAgABMAoDAwCYVQMDAJhXMA0EAgACMAcDBQAmBAcAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAiiQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACbtlrbgGOLOLsry8cbqEbME 5dwxtLY0fTuqrO5tFHsxNJEyLuSHOu6ykijR65yEX/gMqnujQGEMjWdYY08hs0ki OWdPkakgZPyXXjmyNaEeoov+aVOgWJmTDysf7DWsQkGUzWM/3OoFQdgticBuPSA8 DnyjTkUIFNeOTBRUF2pQt1K0dfU1yUtkKziT+/E3ywRcCiK15cSLccy4cUH6UPuV iRndgjbdOFsrlwcOTDuAh1J1kBVb4chAUE+J6gXNm1BhZ9ahoM78avCfve5WLxD7 yKFBwIdLuzXeg3XPMUp9YYqTa2pcoSCgwflAF9ioKFRjpm2JmKHqL9FnII2aGt4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:26:58 2025 by rpki-client