$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer File: 00cce351-050e-4c52-bceb-c8ccc4c6257e.cer (raw, json) Hash identifier: y3PClFmALuVdUPLb/RrizlNHJpe1sa7OzU7H/PfulCc= Subject key identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492F36FEC7548D103E08101900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 10:47:38 +0000 Certificate not after: Thu 17 Jun 2027 10:47:38 +0000 Subordinate resources: AS: 11019 IP: 104.152.112.0/21 IP: 209.126.32.0/19 IP: 2604:cac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:36:fe:c7:54:8d:10:3e:08:10:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 10:47:38 2025 GMT Not After : Jun 17 10:47:38 2027 GMT Subject: CN=00cce351-050e-4c52-bceb-c8ccc4c6257e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:e7:99:a5:b2:cc:f4:f3:97:ad:4a:de:71: 0e:5c:4a:3a:0d:a7:2f:63:52:50:d8:e2:91:97:39: ed:7b:e7:59:3a:9e:f1:2d:0c:43:c7:a8:28:a5:fa: 24:3f:1b:8d:09:54:c8:12:c4:ba:0f:0a:bf:6d:9f: 02:6d:cf:ab:4d:ce:fd:d5:dd:fa:3c:49:39:65:ad: 48:65:9b:8d:52:29:5d:a0:c3:3a:11:d1:09:c4:44: c9:5d:32:22:ad:f7:1f:21:18:92:3c:88:7f:6e:40: f7:96:da:e7:59:99:eb:c2:7b:9f:b6:f2:ed:de:d7: 3d:97:61:54:f3:41:11:1c:a2:77:ba:cf:03:d0:76: 05:6c:3c:db:55:72:9d:50:cd:a9:00:7c:54:2d:1c: 24:f2:a4:81:61:66:7a:78:e9:77:7e:04:d1:57:e1: 6b:e3:5b:ba:64:44:c9:1e:06:bd:18:2a:26:b5:c9: 9f:b5:b2:d9:9d:24:e2:4d:6b:38:bb:d4:31:d5:14: 65:5f:35:4a:af:54:6f:b0:c4:c7:fe:30:f2:55:f0: 61:24:dd:ce:fe:78:a5:fb:02:ee:21:ba:9a:97:40: bd:bf:3c:67:0e:6f:f4:62:c2:a4:1f:89:ec:ad:7b: 0a:a7:72:f9:e7:96:36:af:01:20:10:26:15:c4:5d: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.152.112.0/21 209.126.32.0/19 IPv6: 2604:cac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c4:3d:85:06:2f:bc:25:b3:ba:07:8a:4d:61:0b:f5:b1:a2: 96:c2:d8:58:0b:03:2d:dc:7d:b4:81:4f:8b:78:fe:64:37:ff: 08:95:5e:e9:0a:e3:8b:66:34:37:f1:48:c4:16:50:0a:cb:75: 0f:0e:ab:33:f0:8f:3a:a0:ae:fe:17:74:f3:b9:eb:98:20:91: 61:66:9a:6d:d5:0d:0e:82:f5:8e:71:43:eb:81:9e:a4:56:d0: 87:77:34:60:05:b1:94:89:ff:06:34:f7:df:f2:e4:e9:0f:ef: 3f:1b:46:f7:16:bc:74:6d:76:98:90:71:5f:20:17:e7:75:72: 7e:6c:51:50:e8:a2:8a:bf:b1:84:5a:d4:63:1e:c0:da:f8:57: f7:4a:30:f4:f7:7f:a6:af:f2:5f:13:15:b5:a1:db:36:28:21: 9b:6a:52:da:85:3e:ce:f3:df:be:6d:0f:b9:1c:8a:ea:10:6c: 27:93:8d:da:4d:81:0c:09:9d:b3:bb:4f:b3:b3:8e:7b:d2:31: f0:ea:c1:a7:22:05:e5:59:02:1f:b5:57:b0:34:94:9e:93:dd: a5:ff:0d:dc:8c:47:24:47:fe:5d:42:7a:2e:36:c6:41:f4:b0: c3:42:03:4d:44:8d:59:9c:84:3a:23:8c:d8:5a:83:a3:4d:fb: 96:84:3f:81 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEkvNv7HVI0QPggQGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNDEwNDczOFoXDTI3MDYxNzEwNDczOFowLzEtMCsGA1UEAxMk MDBjY2UzNTEtMDUwZS00YzUyLWJjZWItYzhjY2M0YzYyNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrrnmaWyzPTzl61K3nEOXEo6DacvY1JQ2OKR lznte+dZOp7xLQxDx6gopfokPxuNCVTIEsS6Dwq/bZ8Cbc+rTc791d36PEk5Za1I ZZuNUildoMM6EdEJxETJXTIirfcfIRiSPIh/bkD3ltrnWZnrwnuftvLt3tc9l2FU 80ERHKJ3us8D0HYFbDzbVXKdUM2pAHxULRwk8qSBYWZ6eOl3fgTRV+Fr41u6ZETJ Hga9GComtcmftbLZnSTiTWs4u9Qx1RRlXzVKr1RvsMTH/jDyVfBhJN3O/nil+wLu Ibqal0C9vzxnDm/0YsKkH4nsrXsKp3L555Y2rwEgECYVxF2P3QIDAQABo4IELzCC BCswHQYDVR0OBBYEFL1t9QDl4pdsoBAKlb59cVf/zYT1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w MGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRjNjI1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzAwY2NlMzUxLTA1MGUtNGM1Mi1i Y2ViLWM4Y2NjNGM2MjU3ZS8wMGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRj NjI1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANomHADBAXRfiAwDQQCAAIwBwMFACYEysAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICKwswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOsQ9hQYvvCWzugeKTWEL 9bGilsLYWAsDLdx9tIFPi3j+ZDf/CJVe6Qrji2Y0N/FIxBZQCst1Dw6rM/CPOqCu /hd087nrmCCRYWaabdUNDoL1jnFD64GepFbQh3c0YAWxlIn/BjT33/Lk6Q/vPxtG 9xa8dG12mJBxXyAX53VyfmxRUOiiir+xhFrUYx7A2vhX90ow9Pd/pq/yXxMVtaHb Nighm2pS2oU+zvPfvm0PuRyK6hBsJ5ON2k2BDAmds7tPs7OOe9Ix8OrBpyIF5VkC H7VXsDSUnpPdpf8N3IxHJEf+XUJ6LjbGQfSww0IDTUSNWZyEOiOM2FqDo037loQ/ gQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:01 2025 by rpki-client