$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer File: 00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer (raw, json) Hash identifier: z8MhunajxyMiKrnP1jI7JBIDD8GrRnAB1PFsQ1Ho20I= Subject key identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492FA143A1EE989E96D5831B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 14:21:45 +0000 Certificate not after: Thu 17 Jun 2027 14:21:45 +0000 Subordinate resources: AS: 21512 AS: 46483 IP: 162.30.0.0/16 IP: 199.248.225.0/24 IP: 199.248.245.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:a1:43:a1:ee:98:9e:96:d5:83:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 14:21:45 2025 GMT Not After : Jun 17 14:21:45 2027 GMT Subject: CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:fc:b5:9a:98:e9:66:82:6e:18:fd:9b:c5: 54:99:df:e0:e4:00:af:2d:f0:a3:21:e4:4d:32:b3: 73:0e:7c:99:47:a3:df:87:e7:97:f4:58:f7:d5:b4: 2f:05:3e:3c:4e:88:5d:30:c8:c7:88:a3:7e:95:3a: 35:4a:1a:57:91:1e:d3:51:b7:b2:8d:1e:46:e9:d2: 2f:68:c6:45:81:04:90:cf:7a:d2:12:c4:fc:98:d0: ae:b1:e6:23:3c:d9:16:ee:5c:46:53:5f:8e:14:70: 98:80:fb:ca:6f:99:86:13:a4:ab:69:da:7e:10:6c: d1:57:3c:ca:3c:e7:b2:1e:9d:ca:d9:67:0f:33:68: 6c:b3:1f:c5:51:28:da:db:30:66:c9:c2:4a:63:9a: a2:ef:12:79:a9:c3:82:58:96:d0:32:29:c7:96:dd: f6:70:c5:c9:8e:00:3c:e1:d7:e9:db:89:d3:6b:f9: af:c0:e4:4f:a8:17:f5:86:02:a2:90:fc:67:3a:88: ba:c9:d0:df:b7:c4:2b:a9:26:52:25:96:c3:2d:f5: 57:84:c2:5d:98:51:fd:47:bb:45:e2:29:ea:50:ca: ad:cd:43:8a:8e:be:ca:14:ea:db:65:15:ea:2f:bc: 54:a0:94:aa:eb:b8:42:d5:f7:db:72:f0:72:7c:ac: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.30.0.0/16 199.248.225.0/24 199.248.245.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21512 46483 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0e:24:d8:b2:d8:16:fb:3d:05:95:e4:7c:3f:7e:00:e8:f8: 63:1e:9f:ac:8f:97:e9:52:b5:7c:ab:fc:10:7f:da:3b:57:2b: e3:d9:15:17:46:f3:5d:b7:7d:0e:3d:61:33:21:d9:59:df:29: 49:66:b5:f6:a0:cd:d3:94:16:60:eb:68:2c:70:7b:c5:51:90: cd:f9:eb:56:9c:db:93:06:12:84:36:0f:87:75:3c:ec:12:af: e7:a9:86:6b:02:aa:38:58:52:76:8c:43:68:40:b6:c0:ac:9b: 89:3e:e4:c3:dd:0b:9b:50:09:01:a7:e8:73:81:94:45:5e:e9: f1:66:1b:ad:c0:ce:fe:93:0f:1b:dd:03:60:fd:07:8a:46:93: 0a:dd:95:f3:74:53:ea:8e:42:6e:62:33:d0:0f:96:cf:41:93: 96:99:0b:68:16:dd:f6:9a:af:11:a3:15:ce:5a:27:f2:73:86: be:af:c6:d1:e6:a7:e4:ce:b8:43:b5:fb:81:9c:3b:65:5e:23: 54:62:7d:e9:dd:96:39:61:e0:18:c5:0d:b0:77:6e:08:e8:e9: 65:e7:9b:ba:c5:23:1c:24:43:e7:8b:f3:ad:92:15:60:8f:bb: 71:e0:69:29:ca:b9:60:7c:2b:98:4e:90:cf:a9:ae:d2:68:cb: 4d:52:1c:70 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkvoUOh7pieltWDG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNDE0MjE0NVoXDTI3MDYxNzE0MjE0NVowLzEtMCsGA1UEAxMk MDBmZTllNDQtYjQ0MS00ZGU0LTlmZDEtOWYzYjZmOTc1Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja78tZqY6WaCbhj9m8VUmd/g5ACvLfCjIeRN MrNzDnyZR6Pfh+eX9Fj31bQvBT48TohdMMjHiKN+lTo1ShpXkR7TUbeyjR5G6dIv aMZFgQSQz3rSEsT8mNCuseYjPNkW7lxGU1+OFHCYgPvKb5mGE6Sradp+EGzRVzzK POeyHp3K2WcPM2hssx/FUSja2zBmycJKY5qi7xJ5qcOCWJbQMinHlt32cMXJjgA8 4dfp24nTa/mvwORPqBf1hgKikPxnOoi6ydDft8QrqSZSJZbDLfVXhMJdmFH9R7tF 4inqUMqtzUOKjr7KFOrbZRXqL7xUoJSq67hC1ffbcvByfKyP5QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK1Le3+mQL/V+DL9biHAgUI0PXIQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w MGZlOWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNiNmY5NzVjODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzAwZmU5ZTQ0LWI0NDEtNGRlNC05 ZmQxLTlmM2I2Zjk3NWM4Ni8wMGZlOWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNiNmY5 NzVjODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCiHgMEAMf44QMEAMf49TAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgJUCAIDALWTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEEOJNiy2Bb7PQWV5Hw/fgDo+GMe n6yPl+lStXyr/BB/2jtXK+PZFRdG8123fQ49YTMh2VnfKUlmtfagzdOUFmDraCxw e8VRkM3561ac25MGEoQ2D4d1POwSr+ephmsCqjhYUnaMQ2hAtsCsm4k+5MPdC5tQ CQGn6HOBlEVe6fFmG63Azv6TDxvdA2D9B4pGkwrdlfN0U+qOQm5iM9APls9Bk5aZ C2gW3faarxGjFc5aJ/Jzhr6vxtHmp+TOuEO1+4GcO2VeI1Rifendljlh4BjFDbB3 bgjo6WXnm7rFIxwkQ+eL862SFWCPu3HgaSnKuWB8K5hOkM+prtJoy01SHHA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:07 2025 by rpki-client