$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589.cer File: 132c89a3-684e-47d8-bb59-9c1f38639589.cer (raw, json) Hash identifier: c1E0Pr6wFeyAVo1MsDbE2RCyX8tq65IT0m2tqsF+Oow= Subject key identifier: 09:E5:57:90:F4:6C:FB:74:52:D5:38:EF:C9:63:11:71:1E:F0:DB:E8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FEBA02627008AD42F982C4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/132c89a3-684e-47d8-bb59-9c1f38639589.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 01:57:00 +0000 Certificate not after: Mon 31 May 2027 00:57:00 +0000 Subordinate resources: AS: 394994 IP: 144.208.104.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:ba:02:62:70:08:ad:42:f9:82:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 25 01:57:00 2025 GMT Not After : May 31 00:57:00 2027 GMT Subject: CN=132c89a3-684e-47d8-bb59-9c1f38639589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5b:fe:a5:2e:fc:f3:95:0b:73:f1:62:0b:f4: 0f:ea:75:6a:17:35:bb:0a:e0:ac:8b:f8:40:3d:32: ed:1c:d8:47:3e:23:e5:20:1c:ca:c2:e6:aa:7a:b4: 68:2b:f7:43:af:8f:97:97:8e:df:8c:1e:a9:9f:6a: b2:e2:26:16:ad:19:74:c8:34:92:f2:94:48:b4:d5: f9:b9:33:6c:76:0a:cc:6b:3c:75:0a:9a:a3:4e:3e: 0f:5a:e8:90:9a:59:75:8f:01:68:06:ce:e3:be:08: c9:a9:b1:ca:e3:11:09:ae:65:7d:53:0d:27:3d:29: 0d:77:40:ea:31:a6:41:70:26:43:a9:35:8f:f1:77: 63:93:f8:31:35:33:56:70:2e:5f:89:78:4c:90:bf: ba:28:4f:71:2d:50:6a:a3:65:11:a3:83:70:11:b5: d2:bd:c6:f6:d9:b6:13:62:19:f4:14:fd:1b:e7:3b: 99:ee:eb:bd:99:be:d5:f3:14:52:07:8e:e8:3f:02: 27:b4:56:12:c4:aa:e2:70:5f:05:68:54:4a:9b:3f: 5f:86:f2:de:1a:50:4e:16:1b:4a:9a:b2:30:ad:2a: f5:40:df:4e:75:d8:ce:cb:0f:80:e6:5d:77:80:69: da:ad:39:4a:c3:42:4b:ca:a6:56:6c:22:1b:06:be: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E5:57:90:F4:6C:FB:74:52:D5:38:EF:C9:63:11:71:1E:F0:DB:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/132c89a3-684e-47d8-bb59-9c1f38639589.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 144.208.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394994 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:66:49:c1:05:8d:3c:36:4a:e9:1d:9d:82:95:63:81:b7:22: b0:b3:b2:af:08:6a:a7:84:a5:cf:3a:73:1e:64:f9:cf:93:58: 54:a2:36:20:b0:0c:f9:ee:59:1e:71:80:0a:98:95:1e:48:cd: e3:9c:98:52:ca:c5:b7:ba:79:e6:fa:36:ab:4e:bf:89:bf:d8: c0:08:e1:a6:c9:04:f0:f2:b9:f4:b1:95:f1:6b:10:ef:5c:4a: 6e:bb:ec:0e:5f:70:23:6e:97:b9:84:b3:96:01:03:81:ea:5a: 47:fc:67:28:ba:dd:42:37:94:e8:89:c2:c4:c4:39:30:14:bd: 18:d6:5f:21:f4:36:64:88:d4:4e:06:6b:4e:4f:b6:ab:33:7d: fd:88:12:6f:b6:4c:69:f2:4a:de:3b:85:33:2e:9a:4a:3b:e1: c7:e4:76:58:84:cd:21:8b:2d:52:49:8a:92:55:5a:f1:cf:61: e1:32:2e:3f:a9:36:70:f0:2d:88:93:f9:85:25:50:5e:d8:ed: 08:85:24:38:c8:79:bf:e1:f5:85:10:63:59:8c:5e:97:55:a6: a3:51:d3:50:42:cd:5c:45:b3:40:0b:13:e0:b5:bc:8c:ae:70: 13:c5:57:ba:e6:e4:02:ef:09:92:bd:9a:f0:64:1b:b4:01:b0: 9d:51:9b:f6 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEj+ugJicAitQvmCxKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNTAxNTcwMFoXDTI3MDUzMTAwNTcwMFowLzEtMCsGA1UEAxMk MTMyYzg5YTMtNjg0ZS00N2Q4LWJiNTktOWMxZjM4NjM5NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Vv+pS7885ULc/FiC/QP6nVqFzW7CuCsi/hA PTLtHNhHPiPlIBzKwuaqerRoK/dDr4+Xl47fjB6pn2qy4iYWrRl0yDSS8pRItNX5 uTNsdgrMazx1CpqjTj4PWuiQmll1jwFoBs7jvgjJqbHK4xEJrmV9Uw0nPSkNd0Dq MaZBcCZDqTWP8Xdjk/gxNTNWcC5fiXhMkL+6KE9xLVBqo2URo4NwEbXSvcb22bYT Yhn0FP0b5zuZ7uu9mb7V8xRSB47oPwIntFYSxKricF8FaFRKmz9fhvLeGlBOFhtK mrIwrSr1QN9OddjOyw+A5l13gGnarTlKw0JLyqZWbCIbBr7x8wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAnlV5D0bPt0UtU478ljEXEe8NvoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x MzJjODlhMy02ODRlLTQ3ZDgtYmI1OS05YzFmMzg2Mzk1ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzMmM4OWEzLTY4NGUtNDdkOC1i YjU5LTljMWYzODYzOTU4OS8xMzJjODlhMy02ODRlLTQ3ZDgtYmI1OS05YzFmMzg2 Mzk1ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKQ0GgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgbyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFRmScEFjTw2SukdnYKVY4G3IrCzsq8IaqeEpc86cx5k+c+T WFSiNiCwDPnuWR5xgAqYlR5IzeOcmFLKxbe6eeb6NqtOv4m/2MAI4abJBPDyufSx lfFrEO9cSm677A5fcCNul7mEs5YBA4HqWkf8Zyi63UI3lOiJwsTEOTAUvRjWXyH0 NmSI1E4Ga05Ptqszff2IEm+2TGnySt47hTMumko74cfkdliEzSGLLVJJipJVWvHP YeEyLj+pNnDwLYiT+YUlUF7Y7QiFJDjIeb/h9YUQY1mMXpdVpqNR01BCzVxFs0AL E+C1vIyucBPFV7rm5ALvCZK9mvBkG7QBsJ1Rm/Y= -----END CERTIFICATE-----Generated at Fri Apr 4 19:28:41 2025 by rpki-client