$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e3472b3-598d-4d6d-a8ee-6f061679b4c1.cer File: 1e3472b3-598d-4d6d-a8ee-6f061679b4c1.cer (raw, json) Hash identifier: NdB6abAv5kBOdS5H1zPdX3EO+17QwBoXI+vis70TC7E= Subject key identifier: 13:DD:60:8E:E0:EE:21:FC:E2:28:EC:CE:88:04:76:87:41:1F:52:38 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584910AB4C9F7A038CDCE78D4600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e3472b3-598d-4d6d-a8ee-6f061679b4c1/1e3472b3-598d-4d6d-a8ee-6f061679b4c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e3472b3-598d-4d6d-a8ee-6f061679b4c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 12:11:54 +0000 Certificate not after: Sun 06 Jun 2027 11:11:54 +0000 Subordinate resources: AS: 26665 IP: 192.225.224.0/20 IP: 208.92.88.0/21 IP: 2607:1480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:ab:4c:9f:7a:03:8c:dc:e7:8d:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 3 12:11:54 2025 GMT Not After : Jun 6 11:11:54 2027 GMT Subject: CN=1e3472b3-598d-4d6d-a8ee-6f061679b4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:0a:1a:c6:45:10:96:02:15:4d:f3:d5:1d: 4c:25:51:c9:97:e2:ba:23:6d:db:15:5b:73:7b:46: 54:13:21:1e:ee:fa:80:ac:10:95:d1:f5:2b:f2:5e: b9:59:af:1e:e0:90:96:a2:d1:91:1c:81:fa:cb:18: 80:02:15:17:97:46:56:80:c9:e6:79:42:35:8c:28: 5d:45:90:5d:58:36:bd:36:1e:55:18:3f:73:82:8b: a3:62:b8:f7:f2:f8:5d:a0:82:0a:39:e5:0a:f4:c6: 32:18:d9:ca:e8:45:b3:6d:74:5e:24:f6:b9:e9:26: 4e:cd:5c:a9:90:75:75:ae:6c:62:33:b9:e8:4d:a6: 8f:ae:82:99:45:f0:0d:49:43:1b:b2:99:27:59:8a: 54:47:90:96:96:c9:21:e4:6f:a2:1a:71:fc:49:d1: 86:c9:63:4e:16:88:78:69:7d:d7:be:c1:f7:38:58: 3f:dd:bc:df:62:21:08:41:89:2e:75:57:23:d9:c1: f8:13:19:0d:f6:7b:3c:38:81:0f:a6:7c:35:05:98: 85:72:32:e0:8b:ce:99:90:65:72:f3:8c:0e:56:4b: a7:be:36:dd:af:8b:2c:12:13:60:f2:5a:fb:8b:3c: 7b:b9:69:d3:5a:36:e0:43:50:88:bb:7f:ba:98:4d: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:60:8E:E0:EE:21:FC:E2:28:EC:CE:88:04:76:87:41:1F:52:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e3472b3-598d-4d6d-a8ee-6f061679b4c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e3472b3-598d-4d6d-a8ee-6f061679b4c1/1e3472b3-598d-4d6d-a8ee-6f061679b4c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.225.224.0/20 208.92.88.0/21 IPv6: 2607:1480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26665 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3b:e6:7c:96:74:b7:9a:bc:d2:cc:d4:dd:e7:a0:c4:95:60: af:3b:07:3d:b6:aa:62:6f:13:8c:4f:7e:03:d8:ec:ea:e7:40: 80:5f:2d:ca:17:37:da:e0:cb:1a:7e:16:df:4c:ca:6a:45:09: 24:6e:ec:4b:c8:00:80:87:1b:bf:da:b0:71:92:17:72:29:d6: f1:c6:b9:24:46:14:ea:ee:69:84:56:4a:a3:df:4a:45:39:c7: 32:4c:fa:c6:cc:1d:31:47:b3:53:a1:88:99:2f:40:04:94:13: 01:a5:a6:0a:69:46:09:2d:44:b1:c6:c1:37:55:6b:47:f8:d5: 83:bf:e4:df:92:99:df:92:95:ba:68:69:5e:81:d8:bd:22:d2: de:e6:b7:a8:9c:d7:39:d1:95:fb:c9:a5:f9:46:36:2c:ae:b7: 0d:7a:0f:06:87:17:a7:b0:24:ad:60:ca:38:92:89:f1:57:aa: 10:00:bb:c4:4c:ff:e7:d0:29:09:a1:14:d4:af:3b:30:59:30: 77:eb:50:d9:d7:68:d6:e3:bd:26:c8:03:63:95:31:a9:9f:5a: ea:06:13:19:0b:93:96:84:2f:f7:11:6f:d7:0b:df:a3:d1:e6: a7:05:c9:2e:fb:42:72:11:89:39:fb:89:a1:2e:bf:ad:79:dd: d4:4a:e3:c0 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEkQq0yfegOM3OeNRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwMzEyMTE1NFoXDTI3MDYwNjExMTE1NFowLzEtMCsGA1UEAxMk MWUzNDcyYjMtNTk4ZC00ZDZkLWE4ZWUtNmYwNjE2NzliNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kAKGsZFEJYCFU3z1R1MJVHJl+K6I23bFVtz e0ZUEyEe7vqArBCV0fUr8l65Wa8e4JCWotGRHIH6yxiAAhUXl0ZWgMnmeUI1jChd RZBdWDa9Nh5VGD9zgoujYrj38vhdoIIKOeUK9MYyGNnK6EWzbXReJPa56SZOzVyp kHV1rmxiM7noTaaProKZRfANSUMbspknWYpUR5CWlskh5G+iGnH8SdGGyWNOFoh4 aX3XvsH3OFg/3bzfYiEIQYkudVcj2cH4ExkN9ns8OIEPpnw1BZiFcjLgi86ZkGVy 84wOVkunvjbdr4ssEhNg8lr7izx7uWnTWjbgQ1CIu3+6mE1LFwIDAQABo4IELzCC BCswHQYDVR0OBBYEFBPdYI7g7iH84ijszogEdodBH1I4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x ZTM0NzJiMy01OThkLTRkNmQtYThlZS02ZjA2MTY3OWI0YzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFlMzQ3MmIzLTU5OGQtNGQ2ZC1h OGVlLTZmMDYxNjc5YjRjMS8xZTM0NzJiMy01OThkLTRkNmQtYThlZS02ZjA2MTY3 OWI0YzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBATA4eADBAPQXFgwDQQCAAIwBwMFACYHFIAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICaCkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATjvmfJZ0t5q80szU3eeg xJVgrzsHPbaqYm8TjE9+A9js6udAgF8tyhc32uDLGn4W30zKakUJJG7sS8gAgIcb v9qwcZIXcinW8ca5JEYU6u5phFZKo99KRTnHMkz6xswdMUezU6GImS9ABJQTAaWm CmlGCS1EscbBN1VrR/jVg7/k35KZ35KVumhpXoHYvSLS3ua3qJzXOdGV+8ml+UY2 LK63DXoPBocXp7AkrWDKOJKJ8VeqEAC7xEz/59ApCaEU1K87MFkwd+tQ2ddo1uO9 JsgDY5UxqZ9a6gYTGQuTloQv9xFv1wvfo9HmpwXJLvtCchGJOfuJoS6/rXnd1Erj wA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:03 2025 by rpki-client