$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer File: 2a28de55-f597-40cf-b508-0c5d7318b5ec.cer (raw, json) Hash identifier: GUSqda95YhnxJQ7k6uOUFsE8bYkBQ0SyE4it/dRxPtw= Subject key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F5805E4EDD8C0D26CA1E4B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 18:38:35 +0000 Certificate not after: Thu 27 May 2027 17:38:35 +0000 Subordinate resources: AS: 33715 IP: 103.66.28.0/22 IP: 2607:ec40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:80:5e:4e:dd:8c:0d:26:ca:1e:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 21 18:38:35 2025 GMT Not After : May 27 17:38:35 2027 GMT Subject: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:1e:62:bb:02:74:12:27:80:29:ae:8d:cb: 69:91:de:c1:62:16:c4:e8:5d:fe:3d:df:31:50:f7: 65:57:71:3e:4e:23:22:3c:5b:0f:4f:d3:ba:f6:33: e0:8f:dc:22:82:1c:c4:8c:0b:4b:11:09:93:b2:ef: 6d:d7:b9:d5:bc:dc:99:92:0c:bc:5f:88:8a:bd:f9: b8:74:ef:89:ac:e2:e3:99:1f:e6:91:d2:25:f0:1b: 82:40:b7:41:a2:1f:42:db:9f:c6:de:24:bf:0f:d4: 58:6a:6f:93:5f:60:c0:b7:3f:6c:f6:0a:e8:4b:ae: 07:09:e9:04:1b:60:3f:1b:a6:6d:32:bd:e2:15:3b: 3c:e6:4b:c2:2a:58:e9:73:5c:9e:f7:d3:ec:e8:80: 44:1a:be:51:aa:6d:93:30:6a:13:eb:59:f4:26:0a: 5d:f1:30:29:3e:84:4f:f1:a0:6a:7a:cf:d5:96:47: 44:17:b5:a7:f7:92:40:76:45:22:45:80:65:5f:63: 8c:d0:5d:d6:55:c4:dc:dd:6d:08:d1:39:96:da:71: 45:42:e7:dd:24:9e:bd:5b:c1:9d:bc:9c:29:e1:11: cd:b0:30:dd:f6:45:53:74:a5:31:ae:d2:15:3b:d1: eb:7b:c8:93:29:c8:8b:a0:b7:bf:7b:b2:e0:ba:04: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 IPv6: 2607:ec40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33715 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:92:a4:b3:72:9b:12:f8:23:a9:56:e6:2b:34:82:33:91:38: b3:9a:c8:42:d7:04:c5:25:50:bd:93:eb:56:2e:d6:d0:4a:da: 08:49:8a:0b:10:99:d8:04:0c:c2:cb:db:60:62:f6:55:d6:bc: bb:dc:5d:4a:df:1c:f0:ff:08:21:e6:ee:b3:79:7e:bb:5c:eb: 8c:31:54:0a:52:67:9e:8b:b8:a2:58:d7:9b:81:ab:96:4a:b4: b7:b5:78:81:23:86:71:80:26:87:4f:19:1c:bb:5c:af:08:b3: 6d:d1:fe:05:b9:9a:e7:87:d1:96:c7:7a:27:ac:83:e7:0c:f6: 6b:82:b9:5f:6d:20:71:06:d9:16:10:e9:5e:0d:82:65:94:88: ac:6d:f2:1c:5a:2b:23:ff:68:04:87:41:cb:68:c6:16:d2:c6: b6:70:d1:6a:97:e9:67:3d:78:df:b6:cd:86:fb:01:91:50:36: df:b8:6b:80:15:fc:e3:64:eb:cf:f6:97:ba:e7:34:36:50:b3: 76:d5:3d:40:cd:28:7b:53:b9:ea:1f:1d:5b:60:91:32:49:ec: 7a:a1:85:7f:22:92:08:aa:c4:04:87:01:60:58:a4:f0:f5:5e: 15:a8:6d:c3:9a:5a:84:ee:6c:7d:fa:7a:3b:21:72:d4:46:1b: e7:f9:f8:73 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEj1gF5O3YwNJsoeS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMTE4MzgzNVoXDTI3MDUyNzE3MzgzNVowLzEtMCsGA1UEAxMk MmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThiNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tQeYrsCdBIngCmujctpkd7BYhbE6F3+Pd8x UPdlV3E+TiMiPFsPT9O69jPgj9wighzEjAtLEQmTsu9t17nVvNyZkgy8X4iKvfm4 dO+JrOLjmR/mkdIl8BuCQLdBoh9C25/G3iS/D9RYam+TX2DAtz9s9groS64HCekE G2A/G6ZtMr3iFTs85kvCKljpc1ye99Ps6IBEGr5Rqm2TMGoT61n0Jgpd8TApPoRP 8aBqes/VlkdEF7Wn95JAdkUiRYBlX2OM0F3WVcTc3W0I0TmW2nFFQufdJJ69W8Gd vJwp4RHNsDDd9kVTdKUxrtIVO9Hre8iTKciLoLe/e7LgugThDwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIbZ8yB2zDfwGthICpRQlhXVWNx7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJhMjhkZTU1LWY1OTctNDBjZi1i NTA4LTBjNWQ3MzE4YjVlYy8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMx OGI1ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnQhwwDQQCAAIwBwMFACYH7EAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIOzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACSSpLNymxL4I6lW5is0gjOROLOa yELXBMUlUL2T61Yu1tBK2ghJigsQmdgEDMLL22Bi9lXWvLvcXUrfHPD/CCHm7rN5 frtc64wxVApSZ56LuKJY15uBq5ZKtLe1eIEjhnGAJodPGRy7XK8Is23R/gW5mueH 0ZbHeiesg+cM9muCuV9tIHEG2RYQ6V4NgmWUiKxt8hxaKyP/aASHQctoxhbSxrZw 0WqX6Wc9eN+2zYb7AZFQNt+4a4AV/ONk68/2l7rnNDZQs3bVPUDNKHtTueofHVtg kTJJ7HqhhX8ikgiqxASHAWBYpPD1XhWobcOaWoTubH36ejshctRGG+f5+HM= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:40 2025 by rpki-client