$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer File: 2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer (raw, json) Hash identifier: fB2o/eIY2qojhVhxTXJfjdqGIwP/THDchn2rERy856c= Subject key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848DD17BB8088039BD589720F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Feb 2025 00:48:21 +0000 Certificate not after: Tue 18 May 2027 23:48:21 +0000 Subordinate resources: AS: 11821 IP: 148.59.150.0/24 IP: 158.51.184.0/22 IP: 205.201.54.0/24 IP: 2604:5d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:17:bb:80:88:03:9b:d5:89:72:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 13 00:48:21 2025 GMT Not After : May 18 23:48:21 2027 GMT Subject: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:db:06:30:c1:0c:c4:56:8c:bc:13:9c:87: f7:5c:fb:e9:1a:24:3f:fa:5d:36:1f:52:1e:59:39: a3:e0:e0:e7:ed:0c:77:0a:86:da:53:be:7d:ab:16: 45:b7:5e:85:96:42:e3:12:58:73:a4:ea:fc:08:ee: bb:2c:f5:db:09:21:2f:28:a2:a6:94:a0:80:4c:c3: 4f:1b:f4:ec:6b:ab:1a:3d:bc:e4:7c:1e:6f:84:f9: 09:e9:a0:af:bb:3f:d5:07:93:47:32:67:2a:ad:ef: 56:b7:27:0a:cf:42:ec:13:82:60:dc:2a:98:38:ec: d5:20:8c:3b:36:90:b5:7e:f8:88:13:68:4f:a9:58: 1b:91:a1:11:b0:e4:1c:88:88:2a:5a:7f:ce:6c:61: d8:5d:44:5b:06:50:57:a1:19:ff:dc:81:fc:10:7a: 52:1b:44:01:17:00:ad:6b:c8:8f:51:c6:2f:1a:5d: 01:39:2d:99:c7:cc:60:b3:cc:d4:4a:f1:6d:b3:1f: 6d:5d:3e:6f:96:0d:ca:29:b4:47:3c:94:53:57:a8: cb:cf:84:dc:82:17:43:bf:73:87:fb:a8:32:34:5a: c3:30:1e:98:49:b0:f1:b5:06:dc:9c:69:5b:48:a4: 19:4b:0a:0d:e1:a8:a3:59:bf:75:33:d7:95:db:9e: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 148.59.150.0/24 158.51.184.0/22 205.201.54.0/24 IPv6: 2604:5d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11821 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2a:b9:f7:1f:94:83:40:a5:e2:ac:64:0f:3f:9e:6d:ad:d4: e7:76:a0:e9:b2:fb:4c:c6:f9:33:eb:03:a6:ae:45:39:5b:fa: e5:2a:4b:fe:f8:9f:14:eb:2c:fa:3f:5f:14:96:9a:92:84:e8: bb:05:0f:ec:fd:df:f6:50:fd:05:17:6c:2a:14:cb:5e:c8:f1: f7:02:98:75:73:d9:11:8f:8f:1c:c7:89:45:78:30:1c:14:6a: db:0c:ef:1c:33:2a:7f:5d:5c:fd:e2:8f:80:c4:d4:d5:5d:c8: 1e:53:5c:1a:b2:f2:37:4f:37:fb:b1:88:a5:6a:3f:52:e2:32: 5f:70:69:73:f0:ba:83:51:af:a0:e0:e5:36:9f:8d:cb:d3:72: a2:a3:cc:91:0b:fc:cc:d1:f3:ad:28:05:f1:fc:df:3e:64:ff: d2:d3:fe:04:3b:fe:e4:04:08:c5:2f:48:4b:86:99:93:46:5a: 89:74:b7:2c:39:33:b1:69:52:93:d8:24:33:c5:11:38:f3:77: b6:07:bb:b6:47:d2:44:0d:4a:5e:9c:34:5d:91:bd:e7:80:f0: 80:0e:93:6e:d7:12:c7:2a:e1:48:8d:80:c9:34:df:0d:d5:77: 5e:09:cf:09:50:ea:6c:f1:1e:2f:2e:31:90:4e:1f:15:a0:30: 54:76:e3:d0 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEjdF7uAiAOb1YlyDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMzAwNDgyMVoXDTI3MDUxODIzNDgyMVowLzEtMCsGA1UEAxMk MmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmPbBjDBDMRWjLwTnIf3XPvpGiQ/+l02H1Ie WTmj4ODn7Qx3CobaU759qxZFt16FlkLjElhzpOr8CO67LPXbCSEvKKKmlKCATMNP G/Tsa6saPbzkfB5vhPkJ6aCvuz/VB5NHMmcqre9WtycKz0LsE4Jg3CqYOOzVIIw7 NpC1fviIE2hPqVgbkaERsOQciIgqWn/ObGHYXURbBlBXoRn/3IH8EHpSG0QBFwCt a8iPUcYvGl0BOS2Zx8xgs8zUSvFtsx9tXT5vlg3KKbRHPJRTV6jLz4TcghdDv3OH +6gyNFrDMB6YSbDxtQbcnGlbSKQZSwoN4aijWb91M9eV256dqwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFFPs/ZQAb/Txa6VYyG4ZtNsGHF9SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJjMDU5YzRlLTljYjgtNDVjZS1h NzFjLWMzYTRjZjM3OWVkZC8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2Yz NzllZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBACUO5YDBAKeM7gDBADNyTYwDQQCAAIwBwMFACYE XUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLi0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiiq59x+Ug0Cl 4qxkDz+eba3U53ag6bL7TMb5M+sDpq5FOVv65SpL/vifFOss+j9fFJaakoTouwUP 7P3f9lD9BRdsKhTLXsjx9wKYdXPZEY+PHMeJRXgwHBRq2wzvHDMqf11c/eKPgMTU 1V3IHlNcGrLyN083+7GIpWo/UuIyX3Bpc/C6g1GvoODlNp+Ny9NyoqPMkQv8zNHz rSgF8fzfPmT/0tP+BDv+5AQIxS9IS4aZk0ZaiXS3LDkzsWlSk9gkM8UROPN3tge7 tkfSRA1KXpw0XZG954DwgA6TbtcSxyrhSI2AyTTfDdV3XgnPCVDqbPEeLy4xkE4f FaAwVHbj0A== -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:55 2025 by rpki-client