$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer File: 2d88838e-541a-4661-8501-3c7d2eb5849d.cer (raw, json) Hash identifier: AwASieG4ThQd5DwwfUChJxruCB5TtIMAQJYtoF8V3Uw= Subject key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B22C45CF17A8C129A2F64B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 15:49:59 +0000 Certificate not after: Mon 03 May 2027 14:49:59 +0000 Subordinate resources: AS: 13439 AS: 395379 IP: 104.171.194.0/24 IP: 136.228.64.0/19 IP: 143.223.112.0/20 IP: 161.129.192.0/20 IP: 2604:e340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:2c:45:cf:17:a8:c1:29:a2:f6:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 28 15:49:59 2025 GMT Not After : May 3 14:49:59 2027 GMT Subject: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e5:12:21:81:09:a6:8a:21:52:60:52:1a:c2: 5b:99:36:bf:2c:82:52:c3:4e:3f:b9:6b:97:f0:15: 53:85:b8:02:90:60:3f:e8:76:4a:98:31:dc:9c:2e: 8d:8a:3a:52:e7:d9:57:02:9b:24:8d:7a:2c:9c:43: cb:c4:18:0a:dc:49:e2:39:73:c3:57:60:6a:92:bd: 74:c5:ad:e7:af:dc:58:14:73:e7:ac:68:48:b7:a7: 21:9f:3f:92:4f:94:37:c8:ec:52:2f:b1:dc:c6:37: e7:07:0c:62:1e:0c:94:52:b1:cc:c3:db:dc:e3:91: e1:c7:03:bd:20:c5:1a:d7:8b:b7:cf:cb:99:ad:a6: 36:81:e8:51:ad:f7:1f:57:40:55:6c:32:3e:a6:52: 10:5c:e0:2c:20:fd:4a:e2:3f:dc:c6:dc:98:91:bf: 85:1a:ef:f3:68:fb:c3:a9:e4:25:c1:0f:c0:72:86: 95:f3:e9:c2:2b:c6:df:db:bd:45:56:d7:ab:c5:2f: 34:d8:0e:35:af:d4:78:35:88:1c:16:05:61:86:ea: 52:b9:44:09:41:05:68:43:ce:01:7f:d8:37:20:dc: a7:cd:f5:e1:94:c6:e9:e1:a4:17:39:7b:a8:86:64: 4e:74:da:2f:18:0e:70:eb:11:30:9b:37:09:91:b2: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.171.194.0/24 136.228.64.0/19 143.223.112.0/20 161.129.192.0/20 IPv6: 2604:e340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13439 395379 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:20:44:1b:13:3f:42:c7:1a:04:43:0c:11:99:ee:82:56:bb: 36:f3:9e:18:9b:74:36:2b:81:ca:86:1f:7c:db:01:12:db:2e: de:d5:6a:18:28:63:24:b2:8b:75:20:46:5f:51:a9:7d:84:2f: 90:8c:0d:cd:5e:1c:9d:e2:94:53:8e:7c:a7:a8:01:0c:ec:e5: 6a:c6:80:9f:33:d4:bb:1f:fe:4e:4b:b4:f6:6e:c5:f8:df:a7: 62:5d:de:b7:8b:97:b0:db:6f:95:30:49:d2:15:56:e2:d7:65: 5a:24:33:e5:d6:75:c7:86:48:ae:4b:c8:18:32:6f:42:c4:37: ae:4b:fb:2a:3c:aa:e4:d9:bd:4a:d2:f1:a2:2b:c0:a2:1a:93: be:4f:23:11:ee:af:9b:ce:2d:20:18:f7:e4:18:2b:29:d6:48: 2f:f5:b9:1a:e9:82:68:a0:fd:6c:b6:c7:2a:64:c6:74:a2:7f: 0c:b2:a9:dd:07:a5:21:52:2a:94:7c:2a:38:ee:53:4d:46:a2: 82:8a:a7:c3:63:1b:ce:b1:5b:0a:ef:ff:53:ef:1d:e5:c2:3e: 63:d9:75:b9:ae:dd:3b:ba:34:c8:65:eb:8c:0a:8a:87:a1:9f: bb:b6:73:4f:72:1b:9d:f3:75:86:9d:62:a0:d9:e6:c7:b6:3c: 46:40:39:12 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEiyLEXPF6jBKaL2S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyODE1NDk1OVoXDTI3MDUwMzE0NDk1OVowLzEtMCsGA1UEAxMk MmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOUSIYEJpoohUmBSGsJbmTa/LIJSw04/uWuX 8BVThbgCkGA/6HZKmDHcnC6NijpS59lXApskjXosnEPLxBgK3EniOXPDV2Bqkr10 xa3nr9xYFHPnrGhIt6chnz+ST5Q3yOxSL7HcxjfnBwxiHgyUUrHMw9vc45HhxwO9 IMUa14u3z8uZraY2gehRrfcfV0BVbDI+plIQXOAsIP1K4j/cxtyYkb+FGu/zaPvD qeQlwQ/AcoaV8+nCK8bf271FVterxS802A41r9R4NYgcFgVhhupSuUQJQQVoQ84B f9g3INynzfXhlMbp4aQXOXuohmROdNovGA5w6xEwmzcJkbIuIQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFE6dczv2D1r2njdGKFMJxHpCSVguMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y ZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJkODg4MzhlLTU0MWEtNDY2MS04 NTAxLTNjN2QyZWI1ODQ5ZC8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmVi NTg0OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABoq8IDBAWI5EADBASP33ADBAShgcAwDQQCAAIw BwMFACYE40AwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICNH8CAwYIczBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAwIEQbEz9CxxoEQwwRme6CVrs2854Ym3Q2K4HKhh982wES2y7e1WoYKGMksot1 IEZfUal9hC+QjA3NXhyd4pRTjnynqAEM7OVqxoCfM9S7H/5OS7T2bsX436diXd63 i5ew22+VMEnSFVbi12VaJDPl1nXHhkiuS8gYMm9CxDeuS/sqPKrk2b1K0vGiK8Ci GpO+TyMR7q+bzi0gGPfkGCsp1kgv9bka6YJooP1stscqZMZ0on8MsqndB6UhUiqU fCo47lNNRqKCiqfDYxvOsVsK7/9T7x3lwj5j2XW5rt07ujTIZeuMCoqHoZ+7tnNP chud83WGnWKg2ebHtjxGQDkS -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:30 2025 by rpki-client