$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.cer (raw, json) Hash identifier: 2efkWXqQQPyYp9z/+l/FZ1n9iuevkYylzyekn3Nex84= Subject key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858488B7A709471DCDA66A9863180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 19:10:57 +0000 Certificate not after: Mon 19 Apr 2027 18:10:57 +0000 Subordinate resources: AS: 29765 IP: 162.217.104.0/21 IP: 192.104.0.0/24 IP: 199.80.28.0/22 IP: 204.15.96.0/22 IP: 208.91.240.0/22 IP: 2606:5b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8b:7a:70:94:71:dc:da:66:a9:86:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 14 19:10:57 2025 GMT Not After : Apr 19 18:10:57 2027 GMT Subject: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:c5:d6:d0:ae:04:d0:51:31:69:63:32:23: 9c:3f:c2:fc:14:b5:45:3e:71:48:ce:2d:55:2a:88: b9:8f:86:36:7c:7d:0a:a5:8b:30:f7:99:82:ff:16: 1d:67:7f:66:7f:60:87:67:48:51:f4:f9:d4:51:21: a2:b0:37:fe:e7:86:a3:f9:7c:63:f8:78:dd:53:a9: d2:ff:41:86:c7:59:d1:e6:90:03:4e:27:0b:16:d4: 82:b0:bc:2b:b9:15:05:3c:1f:65:35:2b:75:14:6f: 41:ef:cb:7a:1a:42:c5:32:5c:92:8f:7b:a6:bd:0c: 26:c4:c3:a0:e7:23:c5:0c:41:dc:4d:72:fc:8b:db: a6:8f:1f:c3:57:b2:7e:02:db:d2:8b:47:c3:68:33: bb:ab:f1:ba:e6:67:5a:00:f7:42:ec:28:6f:06:85: 38:99:b5:58:5e:3a:4a:c5:61:2e:f2:d3:4e:46:97: dc:5c:b0:d7:50:68:82:f4:92:a2:e5:94:ab:6a:13: 7d:3c:e1:eb:25:8a:51:a4:5b:09:1b:bd:1f:70:60: 63:9f:c0:c4:5d:29:ef:19:d6:43:b1:67:9c:4d:58: 8d:65:71:3a:9c:fd:e1:0e:8a:50:da:1e:ab:b6:48: be:f1:57:2a:5b:cf:a5:5f:bb:4d:be:a0:91:da:ee: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.217.104.0/21 192.104.0.0/24 199.80.28.0/22 204.15.96.0/22 208.91.240.0/22 IPv6: 2606:5b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29765 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:52:11:dd:b3:43:db:0b:e5:f3:31:6c:b8:86:84:4d:1a:b6: a0:7b:5f:68:14:1f:79:a7:80:f4:b3:ce:01:36:9e:df:18:b3: 1a:2c:88:c6:05:c9:e4:e2:d7:98:d1:bc:fb:04:cb:b1:07:8b: 56:58:77:00:d4:39:6f:75:a2:09:fe:80:bb:9d:8c:15:a4:ca: 44:f7:f6:9a:80:59:5c:29:7c:17:6f:55:33:ca:bf:d7:31:a8: 5b:2e:c9:06:9b:81:f2:f1:39:64:27:e0:7e:30:5e:d5:4d:13: df:6d:c5:8b:ed:5a:30:aa:e4:01:83:e5:5a:6b:f8:30:5e:00: 9b:49:2f:d9:ff:00:3a:50:05:13:20:68:56:db:a9:91:05:f9: 37:78:ae:f1:73:c9:a9:a0:32:fb:17:c0:27:c1:33:f7:0f:ef: 09:28:ba:a1:c0:78:13:34:cd:ee:a3:73:7d:8b:9d:c4:aa:9b: 3b:f9:f8:c4:ce:5f:11:73:a4:72:89:97:47:1d:b1:b2:b7:b4: da:4e:68:16:ef:9d:cf:7a:5e:ed:38:e0:a5:66:72:e0:16:90: 90:2d:d7:99:89:e2:f5:0c:26:c1:83:94:62:df:13:30:16:c8: b0:04:d1:3a:92:05:01:a2:9f:18:f1:7d:9c:6d:9f:e1:37:dd: ea:e2:87:1c -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEiLenCUcdzaZqmGMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDExNDE5MTA1N1oXDTI3MDQxOTE4MTA1N1owLzEtMCsGA1UEAxMk M2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbTF1tCuBNBRMWljMiOcP8L8FLVFPnFIzi1V Koi5j4Y2fH0KpYsw95mC/xYdZ39mf2CHZ0hR9PnUUSGisDf+54aj+Xxj+HjdU6nS /0GGx1nR5pADTicLFtSCsLwruRUFPB9lNSt1FG9B78t6GkLFMlySj3umvQwmxMOg 5yPFDEHcTXL8i9umjx/DV7J+AtvSi0fDaDO7q/G65mdaAPdC7ChvBoU4mbVYXjpK xWEu8tNORpfcXLDXUGiC9JKi5ZSrahN9POHrJYpRpFsJG70fcGBjn8DEXSnvGdZD sWecTViNZXE6nP3hDopQ2h6rtki+8VcqW8+lX7tNvqCR2u6OSQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFNMOdrGjFZgB/i+fQ/xRQwo6+uoEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z ZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNlOWZiMjVhLTQzOGYtNGUxZC1h MTM2LTVjODc4ZDA2NWMyNC8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQw NjVjMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAOi2WgDBADAaAADBALHUBwDBALMD2ADBALQW/Aw DQQCAAIwBwMFACYGWwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdEUwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAMFIR3bND2wvl8zFsuIaETRq2oHtfaBQfeaeA9LPOATae3xizGiyIxgXJ5OLX mNG8+wTLsQeLVlh3ANQ5b3WiCf6Au52MFaTKRPf2moBZXCl8F29VM8q/1zGoWy7J BpuB8vE5ZCfgfjBe1U0T323Fi+1aMKrkAYPlWmv4MF4Am0kv2f8AOlAFEyBoVtup kQX5N3iu8XPJqaAy+xfAJ8Ez9w/vCSi6ocB4EzTN7qNzfYudxKqbO/n4xM5fEXOk comXRx2xsre02k5oFu+dz3pe7TjgpWZy4BaQkC3XmYni9QwmwYOUYt8TMBbIsATR OpIFAaKfGPF9nG2f4Tfd6uKHHA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:59 2025 by rpki-client