$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer File: 464cd0d4-6da8-497c-b270-cb658d45f4e8.cer (raw, json) Hash identifier: hu6Gdty+jWQvh4oUKI0Ex5I42mMVRFeU8xs/QqRUu0g= Subject key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487A2BB37084BB3A051124D6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 14:23:33 +0000 Certificate not after: Tue 13 Apr 2027 13:23:33 +0000 Subordinate resources: IP: 23.92.128.0/20 IP: 24.53.96.0/19 IP: 24.140.240.0/20 IP: 24.143.128.0/19 IP: 108.170.128.0/18 IP: 162.247.224.0/21 IP: 173.247.128.0/19 IP: 216.212.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:2b:b3:70:84:bb:3a:05:11:24:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 8 14:23:33 2025 GMT Not After : Apr 13 13:23:33 2027 GMT Subject: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:2e:3d:e8:b3:96:c1:e3:7c:c8:9e:fa:5d: 98:4f:6a:42:bf:41:35:04:3f:8a:2e:b4:30:5f:e5: 64:b0:56:5b:2f:e3:e8:4e:76:ea:12:04:ae:8b:de: f6:46:f2:4d:74:5a:0d:b3:d4:3c:1f:d3:39:d7:a7: c6:fb:56:79:86:da:f7:97:be:3f:1b:b8:fb:c0:8e: 62:53:d0:ca:23:ff:f8:21:ec:69:b1:f2:a8:70:f2: 2b:ae:bb:c7:2d:06:cc:2e:ba:24:c1:5b:06:47:c8: 3e:13:42:55:6c:bf:d0:cb:d1:48:84:eb:03:2d:ca: 9f:53:39:54:38:3b:8e:c5:e7:cb:2b:2d:75:35:17: 90:ef:5c:bf:d7:14:50:48:7b:b8:f9:2b:f3:22:56: 10:3f:81:eb:29:34:88:9f:cb:e4:a1:a3:74:0b:c2: 42:d8:ee:8a:9c:ce:6b:d4:68:62:83:1c:30:24:5a: fb:c2:32:19:13:72:9d:48:11:06:c8:c5:67:e8:8c: 36:c5:7d:1b:c2:5f:30:23:30:ee:05:42:16:b4:c6: 61:f4:db:7b:eb:17:ba:69:0d:72:3a:0b:4e:c6:63: 0d:44:2b:fd:7d:50:49:b0:9d:81:88:db:83:bc:61: 42:93:ea:b3:86:28:07:13:cc:ed:3d:d1:19:f9:f5: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.92.128.0/20 24.53.96.0/19 24.140.240.0/20 24.143.128.0/19 108.170.128.0/18 162.247.224.0/21 173.247.128.0/19 216.212.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:10:3d:01:b5:94:51:7a:13:01:39:5b:f7:10:df:34:d4:8d: 4a:1a:19:e9:cf:6a:2a:46:81:e2:59:88:72:32:c8:55:e2:4b: ae:7b:69:59:ac:a3:f9:78:1a:b0:2b:16:6c:ed:e9:9d:9d:f7: a1:9b:70:56:90:75:70:8c:94:85:04:73:22:c3:48:c6:1f:71: ad:c0:15:5c:bb:e0:c5:d1:c5:39:72:1b:91:9e:00:5c:27:ee: a5:4a:3d:17:eb:0e:39:90:a1:f3:f9:15:c2:f2:5b:2b:26:0f: 59:33:9a:72:7c:ae:84:fd:bf:a7:1e:ae:70:97:8c:a6:93:83: 2b:94:45:8c:c8:bf:8c:2d:b9:67:66:41:6e:e6:46:dd:74:43: 6d:c7:d6:28:95:7e:51:bd:a3:9e:a1:93:8c:23:ab:d2:1e:02: 60:e9:5c:37:68:a5:fd:50:02:60:56:5a:ed:5e:b6:9b:a5:51: 74:f6:e4:86:18:35:87:e9:95:cf:fd:58:31:58:63:db:18:46: 74:43:23:ee:93:46:0e:13:22:fa:bf:2c:bc:0f:ca:a4:3d:2d: 0f:d4:94:57:ee:5a:f8:84:e3:60:d1:f8:e6:1f:b0:e1:6c:96: 90:7e:93:de:7a:80:a4:f8:c1:f4:a6:a8:4c:59:00:89:64:3c: df:ef:e4:f0 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEh6K7NwhLs6BREk1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwODE0MjMzM1oXDTI3MDQxMzEzMjMzM1owLzEtMCsGA1UEAxMk NDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVmNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtkuPeizlsHjfMie+l2YT2pCv0E1BD+KLrQw X+VksFZbL+PoTnbqEgSui972RvJNdFoNs9Q8H9M516fG+1Z5htr3l74/G7j7wI5i U9DKI//4IexpsfKocPIrrrvHLQbMLrokwVsGR8g+E0JVbL/Qy9FIhOsDLcqfUzlU ODuOxefLKy11NReQ71y/1xRQSHu4+SvzIlYQP4HrKTSIn8vkoaN0C8JC2O6KnM5r 1GhigxwwJFr7wjIZE3KdSBEGyMVn6Iw2xX0bwl8wIzDuBUIWtMZh9Nt76xe6aQ1y OgtOxmMNRCv9fVBJsJ2BiNuDvGFCk+qzhigHE8ztPdEZ+fVejwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFEt/X0oQ7SMJgIuTiNervFch8G+iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQ2NGNkMGQ0LTZkYTgtNDk3Yy1i MjcwLWNiNjU4ZDQ1ZjRlOC80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0 NWY0ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBAQXXIADBAUYNWADBAQYjPADBAUYj4ADBAZsqoAD BAOi9+ADBAWt94ADBAXY1MAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVBA9AbWUUXoTATlb9xDfNNSNShoZ 6c9qKkaB4lmIcjLIVeJLrntpWayj+XgasCsWbO3pnZ33oZtwVpB1cIyUhQRzIsNI xh9xrcAVXLvgxdHFOXIbkZ4AXCfupUo9F+sOOZCh8/kVwvJbKyYPWTOacnyuhP2/ px6ucJeMppODK5RFjMi/jC25Z2ZBbuZG3XRDbcfWKJV+Ub2jnqGTjCOr0h4CYOlc N2il/VACYFZa7V62m6VRdPbkhhg1h+mVz/1YMVhj2xhGdEMj7pNGDhMi+r8svA/K pD0tD9SUV+5a+ITjYNH45h+w4WyWkH6T3nqApPjB9KaoTFkAiWQ83+/k8A== -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:23 2025 by rpki-client