$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer File: 525bd43e-79fc-4d46-b0a3-ea097485469b.cer (raw, json) Hash identifier: BLJNGJ32ivhOM6dG84YRJZRjGKbJYv2ZUW/OjxCEdcs= Subject key identifier: 74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848DBF819B91D3DF43CDA595640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 15:08:48 +0000 Certificate not after: Tue 18 May 2027 14:08:48 +0000 Subordinate resources: AS: 22436 IP: 208.67.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:f8:19:b9:1d:3d:f4:3c:da:59:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 12 15:08:48 2025 GMT Not After : May 18 14:08:48 2027 GMT Subject: CN=525bd43e-79fc-4d46-b0a3-ea097485469b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:88:3b:9a:8f:d8:ed:89:0a:bc:b4:60:90:cb: a3:75:b1:17:48:23:f0:53:f5:2d:e5:bb:78:2e:c1: 8b:8a:da:7e:ca:77:7d:4b:c5:7e:0a:f2:a9:0d:48: 3c:3f:cf:ed:26:db:fe:c8:ad:f0:7f:f1:d1:9a:2d: f0:c6:76:9e:eb:4c:fa:5b:b7:80:ee:d3:6b:5f:d0: 14:5f:cb:34:7d:77:60:3b:97:4c:84:cf:1c:d5:0d: 48:0a:7b:d0:9a:fc:dd:f5:c2:e0:37:61:81:78:86: af:63:b6:e4:9e:22:1b:a6:b7:04:12:d7:5a:12:ac: 40:89:84:c0:d0:be:41:a7:74:83:5d:01:ef:b9:ad: 82:53:fd:0f:4a:3d:16:15:e4:71:d0:fa:76:91:28: 10:1a:66:16:88:91:5f:2c:2b:7e:a7:11:36:20:bb: 89:ce:5d:ee:de:b4:28:cc:9b:af:52:ea:4a:59:5a: 4c:fd:80:70:f5:85:e9:6d:01:e5:47:3a:12:0a:cc: c6:2f:18:0e:70:8c:40:27:dc:a9:64:7f:51:53:7b: ef:f9:19:31:05:cd:41:0e:ff:a4:dc:90:4c:10:fc: 49:4b:d2:b1:e0:af:b6:48:6f:65:da:b1:c7:9c:ee: 68:7d:18:90:9a:49:22:0e:14:a0:dc:1f:d8:78:4a: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.67.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22436 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:53:5e:fc:72:00:13:88:bb:a4:42:87:f0:1a:c2:16:87:26: 68:e7:4b:ad:a5:22:b2:57:fb:72:9d:44:0f:d6:0d:43:b5:1b: ed:c1:67:17:b2:65:3c:44:53:02:17:27:95:37:a0:6d:72:67: 80:57:b1:9f:72:25:13:5a:db:1a:ed:2e:bc:a2:9d:66:6a:01: 77:5f:b9:18:85:95:63:51:94:b1:47:78:aa:2a:f4:b0:6f:19: 7d:8a:eb:b5:08:85:f7:e3:09:5f:70:a8:8b:f9:09:1e:ff:7e: 9b:32:28:00:31:81:7e:99:52:97:07:74:09:5d:3f:7c:f0:f1: 44:28:7d:3a:56:56:8d:36:e1:dd:8f:28:e0:75:36:23:15:64: 8b:b4:80:6b:0d:50:ed:3d:45:16:78:76:d5:3e:e2:3b:6e:ef: 89:e5:8e:72:5f:35:55:8a:f0:d0:40:b7:c3:c6:61:8a:88:b5: ed:0f:47:fa:73:e3:3b:b2:e6:b0:5c:ee:b3:3f:59:1c:e3:81: ff:ed:d6:be:9a:cc:f6:90:a6:56:3b:32:3d:e7:23:fc:34:86: 3c:f4:27:41:9f:4f:87:38:41:fd:18:91:fe:67:53:7f:ae:d1: d1:84:5e:c2:1e:ba:9b:11:6c:79:30:bb:ed:1a:93:80:31:a7: b2:9b:f9:34 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEjb+Bm5HT30PNpZVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMjE1MDg0OFoXDTI3MDUxODE0MDg0OFowLzEtMCsGA1UEAxMk NTI1YmQ0M2UtNzlmYy00ZDQ2LWIwYTMtZWEwOTc0ODU0NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIg7mo/Y7YkKvLRgkMujdbEXSCPwU/Ut5bt4 LsGLitp+ynd9S8V+CvKpDUg8P8/tJtv+yK3wf/HRmi3wxnae60z6W7eA7tNrX9AU X8s0fXdgO5dMhM8c1Q1ICnvQmvzd9cLgN2GBeIavY7bkniIbprcEEtdaEqxAiYTA 0L5Bp3SDXQHvua2CU/0PSj0WFeRx0Pp2kSgQGmYWiJFfLCt+pxE2ILuJzl3u3rQo zJuvUupKWVpM/YBw9YXpbQHlRzoSCszGLxgOcIxAJ9ypZH9RU3vv+RkxBc1BDv+k 3JBMEPxJS9Kx4K+2SG9l2rHHnO5ofRiQmkkiDhSg3B/YeEoTgwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHS1a6rF2HStLXLF69+otoOCDl+oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 MjViZDQzZS03OWZjLTRkNDYtYjBhMy1lYTA5NzQ4NTQ2OWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzUyNWJkNDNlLTc5ZmMtNGQ0Ni1i MGEzLWVhMDk3NDg1NDY5Yi81MjViZDQzZS03OWZjLTRkNDYtYjBhMy1lYTA5NzQ4 NTQ2OWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQQxwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC V6QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWVNe/HIAE4i7pEKH8BrCFocmaOdLraUislf7cp1ED9YNQ7Ub 7cFnF7JlPERTAhcnlTegbXJngFexn3IlE1rbGu0uvKKdZmoBd1+5GIWVY1GUsUd4 qir0sG8ZfYrrtQiF9+MJX3Coi/kJHv9+mzIoADGBfplSlwd0CV0/fPDxRCh9OlZW jTbh3Y8o4HU2IxVki7SAaw1Q7T1FFnh21T7iO27vieWOcl81VYrw0EC3w8Zhioi1 7Q9H+nPjO7LmsFzusz9ZHOOB/+3WvprM9pCmVjsyPecj/DSGPPQnQZ9PhzhB/RiR /mdTf67R0YRewh66mxFseTC77RqTgDGnspv5NA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:10 2025 by rpki-client