$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer File: 58520fc1-e07b-4b1b-ad59-5756198c9756.cer (raw, json) Hash identifier: 3n/Pb/QC3oMYhC6aqzHhm0ZeXqDsJ4aFvE0mj9LS2BY= Subject key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858493AE73AA577F91ACFDFFE59A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 15:16:36 +0000 Certificate not after: Mon 21 Jun 2027 15:16:36 +0000 Subordinate resources: AS: 22770 IP: 199.181.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:e7:3a:a5:77:f9:1a:cf:df:fe:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 15:16:36 2025 GMT Not After : Jun 21 15:16:36 2027 GMT Subject: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:4a:1d:32:8c:39:ba:4c:e4:ef:d4:e1:c0: 5d:12:da:84:d1:6c:b3:49:49:79:e0:23:7e:7e:b0: 19:1b:f5:b1:c4:29:14:ab:af:56:50:20:cd:cf:a1: 57:f9:a0:2b:fe:02:ad:ae:15:7d:62:99:8d:8a:b0: 12:60:6c:fe:32:2f:3b:d0:33:a6:65:89:76:23:13: a0:86:13:fe:30:f1:f8:1f:d2:cb:67:e3:66:65:fc: 52:9f:16:ec:ea:f6:17:72:5d:7f:27:bb:8a:4a:15: 43:50:53:c8:10:f5:72:87:c6:de:9f:3b:62:9d:21: f5:3d:d7:a7:03:9f:22:55:16:28:ba:5e:ef:5d:a6: b2:53:73:84:0d:61:82:93:6e:56:3e:20:51:e3:d7: d4:25:03:db:ed:43:71:86:03:f5:b3:10:11:5d:fa: a7:51:89:f0:56:c8:19:62:88:14:17:52:a4:40:38: b1:5d:6e:cf:dc:c6:56:70:3a:b0:3f:b2:97:d7:52: 1e:83:9e:9d:5f:c9:99:b9:72:3f:39:a3:ca:0d:56: d7:06:8a:03:ad:8a:30:8b:c7:07:5f:9d:66:5a:b2: 4c:ca:6d:32:95:0f:1a:8b:aa:53:c6:09:b1:31:98: d0:ee:e8:cc:44:5c:f9:ca:f3:12:4c:f7:72:24:74: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.181.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22770 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fc:30:6f:77:6d:d0:dd:3a:96:ba:c4:ab:0a:fa:d2:9c:a1: b7:66:5b:5c:07:fb:a5:71:29:1e:4a:56:55:5b:a6:9c:94:6f: 59:1a:2a:81:ce:fa:19:a2:8e:49:3a:91:16:3e:f3:9a:20:1d: bb:ea:05:3c:05:ef:8b:b3:fe:b6:a3:70:58:8e:2b:87:ef:3a: 18:a2:d8:a9:b7:bb:09:8a:7d:95:c9:3e:35:73:cb:f5:24:3b: 52:cc:e7:36:d4:28:43:4d:e0:a9:45:c4:bc:5b:82:8e:a3:e5: a9:f2:33:65:ea:e3:0d:57:69:2c:d6:0d:3b:46:b7:5f:1f:05: 74:12:e7:9e:bc:94:58:e7:77:d0:e3:86:ae:f6:e5:2a:ee:27: 72:42:f2:e0:8a:80:71:44:35:05:52:2a:ad:69:ef:2e:2a:7b: d9:15:dd:fc:e1:67:41:cb:c2:f3:03:68:8d:b8:15:73:ae:5e: e4:4c:4c:3d:b7:ea:ae:0f:e2:8c:e4:b2:87:79:da:4d:23:2b: 8c:47:a2:75:1d:85:52:9d:16:68:3c:0c:51:0d:1b:76:af:88: 3f:8e:c5:73:28:db:38:3a:95:66:9e:92:29:02:48:42:d9:63: e0:69:f9:ba:89:8b:52:a0:21:86:27:c8:fe:1c:84:1c:78:77: c8:ca:f0:3f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEk65zqld/kaz9/+WaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxODE1MTYzNloXDTI3MDYyMTE1MTYzNlowLzEtMCsGA1UEAxMk NTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYRKHTKMObpM5O/U4cBdEtqE0WyzSUl54CN+ frAZG/WxxCkUq69WUCDNz6FX+aAr/gKtrhV9YpmNirASYGz+Mi870DOmZYl2IxOg hhP+MPH4H9LLZ+NmZfxSnxbs6vYXcl1/J7uKShVDUFPIEPVyh8benztinSH1Pden A58iVRYoul7vXaayU3OEDWGCk25WPiBR49fUJQPb7UNxhgP1sxARXfqnUYnwVsgZ YogUF1KkQDixXW7P3MZWcDqwP7KX11Ieg56dX8mZuXI/OaPKDVbXBooDrYowi8cH X51mWrJMym0ylQ8ai6pTxgmxMZjQ7ujMRFz5yvMSTPdyJHQXdwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFItoWkeW05bR+aFf5ziV4CmD5tQFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU4NTIwZmMxLWUwN2ItNGIxYi1h ZDU5LTU3NTYxOThjOTc1Ni81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4 Yzk3NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXHtSAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WPIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAbfwwb3dt0N06lrrEqwr60pyht2ZbXAf7pXEpHkpWVVumnJRv WRoqgc76GaKOSTqRFj7zmiAdu+oFPAXvi7P+tqNwWI4rh+86GKLYqbe7CYp9lck+ NXPL9SQ7UsznNtQoQ03gqUXEvFuCjqPlqfIzZerjDVdpLNYNO0a3Xx8FdBLnnryU WOd30OOGrvblKu4nckLy4IqAcUQ1BVIqrWnvLip72RXd/OFnQcvC8wNojbgVc65e 5ExMPbfqrg/ijOSyh3naTSMrjEeidR2FUp0WaDwMUQ0bdq+IP47FcyjbODqVZp6S KQJIQtlj4Gn5uomLUqAhhifI/hyEHHh3yMrwPw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:01 2025 by rpki-client