$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5.cer File: 599cfd9a-6248-4c75-b331-706266d47cb5.cer (raw, json) Hash identifier: x1cw66+0IvfqJM4KjSNs5knFOs9Dn6W2mnxFONuT62s= Subject key identifier: 37:F4:27:1A:11:89:CD:82:F0:26:73:2D:5C:9B:D0:DF:A6:EE:7A:4D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A14223F72B8B5C7C98B71EF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/599cfd9a-6248-4c75-b331-706266d47cb5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 14:25:18 +0000 Certificate not after: Tue 27 Apr 2027 13:25:18 +0000 Subordinate resources: AS: 395209 IP: 45.41.64.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:42:23:f7:2b:8b:5c:7c:98:b7:1e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 22 14:25:18 2025 GMT Not After : Apr 27 13:25:18 2027 GMT Subject: CN=599cfd9a-6248-4c75-b331-706266d47cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:fe:72:34:ab:f4:ad:ad:91:a0:df:80:0c: 67:80:de:bf:f2:6d:2d:be:61:ac:04:ef:61:28:d9: 0c:dc:c5:8c:c1:5d:0e:c0:fd:c0:67:7c:9a:6d:76: 25:9a:06:4c:c1:71:1d:62:15:4a:44:20:56:32:93: 1f:1d:57:69:ba:c8:4e:71:91:e1:37:77:ab:e3:30: e8:40:74:79:68:51:90:6a:87:6c:ed:ed:1e:0d:86: d2:8c:7e:0c:c7:4f:6c:85:59:32:8e:36:6c:28:46: 4d:65:a8:b0:ee:af:d0:ad:32:c6:a2:9c:7c:9b:1e: 10:4e:34:61:dc:21:20:8e:07:91:a4:1c:f3:09:d0: ed:d4:df:00:9f:f9:51:86:1c:f2:ad:66:ba:e0:ca: 6c:92:b5:e2:21:9f:93:dd:5c:73:6f:41:4d:5d:fa: a4:c3:0f:4a:a9:67:4c:d3:f5:b8:f6:19:39:0f:bb: 47:46:6e:15:ec:db:32:59:bd:56:fe:f5:71:12:b7: 4a:71:4e:c3:ee:93:dc:ac:5e:9f:6c:61:c8:0f:74: 49:54:65:88:82:a3:a1:c2:34:6b:f6:c7:19:14:13: 7c:9d:46:b3:36:70:33:25:fe:5b:ae:10:0b:b1:eb: 30:d7:76:31:d0:b6:35:3b:1d:ce:f1:fa:30:58:44: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F4:27:1A:11:89:CD:82:F0:26:73:2D:5C:9B:D0:DF:A6:EE:7A:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/599cfd9a-6248-4c75-b331-706266d47cb5/599cfd9a-6248-4c75-b331-706266d47cb5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395209 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:61:d5:a9:11:5a:12:cc:22:ae:da:86:3e:8b:11:6b:bc:28: 27:fb:b7:eb:99:c2:20:01:8b:24:c2:b8:1e:dd:ca:f4:f8:18: 61:67:af:7f:0c:5d:17:c6:9b:cb:52:9f:08:7e:70:24:40:23: ff:5f:2b:f1:d7:b3:f3:d5:01:38:82:68:3d:d0:1b:87:b8:56: d7:6d:b3:e6:43:18:d7:a0:3a:44:5a:4e:55:b6:e2:8a:36:53: 8f:b2:af:79:7a:a2:9f:2f:60:5d:e2:c3:c8:e6:5a:b0:79:e7: a0:0a:91:fc:00:2d:d5:33:67:4c:22:f0:8c:41:93:5e:fc:4a: a3:73:e1:b7:a7:80:cb:67:1c:25:a4:9f:bf:41:24:b7:ed:82: a9:a7:29:cb:d4:99:76:32:8f:f7:11:ba:4c:0b:79:78:5a:fd: 70:56:54:b2:fc:22:e9:ab:0b:2e:f1:96:ae:dc:84:99:1f:82: 4c:70:47:e2:88:c4:dc:a9:39:d1:db:bd:d4:c9:6d:dc:2b:bd: 2b:50:63:10:91:2a:5f:52:56:9b:50:5c:f0:be:a3:f6:d9:23: f1:54:b9:a8:f1:55:10:f6:a7:ef:eb:67:c5:be:df:d1:bc:63: 0c:de:95:90:5e:f4:90:d4:3c:b6:fb:9f:2e:da:5f:4c:af:73: b5:23:97:f1 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEihQiP3K4tcfJi3HvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMjE0MjUxOFoXDTI3MDQyNzEzMjUxOFowLzEtMCsGA1UEAxMk NTk5Y2ZkOWEtNjI0OC00Yzc1LWIzMzEtNzA2MjY2ZDQ3Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7+cjSr9K2tkaDfgAxngN6/8m0tvmGsBO9h KNkM3MWMwV0OwP3AZ3yabXYlmgZMwXEdYhVKRCBWMpMfHVdpushOcZHhN3er4zDo QHR5aFGQaods7e0eDYbSjH4Mx09shVkyjjZsKEZNZaiw7q/QrTLGopx8mx4QTjRh 3CEgjgeRpBzzCdDt1N8An/lRhhzyrWa64MpskrXiIZ+T3Vxzb0FNXfqkww9KqWdM 0/W49hk5D7tHRm4V7NsyWb1W/vVxErdKcU7D7pPcrF6fbGHID3RJVGWIgqOhwjRr 9scZFBN8nUazNnAzJf5brhALsesw13Yx0LY1Ox3O8fowWER6xwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDf0JxoRic2C8CZzLVyb0N+m7npNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 OTljZmQ5YS02MjQ4LTRjNzUtYjMzMS03MDYyNjZkNDdjYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU5OWNmZDlhLTYyNDgtNGM3NS1i MzMxLTcwNjI2NmQ0N2NiNS81OTljZmQ5YS02MjQ4LTRjNzUtYjMzMS03MDYyNjZk NDdjYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAQtKUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgfJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHRh1akRWhLMIq7ahj6LEWu8KCf7t+uZwiABiyTCuB7dyvT4 GGFnr38MXRfGm8tSnwh+cCRAI/9fK/HXs/PVATiCaD3QG4e4Vtdts+ZDGNegOkRa TlW24oo2U4+yr3l6op8vYF3iw8jmWrB556AKkfwALdUzZ0wi8IxBk178SqNz4ben gMtnHCWkn79BJLftgqmnKcvUmXYyj/cRukwLeXha/XBWVLL8IumrCy7xlq7chJkf gkxwR+KIxNypOdHbvdTJbdwrvStQYxCRKl9SVptQXPC+o/bZI/FUuajxVRD2p+/r Z8W+39G8YwzelZBe9JDUPLb7ny7aX0yvc7Ujl/E= -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:48 2025 by rpki-client