$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer File: 80622965-3bef-4e3d-abce-c342f2c7ccff.cer (raw, json) Hash identifier: iSdQN1Dvz8efMEWtQcw1/Es6NZqBuRB/XBaIrlTOwfc= Subject key identifier: 73:3E:2B:6E:52:F4:24:FD:97:07:4C:B0:9C:16:C5:7E:C7:DD:30:D6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848D7E058240DD71E718548F480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 03:57:43 +0000 Certificate not after: Mon 17 May 2027 02:57:43 +0000 Subordinate resources: AS: 31772 AS: 54691 IP: 209.182.250.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:e0:58:24:0d:d7:1e:71:85:48:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 11 03:57:43 2025 GMT Not After : May 17 02:57:43 2027 GMT Subject: CN=80622965-3bef-4e3d-abce-c342f2c7ccff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:92:94:13:48:71:e1:2f:48:cb:ed:b6:25:39: 38:f3:2f:60:72:38:c3:98:2f:c1:00:ec:15:03:6c: 46:6e:f4:17:2a:e9:71:d6:c2:f6:a9:70:e3:6f:6e: 2b:5b:14:c1:5f:00:de:0e:35:0f:c1:54:41:00:12: d5:be:21:c2:ea:46:af:a5:f7:ef:fb:70:ee:52:fe: 6a:0a:18:09:d9:17:a8:9c:ce:d6:4f:61:57:d4:07: 8f:f4:fd:5c:13:bd:3b:67:0f:4b:4d:a3:f7:11:38: 91:a4:1a:19:92:6c:94:c2:a1:e8:07:fa:51:23:81: 8e:85:f0:8a:07:65:31:0a:52:8e:a5:87:22:23:d4: fb:a0:cd:24:bb:12:65:cb:47:34:f1:ec:4a:49:97: ac:ca:75:f9:1c:63:51:f4:39:c5:27:e7:7e:20:02: a1:c7:7c:72:f3:36:cd:f6:83:01:51:bc:55:47:79: c0:a7:ad:65:0f:21:6b:ab:95:e0:3b:c9:96:b6:23: ab:b4:61:15:c7:8d:d4:cf:33:f0:e5:5e:52:16:e5: fc:a9:de:6b:39:c5:2d:4c:53:05:fd:60:b2:fb:c3: 6e:d6:c6:df:93:04:3d:40:2b:c7:bf:3e:97:ff:8a: 68:bd:c2:09:e6:dc:b2:bd:71:7f:22:ef:ee:c4:15: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3E:2B:6E:52:F4:24:FD:97:07:4C:B0:9C:16:C5:7E:C7:DD:30:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 209.182.250.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31772 54691 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6c:17:d7:e3:b8:dc:7c:80:37:03:04:87:f5:61:94:d1:4a: ce:93:96:03:86:82:5e:72:5d:4e:1a:c1:61:02:a2:c4:e4:67: fb:bd:ab:3b:0c:e4:63:5b:c2:1d:43:50:3c:ea:14:b9:0f:97: bb:4c:a7:99:b5:e0:9e:c0:f3:88:93:a0:09:a2:d3:21:f7:b4: 9c:35:cb:2a:4f:46:8e:f8:53:ce:eb:61:ff:03:e0:d5:e5:fc: bd:e1:12:24:69:bd:4a:de:ac:53:c0:eb:37:ca:fe:1d:c7:7a: 7f:bd:1d:73:fc:8c:d8:7d:e4:7c:3e:fc:22:23:ba:98:df:28: 06:9a:10:ed:1f:f8:7d:89:fd:c7:3a:f5:f4:8c:50:3f:48:ea: 1c:0f:12:bc:d9:b5:96:e8:a4:2d:d2:cd:c8:41:1d:17:69:c8: 14:a5:06:56:03:be:a0:3e:7b:09:1e:dc:4a:d5:ee:41:cb:c4: dd:60:f7:af:53:c6:c1:91:4c:e7:a2:d7:6c:69:49:51:5a:f1: 1f:c3:7b:85:90:5f:0d:e3:85:a3:53:78:2a:66:ad:cf:5f:04: c2:e7:e6:c3:f4:b8:25:fa:f8:3b:94:5f:57:58:6d:80:c4:be: b6:bf:05:99:18:9a:ce:34:26:c8:a6:a3:1f:a5:83:d2:ac:f4: a7:92:a5:10 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEjX4FgkDdcecYVI9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMTAzNTc0M1oXDTI3MDUxNzAyNTc0M1owLzEtMCsGA1UEAxMk ODA2MjI5NjUtM2JlZi00ZTNkLWFiY2UtYzM0MmYyYzdjY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJKUE0hx4S9Iy+22JTk48y9gcjjDmC/BAOwV A2xGbvQXKulx1sL2qXDjb24rWxTBXwDeDjUPwVRBABLVviHC6kavpffv+3DuUv5q ChgJ2ReonM7WT2FX1AeP9P1cE707Zw9LTaP3ETiRpBoZkmyUwqHoB/pRI4GOhfCK B2UxClKOpYciI9T7oM0kuxJly0c08exKSZesynX5HGNR9DnFJ+d+IAKhx3xy8zbN 9oMBUbxVR3nAp61lDyFrq5XgO8mWtiOrtGEVx43UzzPw5V5SFuX8qd5rOcUtTFMF /WCy+8Nu1sbfkwQ9QCvHvz6X/4povcIJ5tyyvXF/Iu/uxBXEYwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFHM+K25S9CT9lwdMsJwWxX7H3TDWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 MDYyMjk2NS0zYmVmLTRlM2QtYWJjZS1jMzQyZjJjN2NjZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzgwNjIyOTY1LTNiZWYtNGUzZC1h YmNlLWMzNDJmMmM3Y2NmZi84MDYyMjk2NS0zYmVmLTRlM2QtYWJjZS1jMzQyZjJj N2NjZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHRtvowHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC fBwCAwDVozBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCIbBfX47jcfIA3AwSH9WGU0UrOk5YDhoJecl1OGsFh AqLE5Gf7vas7DORjW8IdQ1A86hS5D5e7TKeZteCewPOIk6AJotMh97ScNcsqT0aO +FPO62H/A+DV5fy94RIkab1K3qxTwOs3yv4dx3p/vR1z/IzYfeR8PvwiI7qY3ygG mhDtH/h9if3HOvX0jFA/SOocDxK82bWW6KQt0s3IQR0XacgUpQZWA76gPnsJHtxK 1e5By8TdYPevU8bBkUznotdsaUlRWvEfw3uFkF8N44WjU3gqZq3PXwTC5+bD9Lgl +vg7lF9XWG2AxL62vwWZGJrONCbIpqMfpYPSrPSnkqUQ -----END CERTIFICATE-----Generated at Fri Apr 4 16:06:45 2025 by rpki-client