$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93ce82c6-de9e-4571-9fb2-f5743fa004c6.cer File: 93ce82c6-de9e-4571-9fb2-f5743fa004c6.cer (raw, json) Hash identifier: Cfz1v5CACviX59njlXAQghiej+Z86dx6zjwy+YzXhvY= Subject key identifier: 42:E6:1F:E4:CE:D4:E6:09:7D:FA:A9:BC:30:27:06:53:0C:66:C4:51 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858489C9C8A9CC53891889EB4E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93ce82c6-de9e-4571-9fb2-f5743fa004c6/93ce82c6-de9e-4571-9fb2-f5743fa004c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93ce82c6-de9e-4571-9fb2-f5743fa004c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jan 2025 22:28:24 +0000 Certificate not after: Sun 25 Apr 2027 21:28:24 +0000 Subordinate resources: AS: 11785 IP: 209.127.197.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9c:9c:8a:9c:c5:38:91:88:9e:b4:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 20 22:28:24 2025 GMT Not After : Apr 25 21:28:24 2027 GMT Subject: CN=93ce82c6-de9e-4571-9fb2-f5743fa004c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:72:96:1e:32:0a:9f:dc:4c:d4:ee:da:2e: 4b:cb:ff:a7:90:49:43:f3:b0:3e:b5:c6:b4:a7:51: db:7f:14:81:1e:2d:31:39:f6:bc:b8:0f:d4:fa:fe: 99:1b:48:d8:c1:4f:40:c8:91:45:dc:61:75:c3:f6: af:5b:5a:3c:c1:e5:bc:2e:4f:a3:4c:d0:09:15:46: da:ab:41:28:d9:ef:75:90:41:c9:c3:0a:0a:38:cc: d1:dd:c2:3c:64:07:ba:69:1a:1d:38:63:34:3d:5e: ac:b8:bf:a0:b8:be:03:c3:c4:94:59:70:6e:1f:6b: 93:7d:2a:cd:bb:f7:d8:55:a1:f4:28:b0:a3:88:68: d6:c3:cc:78:39:a2:a8:0f:f5:16:5c:2e:86:28:c5: 62:5e:a1:c3:44:20:ef:29:0d:23:6f:a1:09:2b:14: c7:d5:7b:7e:01:b0:ab:fb:5e:66:8d:f2:41:53:45: 6e:6f:8a:73:aa:ce:5c:89:ac:cd:12:37:27:73:5a: 45:86:60:3f:d3:0e:62:70:4a:d3:e9:30:ba:5f:bb: 6b:c5:0c:4a:41:dd:24:a2:ea:a1:cf:c6:df:f2:ec: 82:49:e1:40:81:24:60:10:5f:19:36:ca:59:d8:9e: 70:9d:3f:c2:4c:a5:b7:5c:8a:8c:70:f7:5d:b3:28: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:1F:E4:CE:D4:E6:09:7D:FA:A9:BC:30:27:06:53:0C:66:C4:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93ce82c6-de9e-4571-9fb2-f5743fa004c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93ce82c6-de9e-4571-9fb2-f5743fa004c6/93ce82c6-de9e-4571-9fb2-f5743fa004c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 209.127.197.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11785 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:69:9d:38:17:ac:71:d5:82:a3:50:66:36:22:c1:f3:9a:46: fa:ba:b1:44:b2:a3:3c:a4:21:d0:bb:1d:5a:ea:31:36:52:83: 11:30:2d:62:3e:b0:40:6f:2f:0b:1f:f3:25:3c:aa:f4:1b:4d: f6:96:b0:f6:49:f9:53:92:87:ba:c9:b7:a2:c4:39:0c:a5:21: e6:7a:b3:29:59:7c:50:24:73:66:1d:79:94:c9:9f:6c:44:a9: 7c:26:f4:c9:e4:d6:f8:29:e4:d7:5f:f6:be:aa:11:a8:43:92: b6:dc:56:6e:27:ba:b6:21:30:39:c2:ff:cf:d2:bb:81:9b:e5: 91:a0:aa:99:a9:1a:88:6e:74:f3:b7:94:02:67:27:c6:83:25: 94:c3:d6:35:bb:cd:64:17:15:47:ae:ec:4f:f1:ea:6a:e9:cb: d7:5a:7c:59:28:7b:d6:f6:c8:df:11:80:3a:57:a7:87:d5:95: 3f:31:78:64:c2:7c:aa:1b:0e:df:43:28:3c:af:41:75:f4:93: cf:4d:3d:c2:37:0a:64:07:c8:21:06:bd:1c:39:ce:cd:eb:65: 38:41:fb:3e:10:58:b9:41:57:4f:cc:23:90:9b:f3:c5:0d:77: de:fa:12:8d:c1:e1:91:b3:a8:0e:dc:ed:c0:49:66:51:ff:6e: c3:b6:87:c6 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEicnIqcxTiRiJ604wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMDIyMjgyNFoXDTI3MDQyNTIxMjgyNFowLzEtMCsGA1UEAxMk OTNjZTgyYzYtZGU5ZS00NTcxLTlmYjItZjU3NDNmYTAwNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu1ylh4yCp/cTNTu2i5Ly/+nkElD87A+tca0 p1HbfxSBHi0xOfa8uA/U+v6ZG0jYwU9AyJFF3GF1w/avW1o8weW8Lk+jTNAJFUba q0Eo2e91kEHJwwoKOMzR3cI8ZAe6aRodOGM0PV6suL+guL4Dw8SUWXBuH2uTfSrN u/fYVaH0KLCjiGjWw8x4OaKoD/UWXC6GKMViXqHDRCDvKQ0jb6EJKxTH1Xt+AbCr +15mjfJBU0Vub4pzqs5ciazNEjcnc1pFhmA/0w5icErT6TC6X7trxQxKQd0kouqh z8bf8uyCSeFAgSRgEF8ZNspZ2J5wnT/CTKW3XIqMcPddsygsvwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFELmH+TO1OYJffqpvDAnBlMMZsRRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 M2NlODJjNi1kZTllLTQ1NzEtOWZiMi1mNTc0M2ZhMDA0YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzkzY2U4MmM2LWRlOWUtNDU3MS05 ZmIyLWY1NzQzZmEwMDRjNi85M2NlODJjNi1kZTllLTQ1NzEtOWZiMi1mNTc0M2Zh MDA0YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRf8UwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC LgkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAH2mdOBescdWCo1BmNiLB85pG+rqxRLKjPKQh0LsdWuoxNlKD ETAtYj6wQG8vCx/zJTyq9BtN9paw9kn5U5KHusm3osQ5DKUh5nqzKVl8UCRzZh15 lMmfbESpfCb0yeTW+Cnk11/2vqoRqEOSttxWbie6tiEwOcL/z9K7gZvlkaCqmaka iG5087eUAmcnxoMllMPWNbvNZBcVR67sT/HqaunL11p8WSh71vbI3xGAOlenh9WV PzF4ZMJ8qhsO30MoPK9BdfSTz009wjcKZAfIIQa9HDnOzetlOEH7PhBYuUFXT8wj kJvzxQ133voSjcHhkbOoDtztwElmUf9uw7aHxg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:01 2025 by rpki-client