$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer File: a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer (raw, json) Hash identifier: XRgBY9O0iq+SX62y4lXOStfJYc7x7lCFZmsuInCe3kM= Subject key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B4E85D6AC826F6561E484940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 15:20:35 +0000 Certificate not after: Tue 04 May 2027 14:20:35 +0000 Subordinate resources: AS: 63134 IP: 61.8.176.0/20 IP: 76.164.216.0/22 IP: 169.150.4.0/22 IP: 199.91.240.0/21 IP: 199.204.184.0/22 IP: 205.173.160.0/21 IP: 2607:6680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:e8:5d:6a:c8:26:f6:56:1e:48:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 29 15:20:35 2025 GMT Not After : May 4 14:20:35 2027 GMT Subject: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:87:10:d3:04:f2:0e:1a:f6:3a:2b:c3:89: f2:f2:43:6a:d2:5f:78:ce:03:78:85:c2:de:af:f3: 85:7d:83:05:71:91:b8:00:49:d2:ed:45:33:d4:2b: 0c:ee:8b:59:0c:3b:64:60:1d:c5:af:9b:2b:eb:c9: 05:78:5d:ca:9a:52:cd:16:0e:29:70:fe:ee:48:ae: 05:b2:31:74:eb:ad:07:ad:74:40:75:0e:25:e1:b7: e7:d4:27:73:b0:20:84:8d:8d:0f:08:e1:f2:46:7f: 0c:4d:e6:77:e4:7a:43:72:75:20:b0:7c:29:9f:59: 3a:e6:30:9b:2b:68:b0:3b:3d:6c:fd:3d:f1:74:6a: da:a6:f1:24:fb:c1:ee:1c:3e:0b:90:b7:72:c1:69: f2:15:fa:05:77:d4:68:4c:4b:ad:1d:a6:f7:3f:dc: 4c:37:46:55:57:0a:43:f2:fe:d1:bf:03:b2:2b:5b: da:b3:e1:1f:3c:3c:69:24:82:a5:0b:1c:9b:3c:77: ae:b4:d0:b9:01:ab:bf:39:f0:bc:99:a0:c3:62:d2: 92:06:8f:01:9c:2a:34:ab:d7:79:e8:70:24:c3:c0: 27:e7:5f:97:78:fb:9c:bc:ab:de:b8:51:cf:42:23: ec:f0:8f:94:ef:87:d7:53:fe:df:da:a2:b8:86:af: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 61.8.176.0/20 76.164.216.0/22 169.150.4.0/22 199.91.240.0/21 199.204.184.0/22 205.173.160.0/21 IPv6: 2607:6680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63134 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0f:3b:75:8b:88:4d:4f:2b:15:6e:87:69:3c:c3:70:05:b6: 35:ba:25:07:06:75:e5:4f:df:f5:30:a2:3e:f5:12:5b:94:b5: 16:f7:00:88:da:3e:13:30:d3:b5:9d:52:38:78:7b:1d:67:9d: 83:74:aa:d8:a4:1a:82:44:b7:bd:99:5a:5d:f3:a8:dd:c9:17: 5b:c5:d7:12:8d:4e:a4:ed:96:b2:69:b6:ff:56:1e:43:94:ba: 20:fd:f9:4d:43:a4:2b:0a:79:ef:cf:d6:e6:8a:71:8c:76:ec: 08:59:57:02:b6:bd:4c:22:c6:67:c9:23:6f:50:63:4d:e9:6b: e8:5f:b3:4c:56:5e:93:b2:21:51:47:f3:3d:37:2c:98:e5:b1: f7:99:c9:4e:70:a5:af:f6:47:e2:00:da:82:0e:dc:f6:6f:fb: 6b:d6:52:3d:eb:78:3f:88:bd:4a:f5:70:02:71:e7:68:aa:73: 90:c4:2b:31:fc:a5:36:d5:68:16:34:c0:d1:38:b2:e5:2d:7e: 97:da:83:39:8e:cf:d4:bd:ec:65:45:c5:b0:ec:00:cc:08:80: ee:5c:1e:ec:94:c7:78:65:49:02:32:34:83:2f:f8:d2:24:e9: 45:c9:3b:58:3a:c7:4c:5f:6e:9a:4c:c2:64:bb:60:0c:49:5c: 72:3c:9d:1d -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEi06F1qyCb2Vh5ISUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyOTE1MjAzNVoXDTI3MDUwNDE0MjAzNVowLzEtMCsGA1UEAxMk YTFkYjVjMDktNDU5MC00NGI1LTgwMjMtZmE0YmRkOGQ1YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6HENME8g4a9jorw4ny8kNq0l94zgN4hcLe r/OFfYMFcZG4AEnS7UUz1CsM7otZDDtkYB3Fr5sr68kFeF3KmlLNFg4pcP7uSK4F sjF0660HrXRAdQ4l4bfn1CdzsCCEjY0PCOHyRn8MTeZ35HpDcnUgsHwpn1k65jCb K2iwOz1s/T3xdGrapvEk+8HuHD4LkLdywWnyFfoFd9RoTEutHab3P9xMN0ZVVwpD 8v7RvwOyK1vas+EfPDxpJIKlCxybPHeutNC5Aau/OfC8maDDYtKSBo8BnCo0q9d5 6HAkw8An51+XePucvKveuFHPQiPs8I+U74fXU/7f2qK4hq/jkwIDAQABo4IESDCC BEQwHQYDVR0OBBYEFO68ArIjZ/JqUVoWf15yI7yWDUCiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h MWRiNWMwOS00NTkwLTQ0YjUtODAyMy1mYTRiZGQ4ZDViYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ExZGI1YzA5LTQ1OTAtNDRiNS04 MDIzLWZhNGJkZDhkNWJhYy9hMWRiNWMwOS00NTkwLTQ0YjUtODAyMy1mYTRiZGQ4 ZDViYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAQ9CLADBAJMpNgDBAKplgQDBAPHW/ADBALHzLgD BAPNraAwDQQCAAIwBwMFACYHZoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPae MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0PO3WLiE1PKxVuh2k8w3AFtjW6JQcGdeVP3/Uwoj71EluUtRb3 AIjaPhMw07WdUjh4ex1nnYN0qtikGoJEt72ZWl3zqN3JF1vF1xKNTqTtlrJptv9W HkOUuiD9+U1DpCsKee/P1uaKcYx27AhZVwK2vUwixmfJI29QY03pa+hfs0xWXpOy IVFH8z03LJjlsfeZyU5wpa/2R+IA2oIO3PZv+2vWUj3reD+IvUr1cAJx52iqc5DE KzH8pTbVaBY0wNE4suUtfpfagzmOz9S97GVFxbDsAMwIgO5cHuyUx3hlSQIyNIMv +NIk6UXJO1g6x0xfbppMwmS7YAxJXHI8nR0= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:21 2025 by rpki-client