$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer File: a7840f46-b135-4a45-8c47-daede4b0b707.cer (raw, json) Hash identifier: djCi/iw2zEx0nApLhGhFIeHVF+W1T/QfLFYq3YYSDiI= Subject key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584930065CE5DA85C54F7B40EC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 17:45:27 +0000 Certificate not after: Fri 16 Apr 2027 22:15:59 +0000 Subordinate resources: AS: 12213 AS: 32298 AS: 398014 IP: 24.170.128.0/18 IP: 45.78.144.0/20 IP: 64.255.192.0/19 IP: 131.226.192.0/18 IP: 149.137.192.0 -- 149.137.211.255 IP: 149.137.216.0 -- 149.137.255.255 IP: 2600:cc00::/28 IP: 2604:7ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:06:5c:e5:da:85:c5:4f:7b:40:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 17:45:27 2025 GMT Not After : Apr 16 22:15:59 2027 GMT Subject: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:cd:81:2c:ea:04:45:0f:c1:55:99:10:9f: 44:f9:ce:7e:82:15:89:73:42:6b:56:78:cc:69:61: 3f:66:d4:54:b7:70:8d:57:c9:e7:6b:10:54:51:f4: c9:cc:ef:1a:41:b5:32:16:c7:00:ba:87:a0:cb:df: f1:84:a7:c0:e7:9f:1a:e9:06:bd:d4:74:c8:e3:66: d9:6b:e1:c1:56:cf:c3:23:d3:2d:16:ff:34:a3:5f: 7d:e8:01:5b:b8:9e:32:a6:8c:c8:d1:cf:a8:68:df: b3:bd:ad:ec:ed:bd:49:89:14:04:ad:bb:c6:da:25: bf:59:91:59:d0:a7:e5:81:a2:63:4b:39:a3:be:c7: 4b:fa:2d:9f:94:2c:15:fd:21:2f:ac:a7:32:88:33: f2:c9:eb:a0:bd:bf:0f:7e:52:8f:c6:12:af:d4:28: 0e:72:13:82:03:21:59:34:33:6a:ff:13:5f:fa:93: 42:62:38:0b:22:00:4d:7c:f2:19:ee:85:4a:1b:62: 1c:c4:21:9a:da:92:69:11:40:01:4f:cd:6f:03:65: 89:e8:97:76:86:50:03:3b:cb:84:83:86:80:99:c2: 8b:26:bf:19:ee:1c:00:72:11:c4:6e:31:04:d5:79: 08:11:7a:f1:9f:31:22:f5:f5:85:c2:2a:6f:9e:b9: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 45.78.144.0/20 64.255.192.0/19 131.226.192.0/18 149.137.192.0-149.137.211.255 149.137.216.0-149.137.255.255 IPv6: 2600:cc00::/28 2604:7ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12213 32298 398014 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5a:08:e4:9f:fe:1b:70:8b:ba:0a:62:cf:ea:cf:34:4b:7f: 73:ad:b6:1b:3e:b8:b2:5f:05:91:aa:87:9e:7a:0a:5e:e2:78: 7b:5a:4e:2e:27:06:58:cf:81:36:7f:ad:26:2b:91:57:b2:46: a2:d3:15:c2:e5:1d:6b:dc:3a:b4:83:d7:60:a1:03:57:34:5a: e9:3e:51:df:03:b7:73:73:d2:35:2b:2c:4b:5b:8b:9a:d2:5b: 90:9d:7c:d3:81:f6:8a:b7:f2:e1:63:36:5c:35:5d:43:7d:36: 53:70:76:c3:02:1d:59:2b:0a:23:05:c6:3a:62:96:e9:73:3a: 1f:c9:c1:f8:41:62:ae:67:0a:63:cd:29:e2:af:f0:2d:d2:58: 83:27:b8:13:40:f8:d1:a2:83:a9:60:86:16:0c:0c:5a:2e:28: 64:62:8a:d6:29:6c:fa:39:a4:cb:f5:e3:a8:fb:92:da:1f:1e: f3:49:a7:e6:8a:11:39:40:93:ec:6c:b6:d2:40:fe:d6:bd:5d: ec:d4:f0:7f:dc:6d:b4:81:ec:38:83:c6:e2:ed:75:8a:d7:8f: 7d:9d:aa:af:98:6e:3e:8e:4a:60:67:0e:d3:94:59:01:04:25: a7:b8:8b:86:ff:76:29:9e:d6:2b:13:b9:1d:a2:f5:19:62:b0: 99:8a:eb:3b -----BEGIN CERTIFICATE----- MIIHVDCCBjygAwIBAgIUAQ0Mn0MoWEkwBlzl2oXFT3tA7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNDE3NDUyN1oXDTI3MDQxNjIyMTU1OVowLzEtMCsGA1UEAxMk YTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBiNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst3NgSzqBEUPwVWZEJ9E+c5+ghWJc0JrVnjM aWE/ZtRUt3CNV8nnaxBUUfTJzO8aQbUyFscAuoegy9/xhKfA558a6Qa91HTI42bZ a+HBVs/DI9MtFv80o1996AFbuJ4ypozI0c+oaN+zva3s7b1JiRQErbvG2iW/WZFZ 0KflgaJjSzmjvsdL+i2flCwV/SEvrKcyiDPyyeugvb8PflKPxhKv1CgOchOCAyFZ NDNq/xNf+pNCYjgLIgBNfPIZ7oVKG2IcxCGa2pJpEUABT81vA2WJ6Jd2hlADO8uE g4aAmcKLJr8Z7hwAchHEbjEE1XkIEXrxnzEi9fWFwipvnrkitQIDAQABo4IEZjCC BGIwHQYDVR0OBBYEFJF8GepWbe3eoHvZMeYNLsNaFhPOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Nzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E3ODQwZjQ2LWIxMzUtNGE0NS04 YzQ3LWRhZWRlNGIwYjcwNy9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRi MGI3MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwYgYIKwYBBQUH AQcBAf8EUzBRMDkEAgABMDMDBAYYqoADBAQtTpADBAVA/8ADBAaD4sAwDAMEBpWJ wAMEApWJ0DALAwQDlYnYAwMBlYgwFAQCAAIwDgMFBCYAzAADBQAmBHrAMCIGCCsG AQUFBwEIAQH/BBMwEaAPMA0CAi+1AgJ+KgIDBhK+MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH9aCOSf/htw i7oKYs/qzzRLf3Otths+uLJfBZGqh556Cl7ieHtaTi4nBljPgTZ/rSYrkVeyRqLT FcLlHWvcOrSD12ChA1c0Wuk+Ud8Dt3Nz0jUrLEtbi5rSW5CdfNOB9oq38uFjNlw1 XUN9NlNwdsMCHVkrCiMFxjpilulzOh/JwfhBYq5nCmPNKeKv8C3SWIMnuBNA+NGi g6lghhYMDFouKGRiitYpbPo5pMv146j7ktofHvNJp+aKETlAk+xsttJA/ta9XezU 8H/cbbSB7DiDxuLtdYrXj32dqq+Ybj6OSmBnDtOUWQEEJae4i4b/dime1isTuR2i 9RlisJmK6zs= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:32 2025 by rpki-client