$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer File: ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer (raw, json) Hash identifier: F/qTK3Ub8b0+FDwiLmLw3sH/iilbsV8NAj/lWLlPIiI= Subject key identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848CE54E05C74BF2C9D82B3D780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Feb 2025 17:54:25 +0000 Certificate not after: Thu 29 Apr 2027 21:51:45 +0000 Subordinate resources: AS: 396083 IP: 156.2.0.0/16 IP: 160.84.0.0/16 IP: 192.52.170.0/24 IP: 192.58.211.0/24 IP: 192.84.7.0/24 IP: 192.104.50.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:54:e0:5c:74:bf:2c:9d:82:b3:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 7 17:54:25 2025 GMT Not After : Apr 29 21:51:45 2027 GMT Subject: CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:c7:95:08:f3:cf:18:ae:38:d1:15:d0:6a: ce:bb:d9:ae:f2:2c:1e:b4:70:16:22:e4:02:c9:23: 8b:75:5c:75:ba:a6:c1:00:5b:eb:84:78:c7:9f:1a: 89:c1:05:48:b7:bc:66:71:3e:cf:0c:76:52:13:35: 4d:bc:cf:da:2a:b0:4e:e4:77:37:25:3a:e0:73:cb: 47:a9:c3:0a:14:c1:83:92:10:73:f8:79:95:66:51: d3:83:48:5f:f4:d7:25:dd:11:ce:b5:fb:43:31:6c: 81:49:fc:a3:d1:36:17:2b:cc:2a:fe:5c:d5:b7:13: 46:73:b3:d7:ec:9a:e8:80:65:19:87:44:32:fc:7b: 8e:c8:36:1f:35:fc:75:12:39:ae:84:dd:90:ab:17: 79:d5:63:b8:5a:34:2b:60:a3:9a:1d:64:87:0c:2e: 0b:17:31:3f:1f:ab:25:9d:81:65:46:14:9a:15:07: 7e:b1:24:e1:97:07:84:40:30:0e:59:d1:8e:af:4f: 6d:ad:5c:1f:02:0e:26:6c:18:e6:03:27:f9:83:6c: 60:b2:19:d1:51:93:e2:82:7b:f9:bf:1b:84:f9:cf: ee:f6:c4:48:7e:b6:f3:0c:a7:75:4d:80:1e:e4:2e: da:94:f6:d0:cf:58:76:fc:a7:e0:20:4a:76:ad:17: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 156.2.0.0/16 160.84.0.0/16 192.52.170.0/24 192.58.211.0/24 192.84.7.0/24 192.104.50.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396083 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3f:a4:2c:bd:01:85:38:85:12:65:56:1f:98:98:59:51:f1: bd:f8:81:d4:04:8b:b5:39:06:45:2a:f6:87:87:07:13:30:a5: 1a:7b:c2:4e:ea:e0:71:c6:bc:f3:eb:b5:19:dd:31:ac:f0:ad: 1a:d1:aa:e0:02:81:cb:21:b7:1d:76:a9:5f:09:19:31:07:fa: 1f:33:dd:10:f6:01:25:36:26:f5:6a:e5:9c:65:39:6c:b2:d2: 09:fb:27:55:eb:3e:91:da:e3:d3:78:01:26:ab:44:e7:83:d9: 70:50:ea:fd:c0:10:24:47:bc:39:5e:5d:c0:f2:dc:2c:8b:b1: 48:00:0c:12:ea:77:68:4f:12:d1:58:89:eb:4c:b7:b5:bf:5c: 96:be:f7:69:53:2b:3b:20:de:a6:d5:4d:e7:92:55:b1:bc:0a: 25:b9:49:d3:3d:2e:10:8a:1c:32:0c:5d:69:7f:09:61:f6:9e: f1:fc:ca:69:c4:6d:6c:9e:0d:6d:e6:fd:69:fa:d6:e0:7d:18: b3:60:cf:ae:e0:0a:c2:d5:3f:25:98:98:e7:53:05:2c:af:da: 10:a3:2c:eb:e9:0b:5f:5d:3f:3e:3a:a9:ee:24:67:93:54:49: c9:60:4f:4c:86:f5:07:24:a3:81:b8:f3:47:11:07:dd:35:6c: 16:b4:13:ca -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEjOVOBcdL8snYKz14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwNzE3NTQyNVoXDTI3MDQyOTIxNTE0NVowLzEtMCsGA1UEAxMk YWI5OTFlZTQtZjVhZC00YzU0LWEwMWUtMTU2ZjI0YmFjOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWLHlQjzzxiuONEV0GrOu9mu8iwetHAWIuQC ySOLdVx1uqbBAFvrhHjHnxqJwQVIt7xmcT7PDHZSEzVNvM/aKrBO5Hc3JTrgc8tH qcMKFMGDkhBz+HmVZlHTg0hf9Ncl3RHOtftDMWyBSfyj0TYXK8wq/lzVtxNGc7PX 7JrogGUZh0Qy/HuOyDYfNfx1EjmuhN2Qqxd51WO4WjQrYKOaHWSHDC4LFzE/H6sl nYFlRhSaFQd+sSThlweEQDAOWdGOr09trVwfAg4mbBjmAyf5g2xgshnRUZPignv5 vxuE+c/u9sRIfrbzDKd1TYAe5C7alPbQz1h2/KfgIEp2rRe8/QIDAQABo4IENzCC BDMwHQYDVR0OBBYEFOQN/s+4AXaAQbUCLAHMAxO/ACpXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Yjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRiYWM5ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FiOTkxZWU0LWY1YWQtNGM1NC1h MDFlLTE1NmYyNGJhYzlmYi9hYjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRi YWM5ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMCgEAgABMCIDAwCcAgMDAKBUAwQAwDSqAwQAwDrTAwQAwFQHAwQA wGgyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYLMzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvP6QsvQGF OIUSZVYfmJhZUfG9+IHUBIu1OQZFKvaHhwcTMKUae8JO6uBxxrzz67UZ3TGs8K0a 0argAoHLIbcddqlfCRkxB/ofM90Q9gElNib1auWcZTlsstIJ+ydV6z6R2uPTeAEm q0Tng9lwUOr9wBAkR7w5Xl3A8twsi7FIAAwS6ndoTxLRWInrTLe1v1yWvvdpUys7 IN6m1U3nklWxvAoluUnTPS4QihwyDF1pfwlh9p7x/MppxG1sng1t5v1p+tbgfRiz YM+u4ArC1T8lmJjnUwUsr9oQoyzr6QtfXT8+OqnuJGeTVEnJYE9MhvUHJKOBuPNH EQfdNWwWtBPK -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:28 2025 by rpki-client