$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer File: afc2bf64-2cba-4362-8b12-56844da30e4e.cer (raw, json) Hash identifier: jJVPBXJCIhejKe4dFP0SKFjh72qyrxg1iM4UINT89gk= Subject key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584810C895378338F5576A9B4C10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Dec 2024 20:23:58 +0000 Certificate not after: Sat 06 Mar 2027 20:23:58 +0000 Subordinate resources: AS: 14343 IP: 64.26.192.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:c8:95:37:83:38:f5:57:6a:9b:4c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 1 20:23:58 2024 GMT Not After : Mar 6 20:23:58 2027 GMT Subject: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:f8:b6:51:74:54:a6:e4:ea:dc:71:62:77: 33:aa:bc:10:55:b3:55:16:fb:53:a4:11:92:6d:42: e1:b1:98:65:96:be:33:08:7b:d1:28:bb:4d:79:33: c4:8a:ff:72:29:4c:a5:2f:61:72:8d:34:21:28:2e: db:97:45:1f:b3:76:ad:79:b7:36:c1:a4:b3:00:05: 18:8a:aa:0b:97:bd:40:21:e3:23:32:f3:9b:18:43: b5:30:f8:2d:29:2c:d1:73:20:d3:76:16:94:23:89: 00:f7:b7:01:9f:2e:18:3a:48:2b:15:73:f8:8c:75: 89:cd:3b:6e:c7:64:d6:24:5d:ed:77:84:02:13:ee: 6d:86:2e:d2:a8:55:27:b9:21:6e:53:ad:13:19:6f: e5:72:3d:16:c2:68:e9:63:2e:ec:49:c8:d6:f4:1d: ee:4a:04:bb:e1:bb:bb:af:05:59:8d:c3:75:39:93: 74:ab:05:be:69:e6:30:e3:74:eb:83:9a:0e:c0:71: 38:b1:c2:f1:56:68:28:77:3c:df:c1:ec:d1:5f:ea: 20:d3:37:92:ef:fb:a7:c7:14:06:df:8d:b5:83:28: 01:14:a7:66:10:1b:4b:90:40:9c:e3:7a:7b:58:62: ab:b1:df:b4:43:c9:0d:25:6a:62:30:90:5c:f0:de: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.26.192.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0b:95:69:99:f9:72:0d:b7:6a:35:83:ef:7e:33:eb:62:7e: 01:c8:f2:44:9f:44:00:16:93:da:58:66:f6:a3:2a:3d:34:05: 82:69:59:45:ec:57:3d:0d:d0:64:bc:9b:9e:49:ae:f8:9d:67: 04:e3:68:1a:1b:34:08:b0:7d:f5:b7:97:09:84:76:cd:9b:a7: fa:03:83:b8:f4:b8:9f:ba:a1:70:97:bd:d0:5e:11:48:c2:80: b2:31:20:68:2b:70:48:4b:07:e2:21:9d:8d:2a:53:1b:d4:9c: 95:59:b0:0e:be:bc:56:ba:fb:27:a5:54:e2:53:69:dc:09:d6: ff:50:c3:ac:bd:43:4d:33:90:18:98:81:c3:08:4c:07:28:6c: 99:d7:30:43:74:7d:f6:49:d1:d7:97:08:28:00:96:ae:f1:22: ca:ea:ec:fd:7c:68:0e:1e:46:4c:c8:32:6b:ee:cd:fc:52:21: fc:35:5c:df:fe:48:71:ad:c6:a8:68:0e:c8:25:b2:6f:c1:d5: 74:eb:e9:bb:f8:fe:e7:74:96:b8:e7:26:47:b1:c2:b5:25:26: 66:90:69:21:7b:fc:3c:f8:61:31:77:0d:a9:3c:6f:df:72:b1: b2:f6:60:86:f7:d7:e6:95:52:d2:0f:f0:8c:e4:22:85:eb:7c: 2b:a4:9d:46 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEgQyJU3gzj1V2qbTBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwMTIwMjM1OFoXDTI3MDMwNjIwMjM1OFowLzEtMCsGA1UEAxMk YWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMwZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcb4tlF0VKbk6txxYnczqrwQVbNVFvtTpBGS bULhsZhllr4zCHvRKLtNeTPEiv9yKUylL2FyjTQhKC7bl0Ufs3atebc2waSzAAUY iqoLl71AIeMjMvObGEO1MPgtKSzRcyDTdhaUI4kA97cBny4YOkgrFXP4jHWJzTtu x2TWJF3td4QCE+5thi7SqFUnuSFuU60TGW/lcj0WwmjpYy7sScjW9B3uSgS74bu7 rwVZjcN1OZN0qwW+aeYw43Trg5oOwHE4scLxVmgodzzfwezRX+og0zeS7/unxxQG 3421gygBFKdmEBtLkECc43p7WGKrsd+0Q8kNJWpiMJBc8N5XMQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFENdWs0nzQmvyXZjLCh4r3P6n19LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FmYzJiZjY0LTJjYmEtNDM2Mi04 YjEyLTU2ODQ0ZGEzMGU0ZS9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRh MzBlNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAZAGsAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OAcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYwuVaZn5cg23ajWD734z62J+AcjyRJ9EABaT2lhm9qMqPTQF gmlZRexXPQ3QZLybnkmu+J1nBONoGhs0CLB99beXCYR2zZun+gODuPS4n7qhcJe9 0F4RSMKAsjEgaCtwSEsH4iGdjSpTG9SclVmwDr68Vrr7J6VU4lNp3AnW/1DDrL1D TTOQGJiBwwhMByhsmdcwQ3R99knR15cIKACWrvEiyurs/XxoDh5GTMgya+7N/FIh /DVc3/5Ica3GqGgOyCWyb8HVdOvpu/j+53SWuOcmR7HCtSUmZpBpIXv8PPhhMXcN qTxv33KxsvZghvfX5pVS0g/wjOQihet8K6SdRg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:15 2025 by rpki-client