$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer File: b769440d-4a7e-478f-82a5-04834c8887fe.cer (raw, json) Hash identifier: MqjI9PM0NIJM5F33yl6/lGutZrBcHu89eH0KYcc36AE= Subject key identifier: B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285849066909AD180198E392ED3B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Feb 2025 20:00:19 +0000 Certificate not after: Wed 02 Jun 2027 19:00:19 +0000 Subordinate resources: AS: 10980 IP: 198.167.164.0/22 IP: 208.77.140.0/22 IP: 2604:5880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:69:09:ad:18:01:98:e3:92:ed:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 27 20:00:19 2025 GMT Not After : Jun 2 19:00:19 2027 GMT Subject: CN=b769440d-4a7e-478f-82a5-04834c8887fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:16:9d:48:01:91:c2:30:3a:45:ff:4b:25: f8:5d:a2:fd:18:3e:fc:bd:6f:19:8e:2e:ce:4d:44: 6c:13:bd:64:1d:e4:d9:0a:26:3a:da:0f:c8:25:dc: 0c:fd:8a:fd:2b:7b:8f:52:4f:47:c1:dc:96:52:ff: f2:5f:06:ed:17:88:3e:38:66:7b:15:73:68:e0:5e: b2:a7:45:02:a9:6b:44:b3:62:7b:b0:60:b1:69:1e: fa:e0:15:20:86:3f:07:dc:56:d0:99:34:87:4d:79: 84:8c:08:ff:f8:60:5d:a7:14:4a:24:9b:dc:cf:2d: 2a:7a:01:35:a8:88:fc:11:cf:df:56:54:ae:45:12: 0d:16:b0:fa:8b:9a:29:7b:b6:20:93:46:6f:a6:27: ca:06:51:2d:ba:78:37:5a:48:b2:41:9d:7d:90:94: 1e:79:0a:4a:ab:17:e3:7e:4b:b8:c6:11:e5:20:9e: 42:06:2c:35:b1:23:a7:90:42:a4:d7:f6:ec:af:f8: 79:37:eb:73:ff:3a:75:8d:26:9f:ae:24:b6:1a:42: f0:40:38:4c:d3:78:51:e2:96:b0:7f:ba:36:f9:7e: a8:7a:ab:b7:27:3b:18:d9:7c:6f:76:f8:7e:09:3b: 32:9f:17:85:cd:1c:cb:7f:d2:8d:08:cc:99:ee:6b: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 198.167.164.0/22 208.77.140.0/22 IPv6: 2604:5880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10980 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7f:77:c7:e1:14:0c:14:c3:9f:66:fd:02:6e:d6:71:40:93: f0:67:70:5e:d8:b8:3f:00:ff:d2:17:7f:68:11:0e:db:7d:e3: 2f:ac:29:41:4e:3b:58:43:64:6b:e9:2c:da:3f:34:53:f1:2c: 58:22:19:27:58:f0:02:ba:d7:8a:70:f0:f8:d9:8a:57:5f:66: 75:16:d3:66:2c:2c:2f:fd:03:cb:1d:20:fe:a5:e5:31:11:d5: 34:dc:c0:ab:57:59:d0:21:07:34:77:69:f7:59:3a:cd:f1:d4: f6:b1:d5:97:a6:f4:9f:a8:2b:3e:77:17:9f:29:bc:d6:1b:71: 1b:97:e8:71:97:86:1b:71:60:3c:c1:fb:43:08:70:3e:e3:94: 04:1f:a4:82:77:b4:4c:c6:c7:1c:35:91:39:1c:67:06:02:9c: 12:f0:47:00:02:12:9f:17:9b:d5:3b:30:3e:1c:5e:3e:12:c9: 24:79:71:09:44:f3:6f:a0:34:4c:d3:7f:65:b0:59:fc:b4:e7: 84:22:09:a6:72:59:ff:a4:cd:ea:da:30:fd:19:b5:fe:0b:2a: 16:21:7f:d1:5f:fa:31:f3:b5:80:d5:5f:35:f1:25:40:58:32: fc:e8:d3:a7:41:40:6a:25:d4:4c:50:b8:05:bb:e7:d6:47:78: 3d:59:2e:ab -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEkGaQmtGAGY45LtOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNzIwMDAxOVoXDTI3MDYwMjE5MDAxOVowLzEtMCsGA1UEAxMk Yjc2OTQ0MGQtNGE3ZS00NzhmLTgyYTUtMDQ4MzRjODg4N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaEWnUgBkcIwOkX/SyX4XaL9GD78vW8Zji7O TURsE71kHeTZCiY62g/IJdwM/Yr9K3uPUk9HwdyWUv/yXwbtF4g+OGZ7FXNo4F6y p0UCqWtEs2J7sGCxaR764BUghj8H3FbQmTSHTXmEjAj/+GBdpxRKJJvczy0qegE1 qIj8Ec/fVlSuRRINFrD6i5ope7Ygk0ZvpifKBlEtung3WkiyQZ19kJQeeQpKqxfj fku4xhHlIJ5CBiw1sSOnkEKk1/bsr/h5N+tz/zp1jSafriS2GkLwQDhM03hR4paw f7o2+X6oequ3JzsY2Xxvdvh+CTsynxeFzRzLf9KNCMyZ7mswwQIDAQABo4IELzCC BCswHQYDVR0OBBYEFLDP/EnojnrlDAjUuvVVcjjAhJefMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NzY5NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgzNGM4ODg3ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I3Njk0NDBkLTRhN2UtNDc4Zi04 MmE1LTA0ODM0Yzg4ODdmZS9iNzY5NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgzNGM4 ODg3ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALGp6QDBALQTYwwDQQCAAIwBwMFACYEWIAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICKuQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnX93x+EUDBTDn2b9Am7W cUCT8GdwXti4PwD/0hd/aBEO233jL6wpQU47WENka+ks2j80U/EsWCIZJ1jwArrX inDw+NmKV19mdRbTZiwsL/0Dyx0g/qXlMRHVNNzAq1dZ0CEHNHdp91k6zfHU9rHV l6b0n6grPncXnym81htxG5focZeGG3FgPMH7QwhwPuOUBB+kgne0TMbHHDWRORxn BgKcEvBHAAISnxeb1TswPhxePhLJJHlxCUTzb6A0TNN/ZbBZ/LTnhCIJpnJZ/6TN 6tow/Rm1/gsqFiF/0V/6MfO1gNVfNfElQFgy/OjTp0FAaiXUTFC4Bbvn1kd4PVku qw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:31 2025 by rpki-client