$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer File: b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer (raw, json) Hash identifier: JN5mZjli2Z4Xjm5HZtwRMY+WhDQx9gPWGh0U1/I8XOs= Subject key identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858490013920D7312E6F0BB12DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 13:33:15 +0000 Certificate not after: Mon 31 May 2027 12:33:15 +0000 Subordinate resources: AS: 394193 IP: 192.84.225.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:13:92:0d:73:12:e6:f0:bb:12:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 25 13:33:15 2025 GMT Not After : May 31 12:33:15 2027 GMT Subject: CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:fe:21:aa:00:2f:13:82:03:42:a8:49:e1: 4c:61:8b:ef:20:c0:b9:62:1a:3d:ca:63:ca:09:dd: 77:f2:af:f4:36:69:f3:31:f4:4d:73:b2:ed:33:34: 87:da:51:92:1c:16:bc:d7:d3:2a:c2:31:bd:67:7b: a3:47:48:23:9a:87:de:2a:cf:25:46:d2:41:e6:35: 84:fe:62:85:75:f2:c9:c7:35:a2:f9:85:93:21:ed: d1:33:48:c6:41:21:fb:24:72:4b:b9:9e:97:c4:27: 1d:31:21:84:2b:6f:de:46:54:b6:18:c5:36:31:5d: 08:5f:fd:29:9b:c1:b1:38:2f:3a:15:c9:3d:71:bf: 22:9f:d4:3c:2a:35:1e:be:07:62:d4:02:3d:ed:88: f4:32:3f:f7:14:80:20:65:62:d8:d1:10:7c:a2:01: d4:aa:b6:c2:68:ab:75:dc:40:03:f0:bc:b6:d4:a8: c4:29:76:ae:30:a0:30:67:52:71:92:a0:e4:ae:f8: 63:43:40:c5:f1:9f:58:25:3b:95:9d:0b:86:41:29: 9d:4e:26:63:3f:be:a1:98:8a:d6:d9:42:33:a1:00: 1d:6c:0a:32:80:76:bf:6e:c4:62:68:52:ef:24:64: 1e:18:d2:67:38:96:72:59:9d:12:ca:a2:02:c7:74: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.84.225.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394193 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8c:a6:39:80:5a:bc:e3:5a:f8:be:16:23:5f:04:03:b9:0e: 98:85:28:36:f3:c1:40:3d:a9:55:6a:40:98:d3:03:d0:c2:da: 9c:63:66:ad:9c:32:26:c8:a0:db:c4:15:a5:76:e3:fa:72:94: 99:e0:97:92:c2:05:dc:ab:b9:e9:5e:f9:92:a0:6c:8d:2f:d3: cb:87:b1:14:e9:11:e5:1d:02:d4:3f:b4:08:a8:d5:55:78:b7: da:ab:f2:c5:b3:21:9c:b6:63:a8:a6:88:fd:ae:7b:90:42:ab: 9b:fa:0f:9d:aa:49:59:33:e2:f7:91:dd:70:5b:24:af:f1:71: 51:14:ca:3a:67:5a:fc:a3:1b:be:fb:96:05:48:88:74:3b:21: 2e:2b:33:a3:00:34:6f:37:0a:06:93:f3:4f:27:00:7a:25:c2: 1b:0c:1b:ee:9a:8e:c6:11:5a:ae:99:97:df:07:66:75:ff:f3: d2:14:17:91:9e:f0:b5:ad:61:92:b7:0d:09:a1:e1:f7:50:d1: 93:f4:44:d1:b1:e8:4c:b0:4a:9c:62:f9:58:0f:44:40:c0:aa: f2:33:1d:92:eb:8d:32:2f:7b:e4:36:49:36:48:49:eb:1e:fe: 96:0b:5f:ae:46:f1:b9:66:86:3e:24:07:70:34:64:22:c3:16: e6:66:66:31 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkAE5INcxLm8LsS3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNTEzMzMxNVoXDTI3MDUzMTEyMzMxNVowLzEtMCsGA1UEAxMk Yjg5YmRjYjktMjJmMC00NjI5LThlZDgtYmI0YTMzZjkxMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid3+IaoALxOCA0KoSeFMYYvvIMC5Yho9ymPK Cd138q/0NmnzMfRNc7LtMzSH2lGSHBa819MqwjG9Z3ujR0gjmofeKs8lRtJB5jWE /mKFdfLJxzWi+YWTIe3RM0jGQSH7JHJLuZ6XxCcdMSGEK2/eRlS2GMU2MV0IX/0p m8GxOC86Fck9cb8in9Q8KjUevgdi1AI97Yj0Mj/3FIAgZWLY0RB8ogHUqrbCaKt1 3EAD8Ly21KjEKXauMKAwZ1JxkqDkrvhjQ0DF8Z9YJTuVnQuGQSmdTiZjP76hmIrW 2UIzoQAdbAoygHa/bsRiaFLvJGQeGNJnOJZyWZ0SyqICx3S6mwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFF6P04jsE4fK9bPM6NPM37sSkbvjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i ODliZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRhMzNmOTEwMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I4OWJkY2I5LTIyZjAtNDYyOS04 ZWQ4LWJiNGEzM2Y5MTAyYi9iODliZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRhMzNm OTEwMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAVOEwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgPRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABqMpjmAWrzjWvi+FiNfBAO5DpiFKDbzwUA9qVVqQJjTA9DC 2pxjZq2cMibIoNvEFaV24/pylJngl5LCBdyruele+ZKgbI0v08uHsRTpEeUdAtQ/ tAio1VV4t9qr8sWzIZy2Y6imiP2ue5BCq5v6D52qSVkz4veR3XBbJK/xcVEUyjpn WvyjG777lgVIiHQ7IS4rM6MANG83CgaT808nAHolwhsMG+6ajsYRWq6Zl98HZnX/ 89IUF5Ge8LWtYZK3DQmh4fdQ0ZP0RNGx6EywSpxi+VgPREDAqvIzHZLrjTIve+Q2 STZISese/pYLX65G8blmhj4kB3A0ZCLDFuZmZjE= -----END CERTIFICATE-----Generated at Sat Apr 5 00:29:25 2025 by rpki-client