$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer File: c9a96b03-6960-4655-8e34-04473ec1768f.cer (raw, json) Hash identifier: g4z906FmAouYvAU0lUYpI6PYBJS+A40/Yttnu9P6/Tk= Subject key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F2A9C4C958DE7F36F2A55580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 18:14:34 +0000 Certificate not after: Wed 26 May 2027 17:14:34 +0000 Subordinate resources: AS: 40232 IP: 69.72.8.0/21 IP: 192.82.32.0/21 IP: 204.48.96.0/20 IP: 2607:e7c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:a9:c4:c9:58:de:7f:36:f2:a5:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 20 18:14:34 2025 GMT Not After : May 26 17:14:34 2027 GMT Subject: CN=c9a96b03-6960-4655-8e34-04473ec1768f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7f:ed:d8:6b:c1:b6:84:ae:93:5f:93:b3:8e: 11:09:2f:42:89:de:f7:17:94:af:79:7b:cf:45:a9: 29:4c:71:9b:59:a0:6e:9e:af:c3:f0:e4:6d:11:3e: 4a:1e:98:b4:73:64:13:80:ab:ef:77:ea:24:b1:e3: 98:37:d7:31:58:85:de:37:67:65:9a:25:da:40:fe: 8a:c1:0a:a5:77:e1:83:db:d7:24:66:d6:14:29:cf: 00:b0:8c:cd:08:73:33:d6:d9:95:ec:09:d5:81:04: 64:18:55:ae:8b:1a:27:b2:05:f2:3a:52:e1:84:82: 51:26:f3:9a:9d:0d:9c:13:3e:e8:7d:1e:ff:30:96: 9a:a4:06:4a:04:1b:36:c3:a2:a6:a8:15:06:49:12: db:95:ee:cd:fd:d8:7d:22:15:1f:53:f3:14:60:39: c7:e8:a6:d9:a2:ae:9b:0b:f0:f0:e8:dc:eb:be:2d: c7:e8:b2:96:0e:29:f6:3f:c9:fe:42:3a:ed:20:5e: 68:d6:fc:0d:af:78:2a:1f:44:4c:a0:a0:f0:36:96: b6:63:18:12:e9:6c:ab:d2:8a:75:b4:4e:a2:e8:6a: e2:72:51:b8:f7:87:16:18:ba:05:e9:40:b0:7a:f8: f2:90:87:dc:16:33:24:84:1a:4f:84:91:08:3a:e8: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.72.8.0/21 192.82.32.0/21 204.48.96.0/20 IPv6: 2607:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40232 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a1:af:ba:7c:17:14:e3:fa:14:28:53:4f:a8:cd:01:b3:94: 9c:a4:f7:ea:c9:8d:2a:48:0a:41:1b:c6:0f:48:5e:0c:c2:c3: 27:25:4e:cc:d6:5a:34:60:00:0a:ca:ea:0a:15:27:22:17:31: 63:c4:d7:aa:c9:f4:6f:92:af:06:82:e6:18:4b:30:96:11:6f: c4:ce:ee:2d:bc:df:b0:ff:3c:fa:5d:c9:d6:b7:2d:2b:96:1e: c2:95:4f:00:09:57:1b:16:40:6e:15:21:4e:6e:e2:87:fc:8e: 7c:9a:00:d5:ce:3e:b1:b5:56:1f:7a:b7:20:6b:8c:3e:34:cc: 0e:88:46:4f:79:44:6a:17:b6:43:de:f9:10:d1:04:9d:8e:65: 88:be:26:4a:4e:a8:46:9e:d1:77:ec:92:64:5b:75:3c:9f:8c: b7:37:c4:82:0e:1a:8c:d7:16:ae:67:5b:b8:3b:d7:c9:d3:dc: 02:ce:c9:63:9c:27:4d:99:a9:5a:00:c9:3c:2d:5c:b4:b6:14: 04:c2:db:7c:67:87:52:cb:ab:26:4e:f9:10:80:79:eb:81:f6: a2:00:4c:bc:79:7d:23:4a:64:83:83:98:7d:04:bb:14:a6:db: 61:f6:8e:22:d8:6f:a9:b9:85:14:58:91:b4:a6:7a:c1:fc:2c: 0b:66:ce:40 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEjyqcTJWN5/NvKlVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMDE4MTQzNFoXDTI3MDUyNjE3MTQzNFowLzEtMCsGA1UEAxMk YzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3/t2GvBtoSuk1+Ts44RCS9Cid73F5SveXvP RakpTHGbWaBunq/D8ORtET5KHpi0c2QTgKvvd+okseOYN9cxWIXeN2dlmiXaQP6K wQqld+GD29ckZtYUKc8AsIzNCHMz1tmV7AnVgQRkGFWuixonsgXyOlLhhIJRJvOa nQ2cEz7ofR7/MJaapAZKBBs2w6KmqBUGSRLble7N/dh9IhUfU/MUYDnH6KbZoq6b C/Dw6Nzrvi3H6LKWDin2P8n+QjrtIF5o1vwNr3gqH0RMoKDwNpa2YxgS6Wyr0op1 tE6i6GriclG494cWGLoF6UCwevjykIfcFjMkhBpPhJEIOujPlwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFK8IEusGcPGGvdQ1WIrVJeXOhK1TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j OWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M5YTk2YjAzLTY5NjAtNDY1NS04 ZTM0LTA0NDczZWMxNzY4Zi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2Vj MTc2OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANFSAgDBAPAUiADBATMMGAwDQQCAAIwBwMFACYH 58AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ0oMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKehr7p8FxTj +hQoU0+ozQGzlJyk9+rJjSpICkEbxg9IXgzCwyclTszWWjRgAArK6goVJyIXMWPE 16rJ9G+SrwaC5hhLMJYRb8TO7i2837D/PPpdyda3LSuWHsKVTwAJVxsWQG4VIU5u 4of8jnyaANXOPrG1Vh96tyBrjD40zA6IRk95RGoXtkPe+RDRBJ2OZYi+JkpOqEae 0XfskmRbdTyfjLc3xIIOGozXFq5nW7g718nT3ALOyWOcJ02ZqVoAyTwtXLS2FATC 23xnh1LLqyZO+RCAeeuB9qIATLx5fSNKZIODmH0EuxSm22H2jiLYb6m5hRRYkbSm esH8LAtmzkA= -----END CERTIFICATE-----Generated at Fri Apr 4 19:31:40 2025 by rpki-client