$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer File: d057304d-4312-43aa-92a7-91bbd7043aab.cer (raw, json) Hash identifier: mPBt2my7PWZ03CM2A78euWRKzoWA51uKRyjIuAXzr58= Subject key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858483D1BCF63DB076E0FF72A9F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Dec 2024 17:27:14 +0000 Certificate not after: Mon 22 Mar 2027 16:27:14 +0000 Subordinate resources: AS: 53266 IP: 74.116.128.0/21 IP: 199.83.116.0/22 IP: 208.99.24.0/22 IP: 2605:f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3d:1b:cf:63:db:07:6e:0f:f7:2a:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 17 17:27:14 2024 GMT Not After : Mar 22 16:27:14 2027 GMT Subject: CN=d057304d-4312-43aa-92a7-91bbd7043aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:87:af:93:d7:10:62:67:45:e9:2b:8b:fc: a4:98:98:89:29:80:4b:ed:0b:86:f3:74:85:c4:bf: f0:7a:47:7a:0a:d2:52:fe:55:6f:7d:29:53:90:d1: 41:c6:83:d8:a3:ef:b9:bf:34:b6:63:0c:fa:96:ac: 56:8f:a7:7d:4e:8e:88:ac:5c:67:02:e5:98:d1:61: 31:f2:44:e6:25:71:61:0b:23:6c:62:2a:d3:e5:13: 6d:85:ed:40:35:ab:6a:28:4b:92:15:87:f9:9c:2a: 76:83:c3:b5:9d:55:3d:91:1d:49:e2:97:38:81:68: b8:24:46:73:86:48:84:1c:91:68:1b:42:e7:42:69: 61:2d:1f:22:a0:0f:e6:c8:8c:9b:0c:4b:fc:f0:b5: 0d:c5:73:e3:d7:14:4d:cb:e2:9e:db:6c:32:6a:55: 2d:4d:39:29:4e:56:88:c2:31:97:cc:da:de:41:1c: 0f:61:4b:38:1c:a2:0f:7d:86:5b:20:9c:19:dd:7b: 44:ba:ff:c3:7f:e5:9e:c4:ee:18:7e:13:e9:08:20: f7:e7:30:19:c6:6b:51:b7:07:b7:5e:e8:9e:f7:89: ca:a7:c4:a8:87:e4:ee:5c:80:12:1d:fa:d5:6e:5a: 96:b6:91:97:2e:89:c8:53:fb:39:82:a7:16:7c:d7: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 74.116.128.0/21 199.83.116.0/22 208.99.24.0/22 IPv6: 2605:f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53266 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:69:f4:fd:f8:8f:e6:3c:0f:20:b8:9c:99:12:19:04:34:70: 36:5b:e4:e2:c4:44:b5:9d:23:46:a7:ad:ca:e9:82:b8:89:46: 6a:be:e7:d9:73:ce:f3:25:d7:81:9e:f0:b7:58:c5:85:30:ca: 4f:42:f0:02:88:67:99:bb:9f:b7:18:26:53:8b:e3:7e:7a:ac: 8a:63:3d:9f:da:ae:49:6f:7d:cc:cf:a4:14:a6:71:8c:9a:77: b9:4f:fa:c4:87:72:28:2a:d5:4a:4f:9b:8d:1c:cf:5e:9a:55: 7b:a7:8a:6b:14:2f:15:95:46:4b:c1:c7:9f:c7:70:2e:4e:44: d8:0c:da:ca:76:32:5a:72:80:41:0c:87:95:a0:93:0c:21:1a: f8:12:e1:6a:bc:a2:74:19:47:c6:62:ce:9f:8b:37:6b:3b:9a: 3a:80:f8:49:53:3b:53:67:6e:8f:d4:c9:60:56:74:1b:a8:f8: 17:4b:f2:74:d8:9d:1f:fb:80:ec:36:23:aa:2a:96:28:7b:4f: 70:ab:01:70:42:9c:fd:ba:6b:6c:56:1e:8f:b1:0c:45:c5:b0: 22:a9:09:c9:cd:0e:34:d5:cb:2e:85:01:e3:07:c8:8f:2e:3d: 19:47:e6:9e:96:cc:41:b6:34:ff:dc:2d:19:5e:08:75:c6:ae: 72:ef:d9:08 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEg9G89j2wduD/cqnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIxNzE3MjcxNFoXDTI3MDMyMjE2MjcxNFowLzEtMCsGA1UEAxMk ZDA1NzMwNGQtNDMxMi00M2FhLTkyYTctOTFiYmQ3MDQzYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfiHr5PXEGJnRekri/ykmJiJKYBL7QuG83SF xL/wekd6CtJS/lVvfSlTkNFBxoPYo++5vzS2Ywz6lqxWj6d9To6IrFxnAuWY0WEx 8kTmJXFhCyNsYirT5RNthe1ANatqKEuSFYf5nCp2g8O1nVU9kR1J4pc4gWi4JEZz hkiEHJFoG0LnQmlhLR8ioA/myIybDEv88LUNxXPj1xRNy+Ke22wyalUtTTkpTlaI wjGXzNreQRwPYUs4HKIPfYZbIJwZ3XtEuv/Df+WexO4YfhPpCCD35zAZxmtRtwe3 Xuie94nKp8Soh+TuXIASHfrVblqWtpGXLonIU/s5gqcWfNe/UwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJE+aHgqt4wnzEsHmVzxvPP7EWl7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k MDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcwNDNhYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QwNTczMDRkLTQzMTItNDNhYS05 MmE3LTkxYmJkNzA0M2FhYi9kMDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcw NDNhYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANKdIADBALHU3QDBALQYxgwDQQCAAIwBwMFACYF D0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANASMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJlp9P34j+Y8 DyC4nJkSGQQ0cDZb5OLERLWdI0anrcrpgriJRmq+59lzzvMl14Ge8LdYxYUwyk9C 8AKIZ5m7n7cYJlOL4356rIpjPZ/arklvfczPpBSmcYyad7lP+sSHcigq1UpPm40c z16aVXunimsULxWVRkvBx5/HcC5ORNgM2sp2MlpygEEMh5WgkwwhGvgS4Wq8onQZ R8Zizp+LN2s7mjqA+ElTO1Nnbo/UyWBWdBuo+BdL8nTYnR/7gOw2I6oqlih7T3Cr AXBCnP26a2xWHo+xDEXFsCKpCcnNDjTVyy6FAeMHyI8uPRlH5p6WzEG2NP/cLRle CHXGrnLv2Qg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:16 2025 by rpki-client