$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer File: d0677001-b062-4999-89f9-d882893f5a1c.cer (raw, json) Hash identifier: mZ82+GdtEOgGRIV89FYlNGsxJ7gXt+MLh6EHlxutwI4= Subject key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A20A27C49382D5246D0C3820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 21:08:18 +0000 Certificate not after: Tue 27 Apr 2027 20:08:18 +0000 Subordinate resources: AS: 27628 AS: 393607 IP: 192.152.158.0/24 IP: 198.169.125.0 -- 198.169.127.255 IP: 198.169.132.0 -- 198.169.134.255 IP: 2607:ee00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:0a:27:c4:93:82:d5:24:6d:0c:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 22 21:08:18 2025 GMT Not After : Apr 27 20:08:18 2027 GMT Subject: CN=d0677001-b062-4999-89f9-d882893f5a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:53:de:9f:57:57:ed:ee:36:a1:68:bf:d9: 8f:ff:e4:a9:87:66:17:cc:8f:b9:93:e9:db:59:d5: 2f:37:e1:4a:3c:63:09:10:08:d5:37:d9:90:ef:9b: af:9f:5b:b2:b7:4a:2c:0c:59:10:ac:8c:80:85:b5: c1:cf:d7:0d:39:13:38:e2:54:5a:a4:e5:92:8f:d6: 86:9e:c8:b9:aa:7c:5c:7c:26:f9:47:ba:e5:ad:05: 01:b9:64:c3:cb:00:80:f3:2b:50:18:0e:69:8f:c0: 37:af:fc:52:9d:54:a2:6d:e4:5c:10:8f:24:9e:4e: 87:09:3e:74:0f:4f:f3:a0:64:dc:51:9a:e5:53:5b: 7f:62:f3:a0:29:27:88:13:f8:9f:e0:88:6b:e5:55: b0:f1:73:c1:a6:2a:ba:18:90:e7:b7:6b:48:b8:7f: ac:99:6e:e1:23:07:1d:01:ef:79:9c:ad:8d:0c:9a: 9d:7c:1d:10:65:1d:75:ed:80:62:49:97:53:3c:00: ff:6a:89:15:ae:d7:fa:88:fa:17:d5:e1:54:44:a1: 56:bd:39:ae:89:82:63:53:a6:bb:fb:d6:47:66:5f: 3d:9a:f8:c5:44:d4:be:bd:85:03:8f:b4:34:05:4c: fb:c2:a6:ce:63:b0:15:cf:88:a2:24:2c:35:a3:f9: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.152.158.0/24 198.169.125.0-198.169.127.255 198.169.132.0-198.169.134.255 IPv6: 2607:ee00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27628 393607 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f7:00:1c:bc:bb:53:cb:a3:b7:d7:1a:76:62:c7:7d:29:04: c6:e4:61:fb:a7:59:b6:cd:b2:68:99:88:8f:2f:be:4c:43:2d: fc:bd:85:66:68:4c:01:aa:dd:9f:be:2f:c6:5f:95:27:c6:31: c4:d3:b4:90:70:da:fe:ac:6e:66:90:82:43:56:f6:ae:fa:ae: a2:7a:d0:05:20:eb:53:9b:7e:17:ae:72:00:24:0a:0c:fa:fd: 96:4f:e3:02:fd:92:5f:ca:c7:f6:d5:1f:27:91:db:61:10:f5: bf:96:fc:fb:2e:74:57:73:ea:af:72:29:cd:bd:d4:84:54:80: 8c:bf:d8:cd:39:ec:8d:57:b1:96:9e:fb:9b:b4:12:dd:29:37: c3:81:8a:d7:9d:16:b9:73:56:2c:8c:6c:f1:a0:dd:30:b6:a3: ea:9c:98:fc:2f:21:90:df:d0:82:5e:1b:61:de:53:12:4f:29: 12:fa:a4:f1:38:6e:26:3f:8f:2b:52:44:15:65:c1:2b:58:a6: 8a:fc:60:76:fb:9c:1a:2e:5d:b6:7c:be:35:91:71:c1:dd:6b: 75:98:e3:2b:80:fe:3c:71:17:bd:61:5b:6d:21:95:d6:b1:cb: 8e:ea:96:30:11:80:1d:e5:d8:5a:3a:eb:b2:70:73:e8:25:3b: ee:1e:2c:ff -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEiiCifEk4LVJG0MOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMjIxMDgxOFoXDTI3MDQyNzIwMDgxOFowLzEtMCsGA1UEAxMk ZDA2NzcwMDEtYjA2Mi00OTk5LTg5ZjktZDg4Mjg5M2Y1YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzJT3p9XV+3uNqFov9mP/+Sph2YXzI+5k+nb WdUvN+FKPGMJEAjVN9mQ75uvn1uyt0osDFkQrIyAhbXBz9cNORM44lRapOWSj9aG nsi5qnxcfCb5R7rlrQUBuWTDywCA8ytQGA5pj8A3r/xSnVSibeRcEI8knk6HCT50 D0/zoGTcUZrlU1t/YvOgKSeIE/if4Ihr5VWw8XPBpiq6GJDnt2tIuH+smW7hIwcd Ae95nK2NDJqdfB0QZR117YBiSZdTPAD/aokVrtf6iPoX1eFURKFWvTmuiYJjU6a7 +9ZHZl89mvjFRNS+vYUDj7Q0BUz7wqbOY7AVz4iiJCw1o/kHhQIDAQABo4IESjCC BEYwHQYDVR0OBBYEFC8A7+QfjjpskEWvnYtgS3DZ9LUpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k MDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkzZjVhMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QwNjc3MDAxLWIwNjItNDk5OS04 OWY5LWQ4ODI4OTNmNWExYy9kMDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkz ZjVhMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwSgYIKwYBBQUH AQcBAf8EOzA5MCgEAgABMCIDBADAmJ4wDAMEAMapfQMEB8apADAMAwQCxqmEAwQA xqmGMA0EAgACMAcDBQAmB+4AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmvsAgMG AYcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAC/cAHLy7U8ujt9cadmLHfSkExuRh+6dZts2yaJmIjy++TEMt /L2FZmhMAardn74vxl+VJ8YxxNO0kHDa/qxuZpCCQ1b2rvquonrQBSDrU5t+F65y ACQKDPr9lk/jAv2SX8rH9tUfJ5HbYRD1v5b8+y50V3Pqr3Ipzb3UhFSAjL/YzTns jVexlp77m7QS3Sk3w4GK150WuXNWLIxs8aDdMLaj6pyY/C8hkN/Qgl4bYd5TEk8p Evqk8ThuJj+PK1JEFWXBK1imivxgdvucGi5dtny+NZFxwd1rdZjjK4D+PHEXvWFb bSGV1rHLjuqWMBGAHeXYWjrrsnBz6CU77h4s/w== -----END CERTIFICATE-----Generated at Sat Feb 22 04:05:26 2025 by rpki-client