$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer File: d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer (raw, json) Hash identifier: gq5vLcAy7c47aT+1HCbUWkcIWUXD8KTFNHZ/6uHYAMU= Subject key identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584924475F1770024A3422F24D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 12:46:44 +0000 Certificate not after: Sun 13 Jun 2027 12:46:44 +0000 Subordinate resources: AS: 53733 IP: 148.66.38.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:47:5f:17:70:02:4a:34:22:f2:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 10 12:46:44 2025 GMT Not After : Jun 13 12:46:44 2027 GMT Subject: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:0c:65:49:2c:0c:4a:d7:fe:24:d8:44:9b: 05:23:4a:e0:b7:2c:85:b4:81:58:b8:3a:3c:69:78: 37:34:20:44:70:da:c8:3f:46:60:92:e9:91:16:ba: e3:17:c3:2c:7d:3d:0d:b9:71:56:ae:a4:92:8f:32: de:dc:ad:46:d5:db:9e:8a:17:2f:85:0b:f5:b6:ca: 1d:32:a6:ff:f9:81:f1:9b:7b:5f:50:93:74:16:ec: 02:f3:a7:ee:34:dd:85:a6:30:f4:ef:1c:b1:91:42: 22:71:7c:95:ba:c0:61:4c:87:e1:42:13:bb:b8:1e: 8f:95:bf:2a:4b:c1:45:ed:bd:22:c1:78:e0:e4:fb: 78:35:5f:56:d3:a8:fa:25:d6:ad:0b:94:ba:77:20: 36:10:23:56:ef:78:64:bd:7d:e8:8f:36:15:7d:74: 49:51:4c:45:eb:50:05:fb:4e:28:a1:df:b1:c0:27: d6:37:6e:7f:e9:55:b4:69:b8:d3:fb:8c:36:66:f8: e8:ba:b8:5b:dc:8a:df:d1:fd:7d:a8:28:f9:7c:c2: 63:9d:53:d1:0d:36:45:68:63:1d:71:21:15:ed:35: b4:38:32:a7:42:70:b3:c9:b8:d7:31:00:15:57:c3: a6:36:a7:a4:9e:f8:94:24:fe:1c:af:45:fb:89:c7: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 148.66.38.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53733 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:39:3c:f7:20:e2:54:ab:7e:35:56:65:bf:78:fb:4d:2b:ea: 93:c4:9b:96:cb:00:76:65:bb:6e:0c:bf:da:67:34:d9:db:9f: b7:fa:b4:ab:7c:09:f6:c0:3d:99:e9:11:00:0b:6f:db:1c:14: 1d:08:90:02:81:99:41:7b:f5:02:8e:d8:da:c0:d8:18:85:f4: 3c:e5:d9:3f:ca:64:7b:c0:62:41:4e:1d:96:bc:7c:dd:ee:22: 48:02:a8:d7:97:1a:1e:27:96:f9:72:23:38:b1:24:50:e6:df: b8:fe:19:f7:c2:1b:5d:9c:90:7e:dc:fb:a6:73:90:5a:b8:45: be:72:4e:d6:d3:21:c9:e3:96:48:b3:d1:5e:2b:b6:72:5a:91: 6c:f2:c9:e2:b6:60:d6:9b:d0:c4:5b:f4:d8:18:13:df:0a:ef: 19:4e:03:71:6e:80:88:72:58:11:39:4f:dc:80:65:5e:6f:e4: 78:13:c3:5c:2b:5e:f6:7a:78:f3:3d:9b:ee:42:7f:32:c4:80: d1:0f:98:2a:44:6d:69:5f:90:1a:54:6a:26:22:79:ab:24:7b: 35:45:90:8b:66:02:bd:63:47:60:8f:e0:7a:17:d0:d5:d7:87: 49:0a:b3:31:65:a1:2b:a5:81:9e:d0:a7:2c:d4:81:3b:14:f8: 57:ee:66:13 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkkR18XcAJKNCLyTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxMDEyNDY0NFoXDTI3MDYxMzEyNDY0NFowLzEtMCsGA1UEAxMk ZDJmZDkxMjYtYjJlZS00Y2FmLWJiZTUtMzM4N2JjOTAxYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq0MZUksDErX/iTYRJsFI0rgtyyFtIFYuDo8 aXg3NCBEcNrIP0ZgkumRFrrjF8MsfT0NuXFWrqSSjzLe3K1G1dueihcvhQv1tsod Mqb/+YHxm3tfUJN0FuwC86fuNN2FpjD07xyxkUIicXyVusBhTIfhQhO7uB6Plb8q S8FF7b0iwXjg5Pt4NV9W06j6JdatC5S6dyA2ECNW73hkvX3ojzYVfXRJUUxF61AF +04ood+xwCfWN25/6VW0abjT+4w2Zvjourhb3Irf0f19qCj5fMJjnVPRDTZFaGMd cSEV7TW0ODKnQnCzybjXMQAVV8OmNqeknviUJP4cr0X7iccczwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNjIGudL1pY0XgSsxl4omSyijy0eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k MmZkOTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3YmM5MDFjMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QyZmQ5MTI2LWIyZWUtNGNhZi1i YmU1LTMzODdiYzkwMWMxNS9kMmZkOTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3YmM5 MDFjMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGUQiYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANHlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGo5PPcg4lSrfjVWZb94+00r6pPEm5bLAHZlu24Mv9pnNNnb n7f6tKt8CfbAPZnpEQALb9scFB0IkAKBmUF79QKO2NrA2BiF9Dzl2T/KZHvAYkFO HZa8fN3uIkgCqNeXGh4nlvlyIzixJFDm37j+GffCG12ckH7c+6ZzkFq4Rb5yTtbT Icnjlkiz0V4rtnJakWzyyeK2YNab0MRb9NgYE98K7xlOA3FugIhyWBE5T9yAZV5v 5HgTw1wrXvZ6ePM9m+5CfzLEgNEPmCpEbWlfkBpUaiYieaskezVFkItmAr1jR2CP 4HoX0NXXh0kKszFloSulgZ7QpyzUgTsU+FfuZhM= -----END CERTIFICATE-----Generated at Sat Mar 15 05:50:39 2025 by rpki-client