$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer File: d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer (raw, json) Hash identifier: b8giv+85g+4KksW3aU/WVjvsDgobVJ7xNCM6mVTx6r8= Subject key identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584880979CE12171F183BBDA59C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jan 2025 21:35:50 +0000 Certificate not after: Thu 15 Apr 2027 20:35:50 +0000 Subordinate resources: AS: 31986 IP: 208.87.148.0/22 IP: 2602:817:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:80:97:9c:e1:21:71:f1:83:bb:da:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 10 21:35:50 2025 GMT Not After : Apr 15 20:35:50 2027 GMT Subject: CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:a5:09:6e:84:33:90:c9:86:10:21:5f:45: 28:40:b7:c4:1f:ee:cf:d2:1e:3b:07:96:b5:5f:c9: 0f:aa:5c:7a:2a:4a:b0:e6:9b:c4:6a:14:7b:91:99: a2:af:2a:f1:8b:57:5f:da:5c:f6:b9:c4:fc:e2:c6: e0:5d:e0:b8:95:8c:d5:69:aa:f7:c7:c7:66:53:de: 30:76:f7:85:59:f0:af:ea:97:b3:b7:39:a7:5a:31: 7a:bd:09:f3:ff:f7:2e:47:f8:5f:a5:4e:2c:32:05: a7:49:32:20:43:df:8f:e3:26:57:51:59:df:57:99: 4d:6d:8c:77:07:ae:1a:6f:27:71:41:40:f6:06:04: 49:41:64:5f:1e:82:e6:87:85:a4:45:da:c5:45:b0: 1b:31:49:aa:32:55:4f:08:5b:92:87:b3:23:16:5e: e5:cb:ca:84:2f:9c:22:75:15:8f:c5:7d:42:d0:4a: f8:64:c0:ac:3d:c7:8e:6f:60:2d:f2:d0:22:33:67: 95:b5:41:b3:b1:b1:91:ab:2a:76:ed:8f:d8:df:86: 4b:00:29:ea:5b:1e:51:3e:1d:f1:ba:82:03:1e:d7: 92:a9:f4:4f:19:0e:60:a7:7b:11:0a:ed:01:f5:3b: f3:7e:c4:db:96:b4:b3:63:bf:a2:40:96:aa:f9:d1: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.87.148.0/22 IPv6: 2602:817:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31986 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ed:5c:f0:bb:fc:b2:e2:d2:ca:70:f8:60:cc:ac:6d:a9:d0: 84:1b:1e:40:32:a4:8c:53:9e:a8:48:f9:88:58:af:4f:72:95: 0d:08:e5:d3:c4:38:6f:36:ca:5d:86:72:49:94:f5:42:80:82: 67:55:b3:b3:50:3b:18:ca:06:7b:04:38:60:3a:68:54:9b:fe: 7e:23:71:9b:ba:f3:59:4f:e8:a4:43:2a:65:1a:e3:ab:c2:82: 26:0a:79:bd:09:34:dc:ed:46:fb:ca:fd:4e:83:9e:63:c0:1d: bf:05:e7:58:c0:02:4d:a8:bd:06:79:0d:72:5b:6e:8d:98:2a: db:94:10:17:b8:4e:80:22:f5:3f:93:4b:f3:03:0b:75:2e:f3: 91:ad:37:0a:41:94:d1:69:96:ff:65:dc:62:12:b5:79:59:20: 76:88:3a:25:64:ed:c9:f9:ff:f8:be:23:d2:8f:d6:d5:b3:a9: c4:22:b6:20:32:77:7c:ca:7e:41:ea:2a:93:05:50:eb:ae:ff: 70:02:43:c9:a7:f2:ca:b0:30:10:98:67:8d:9b:8b:5e:80:8e: c1:32:29:6f:b6:55:0f:5b:b1:6f:60:68:6d:ad:a4:1a:e9:12: 5a:ab:a2:38:c4:6d:68:00:09:af:cc:95:e7:71:0a:69:6d:ee: 07:e9:88:cb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEiAl5zhIXHxg7vaWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDExMDIxMzU1MFoXDTI3MDQxNTIwMzU1MFowLzEtMCsGA1UEAxMk ZDhiOGMzMDMtN2JjZi00NWY0LWE2OTMtMjRmYjlkNTQwMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfSlCW6EM5DJhhAhX0UoQLfEH+7P0h47B5a1 X8kPqlx6Kkqw5pvEahR7kZmiryrxi1df2lz2ucT84sbgXeC4lYzVaar3x8dmU94w dveFWfCv6peztzmnWjF6vQnz//cuR/hfpU4sMgWnSTIgQ9+P4yZXUVnfV5lNbYx3 B64abydxQUD2BgRJQWRfHoLmh4WkRdrFRbAbMUmqMlVPCFuSh7MjFl7ly8qEL5wi dRWPxX1C0Er4ZMCsPceOb2At8tAiM2eVtUGzsbGRqyp27Y/Y34ZLACnqWx5RPh3x uoIDHteSqfRPGQ5gp3sRCu0B9TvzfsTblrSzY7+iQJaq+dEFfQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDBrAfSEIuXNJPCg6aU1Q5iRVc32MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OGI4YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZiOWQ1NDAxMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q4YjhjMzAzLTdiY2YtNDVmNC1h NjkzLTI0ZmI5ZDU0MDEwYy9kOGI4YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZiOWQ1 NDAxMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQV5QwDwQCAAIwCQMHBCYCCBegADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ88jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR7Vzwu/yy4tLKcPhgzKxtqdCE Gx5AMqSMU56oSPmIWK9PcpUNCOXTxDhvNspdhnJJlPVCgIJnVbOzUDsYygZ7BDhg OmhUm/5+I3GbuvNZT+ikQyplGuOrwoImCnm9CTTc7Ub7yv1Og55jwB2/BedYwAJN qL0GeQ1yW26NmCrblBAXuE6AIvU/k0vzAwt1LvORrTcKQZTRaZb/ZdxiErV5WSB2 iDolZO3J+f/4viPSj9bVs6nEIrYgMnd8yn5B6iqTBVDrrv9wAkPJp/LKsDAQmGeN m4tegI7BMilvtlUPW7FvYGhtraQa6RJaq6I4xG1oAAmvzJXncQppbe4H6YjL -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:05 2025 by rpki-client