$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3.cer File: e3cdb690-a56b-4a40-a87e-a6364b48f2b3.cer (raw, json) Hash identifier: XrBUWoAcBKeLhrlP/H3GCURq7fVEDxIagA7SPtnHBG0= Subject key identifier: 27:D2:F3:79:B9:7C:38:BD:5F:6C:50:79:6A:F8:A4:12:D1:B2:4A:C5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B83B48E413666E8E9F3F1FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/e3cdb690-a56b-4a40-a87e-a6364b48f2b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jan 2025 19:55:04 +0000 Certificate not after: Wed 05 May 2027 18:55:04 +0000 Subordinate resources: AS: 400418 IP: 64.6.34.0/24 IP: 66.45.20.0/24 IP: 91.199.182.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:3b:48:e4:13:66:6e:8e:9f:3f:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 30 19:55:04 2025 GMT Not After : May 5 18:55:04 2027 GMT Subject: CN=e3cdb690-a56b-4a40-a87e-a6364b48f2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:44:4d:96:6d:e3:07:df:bf:03:19:13:07: 5a:37:38:4d:a6:73:2c:12:97:1a:90:23:54:20:24: 2c:23:b5:44:36:67:68:44:4f:64:b4:4a:83:bc:3d: 2c:8a:28:8f:c5:d0:3f:f0:6f:58:af:dd:60:c3:99: 5b:97:9a:c5:45:52:fe:22:8a:d9:c3:43:0f:0c:c7: 0a:4c:f9:be:c7:70:39:33:df:d8:18:c2:4e:bb:88: b7:66:3b:7a:e2:9b:e3:f6:1c:19:80:d6:6c:4e:ad: b5:0f:b4:55:a8:72:0c:49:e9:dd:58:d0:dc:1d:e2: db:be:b4:42:c1:f5:17:5a:ef:93:d9:39:5e:e7:a0: 13:48:15:65:39:6e:16:b2:72:86:25:80:ad:bc:cd: dc:24:30:55:21:20:63:21:cc:74:ee:75:5e:59:ee: 85:bb:4c:90:80:0e:09:e7:ad:49:a4:63:75:a3:1d: 32:f4:8d:be:17:a2:ac:e4:35:4d:07:76:a7:f5:cb: 79:be:f6:bf:e0:55:b7:6f:23:0d:79:0b:8d:ee:85: 72:bf:64:22:f1:32:8e:d4:68:3d:e4:96:71:bb:87: 79:43:23:68:32:66:3a:86:c3:c0:27:98:f7:39:6e: dc:b3:4b:d0:2c:55:b3:59:7c:4e:27:f2:28:3e:01: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:F3:79:B9:7C:38:BD:5F:6C:50:79:6A:F8:A4:12:D1:B2:4A:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/e3cdb690-a56b-4a40-a87e-a6364b48f2b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.6.34.0/24 66.45.20.0/24 91.199.182.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400418 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:03:9b:bd:b9:14:2a:33:ce:ee:44:f8:7c:2f:13:73:3f:3e: bc:e8:96:16:b6:6f:b4:5f:b1:81:a7:56:1d:b0:f0:d3:7f:38: 0c:c0:fb:4b:9b:d2:08:e4:f1:41:3a:b3:46:b3:36:07:2e:8b: b3:13:eb:71:f9:3c:ca:1e:41:6f:02:79:c4:fd:a5:06:d4:47: 73:fc:78:1c:b7:8a:c5:b9:0d:0f:6f:23:a6:3c:16:a6:5e:1a: 62:0b:d3:ce:f4:f1:35:c7:62:b3:13:d2:a7:51:89:cc:e4:87: 5c:b9:d4:1b:e8:d2:98:ca:3b:42:4e:dc:4a:81:b9:6a:e3:61: 47:0c:87:9e:73:9f:21:22:54:05:1f:d6:1e:c9:2f:64:fb:8d: 88:8e:4a:74:89:a0:cc:4b:aa:a5:63:e5:ac:ef:95:f1:a4:df: ef:f5:4b:84:d0:51:e8:e0:da:ff:87:5a:da:0b:12:19:f9:4d: 7b:85:5e:ac:f1:b1:0d:5b:f9:08:32:3d:65:41:72:53:e4:5d: a0:c0:db:a8:e6:dd:28:ae:79:ba:6e:04:3d:7e:7e:a9:87:ac: 11:c3:6d:80:3b:23:1e:db:b9:bf:39:87:2d:9e:fd:5f:7d:04: 15:0d:9b:f3:0a:83:da:5b:56:cf:84:4d:8d:c9:fe:0a:7b:c3: a1:94:4a:3c -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEi4O0jkE2Zujp8/H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEzMDE5NTUwNFoXDTI3MDUwNTE4NTUwNFowLzEtMCsGA1UEAxMk ZTNjZGI2OTAtYTU2Yi00YTQwLWE4N2UtYTYzNjRiNDhmMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuktETZZt4wffvwMZEwdaNzhNpnMsEpcakCNU ICQsI7VENmdoRE9ktEqDvD0siiiPxdA/8G9Yr91gw5lbl5rFRVL+IorZw0MPDMcK TPm+x3A5M9/YGMJOu4i3Zjt64pvj9hwZgNZsTq21D7RVqHIMSendWNDcHeLbvrRC wfUXWu+T2Tle56ATSBVlOW4WsnKGJYCtvM3cJDBVISBjIcx07nVeWe6Fu0yQgA4J 561JpGN1ox0y9I2+F6Ks5DVNB3an9ct5vva/4FW3byMNeQuN7oVyv2Qi8TKO1Gg9 5JZxu4d5QyNoMmY6hsPAJ5j3OW7cs0vQLFWzWXxOJ/IoPgFGAQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFCfS83m5fDi9X2xQeWr4pBLRskrFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l M2NkYjY5MC1hNTZiLTRhNDAtYTg3ZS1hNjM2NGI0OGYyYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2UzY2RiNjkwLWE1NmItNGE0MC1h ODdlLWE2MzY0YjQ4ZjJiMy9lM2NkYjY5MC1hNTZiLTRhNDAtYTg3ZS1hNjM2NGI0 OGYyYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABABiIDBABCLRQDBABbx7YwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhwiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHEDm725FCozzu5E+HwvE3M/Przolha2 b7RfsYGnVh2w8NN/OAzA+0ub0gjk8UE6s0azNgcui7MT63H5PMoeQW8CecT9pQbU R3P8eBy3isW5DQ9vI6Y8FqZeGmIL08708TXHYrMT0qdRiczkh1y51Bvo0pjKO0JO 3EqBuWrjYUcMh55znyEiVAUf1h7JL2T7jYiOSnSJoMxLqqVj5azvlfGk3+/1S4TQ Uejg2v+HWtoLEhn5TXuFXqzxsQ1b+QgyPWVBclPkXaDA26jm3SiuebpuBD1+fqmH rBHDbYA7Ix7bub85hy2e/V99BBUNm/MKg9pbVs+ETY3J/gp7w6GUSjw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:50 2025 by rpki-client