$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e72b2f7f-352d-4e5a-857c-8f8781f7505b.cer File: e72b2f7f-352d-4e5a-857c-8f8781f7505b.cer (raw, json) Hash identifier: plzQqn6GsV3+JjZCcTrgVM98aLK67yCtDPBKsJzjp6c= Subject key identifier: DE:CB:53:C6:B3:61:84:D1:13:73:C4:A8:41:B6:F8:19:17:6B:2C:62 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858490908FAA42022992D6E24C280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e72b2f7f-352d-4e5a-857c-8f8781f7505b/e72b2f7f-352d-4e5a-857c-8f8781f7505b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e72b2f7f-352d-4e5a-857c-8f8781f7505b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Feb 2025 18:34:11 +0000 Certificate not after: Thu 03 Jun 2027 17:34:11 +0000 Subordinate resources: AS: 36367 IP: 67.208.60.0/22 IP: 2607:5e40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:08:fa:a4:20:22:99:2d:6e:24:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 28 18:34:11 2025 GMT Not After : Jun 3 17:34:11 2027 GMT Subject: CN=e72b2f7f-352d-4e5a-857c-8f8781f7505b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:5f:bc:60:13:48:81:c9:ed:c0:45:aa:77: 73:c8:10:88:e2:7e:1a:13:67:7e:94:91:ec:81:04: fc:51:a2:c9:e4:12:2b:e5:fc:1e:29:ea:58:9d:fa: 16:77:0d:86:d8:d6:8f:70:a2:f9:b7:7a:3b:d1:93: 8d:18:93:e2:13:c0:50:f0:fc:40:98:84:af:f5:3c: 23:38:33:af:e0:04:25:da:34:ee:29:63:49:60:78: 33:ce:92:74:88:da:fc:af:08:38:e8:db:05:f8:93: 79:58:d1:06:3d:43:47:16:06:f9:d3:fb:bf:20:be: 5a:37:09:0e:1b:ef:e6:f9:0b:46:21:5d:71:f6:32: a1:06:29:43:85:dd:1e:53:b0:c6:55:be:53:9b:f2: 4a:66:55:92:ab:68:ce:39:73:ee:55:d9:06:60:34: 9a:45:3c:93:cd:b9:3d:ea:e4:1b:fc:4b:9c:b7:36: 01:92:52:42:d8:a0:ff:7d:d9:68:21:78:31:e0:a8: 79:35:75:8d:5f:de:c3:5d:15:d6:70:27:b9:31:e6: 43:c9:8c:29:49:7d:3e:7c:bc:e0:67:29:2e:9d:da: 32:0d:a0:90:c5:ed:1d:86:2e:49:eb:20:f9:78:58: d4:68:85:9a:0f:b0:1d:35:14:a4:0a:b8:44:84:68: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:53:C6:B3:61:84:D1:13:73:C4:A8:41:B6:F8:19:17:6B:2C:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e72b2f7f-352d-4e5a-857c-8f8781f7505b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e72b2f7f-352d-4e5a-857c-8f8781f7505b/e72b2f7f-352d-4e5a-857c-8f8781f7505b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 67.208.60.0/22 IPv6: 2607:5e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36367 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:95:9e:20:ad:8f:c0:15:3d:ba:8b:88:4e:d4:25:35:c7:74: b0:54:f6:c3:f7:97:55:c3:50:25:e8:7e:be:67:ab:44:bc:70: 5f:d6:ce:bd:29:d6:c0:88:7c:4f:5f:8e:a3:1f:5c:5e:b4:73: 8a:ad:4f:f8:06:3c:73:fd:8a:9f:e6:9f:1f:93:71:8d:a6:81: d0:d5:02:18:f2:1d:bb:a9:3e:35:61:ea:06:1f:85:0e:5f:4b: ff:47:bf:88:65:dc:5f:a4:5e:7f:66:0e:5b:27:07:f5:5f:1b: 46:aa:00:c1:b5:4c:83:60:ac:56:88:a4:0c:d6:7b:7b:95:4b: 28:54:b9:44:30:34:fb:e4:7a:7d:ff:b5:aa:6d:80:08:e6:a8: df:66:3d:48:af:8f:3c:61:ec:df:15:ed:50:5f:31:42:9e:27: ec:b3:3d:f0:2b:b2:be:14:fd:97:e0:7b:f1:0e:f6:1f:32:94: 7d:62:17:56:3c:ad:5b:24:ec:df:35:67:89:b3:2f:e8:d6:f4: 2f:38:37:8b:9e:1f:fe:cb:5d:c5:48:db:5c:b2:38:73:eb:0c: 93:97:a7:e9:14:55:78:ba:4e:69:fc:9d:71:ad:db:fa:70:19: 10:b1:5b:6d:72:53:07:e3:c1:2e:f3:33:97:1e:1f:0b:c3:97: 7a:8b:e3:fb -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkJCPqkICKZLW4kwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyODE4MzQxMVoXDTI3MDYwMzE3MzQxMVowLzEtMCsGA1UEAxMk ZTcyYjJmN2YtMzUyZC00ZTVhLTg1N2MtOGY4NzgxZjc1MDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwRfvGATSIHJ7cBFqndzyBCI4n4aE2d+lJHs gQT8UaLJ5BIr5fweKepYnfoWdw2G2NaPcKL5t3o70ZONGJPiE8BQ8PxAmISv9Twj ODOv4AQl2jTuKWNJYHgzzpJ0iNr8rwg46NsF+JN5WNEGPUNHFgb50/u/IL5aNwkO G+/m+QtGIV1x9jKhBilDhd0eU7DGVb5Tm/JKZlWSq2jOOXPuVdkGYDSaRTyTzbk9 6uQb/EuctzYBklJC2KD/fdloIXgx4Kh5NXWNX97DXRXWcCe5MeZDyYwpSX0+fLzg ZykundoyDaCQxe0dhi5J6yD5eFjUaIWaD7AdNRSkCrhEhGjR8wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN7LU8azYYTRE3PEqEG2+BkXayxiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l NzJiMmY3Zi0zNTJkLTRlNWEtODU3Yy04Zjg3ODFmNzUwNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U3MmIyZjdmLTM1MmQtNGU1YS04 NTdjLThmODc4MWY3NTA1Yi9lNzJiMmY3Zi0zNTJkLTRlNWEtODU3Yy04Zjg3ODFm NzUwNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJD0DwwDQQCAAIwBwMFACYHXkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAI4PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACCVniCtj8AVPbqLiE7UJTXHdLBU 9sP3l1XDUCXofr5nq0S8cF/Wzr0p1sCIfE9fjqMfXF60c4qtT/gGPHP9ip/mnx+T cY2mgdDVAhjyHbupPjVh6gYfhQ5fS/9Hv4hl3F+kXn9mDlsnB/VfG0aqAMG1TINg rFaIpAzWe3uVSyhUuUQwNPvken3/taptgAjmqN9mPUivjzxh7N8V7VBfMUKeJ+yz PfArsr4U/Zfge/EO9h8ylH1iF1Y8rVsk7N81Z4mzL+jW9C84N4ueH/7LXcVI21yy OHPrDJOXp+kUVXi6Tmn8nXGt2/pwGRCxW21yUwfjwS7zM5ceHwvDl3qL4/s= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:36 2025 by rpki-client