$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer File: f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer (raw, json) Hash identifier: voV5roBVZ+2HlVVUDKvtdecGkmAPowBw6w/Sujzn9Po= Subject key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B04195950575A949C5BCD100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Jan 2025 23:21:18 +0000 Certificate not after: Sun 02 May 2027 22:21:18 +0000 Subordinate resources: AS: 21581 IP: 108.161.144.0/20 IP: 2606:7100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:41:95:95:05:75:a9:49:c5:bc:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 27 23:21:18 2025 GMT Not After : May 2 22:21:18 2027 GMT Subject: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:ab:0e:49:e7:97:f3:3c:b9:22:29:9e:f6: 60:97:0b:90:cf:62:8c:5d:c9:93:c6:a6:e2:ed:69: d8:9d:58:61:e6:de:7b:9f:e2:63:13:f3:40:ac:3e: 76:43:d6:d3:c8:9e:4c:07:14:45:9a:8d:a5:60:ed: ed:20:77:d7:80:b3:d6:92:ab:e6:c1:88:70:45:42: a9:6e:37:e0:6c:e2:f9:38:24:d0:58:41:70:7b:08: c6:31:66:7e:31:c3:6d:a9:5a:e8:bc:0e:4f:71:c0: a3:64:d9:d9:e3:95:f1:5b:f7:aa:b0:fc:93:d1:f8: 10:48:15:08:f4:75:3f:3e:65:65:e4:52:6b:a9:b2: c6:bd:8a:d8:50:2f:8c:57:db:73:c9:f8:63:c1:7c: 22:56:a7:2d:52:2c:57:4d:73:0f:f0:32:96:ba:d1: 56:f8:f0:10:e2:61:f5:2c:52:51:78:22:12:a3:9c: 4a:09:c1:f1:ff:06:6b:e8:e8:24:8b:24:c9:2e:d3: f3:52:73:bb:4e:f3:38:34:1e:e1:3b:e3:06:4e:30: a4:50:29:87:6e:02:17:df:62:5a:e3:22:64:58:31: ed:e9:c0:b6:74:6a:ca:d5:b7:63:81:77:32:74:b8: 65:98:72:54:d0:a7:be:a8:4e:17:01:18:36:3c:99: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 108.161.144.0/20 IPv6: 2606:7100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6d:14:33:12:7e:8f:08:a9:4e:23:7a:82:79:bd:b7:17:f4: c4:67:42:3b:9e:46:2f:11:de:4c:0e:d9:fc:f6:dd:ef:c7:f6: 6b:7c:1b:22:fa:2c:41:b2:9c:ff:01:64:95:83:1f:f7:3b:71: 49:6d:c3:a7:d5:c3:10:6e:4f:72:a1:44:ce:17:1c:a8:4f:c3: d3:1b:d4:50:ec:e0:d1:d0:25:67:1b:af:81:44:14:40:b1:6e: b5:c1:f6:ba:32:eb:55:45:93:55:be:41:c7:73:c9:dd:da:cf: 54:3c:92:1b:27:67:33:c0:25:67:2d:2f:7a:9f:01:b0:f2:ba: 21:5c:fa:a9:cb:99:5b:1f:1e:5a:c0:65:b7:b9:92:b1:1b:11: d2:d5:6b:42:c0:54:92:b9:8a:c2:4e:ca:ed:2d:c8:9e:51:9f: 42:23:e8:19:f3:34:f1:fe:19:4e:33:dd:ed:94:a9:b5:d3:d0: 17:8d:18:78:dd:b7:f8:dd:9e:a0:e3:e1:f9:25:42:03:4c:2f: c7:30:58:01:52:34:56:2b:00:4c:b0:c8:54:22:51:27:ef:61: 49:e1:94:61:83:3d:c4:64:6f:fb:b7:c3:04:db:80:36:93:bb: 99:d8:f1:5e:7c:f8:be:91:ba:76:bf:51:46:21:52:e9:16:c4: 54:52:d3:08 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEiwQZWVBXWpScW80QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyNzIzMjExOFoXDTI3MDUwMjIyMjExOFowLzEtMCsGA1UEAxMk ZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJhZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcOrDknnl/M8uSIpnvZglwuQz2KMXcmTxqbi 7WnYnVhh5t57n+JjE/NArD52Q9bTyJ5MBxRFmo2lYO3tIHfXgLPWkqvmwYhwRUKp bjfgbOL5OCTQWEFwewjGMWZ+McNtqVrovA5PccCjZNnZ45XxW/eqsPyT0fgQSBUI 9HU/PmVl5FJrqbLGvYrYUC+MV9tzyfhjwXwiVqctUixXTXMP8DKWutFW+PAQ4mH1 LFJReCISo5xKCcHx/wZr6OgkiyTJLtPzUnO7TvM4NB7hO+MGTjCkUCmHbgIX32Ja 4yJkWDHt6cC2dGrK1bdjgXcydLhlmHJU0Ke+qE4XARg2PJkiCQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFK3qPTF0qrzHLoNCL2aWhxBWGJMFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y2OWU2MGE2LTUxYzQtNGEzZS04 MjFhLTJkN2Q0MzhiYWQ0Yy9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4 YmFkNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARsoZAwDQQCAAIwBwMFACYGcQAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVE0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnm0UMxJ+jwipTiN6gnm9txf0xGdC O55GLxHeTA7Z/Pbd78f2a3wbIvosQbKc/wFklYMf9ztxSW3Dp9XDEG5PcqFEzhcc qE/D0xvUUOzg0dAlZxuvgUQUQLFutcH2ujLrVUWTVb5Bx3PJ3drPVDySGydnM8Al Zy0vep8BsPK6IVz6qcuZWx8eWsBlt7mSsRsR0tVrQsBUkrmKwk7K7S3InlGfQiPo GfM08f4ZTjPd7ZSptdPQF40YeN23+N2eoOPh+SVCA0wvxzBYAVI0VisATLDIVCJR J+9hSeGUYYM9xGRv+7fDBNuANpO7mdjxXnz4vpG6dr9RRiFS6RbEVFLTCA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:06:10 2025 by rpki-client