$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer File: fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer (raw, json) Hash identifier: lgbIDFDQaF7+FxYuEYDwiXghFNrsXefDTyXJ9o8CpNw= Subject key identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584913C312BA7F4DD65DE9483D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 14:47:14 +0000 Certificate not after: Mon 07 Jun 2027 13:47:14 +0000 Subordinate resources: AS: 40670 IP: 69.49.176.0/20 IP: 162.219.104.0/21 IP: 198.246.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:c3:12:ba:7f:4d:d6:5d:e9:48:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 4 14:47:14 2025 GMT Not After : Jun 7 13:47:14 2027 GMT Subject: CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:7a:45:e0:e5:b0:ba:7b:56:13:bd:57:79: 0b:4a:85:95:2d:32:57:73:36:77:2b:59:21:9c:1b: 58:7a:96:9e:61:96:41:b5:2b:10:e7:d7:e1:1f:18: 25:aa:8a:7e:9c:3a:d0:e9:b7:2f:5f:a1:e1:d1:83: e5:1d:48:06:3a:a5:78:64:03:5d:e5:56:c4:95:b3: b4:eb:6e:28:d2:cc:ff:06:e7:16:7e:7d:c3:04:d0: 26:3b:21:ae:91:22:a8:a3:b7:42:98:c0:fd:c3:e8: 83:b4:d4:89:2d:94:2f:0c:8f:9b:4d:45:1f:93:c2: dc:6a:6e:fb:5b:18:e7:72:29:29:ce:a3:1c:d4:2b: 29:ea:03:e2:0d:93:a6:84:b2:39:c5:77:22:14:df: f1:54:4d:8f:5a:bb:39:22:07:2c:91:80:8a:68:6c: 85:02:79:1f:c5:00:78:c1:73:eb:6b:e6:2b:b6:a5: f5:56:d3:80:69:15:1b:63:97:d9:9d:7e:d2:a0:84: 9b:fc:c0:89:2d:ff:b6:fe:1d:4d:48:69:92:f2:eb: f0:0c:d1:2c:9d:3d:47:e1:67:01:9f:05:05:70:c5: 03:3d:f3:53:b0:5a:04:df:14:be:d0:78:f6:d5:d0: a8:5e:a8:eb:e3:5d:6a:8b:79:7a:4b:6c:f2:35:ff: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.49.176.0/20 162.219.104.0/21 198.246.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40670 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7f:9b:05:0d:a5:66:5c:6a:52:cd:29:e2:b7:b3:c2:fa:86: fc:fb:28:4b:0b:b4:b0:8d:d5:76:68:d3:fb:1d:9e:1c:c3:05: f3:fe:b5:bd:47:d9:fa:1b:e6:5d:1f:1a:7f:13:24:8e:48:f7: df:0a:f0:42:ce:b5:90:41:b5:12:5d:01:34:4d:70:22:a7:42: c9:46:39:71:26:92:9c:6c:52:12:7f:cb:64:12:25:58:2d:cc: 94:39:e9:b3:ef:ad:68:00:60:00:5b:87:99:ca:61:a8:6c:f9: 4f:8e:10:5c:40:c1:54:55:be:58:76:29:0e:a6:89:74:5e:e1: 97:56:f4:c2:de:2b:79:4d:49:ec:97:87:f1:60:22:61:7c:9e: 75:ce:02:7a:07:d6:c7:4d:35:aa:13:c8:d0:be:93:97:bc:cc: d0:ad:a7:1d:3d:60:e1:d4:6b:1f:30:cc:b2:6b:6e:70:33:6b: b4:b7:23:c6:69:97:16:8a:d8:36:b6:79:34:8a:dd:2c:57:d5: a8:72:46:08:8e:f9:88:74:3f:36:38:2d:dd:2d:c4:81:2a:c9: 30:e5:91:c0:37:98:84:0b:dd:20:40:bf:d5:40:09:34:27:06: d2:4c:39:d3:b8:c8:8b:85:7d:92:a9:79:a1:85:08:89:32:91: 91:e1:38:73 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEkTwxK6f03WXelIPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNDE0NDcxNFoXDTI3MDYwNzEzNDcxNFowLzEtMCsGA1UEAxMk ZmQ2ZGFhMDgtNWNlZi00ZTk4LTg4MDgtNWZmYWEwNGE0OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyl6ReDlsLp7VhO9V3kLSoWVLTJXczZ3K1kh nBtYepaeYZZBtSsQ59fhHxglqop+nDrQ6bcvX6Hh0YPlHUgGOqV4ZANd5VbElbO0 624o0sz/BucWfn3DBNAmOyGukSKoo7dCmMD9w+iDtNSJLZQvDI+bTUUfk8Lcam77 WxjncikpzqMc1Csp6gPiDZOmhLI5xXciFN/xVE2PWrs5IgcskYCKaGyFAnkfxQB4 wXPra+YrtqX1VtOAaRUbY5fZnX7SoISb/MCJLf+2/h1NSGmS8uvwDNEsnT1H4WcB nwUFcMUDPfNTsFoE3xS+0Hj21dCoXqjr411qi3l6S2zyNf9oOQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFIwUvTOkdvw/cn/np2yHz+3EXe2wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m ZDZkYWEwOC01Y2VmLTRlOTgtODgwOC01ZmZhYTA0YTQ5N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ZkNmRhYTA4LTVjZWYtNGU5OC04 ODA4LTVmZmFhMDRhNDk3Yy9mZDZkYWEwOC01Y2VmLTRlOTgtODgwOC01ZmZhYTA0 YTQ5N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARFMbADBAOi22gDBATG9jAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAJ7eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZ/mwUNpWZcalLNKeK3s8L6hvz7KEsL tLCN1XZo0/sdnhzDBfP+tb1H2fob5l0fGn8TJI5I998K8ELOtZBBtRJdATRNcCKn QslGOXEmkpxsUhJ/y2QSJVgtzJQ56bPvrWgAYABbh5nKYahs+U+OEFxAwVRVvlh2 KQ6miXRe4ZdW9MLeK3lNSeyXh/FgImF8nnXOAnoH1sdNNaoTyNC+k5e8zNCtpx09 YOHUax8wzLJrbnAza7S3I8ZplxaK2Da2eTSK3SxX1ahyRgiO+Yh0PzY4Ld0txIEq yTDlkcA3mIQL3SBAv9VACTQnBtJMOdO4yIuFfZKpeaGFCIkykZHhOHM= -----END CERTIFICATE-----Generated at Fri Apr 4 19:08:16 2025 by rpki-client