$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer File: 0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer (raw, json) Hash identifier: Xr+IJSTAm7YriSi+sDpvvXWfyutt3sKWAcQRWhfNiPE= Subject key identifier: 99:C6:6D:5C:07:3B:8B:AD:A5:66:59:56:D5:7F:FF:FE:26:D1:FB:94 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858494CC1B4B0A4DECB03EFE6C300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 00:45:33 +0000 Certificate not after: Mon 28 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 22324 IP: 104.37.208.0/22 IP: 192.207.252.0/24 IP: 199.180.148.0/22 IP: 204.10.60.0/22 IP: 207.167.104.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c1:b4:b0:a4:de:cb:03:ef:e6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 25 00:45:33 2025 GMT Not After : Jun 28 00:45:33 2027 GMT Subject: CN=0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:b8:fa:c4:8f:0c:80:a0:de:a0:6c:85:8b: a3:17:b4:fb:57:53:5a:9c:30:b4:38:09:97:fa:33: a0:c4:48:9a:08:74:40:e0:ea:dd:d6:54:67:2c:59: cc:a7:80:02:62:92:1a:29:eb:d5:a4:1d:b5:d2:31: 0c:eb:bc:dc:e5:8c:5c:59:bf:c4:ec:7c:81:ce:55: a4:0e:9c:e8:63:54:84:4e:d6:55:3b:73:a3:4d:49: b2:c5:50:dc:9f:46:a5:c1:9e:14:ee:4d:4a:49:24: f5:19:e5:26:a7:02:b7:df:07:4f:ff:8c:a8:9d:82: 39:31:db:db:6f:ba:37:92:ea:1f:2b:fc:2d:56:3f: e2:99:f0:e1:a7:e3:d1:62:dd:e3:de:c8:5a:e2:93: 77:24:43:94:59:10:f0:85:3b:bc:b4:bd:bc:ae:a9: 69:3c:18:89:d7:8c:01:78:20:a5:04:5d:30:41:06: 53:f2:e7:40:37:96:2f:21:8b:e9:bf:de:f2:6b:07: 15:bc:8f:77:4c:a0:cd:7b:72:f9:89:8f:c8:6e:f5: 6f:cf:60:70:d0:14:11:f1:26:ad:28:b9:ea:2f:95: f5:c9:ae:d8:ea:66:7f:dc:23:fc:d7:ef:7e:ec:c0: 12:f0:a2:10:24:ac:c2:82:d3:cf:62:32:c2:41:b6: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:6D:5C:07:3B:8B:AD:A5:66:59:56:D5:7F:FF:FE:26:D1:FB:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 104.37.208.0/22 192.207.252.0/24 199.180.148.0/22 204.10.60.0/22 207.167.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22324 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d5:1c:cc:da:6e:ca:9a:3b:a8:92:bb:90:8a:a6:20:85:c0: 2b:2d:e9:80:c2:a3:19:f4:af:81:2e:89:ac:b3:d9:99:27:40: 87:51:38:61:c8:d2:c4:5b:53:7b:9c:7a:a1:13:74:44:2c:98: b3:c2:4e:ea:3a:8d:a6:f4:69:d0:b9:5e:71:d5:83:74:2d:6d: e3:18:0e:ef:83:34:09:34:5d:15:c7:2f:23:04:9e:d5:cf:19: 59:7d:3c:6e:cf:db:b2:8f:67:9c:30:5d:2e:ee:fe:e1:bf:b5: 11:ad:94:a3:3c:41:ee:2c:09:1f:cc:bc:cc:95:d2:41:d7:a5: bc:09:e9:5c:82:d6:18:29:96:0d:21:08:9c:30:59:a0:96:3b: 39:2d:5e:b2:72:c9:e9:65:5c:e6:27:34:9c:3b:4b:e2:9e:d1: a0:5f:41:2a:55:be:97:91:d3:21:a0:15:4d:42:bd:4f:fe:09: 3c:7a:b4:fd:64:38:79:00:77:4b:4b:12:ea:e1:a9:8c:39:f0: 0d:d8:fd:3a:22:a8:13:b6:ac:a4:30:a7:58:db:5f:d0:de:85: c9:5a:c4:20:c8:cb:dd:ab:aa:80:37:6a:55:cc:08:e4:b5:04: 8f:9c:05:82:3b:4f:49:31:f4:11:2e:bc:01:6b:b5:d1:a9:34: a7:41:5e:70 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWElMwbSwpN7LA+/mwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDMyNTAwNDUzM1oXDTI3MDYyODAwNDUzM1owLzEtMCsGA1UEAxMk MDk5M2FkNmQtMDJmMS00ZmUyLThhOGUtZTQ3ZTg0MWM2ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk64+sSPDICg3qBshYujF7T7V1NanDC0OAmX +jOgxEiaCHRA4Ord1lRnLFnMp4ACYpIaKevVpB210jEM67zc5YxcWb/E7HyBzlWk DpzoY1SETtZVO3OjTUmyxVDcn0alwZ4U7k1KSST1GeUmpwK33wdP/4yonYI5Mdvb b7o3kuofK/wtVj/imfDhp+PRYt3j3sha4pN3JEOUWRDwhTu8tL28rqlpPBiJ14wB eCClBF0wQQZT8udAN5YvIYvpv97yawcVvI93TKDNe3L5iY/IbvVvz2Bw0BQR8Sat KLnqL5X1ya7Y6mZ/3CP81+9+7MAS8KIQJKzCgtPPYjLCQbZ8YQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFJnGbVwHO4utpWZZVtV///4m0fuUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w OTkzYWQ2ZC0wMmYxLTRmZTItOGE4ZS1lNDdlODQxYzZlMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA5OTNhZDZkLTAyZjEtNGZlMi04 YThlLWU0N2U4NDFjNmUxZS8wOTkzYWQ2ZC0wMmYxLTRmZTItOGE4ZS1lNDdlODQx YzZlMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAJoJdADBADAz/wDBALHtJQDBALMCjwDBALPp2gw GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVzQwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfNUczNpuypo7qJK7 kIqmIIXAKy3pgMKjGfSvgS6JrLPZmSdAh1E4YcjSxFtTe5x6oRN0RCyYs8JO6jqN pvRp0LlecdWDdC1t4xgO74M0CTRdFccvIwSe1c8ZWX08bs/bso9nnDBdLu7+4b+1 Ea2UozxB7iwJH8y8zJXSQdelvAnpXILWGCmWDSEInDBZoJY7OS1esnLJ6WVc5ic0 nDtL4p7RoF9BKlW+l5HTIaAVTUK9T/4JPHq0/WQ4eQB3S0sS6uGpjDnwDdj9OiKo E7aspDCnWNtf0N6FyVrEIMjL3auqgDdqVcwI5LUEj5wFgjtPSTH0ES68AWu10ak0 p0FecA== -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:36 2025 by rpki-client