$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer File: 49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer (raw, json) Hash identifier: wEI52bsbBBqxvQANGT/qEmHqqC4FZa5aF96U6O1FZ/w= Subject key identifier: 53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584987621505D80BC41E122A4200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 00:45:34 +0000 Certificate not after: Mon 19 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 33719 IP: 198.212.50.0/23 IP: 2620:18:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:62:15:05:d8:0b:c4:1e:12:2a:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 15 00:45:34 2025 GMT Not After : Jul 19 00:45:34 2027 GMT Subject: CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:d6:fd:f5:24:51:4c:38:29:e3:7d:2b:c5: d2:10:6c:d3:85:fc:cd:5e:78:6e:bc:57:6f:86:f9: ff:5c:ae:05:8a:e5:67:2a:d7:4a:13:c7:31:2d:f1: e9:cf:5e:d6:de:74:3c:05:64:cb:18:61:42:26:95: fe:a7:2f:2d:56:b4:7c:72:5e:09:fc:90:1d:14:47: 22:e1:23:14:b6:a3:ca:48:7b:95:89:23:9c:e9:c0: 3a:f6:24:4e:23:1d:98:a7:3f:26:b7:90:f5:f7:9e: 3b:cb:d8:f7:d1:47:6a:13:73:7f:83:7c:da:55:a1: fe:5e:6b:d4:87:af:a1:e1:1a:86:43:cf:a4:8f:04: 3d:04:4b:da:d9:1e:5d:87:21:e9:76:7b:ad:83:05: ef:fc:bd:92:0d:ed:4b:4e:c7:08:58:26:cc:9e:17: a3:f9:f3:71:cc:f5:e8:86:dd:22:2c:e3:85:fb:aa: 10:ea:d7:6d:56:b2:d1:40:2b:0f:dd:14:7e:ef:88: 84:f1:06:cd:4e:cd:a8:2a:6e:a7:c2:53:57:d1:12: fb:c1:ca:77:8d:6b:33:fb:70:60:08:29:20:5c:29: 87:57:d6:bc:c6:93:aa:05:a3:9c:2d:ea:af:9d:a9: 86:26:4f:75:31:32:b7:dd:d5:e4:76:a0:68:72:24: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.212.50.0/23 IPv6: 2620:18:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33719 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e9:39:02:d1:15:c4:49:c8:5c:f1:02:d1:e8:44:b5:4f:4c: 25:c0:01:89:75:ca:88:b7:f4:fe:c3:c6:34:35:00:22:c8:2e: 47:07:7f:32:7f:b1:99:29:f0:65:a3:d5:81:a1:9a:fc:90:ac: ad:22:7d:5c:a1:36:c6:45:86:ce:ca:e0:74:00:b7:4a:0d:f8: 0a:65:30:38:ea:d8:05:45:f6:0a:1e:aa:a9:6a:52:3f:d6:39: 84:de:13:48:30:70:a5:8c:2f:04:5a:1f:1c:f5:03:f9:77:17: 8a:0d:62:8a:c9:43:20:61:93:85:af:07:ec:78:f3:06:56:49: d9:42:fa:ec:4e:bf:58:4b:de:d9:ad:95:42:3b:53:3d:64:18: cc:16:94:d5:7e:90:0e:60:ee:f4:ea:10:67:ad:0b:c5:9b:fd: a1:84:03:89:84:22:24:b9:27:ba:a6:a1:db:69:82:af:8b:a3: 25:cf:30:14:95:ef:a9:e7:d3:ca:1b:84:48:17:92:75:db:bf: f0:f9:14:ee:d8:52:65:5e:0e:6c:19:46:d0:22:fd:94:37:ab: 87:05:16:52:10:9b:85:7a:2c:c4:85:aa:53:16:84:29:cc:c1: cb:9c:c7:24:d9:c6:cc:5c:ec:a7:53:18:eb:d5:67:61:9d:17: 5d:8b:b2:e6 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEmHYhUF2AvEHhIqQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQxNTAwNDUzNFoXDTI3MDcxOTAwNDUzNFowLzEtMCsGA1UEAxMk NDljMGJiYmQtZmEyOC00Yzg0LWE3N2ItNThmNmQ4ZTlmMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6LW/fUkUUw4KeN9K8XSEGzThfzNXnhuvFdv hvn/XK4FiuVnKtdKE8cxLfHpz17W3nQ8BWTLGGFCJpX+py8tVrR8cl4J/JAdFEci 4SMUtqPKSHuViSOc6cA69iROIx2Ypz8mt5D19547y9j30UdqE3N/g3zaVaH+XmvU h6+h4RqGQ8+kjwQ9BEva2R5dhyHpdnutgwXv/L2SDe1LTscIWCbMnhej+fNxzPXo ht0iLOOF+6oQ6tdtVrLRQCsP3RR+74iE8QbNTs2oKm6nwlNX0RL7wcp3jWsz+3Bg CCkgXCmHV9a8xpOqBaOcLeqvnamGJk91MTK33dXkdqBociToiQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFFOUaiDIaH8yIeGg4/qcMuWHSmFPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 OWMwYmJiZC1mYTI4LTRjODQtYTc3Yi01OGY2ZDhlOWYwYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQ5YzBiYmJkLWZhMjgtNGM4NC1h NzdiLTU4ZjZkOGU5ZjBhNy80OWMwYmJiZC1mYTI4LTRjODQtYTc3Yi01OGY2ZDhl OWYwYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAHG1DIwDwQCAAIwCQMHACYgABhAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAg7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK+k5AtEVxEnIXPEC0ehEtU9M JcABiXXKiLf0/sPGNDUAIsguRwd/Mn+xmSnwZaPVgaGa/JCsrSJ9XKE2xkWGzsrg dAC3Sg34CmUwOOrYBUX2Ch6qqWpSP9Y5hN4TSDBwpYwvBFofHPUD+XcXig1iislD IGGTha8H7HjzBlZJ2UL67E6/WEve2a2VQjtTPWQYzBaU1X6QDmDu9OoQZ60LxZv9 oYQDiYQiJLknuqah22mCr4ujJc8wFJXvqefTyhuESBeSddu/8PkU7thSZV4ObBlG 0CL9lDerhwUWUhCbhXosxIWqUxaEKczBy5zHJNnGzFzsp1MY69VnYZ0XXYuy5g== -----END CERTIFICATE-----Generated at Sat Apr 26 19:30:16 2025 by rpki-client