$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer (raw, json) Hash identifier: 4rXwjfwEzQx+fSXLCQ0cHRz9UFm5MaFoSA6r9qY67dM= Subject key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584903009420BB87CC9FF8DE2420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 14:42:25 +0000 Certificate not after: Sun 11 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 31746 IP: 66.132.168.0/22 IP: 66.132.176.0/22 IP: 216.150.6.0/23 IP: 2620:5d:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:00:94:20:bb:87:cc:9f:f8:de:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 26 14:42:25 2025 GMT Not After : Oct 11 00:45:20 2026 GMT Subject: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:4d:eb:5c:96:cf:c0:6c:27:ef:a6:2a:b1: 9d:d9:73:d3:cb:fa:b0:59:8f:9d:18:71:43:d1:a3: 18:dd:12:09:6a:e7:46:02:8c:1d:7b:f6:94:87:f2: b9:57:7e:bf:ae:d5:5b:de:d1:6b:86:89:a3:06:e8: ca:91:50:72:1b:4a:78:ad:c0:c2:08:cc:59:17:ba: 54:b4:ac:d6:cc:05:0f:3c:0d:e1:ad:4b:9f:da:11: c7:2c:be:57:d2:92:e7:6e:e5:9b:0f:3e:05:d0:63: d4:1f:73:b3:8a:69:29:27:5e:ea:de:9c:ef:11:41: 65:27:7f:98:a8:c1:9e:1f:71:1d:ad:94:95:0e:c9: 98:64:f3:dd:ca:a0:b5:27:d7:c4:70:7c:de:ae:ed: 6c:28:b2:0a:db:06:42:7f:aa:67:d8:f1:f2:5c:52: 4d:9a:41:2c:dd:9a:e2:79:08:39:19:76:30:7b:23: ea:fb:4d:64:70:26:87:2c:76:e1:9e:b9:b6:dd:73: 57:0a:84:db:c5:95:51:53:0c:16:92:61:64:28:a3: 86:06:4f:b8:c3:d7:8f:6b:0d:42:a8:a7:59:a6:ef: 39:5a:5c:19:08:10:62:31:ba:5a:09:4c:02:0b:f8: 96:d6:da:61:c8:5c:9c:3d:3c:e2:67:7e:02:12:96: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 66.132.168.0/22 66.132.176.0/22 216.150.6.0/23 IPv6: 2620:5d:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31746 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0a:4d:b9:e7:ce:44:db:e4:c0:07:28:10:58:15:55:28:e0: 9d:07:27:4f:b7:00:ec:c4:ae:20:e0:7e:34:e2:df:a3:37:61: b3:77:6c:9e:0d:ff:8b:18:ec:7d:6d:c7:5e:b8:c0:35:e6:74: 81:64:f3:ab:56:92:11:d9:0c:90:7a:77:96:91:16:4a:39:3b: f3:6e:85:f5:56:5e:1d:19:e6:9f:e9:f8:7d:33:94:f3:67:ef: 97:5d:58:45:55:00:85:bf:7f:1c:f6:8b:58:ac:02:48:78:66: 6e:51:aa:fd:1a:c0:45:ac:ff:a7:b8:63:e8:73:60:08:5b:78: f7:21:dc:a5:a9:ba:bd:26:41:97:20:98:62:73:33:4d:18:5c: a0:ca:1a:c2:68:13:81:56:38:f9:a1:ba:40:19:f5:5c:d3:9e: e1:d3:29:4a:72:ec:83:fd:8a:20:51:5b:96:a9:b3:40:8f:80: 1f:42:21:26:79:03:ba:a5:d3:6a:0b:c9:c9:78:42:bf:27:44: 18:46:17:a0:f6:a7:f3:43:84:33:e8:86:a1:58:d3:75:9a:88: 07:88:27:01:b9:ab:80:7e:db:16:d7:64:97:2c:09:60:95:93: b4:2a:eb:56:98:6c:74:98:1d:e1:c8:38:e3:8f:ac:3e:48:aa: c5:eb:44:ca -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEkDAJQgu4fMn/jeJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDIyNjE0NDIyNVoXDTI2MTAxMTAwNDUyMFowLzEtMCsGA1UEAxMk ODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijVN61yWz8BsJ++mKrGd2XPTy/qwWY+dGHFD 0aMY3RIJaudGAowde/aUh/K5V36/rtVb3tFrhomjBujKkVByG0p4rcDCCMxZF7pU tKzWzAUPPA3hrUuf2hHHLL5X0pLnbuWbDz4F0GPUH3OzimkpJ17q3pzvEUFlJ3+Y qMGeH3EdrZSVDsmYZPPdyqC1J9fEcHzeru1sKLIK2wZCf6pn2PHyXFJNmkEs3Zri eQg5GXYweyPq+01kcCaHLHbhnrm23XNXCoTbxZVRUwwWkmFkKKOGBk+4w9ePaw1C qKdZpu85WlwZCBBiMbpaCUwCC/iW1tphyFycPTziZ34CEpbhmwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFMyrrvN7yEr3T7yu0KG85RVrJVtGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzg5ZmEwMWFmLWNjYTUtNGQ4Zi04 MDAzLWY2YzllMjI1NzhiNC84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIy NTc4YjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAJChKgDBAJChLADBAHYlgYwDwQCAAIwCQMHACYg AF1AADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ8AjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGCk25585E 2+TABygQWBVVKOCdBydPtwDsxK4g4H404t+jN2Gzd2yeDf+LGOx9bcdeuMA15nSB ZPOrVpIR2QyQeneWkRZKOTvzboX1Vl4dGeaf6fh9M5TzZ++XXVhFVQCFv38c9otY rAJIeGZuUar9GsBFrP+nuGPoc2AIW3j3Idylqbq9JkGXIJhiczNNGFygyhrCaBOB Vjj5obpAGfVc057h0ylKcuyD/YogUVuWqbNAj4AfQiEmeQO6pdNqC8nJeEK/J0QY Rheg9qfzQ4Qz6IahWNN1mogHiCcBuauAftsW12SXLAlglZO0KutWmGx0mB3hyDjj j6w+SKrF60TK -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:22 2025 by rpki-client