$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer (raw, json) Hash identifier: lL6KZRyhHI5f4q8WFQqQDXhMJBx9d5TXJ/OHQ4hHb0g= Subject key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849A6179A9F202FCDCBB1606600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Apr 2025 00:45:34 +0000 Certificate not after: Fri 30 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 32974 IP: 164.72.0.0/16 IP: 192.254.0.0/20 IP: 199.30.32.0 -- 199.30.45.255 IP: 2620:190::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:17:9a:9f:20:2f:cd:cb:b1:60:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 26 00:45:34 2025 GMT Not After : Jul 30 00:45:34 2027 GMT Subject: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:2a:eb:4f:86:57:bc:ab:3a:8a:84:49:35: 51:f0:fc:22:75:c8:bb:b9:f8:e5:8c:56:24:41:5a: 96:e7:02:2b:93:d1:94:2e:5b:fb:f9:a7:3f:08:1a: d0:ab:c7:05:13:d1:87:93:f2:32:cf:3f:fe:27:9a: 1c:e2:54:12:8d:eb:ac:2a:22:bb:e2:83:da:20:c3: 86:5e:4b:ae:3a:4d:2f:7e:59:5c:c4:66:85:c8:a6: 48:d4:4e:6d:3e:7a:cf:34:13:ec:74:2a:23:3a:bc: 78:36:ab:6d:5c:32:57:94:64:d5:9a:52:96:1f:3c: 25:62:63:cf:dd:4a:47:f5:1f:d5:85:ba:b4:6f:20: d4:2d:93:4f:a0:9e:cf:b2:14:9e:16:be:1b:a7:cc: 1c:a5:37:44:03:e8:10:8b:41:c5:f8:a9:30:23:c4: d9:48:4e:25:84:61:e2:5a:19:21:3a:01:ff:fe:58: 12:8a:eb:21:08:89:c8:6f:27:11:a0:78:42:f0:be: 68:21:93:65:e1:32:d8:df:85:28:4d:a8:7a:92:8a: 21:0a:89:0d:3f:cc:db:05:85:9a:84:51:1f:5c:be: e0:80:54:b0:f6:8d:bd:43:a4:ba:4a:77:0d:02:43: e8:43:4e:c0:d9:81:a7:29:21:db:c8:28:b4:6b:5e: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 164.72.0.0/16 192.254.0.0/20 199.30.32.0-199.30.45.255 IPv6: 2620:190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32974 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:07:eb:67:a7:9c:32:ab:2f:1a:88:15:6a:14:25:3f:b9:28: bf:ca:9e:de:e8:3b:b7:b5:42:d5:31:6f:3c:52:b5:8c:51:eb: 20:47:c1:a4:33:3c:75:c9:5b:3a:07:06:29:5a:2d:3f:55:e7: 10:90:b7:de:43:75:d2:d0:3d:c9:76:ab:f7:7e:44:3f:b4:81: 37:c4:c2:92:6e:6d:8c:d6:d7:25:5c:70:8e:1f:a8:f7:be:b7: c0:26:59:6c:f5:09:df:9c:11:ec:08:0e:69:7f:26:1e:03:30: 38:f6:e5:10:c3:e3:87:91:ca:1b:51:22:1d:b4:4e:11:2c:fa: be:5a:69:f7:1a:ef:e7:70:aa:78:26:09:45:84:eb:0b:ff:2c: 82:fc:ee:da:ae:7c:3c:04:b5:22:d2:22:bd:25:78:3f:13:ef: 62:24:d4:5d:aa:6a:31:22:68:e6:dd:38:5d:ac:88:70:e9:f3: 52:66:22:f9:e4:d5:25:da:f6:51:0c:45:52:3d:87:f6:df:af: e9:f1:4f:e9:aa:9f:08:ee:b7:dd:c1:b9:c2:87:ca:8e:a6:93: 05:7c:30:1d:a4:50:2c:fe:39:2b:e9:83:2d:48:74:db:62:b3: bc:27:20:e5:59:73:49:93:b6:7f:d0:ef:be:18:34:15:b3:1a: 51:05:c2:23 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEmmF5qfIC/Ny7FgZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQyNjAwNDUzNFoXDTI3MDczMDAwNDUzNFowLzEtMCsGA1UEAxMk OGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIyYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbwq60+GV7yrOoqESTVR8Pwidci7ufjljFYk QVqW5wIrk9GULlv7+ac/CBrQq8cFE9GHk/Iyzz/+J5oc4lQSjeusKiK74oPaIMOG XkuuOk0vfllcxGaFyKZI1E5tPnrPNBPsdCojOrx4NqttXDJXlGTVmlKWHzwlYmPP 3UpH9R/Vhbq0byDULZNPoJ7PshSeFr4bp8wcpTdEA+gQi0HF+KkwI8TZSE4lhGHi WhkhOgH//lgSiushCInIbycRoHhC8L5oIZNl4TLY34UoTah6koohCokNP8zbBYWa hFEfXL7ggFSw9o29Q6S6SncNAkPoQ07A2YGnKSHbyCi0a15DYwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFB7a8wX+wOTbljy4AfU3OsHFPu6AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzhhOTY2M2Q5LTQzZTgtNGRkYi1i ZTgwLTgzMTZjZjAyMmE3YS84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2Yw MjJhN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB8EAgABMBkDAwCkSAMEBMD+ADAMAwQFxx4gAwQBxx4sMA0EAgAC MAcDBQAmIAGQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCAzjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR B+tnp5wyqy8aiBVqFCU/uSi/yp7e6Du3tULVMW88UrWMUesgR8GkMzx1yVs6BwYp Wi0/VecQkLfeQ3XS0D3Jdqv3fkQ/tIE3xMKSbm2M1tclXHCOH6j3vrfAJlls9Qnf nBHsCA5pfyYeAzA49uUQw+OHkcobUSIdtE4RLPq+Wmn3Gu/ncKp4JglFhOsL/yyC /O7arnw8BLUi0iK9JXg/E+9iJNRdqmoxImjm3ThdrIhw6fNSZiL55NUl2vZRDEVS PYf236/p8U/pqp8I7rfdwbnCh8qOppMFfDAdpFAs/jkr6YMtSHTbYrO8JyDlWXNJ k7Z/0O++GDQVsxpRBcIj -----END CERTIFICATE-----Generated at Sun Apr 27 04:14:31 2025 by rpki-client