$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer File: 20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer (raw, json) Hash identifier: xL1XS3a5KhytoV1FOR/tczzUxlVbFOPAy5e/SDOAybM= Subject key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858497C375772E898846DCC22FAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Apr 2025 00:45:34 +0000 Certificate not after: Thu 15 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 14004 AS: 33387 IP: 63.141.224.0/19 IP: 74.91.16.0/20 IP: 107.150.32.0/19 IP: 142.54.160.0/19 IP: 192.151.144.0/20 IP: 192.187.96.0/19 IP: 198.204.224.0/19 IP: 199.168.96.0/21 IP: 2604:4300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:37:57:72:e8:98:84:6d:cc:22:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 11 00:45:34 2025 GMT Not After : Jul 15 00:45:34 2027 GMT Subject: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:3c:42:46:4a:f8:8a:fe:39:12:c8:18:3b: 6e:b0:8c:e6:12:46:7b:37:6b:c4:a4:86:35:7c:66: b7:f5:9b:a1:4c:df:b7:f0:39:62:01:8d:e0:fe:b7: e8:39:5a:c0:fd:23:2d:bf:7d:0e:8a:bc:87:05:9d: ff:63:32:35:c7:2f:69:77:0a:ed:be:42:2d:05:68: 8f:9c:cc:e2:a4:59:a6:13:3a:00:86:ab:37:ea:46: 59:dd:88:92:db:d1:ec:37:7e:e4:de:c1:91:4f:8d: ec:33:e6:7e:5b:82:60:b2:70:a1:2c:41:54:30:89: 92:26:ce:6e:c0:18:c6:50:24:c9:ba:4f:b3:e6:17: 65:0a:c6:0a:ca:2b:06:a4:db:2a:92:60:4f:8d:af: 3c:a2:a9:d6:31:38:ac:ec:c8:71:fe:ee:9a:53:d1: 60:fa:4d:59:98:7c:a8:8d:8d:d1:96:55:33:3a:eb: 2e:89:1f:58:28:b3:a7:25:06:09:11:5a:8b:a1:1e: c4:81:8f:45:b3:dc:49:3f:61:39:d6:a1:da:5c:74: 4e:f8:93:0a:0d:dc:f9:c5:65:e5:87:75:26:a4:27: 67:0a:13:d2:c5:39:65:12:e0:a0:c7:8d:fe:31:3d: bb:4b:f6:5d:40:b0:2b:86:28:75:f7:11:6c:39:d0: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 63.141.224.0/19 74.91.16.0/20 107.150.32.0/19 142.54.160.0/19 192.151.144.0/20 192.187.96.0/19 198.204.224.0/19 199.168.96.0/21 IPv6: 2604:4300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14004 33387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c0:3d:07:89:eb:2b:75:09:30:5e:d4:df:f9:46:31:f2:c1: 39:52:24:95:c9:03:cc:b5:5e:4c:3b:82:9d:0b:66:44:5f:5f: cc:06:26:3f:f2:66:d7:66:77:37:1b:3e:f8:0f:3c:56:e5:41: 89:43:bc:8f:80:78:d6:59:c4:a6:6b:df:5f:c4:a4:8f:c9:56: 9e:1f:cd:31:e6:fd:2f:72:c8:50:98:c3:5a:6a:59:f6:a2:52: ad:55:94:e2:2a:b8:b1:53:da:86:c9:10:ce:7f:04:6f:37:01: bc:fa:8d:99:6b:00:9c:2f:04:16:c3:0e:ce:dc:64:6d:5c:40: 04:f4:51:54:88:b2:24:e8:62:2e:90:cd:61:ce:19:12:b6:b8: 58:21:01:61:0c:89:21:e7:fb:8a:7a:7d:3d:28:e8:62:32:e6: 87:81:20:a6:4d:58:2c:65:bf:59:be:96:e8:07:92:16:6b:9f: b3:2c:fb:d8:9b:60:c2:a2:4e:96:7a:37:76:9a:9b:f8:f0:f5: 58:c0:e3:d0:93:10:79:88:86:94:5c:d9:05:b1:99:48:64:74: c8:c0:ac:ee:26:45:7e:86:84:7c:72:0b:23:b0:8a:25:bc:4d: 6c:74:28:77:3d:57:dc:66:b9:fc:59:77:89:99:5a:17:68:2f: 66:e1:28:01 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEl8N1dy6JiEbcwi+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQxMTAwNDUzNFoXDTI3MDcxNTAwNDUzNFowLzEtMCsGA1UEAxMk MjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhjYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+c8QkZK+Ir+ORLIGDtusIzmEkZ7N2vEpIY1 fGa39ZuhTN+38DliAY3g/rfoOVrA/SMtv30OiryHBZ3/YzI1xy9pdwrtvkItBWiP nMzipFmmEzoAhqs36kZZ3YiS29HsN37k3sGRT43sM+Z+W4JgsnChLEFUMImSJs5u wBjGUCTJuk+z5hdlCsYKyisGpNsqkmBPja88oqnWMTis7Mhx/u6aU9Fg+k1ZmHyo jY3RllUzOusuiR9YKLOnJQYJEVqLoR7EgY9Fs9xJP2E51qHaXHRO+JMKDdz5xWXl h3UmpCdnChPSxTllEuCgx43+MT27S/ZdQLArhih19xFsOdBZ6wIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFFSbIRdyuS3sPV1igQpsz/enYkNNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwYzRhZjc5LWNkY2YtNDY0MC1h YjRlLWYwZjMzNjQ4Y2M1NS8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0 OGNjNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAU/jeADBARKWxADBAVrliADBAWONqADBATAl5AD BAXAu2ADBAXGzOADBAPHqGAwDQQCAAIwBwMFACYEQwAwHgYIKwYBBQUHAQgBAf8E DzANoAswCQICNrQCAwCCazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkwD0HiesrdQkwXtTf+UYx8sE5UiSV yQPMtV5MO4KdC2ZEX1/MBiY/8mbXZnc3Gz74DzxW5UGJQ7yPgHjWWcSma99fxKSP yVaeH80x5v0vcshQmMNaaln2olKtVZTiKrixU9qGyRDOfwRvNwG8+o2ZawCcLwQW ww7O3GRtXEAE9FFUiLIk6GIukM1hzhkStrhYIQFhDIkh5/uKen09KOhiMuaHgSCm TVgsZb9ZvpboB5IWa5+zLPvYm2DCok6Wejd2mpv48PVYwOPQkxB5iIaUXNkFsZlI ZHTIwKzuJkV+hoR8cgsjsIolvE1sdCh3PVfcZrn8WXeJmVoXaC9m4SgB -----END CERTIFICATE-----Generated at Sun Apr 27 00:25:37 2025 by rpki-client