$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer File: 618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer (raw, json) Hash identifier: +wXUJEeuqPKgwP+PEmRBAiFhXXQapGwwvYeh1oiW/T8= Subject key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849366C3BC62CFBD4037EF48000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 00:45:33 +0000 Certificate not after: Sun 20 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 11641 AS: 14436 AS: 20439 AS: 21894 AS: 30181 AS: 54802 AS: 393711 IP: 173.240.160.0/20 IP: 199.16.136.0/21 IP: 199.187.152.0/21 IP: 206.108.40.0/21 IP: 206.225.192.0/19 IP: 2601:5000::/24 IP: 2620:103:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:6c:3b:c6:2c:fb:d4:03:7e:f4:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 17 00:45:33 2025 GMT Not After : Jun 20 00:45:33 2027 GMT Subject: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:92:74:32:1b:f7:20:ef:36:ae:bc:2f:c2: 3a:6c:ae:80:03:6e:04:b2:fb:d7:d0:da:c0:c7:f9: ff:86:41:7a:d9:21:51:44:38:92:71:69:0a:f2:62: 18:36:d0:1d:3f:fd:db:cc:27:d2:b2:5f:54:43:0c: 83:d0:4b:7b:e7:55:ba:2a:03:c3:3b:86:d5:27:f8: de:26:c7:3e:81:1e:b9:60:77:2a:7a:c6:9b:59:c4: ae:7c:38:dc:ce:c9:0e:3b:8b:1d:65:48:be:b3:35: 44:ee:30:13:56:65:1d:4e:3e:94:4b:4c:23:16:48: fd:fe:1b:3f:18:77:27:1f:b5:8a:dc:93:52:fd:fe: dd:05:ce:cc:ec:32:a5:78:a7:c9:7e:a3:87:6a:37: f4:fd:3e:6c:36:73:d4:20:cf:72:e8:a0:71:35:25: 14:5d:86:82:18:f5:c9:94:3c:e7:d6:aa:79:bb:1b: 65:3b:4e:e6:5a:af:b3:68:c8:a1:4b:b2:eb:e0:a9: be:59:27:1a:68:fd:ef:d0:c5:d4:57:69:27:40:3f: 89:bc:67:f2:dc:3c:ad:8f:c6:d4:dd:b5:82:1c:ce: 82:b7:78:05:68:f9:42:8d:ec:2b:04:de:12:30:d6: 21:6a:fe:e8:5a:13:ac:06:26:be:10:7c:fe:d2:ad: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 173.240.160.0/20 199.16.136.0/21 199.187.152.0/21 206.108.40.0/21 206.225.192.0/19 IPv6: 2601:5000::/24 2620:103:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11641 14436 20439 21894 30181 54802 393711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:10:e2:7d:2c:f1:5c:73:fa:1e:09:2b:ed:1b:85:0c:dd:a9: 95:8f:57:1c:3c:cf:80:ad:91:6c:ff:57:73:85:fa:62:24:06: 8a:14:3f:52:b9:3e:57:13:47:bd:e4:e5:41:20:c0:4e:ed:7a: 08:8d:fb:ef:1f:f8:91:05:5f:75:ae:1d:0b:db:fc:5a:f2:f0: 93:3c:54:6c:15:bd:2e:8d:5f:60:76:33:85:e8:c6:38:22:de: 86:fd:d1:6f:83:12:8c:18:fd:d5:cf:35:4f:b3:ef:f8:c3:58: 3a:0b:8e:47:bc:96:ab:86:4b:26:41:9d:a3:61:10:86:49:b0: ab:5e:4a:97:ba:6a:3c:ed:83:6c:35:dc:09:6f:12:05:2d:5e: 1b:60:f2:46:84:e3:ac:09:4e:e8:b0:46:19:07:72:1d:78:ce: 0d:86:21:90:73:a0:09:03:ca:a6:54:3e:5e:14:cc:60:b9:e0: a6:44:ab:81:9c:fb:41:ee:0a:4b:0d:26:9c:01:11:39:80:48: 2e:e8:f9:a9:17:b8:02:ff:c6:fc:c0:c2:b6:01:28:af:77:1b: 16:23:c3:89:89:ab:58:c6:78:ae:de:2a:6a:a9:23:d8:3a:45: e8:a6:05:8e:3f:a6:fa:0c:c6:2c:da:26:04:d5:c6:46:ec:69: 92:ae:9a:e7 -----BEGIN CERTIFICATE----- MIIHUTCCBjmgAwIBAgIUAQ0Mn0MoWEk2bDvGLPvUA370gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDMxNzAwNDUzM1oXDTI3MDYyMDAwNDUzM1owLzEtMCsGA1UEAxMk NjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SGSdDIb9yDvNq68L8I6bK6AA24EsvvX0NrA x/n/hkF62SFRRDiScWkK8mIYNtAdP/3bzCfSsl9UQwyD0Et751W6KgPDO4bVJ/je Jsc+gR65YHcqesabWcSufDjczskOO4sdZUi+szVE7jATVmUdTj6US0wjFkj9/hs/ GHcnH7WK3JNS/f7dBc7M7DKleKfJfqOHajf0/T5sNnPUIM9y6KBxNSUUXYaCGPXJ lDzn1qp5uxtlO07mWq+zaMihS7Lr4Km+WScaaP3v0MXUV2knQD+JvGfy3Dytj8bU 3bWCHM6Ct3gFaPlCjewrBN4SMNYhav7oWhOsBia+EHz+0q3WTQIDAQABo4IEYzCC BF8wHQYDVR0OBBYEFJc+V/UxgbFSUmfTBiul8UpIvqN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYxOGE4YWU0LWJlNjItNGVmMC05 ZGM3LTRjNGQ4MjZhNDBkZi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2 YTQwZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCQEAgABMB4DBASt8KADBAPHEIgDBAPHu5gDBAPObCgDBAXO4cAw FQQCAAIwDwMEACYBUAMHBCYgAQNwADAzBggrBgEFBQcBCAEB/wQkMCKgIDAeAgIt eQICOGQCAk/XAgJVhgICdeUCAwDWEgIDBgHvMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFsQ4n0s8Vxz+h4J K+0bhQzdqZWPVxw8z4CtkWz/V3OF+mIkBooUP1K5PlcTR73k5UEgwE7tegiN++8f +JEFX3WuHQvb/Fry8JM8VGwVvS6NX2B2M4Xoxjgi3ob90W+DEowY/dXPNU+z7/jD WDoLjke8lquGSyZBnaNhEIZJsKteSpe6ajztg2w13AlvEgUtXhtg8kaE46wJTuiw RhkHch14zg2GIZBzoAkDyqZUPl4UzGC54KZEq4Gc+0HuCksNJpwBETmASC7o+akX uAL/xvzAwrYBKK93GxYjw4mJq1jGeK7eKmqpI9g6ReimBY4/pvoMxizaJgTVxkbs aZKumuc= -----END CERTIFICATE-----Generated at Sun Apr 27 02:27:30 2025 by rpki-client