$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer File: 9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer (raw, json) Hash identifier: yGu77U+OWGUyfXd8bYcezHuA1wT0EXdubbJ7ufL3xRQ= Subject key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6 Authority key identifier: 70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38 Certificate issuer: /CN=081bd66e-b1d1-405a-8a32-c830ec790ce5 Certificate serial: 010D0C9F43285848D90418853276BB3281712400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 13:45:33 +0000 Certificate not after: Mon 17 May 2027 12:45:33 +0000 Subordinate resources: AS: 23133 IP: 204.14.72.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:04:18:85:32:76:bb:32:81:71:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081bd66e-b1d1-405a-8a32-c830ec790ce5 Validity Not Before: Feb 11 13:45:33 2025 GMT Not After : May 17 12:45:33 2027 GMT Subject: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:b1:53:1c:97:e6:74:6a:8a:fa:1b:6f:fd: a0:43:07:06:f7:15:8c:ef:87:44:02:51:94:27:33: 7b:a1:4c:5c:7b:7d:7f:22:8f:ca:0b:80:b9:18:35: 9a:94:ea:f8:85:65:53:de:d9:cb:70:57:39:ee:b3: 98:05:8a:be:5d:e0:96:5a:a9:8c:c3:40:cc:2d:4b: 62:aa:ac:82:7d:67:9e:56:6a:f3:ce:70:07:6c:cd: d9:72:08:36:3a:b1:6c:f1:74:e2:f9:98:72:ab:a2: 06:a7:46:4f:72:41:9f:48:28:82:d8:41:70:52:ff: 05:00:ba:17:6d:c5:e2:b0:61:99:0c:e5:df:bf:8f: 6a:a3:b4:55:31:cc:5c:70:f1:84:46:65:fa:59:12: 2b:c8:7d:9e:eb:2c:d7:fc:dc:b6:b3:de:29:51:7e: 8c:d1:58:99:41:b8:a5:c9:12:81:02:a4:97:b6:cf: 23:f3:36:7a:c2:a7:47:f8:3f:0f:cc:45:f2:e7:c3: 4e:c4:57:e1:25:c2:23:1a:a1:7b:76:d9:3e:72:03: 30:d6:4d:e3:ef:9e:de:f6:ba:3d:1a:61:19:dc:55: 6a:c9:e8:bc:c1:4f:0f:d9:98:95:ba:df:39:0a:cc: 4b:d7:b2:e4:b0:16:57:6e:f9:6a:e9:c0:13:ef:31: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl X509v3 Authority Key Identifier: keyid:70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer sbgp-ipAddrBlock: critical IPv4: 204.14.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23133 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b0:7d:15:6d:26:d5:26:31:f0:3c:34:1c:52:af:7b:a2:d2: 9b:91:04:1b:c1:14:a4:c7:b7:78:21:73:d5:de:a6:a5:e5:1c: 80:b0:f5:3c:0e:a0:7e:a6:a4:0b:ec:5a:a5:a6:d3:7a:ec:14: 7d:20:46:86:d9:a4:59:01:08:49:2a:e8:97:dd:92:68:dc:d2: 86:4a:87:70:da:89:2a:0d:6f:7f:31:c6:e0:1e:cc:8e:d0:bf: 17:a6:7c:07:d8:8f:36:9a:df:c2:7b:28:b1:f8:b2:89:2a:66: d2:d5:e5:33:bf:e9:f5:a9:23:61:c4:bb:15:24:b0:8e:b1:6e: a4:3b:5e:3a:3b:dc:d7:e4:5c:81:60:3b:aa:f8:c7:4f:e0:c2: 44:34:22:f3:96:68:5d:2e:30:07:1c:d6:f0:07:50:c1:81:33: ce:b0:84:82:8a:83:65:0e:2c:5e:55:35:18:d1:02:1c:17:25: 82:90:36:4c:d3:fe:28:87:0b:79:9b:c3:eb:d9:93:32:72:49: b2:c0:14:e4:7f:cb:14:d0:76:0e:c7:18:a1:e4:36:4b:f7:1b: 83:e6:e8:47:24:ed:9a:af:e4:7b:ff:93:c2:27:a0:ce:4e:6d: 19:05:c3:57:08:74:4f:c0:e7:12:5e:a6:18:d0:ac:ca:e2:a1: c5:bc:74:0f -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIUAQ0Mn0MoWEjZBBiFMna7MoFxJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgxYmQ2NmUtYjFkMS00MDVhLThhMzItYzgzMGVjNzkw Y2U1MB4XDTI1MDIxMTEzNDUzM1oXDTI3MDUxNzEyNDUzM1owPTE7MDkGA1UEAxMy OWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVjYjk5YWM2M2M3ODM1YThi YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKALFTHJfmdGqK+htv /aBDBwb3FYzvh0QCUZQnM3uhTFx7fX8ij8oLgLkYNZqU6viFZVPe2ctwVznus5gF ir5d4JZaqYzDQMwtS2KqrIJ9Z55WavPOcAdszdlyCDY6sWzxdOL5mHKroganRk9y QZ9IKILYQXBS/wUAuhdtxeKwYZkM5d+/j2qjtFUxzFxw8YRGZfpZEivIfZ7rLNf8 3Laz3ilRfozRWJlBuKXJEoECpJe2zyPzNnrCp0f4Pw/MRfLnw07EV+ElwiMaoXt2 2T5yAzDWTePvnt72uj0aYRncVWrJ6LzBTw/ZmJW63zkKzEvXsuSwFldu+WrpwBPv MX9BAgMBAAGjggPAMIIDvDAdBgNVHQ4EFgQU305Gg6DIdvaKcr3fqgWIMJNWw9Yw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4YmFhNjRhODAxOGJiMmRh YjdjYzBhOTEvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4YmFhNjRhODAxOGJiMmRhYjdjYzBhOTEv MC9ERjRFNDY4M0EwQzg3NkY2OEE3MkJEREZBQTA1ODgzMDkzNTZDM0Q2Lm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMy LWM4MzBlYzc5MGNlNS8wODFiZDY2ZS1iMWQxLTQwNWEtOGEzMi1jODMwZWM3OTBj ZTUuY3JsMB8GA1UdIwQYMBaAFHDPWiNVDPGuz8MzqN83BLPPDf44MA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03OTNhLTRhNDUt YTBhOS05NzgxNDgzMjFhMDcvMDgxYmQ2NmUtYjFkMS00MDVhLThhMzItYzgzMGVj NzkwY2U1LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8wOSDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJaXTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOsH0VbSbVJjHwPDQcUq97 otKbkQQbwRSkx7d4IXPV3qal5RyAsPU8DqB+pqQL7FqlptN67BR9IEaG2aRZAQhJ KuiX3ZJo3NKGSodw2okqDW9/McbgHsyO0L8XpnwH2I82mt/Ceyix+LKJKmbS1eUz v+n1qSNhxLsVJLCOsW6kO146O9zX5FyBYDuq+MdP4MJENCLzlmhdLjAHHNbwB1DB gTPOsISCioNlDixeVTUY0QIcFyWCkDZM0/4ohwt5m8Pr2ZMyckmywBTkf8sU0HYO xxih5DZL9xuD5uhHJO2ar+R7/5PCJ6DOTm0ZBcNXCHRPwOcSXqYY0KzK4qHFvHQP -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:59 2025 by rpki-client