$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer File: 0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer (raw, json) Hash identifier: gtz4jc+yCkS5uYLTIxId/KlMMwRW1dm7JO64sLOWSDY= Subject key identifier: 8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34 Authority key identifier: 40:C6:1F:78:BA:FB:5C:52:54:40:32:7C:32:08:B5:69:FF:2D:3F:BF Certificate issuer: /CN=9bf63dd0-7fcf-4028-967a-e4759c9edf1e Certificate serial: 010D0C9F432858488543936D33DDA987F2371800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 13:45:33 +0000 Certificate not after: Sat 17 Apr 2027 12:45:33 +0000 Subordinate resources: AS: 400850 IP: 66.205.246.0/24 IP: 2620:5f:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:43:93:6d:33:dd:a9:87:f2:37:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf63dd0-7fcf-4028-967a-e4759c9edf1e Validity Not Before: Jan 12 13:45:33 2025 GMT Not After : Apr 17 12:45:33 2027 GMT Subject: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:7a:8d:e2:02:4d:b0:0b:d2:27:c4:88:e7: f7:70:7e:98:6c:2a:6d:19:8d:1a:0f:1f:01:51:cb: 8c:f6:31:13:61:6d:d3:28:e7:f4:67:43:3e:2b:15: 07:75:0a:8f:f6:70:98:93:f9:a9:9f:79:ec:9b:91: ca:c0:d2:55:04:07:19:84:ee:30:35:ed:fc:fe:d9: 59:5a:66:d3:90:e1:5a:5f:be:80:8d:48:21:90:e2: 09:01:fa:ec:33:7a:69:e0:9c:3c:e4:98:a5:d1:63: 28:7a:15:68:e1:54:75:09:da:bd:8e:8c:b9:38:15: d5:af:b9:ed:d3:06:b8:f6:8a:87:51:d3:e3:46:b4: b5:9a:88:5c:e6:ce:32:d7:b7:c8:49:eb:58:2e:a3: 42:35:7a:b9:43:57:70:38:29:f3:80:7f:db:86:9c: 38:f9:a7:5e:e2:b9:6f:5c:f8:6a:03:6e:05:46:7c: ea:d5:08:17:20:7f:f6:a3:5a:2f:62:d0:fc:3f:67: 00:67:af:09:37:61:64:b2:77:46:c3:54:78:99:7f: 36:b8:33:18:41:fb:89:4c:bd:82:dd:64:e8:e9:b7: 5f:d0:40:d9:74:08:2f:8a:d0:54:af:db:73:c8:a3: c0:7a:3d:b0:2c:5f:43:70:77:fb:65:bd:b3:45:7f: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.crl X509v3 Authority Key Identifier: keyid:40:C6:1F:78:BA:FB:5C:52:54:40:32:7C:32:08:B5:69:FF:2D:3F:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer sbgp-ipAddrBlock: critical IPv4: 66.205.246.0/24 IPv6: 2620:5f:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400850 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9a:c7:0a:6c:60:54:18:8b:29:69:02:ec:1b:da:30:78:82: 29:bd:c5:c0:54:9d:2b:45:1d:59:63:99:f8:8f:37:87:66:1d: 36:30:54:28:4a:40:ae:08:bf:d7:c8:60:db:3a:2c:c8:bf:ab: ef:b5:20:7f:f2:5c:cc:5e:bd:47:b9:82:20:34:22:bb:3c:f3: 38:64:b3:c5:33:2b:d7:e0:55:20:66:02:ac:56:10:45:de:36: 5e:c9:00:04:39:e6:14:43:ee:11:6f:b2:81:31:b1:a3:4e:2b: ef:f2:b2:fe:6d:a5:cc:15:03:f5:90:3d:dd:7f:79:d2:ec:c6: 23:66:37:5f:f3:5a:0b:07:8d:44:33:5c:3e:6d:6b:7d:c6:1b: d6:5b:a3:b6:f3:04:60:1b:7a:77:ca:75:c0:6a:96:6c:8b:7f: 0a:13:30:2c:07:3a:b6:a6:19:e9:e4:7b:9e:46:e4:ea:fd:e2: 9f:bb:53:a6:ff:95:e8:63:f8:c3:85:0e:e1:ec:ff:9f:81:a9: 40:e0:ab:d5:68:c1:d6:5e:d6:b0:de:e9:6d:be:7b:fe:11:42: ba:f0:fa:1c:8a:ef:6e:bf:1b:69:1e:8d:d3:50:60:a3:da:f1: 04:4e:85:a0:5f:48:03:0b:5c:6b:bf:8f:47:ff:7a:e3:75:39: ca:1e:12:d3 -----BEGIN CERTIFICATE----- MIIGzjCCBbagAwIBAgIUAQ0Mn0MoWEiFQ5NtM92ph/I3GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmNjNkZDAtN2ZjZi00MDI4LTk2N2EtZTQ3NTljOWVk ZjFlMB4XDTI1MDExMjEzNDUzM1oXDTI3MDQxNzEyNDUzM1owPTE7MDkGA1UEAxMy MGFjNWY4MjFkNmU2YjFlYjdmYjA0YjEzNjU2YTQzOTgyNjJjNThmYzBmMGQ2NmFm OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChM3qN4gJNsAvSJ8SI 5/dwfphsKm0ZjRoPHwFRy4z2MRNhbdMo5/RnQz4rFQd1Co/2cJiT+amfeeybkcrA 0lUEBxmE7jA17fz+2VlaZtOQ4VpfvoCNSCGQ4gkB+uwzemngnDzkmKXRYyh6FWjh VHUJ2r2OjLk4FdWvue3TBrj2iodR0+NGtLWaiFzmzjLXt8hJ61guo0I1erlDV3A4 KfOAf9uGnDj5p17iuW9c+GoDbgVGfOrVCBcgf/ajWi9i0Pw/ZwBnrwk3YWSyd0bD VHiZfza4MxhB+4lMvYLdZOjpt1/QQNl0CC+K0FSv23PIo8B6PbAsX0Nwd/tlvbNF fycjAgMBAAGjggPSMIIDzjAdBgNVHQ4EFgQUioAfMUvuqArVl3xDHxscdzdm7zQw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4YjE1ODhlNjAxOGIxODc2 MDA0YjAxZjEvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4YjE1ODhlNjAxOGIxODc2MDA0YjAxZjEv MC84QTgwMUYzMTRCRUVBODBBRDU5NzdDNDMxRjFCMUM3NzM3NjZFRjM0Lm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzliZjYzZGQwLTdmY2YtNDAyOC05Njdh LWU0NzU5YzllZGYxZS85YmY2M2RkMC03ZmNmLTQwMjgtOTY3YS1lNDc1OWM5ZWRm MWUuY3JsMB8GA1UdIwQYMBaAFEDGH3i6+1xSVEAyfDIItWn/LT+/MA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03OTNhLTRhNDUt YTBhOS05NzgxNDgzMjFhMDcvOWJmNjNkZDAtN2ZjZi00MDI4LTk2N2EtZTQ3NTlj OWVkZjFlLmNlcjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAELN9jAPBAIA AjAJAwcAJiAAX+AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYd0jBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA0mscKbGBUGIspaQLsG9oweIIpvcXAVJ0rRR1ZY5n4jzeHZh02MFQoSkCuCL/X yGDbOizIv6vvtSB/8lzMXr1HuYIgNCK7PPM4ZLPFMyvX4FUgZgKsVhBF3jZeyQAE OeYUQ+4Rb7KBMbGjTivv8rL+baXMFQP1kD3df3nS7MYjZjdf81oLB41EM1w+bWt9 xhvWW6O28wRgG3p3ynXAapZsi38KEzAsBzq2phnp5HueRuTq/eKfu1Om/5XoY/jD hQ7h7P+fgalA4KvVaMHWXtaw3ultvnv+EUK68Pociu9uvxtpHo3TUGCj2vEEToWg X0gDC1xrv49H/3rjdTnKHhLT -----END CERTIFICATE-----Generated at Mon Apr 28 09:09:47 2025 by rpki-client