$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer File: c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer (raw, json) Hash identifier: HQdmr4JyEkYCB1dKCCLRfOaaopf0lDmh34ej/i7qgiw= Subject key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848BE7E99475E5CFEADEB586100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Feb 2025 01:45:33 +0000 Certificate not after: Sat 08 May 2027 00:45:33 +0000 Subordinate resources: AS: 53949 IP: 162.213.172.0/22 IP: 173.225.144.0/20 IP: 192.119.134.0/24 IP: 198.98.208.0/20 IP: 206.198.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:7e:99:47:5e:5c:fe:ad:eb:58:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 2 01:45:33 2025 GMT Not After : May 8 00:45:33 2027 GMT Subject: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:dc:cc:c9:1d:8b:26:c7:b2:94:99:6a:a0: 90:3a:08:e5:e6:34:14:d8:12:35:43:7f:e6:62:a9: 79:93:1d:c3:d3:d0:f8:74:00:37:aa:07:d8:38:21: 70:8c:40:ab:b0:9e:96:94:70:dc:99:29:ae:da:e9: f0:d6:47:4d:34:dd:ff:4f:b3:45:ce:3f:3d:e5:ab: cc:94:cc:30:00:8d:ad:a8:c7:f9:bc:e3:93:cc:da: d8:9e:e9:17:55:17:97:50:a2:8f:80:5e:48:6c:3a: 2c:a3:52:9d:97:60:ea:7a:16:27:bc:d0:ba:42:ec: 1f:29:0f:d1:0f:6f:90:c6:4f:d2:55:de:35:46:1d: 69:0e:70:aa:6b:71:42:37:6e:a9:a6:37:a4:9d:a2: 3a:b2:81:c2:0e:3e:c6:51:65:1e:31:02:cd:10:a7: 71:5b:1c:ca:3a:fb:2d:ec:69:ff:f5:12:27:cf:95: 4c:9c:c2:05:4f:de:db:ee:a5:1e:88:02:6a:11:3a: 85:bc:d1:ca:1c:f5:76:93:d5:f4:da:56:7c:ef:e7: 93:da:c3:b6:22:74:41:fc:31:10:01:b7:e4:22:fb: 9c:fb:b4:0b:82:30:eb:d7:37:5b:8f:de:7f:29:0f: 93:a2:fe:0f:75:dd:f4:8c:dd:82:8c:2b:61:b8:41: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.213.172.0/22 173.225.144.0/20 192.119.134.0/24 198.98.208.0/20 206.198.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53949 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:67:92:32:18:23:07:c5:af:f0:d7:60:e8:9e:6a:53:d1:dd: 72:4a:be:35:28:bf:c1:70:11:d9:d0:98:88:52:ba:3d:03:04: b1:7e:51:a4:41:a9:02:5e:41:0f:79:d5:69:dc:b3:82:38:0c: 05:f3:67:8f:0a:a5:ce:86:85:89:89:ab:50:2e:de:6b:ea:3d: 11:50:83:2d:12:a7:6e:d7:82:b1:1d:0f:50:aa:f1:36:f7:a3: 6c:d9:ee:78:d5:14:ed:d1:71:56:f9:ac:e2:2c:fe:3f:b1:f3: 1b:64:a2:9a:08:99:a2:31:96:b1:cd:6e:a8:95:f9:d8:f8:fa: 10:58:e7:75:89:b7:35:58:38:81:99:f2:52:87:9b:69:8b:8a: 66:b5:ea:1c:60:8b:46:f2:21:16:4b:b0:7b:75:7b:28:00:82: c3:c9:b9:fc:92:bf:83:da:3e:c1:eb:3d:d3:2a:d1:5d:4f:e5: 8b:d0:77:8b:25:d6:92:e0:cf:5a:87:4b:dc:40:38:50:60:2e: 76:76:7a:5f:2a:1f:fa:26:7e:13:ab:ec:98:36:35:e2:c1:6a: ed:82:46:ce:6c:50:4b:3d:57:2b:49:15:c1:d7:03:ce:09:f8: e0:b0:5b:a8:01:c1:71:af:31:f4:c9:83:06:ce:46:76:44:16: fe:d6:6e:4c -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEi+fplHXlz+retYYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwMjAxNDUzM1oXDTI3MDUwODAwNDUzM1owLzEtMCsGA1UEAxMk YzliMDZjNTItYzY4ZC00NGVjLWFlNjUtN2ViYjJhOTlkNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9PczMkdiybHspSZaqCQOgjl5jQU2BI1Q3/m Yql5kx3D09D4dAA3qgfYOCFwjECrsJ6WlHDcmSmu2unw1kdNNN3/T7NFzj895avM lMwwAI2tqMf5vOOTzNrYnukXVReXUKKPgF5IbDoso1Kdl2DqehYnvNC6QuwfKQ/R D2+Qxk/SVd41Rh1pDnCqa3FCN26ppjeknaI6soHCDj7GUWUeMQLNEKdxWxzKOvst 7Gn/9RInz5VMnMIFT97b7qUeiAJqETqFvNHKHPV2k9X02lZ87+eT2sO2InRB/DEQ AbfkIvuc+7QLgjDr1zdbj95/KQ+Tov4Pdd30jN2CjCthuEHf7wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFGjsn8I5tFip1JQ4C6/BWB3oWb1/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5OWQ2Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5YjA2YzUyLWM2OGQtNDRlYy1h ZTY1LTdlYmIyYTk5ZDZjYy9jOWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5 OWQ2Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAKi1awDBASt4ZADBADAd4YDBATGYtADBALOxsww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANK9MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAVnkjIYIwfFr/DX YOiealPR3XJKvjUov8FwEdnQmIhSuj0DBLF+UaRBqQJeQQ951Wncs4I4DAXzZ48K pc6GhYmJq1Au3mvqPRFQgy0Sp27XgrEdD1Cq8Tb3o2zZ7njVFO3RcVb5rOIs/j+x 8xtkopoImaIxlrHNbqiV+dj4+hBY53WJtzVYOIGZ8lKHm2mLima16hxgi0byIRZL sHt1eygAgsPJufySv4PaPsHrPdMq0V1P5YvQd4sl1pLgz1qHS9xAOFBgLnZ2el8q H/omfhOr7Jg2NeLBau2CRs5sUEs9VytJFcHXA84J+OCwW6gBwXGvMfTJgwbORnZE Fv7Wbkw= -----END CERTIFICATE-----Generated at Mon Apr 28 00:00:25 2025 by rpki-client