$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer File: 0c82e125-4df5-4912-a714-101a1caa5b99.cer (raw, json) Hash identifier: HLhuoFHcCZfIg+fVK4iSO32wRsaHpCVXb5CTJBkG8PA= Subject key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858494CC1B4EE70EDE7C3EAAABC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 00:45:33 +0000 Certificate not after: Mon 28 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 54054 AS: 396981 IP: 103.219.56.0/22 IP: 192.48.223.0/24 IP: 192.110.255.0/24 IP: 199.168.88.0/22 IP: 2606:700::/32 IP: 2620:8c:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c1:b4:ee:70:ed:e7:c3:ea:aa:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 25 00:45:33 2025 GMT Not After : Jun 28 00:45:33 2027 GMT Subject: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:d1:3f:0b:ee:fc:f8:49:9d:24:02:8a:06: 83:c2:5f:a0:2c:89:ae:0e:78:b9:3a:b9:4f:dc:b6: 17:cc:e2:27:c7:2e:76:bb:10:74:1a:1a:a1:ca:d8: ce:12:1d:5f:9d:2d:23:4a:d9:94:6d:0c:66:ec:fe: a8:66:32:ea:db:7b:77:06:c4:16:ec:0c:8a:51:24: f6:21:5a:37:70:3e:85:a8:92:e6:94:10:c5:09:fa: 75:f3:76:ba:5f:3f:d9:e2:0b:c4:cd:66:f9:08:88: 42:1f:72:14:50:bc:28:51:c2:3c:d9:bd:25:82:7e: 1a:a8:0e:22:98:33:13:57:72:61:3e:27:16:0f:79: d4:ac:33:9d:cd:70:c4:e1:b0:c7:23:12:2e:67:e3: f3:4f:14:57:cf:0a:5b:50:1f:d6:64:f5:f3:aa:38: c2:05:24:f7:94:7d:ea:a1:71:2b:38:cf:4e:57:96: 9f:5c:a9:f0:e6:c6:3c:7a:39:52:52:42:62:1e:ec: 6e:f4:2c:cb:de:20:b5:e5:67:ad:7e:fb:98:7b:0e: 71:f0:53:83:93:ca:75:0e:71:71:dd:0b:cb:da:c6: ba:6a:be:70:ae:38:55:50:bd:6d:12:cd:b4:d6:63: 8f:9a:af:ce:0a:5d:40:65:49:02:32:d0:8c:d8:c3: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 103.219.56.0/22 192.48.223.0/24 192.110.255.0/24 199.168.88.0/22 IPv6: 2606:700::/32 2620:8c:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54054 396981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:14:af:3a:e0:5b:55:11:4c:bb:c7:de:96:dc:e7:0e:97:85: 31:59:08:38:83:dc:0a:94:68:ab:a5:37:cd:09:90:6c:8e:52: 3d:61:bb:fc:16:3d:9d:bb:19:94:17:11:d8:61:3f:cd:42:85: 14:e3:c7:7b:c5:ac:bc:d9:36:f2:46:c7:00:6c:60:10:f5:9f: ce:b0:61:46:64:07:4b:5f:16:ad:0a:a1:11:e7:68:88:6f:ff: ca:d6:ab:11:a7:ab:0b:85:42:e3:0e:81:33:e2:8e:98:00:6a: ed:fd:f1:10:03:e2:09:42:81:f2:f3:fd:9f:37:08:c0:6a:a4: c4:78:89:65:d3:78:01:1f:89:84:de:5d:9a:84:d9:a2:39:1a: f9:51:3a:63:e0:ca:98:47:9d:7c:ef:85:5b:4e:51:45:92:2a: 9c:99:0a:12:3f:a4:33:4e:92:4b:fc:36:97:b9:54:8b:01:1c: 8a:75:4a:c9:ec:f7:1b:c9:8d:df:49:b0:34:be:40:75:3d:ab: ff:92:42:03:49:52:81:cf:5f:1f:12:37:98:cf:ab:4f:62:ba: a1:7e:e4:ec:1f:bb:50:53:87:70:5e:18:10:e4:4a:cf:5c:e5: dc:11:d0:f7:e2:71:4f:9e:cc:38:e3:71:ec:e4:1f:7c:08:c8: 0c:d8:ee:bb -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWElMwbTucO3nw+qqvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMyNTAwNDUzM1oXDTI3MDYyODAwNDUzM1owLzEtMCsGA1UEAxMk MGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1Yjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0rRPwvu/PhJnSQCigaDwl+gLImuDni5OrlP 3LYXzOInxy52uxB0GhqhytjOEh1fnS0jStmUbQxm7P6oZjLq23t3BsQW7AyKUST2 IVo3cD6FqJLmlBDFCfp183a6Xz/Z4gvEzWb5CIhCH3IUULwoUcI82b0lgn4aqA4i mDMTV3JhPicWD3nUrDOdzXDE4bDHIxIuZ+PzTxRXzwpbUB/WZPXzqjjCBST3lH3q oXErOM9OV5afXKnw5sY8ejlSUkJiHuxu9CzL3iC15WetfvuYew5x8FODk8p1DnFx 3QvL2sa6ar5wrjhVUL1tEs201mOPmq/OCl1AZUkCMtCM2MNLIwIDAQABo4IESjCC BEYwHQYDVR0OBBYEFMg8uIIAOzII7cUQ91AQ4GjUlkTzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w YzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzBjODJlMTI1LTRkZjUtNDkxMi1h NzE0LTEwMWExY2FhNWI5OS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNh YTViOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MB4EAgABMBgDBAJn2zgDBADAMN8DBADAbv8DBALHqFgwFgQCAAIw EAMFACYGBwADBwAmIACMQAAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDANMmAgMG DrUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYhSvOuBbVRFMu8feltznDpeFMVkIOIPcCpRoq6U3zQmQbI5S PWG7/BY9nbsZlBcR2GE/zUKFFOPHe8WsvNk28kbHAGxgEPWfzrBhRmQHS18WrQqh EedoiG//ytarEaerC4VC4w6BM+KOmABq7f3xEAPiCUKB8vP9nzcIwGqkxHiJZdN4 AR+JhN5dmoTZojka+VE6Y+DKmEedfO+FW05RRZIqnJkKEj+kM06SS/w2l7lUiwEc inVKyez3G8mN30mwNL5AdT2r/5JCA0lSgc9fHxI3mM+rT2K6oX7k7B+7UFOHcF4Y EORKz1zl3BHQ9+JxT57MOONx7OQffAjIDNjuuw== -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:22 2025 by rpki-client