$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer File: 0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer (raw, json) Hash identifier: Bv5D4EzfxBqTQ3ENPKwcEHjnnzFPi3aooAiIAgW8kzY= Subject key identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858491A9F2CD022ABC4AD0D460700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 01:45:33 +0000 Certificate not after: Thu 10 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 11817 IP: 66.11.128.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:9f:2c:d0:22:ab:c4:ad:0d:46:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 7 01:45:33 2025 GMT Not After : Jun 10 00:45:33 2027 GMT Subject: CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:c0:06:20:6f:65:5b:16:4e:05:05:d1:f0: b7:66:ec:9a:9f:fc:25:51:03:3c:a8:97:6e:16:4f: 4a:de:45:55:36:cc:9f:88:57:32:e8:22:e7:41:86: f4:e1:2d:5b:ca:3a:fa:81:51:3f:e7:ff:fd:ab:00: 4f:76:16:b7:5d:7f:14:dc:a0:7a:3c:57:6e:97:ed: 9b:41:1b:3c:2b:a5:17:d8:8d:48:30:84:0b:5f:98: 31:2b:c2:c4:cd:12:d1:05:1a:3b:d5:06:de:a7:e2: 7f:b5:15:19:69:19:4f:2c:3f:83:5e:68:77:d5:13: 28:19:02:31:4a:0c:8d:e9:74:34:b7:83:28:60:29: 69:85:97:57:3b:e5:0c:69:b1:78:25:6f:fa:ad:0f: 80:0d:30:7a:50:4e:e8:dd:5b:70:f1:bc:b4:5f:82: cb:13:c3:c6:11:6e:4f:c2:29:72:9f:ec:e1:98:b9: 40:a2:af:82:f3:a6:a7:e7:f5:e1:a6:50:5b:6c:36: 13:c6:5b:a0:89:fc:37:fe:d3:6a:7e:23:fa:bd:94: 33:28:2b:03:98:b7:ea:24:1c:f4:ed:d0:95:08:7e: 28:1f:d2:a2:40:07:6b:e6:ac:4f:cd:88:03:1d:10: 23:95:2e:55:9a:88:12:8e:c5:92:ae:f0:d2:57:f9: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.11.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11817 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a1:2e:54:ba:ef:c3:af:5a:ee:df:77:d1:ea:e5:f0:67:9b: 79:8e:a6:c2:8d:6a:41:cd:04:f9:2a:76:2b:aa:73:26:7a:0c: c0:06:6c:34:4f:12:5a:79:56:ae:eb:cd:f6:2d:a2:b3:b7:34: d2:f7:a9:15:5f:70:23:65:30:d5:fd:04:22:a4:a9:0f:d5:ac: a5:89:6b:43:b6:8d:11:fa:9d:a9:40:b7:21:fd:a6:1a:3f:4b: 74:c9:46:a4:42:6f:5d:43:b3:ae:6e:bf:62:04:1e:78:d4:53: 82:5e:e7:e8:8c:f4:66:de:a3:3c:70:8b:e2:da:cf:9c:20:6b: 6b:88:28:21:8b:f2:63:8f:0c:c0:56:cc:84:e1:86:0f:7e:34: 01:72:ae:04:ee:46:b9:31:37:a6:c7:74:7d:cf:47:12:13:03: 98:b1:63:56:d7:27:52:70:f0:e8:72:75:22:0c:3f:d7:de:ec: a3:6f:18:4c:45:77:29:de:bf:90:8e:08:17:ee:af:e5:8e:4e: 43:d9:06:68:7e:81:14:67:87:6d:52:49:d3:47:6f:f4:e8:c3: 10:f2:5f:60:b7:c8:8e:f2:39:57:d5:4b:b1:19:5d:a6:c9:f2: 4f:94:6a:60:74:74:24:00:0d:d0:53:c2:6d:a6:a9:01:35:f6: 9b:e7:21:a5 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEkanyzQIqvErQ1GBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwNzAxNDUzM1oXDTI3MDYxMDAwNDUzM1owLzEtMCsGA1UEAxMk MGVlZThkMmItOGRiYy00ODE5LTkxNDItNGIxYjQ1ZDVhMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBnABiBvZVsWTgUF0fC3Zuyan/wlUQM8qJdu Fk9K3kVVNsyfiFcy6CLnQYb04S1byjr6gVE/5//9qwBPdha3XX8U3KB6PFdul+2b QRs8K6UX2I1IMIQLX5gxK8LEzRLRBRo71Qbep+J/tRUZaRlPLD+DXmh31RMoGQIx SgyN6XQ0t4MoYClphZdXO+UMabF4JW/6rQ+ADTB6UE7o3Vtw8by0X4LLE8PGEW5P wilyn+zhmLlAoq+C86an5/XhplBbbDYTxlugifw3/tNqfiP6vZQzKCsDmLfqJBz0 7dCVCH4oH9KiQAdr5qxPzYgDHRAjlS5VmogSjsWSrvDSV/kkfwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJs6Uc3RtjnN2rl90mW6jCqDhL+0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w ZWVlOGQyYi04ZGJjLTQ4MTktOTE0Mi00YjFiNDVkNWEwOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzBlZWU4ZDJiLThkYmMtNDgxOS05 MTQyLTRiMWI0NWQ1YTA5NC8wZWVlOGQyYi04ZGJjLTQ4MTktOTE0Mi00YjFiNDVk NWEwOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARCC4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC LikwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYqEuVLrvw69a7t930erl8GebeY6mwo1qQc0E+Sp2K6pzJnoM wAZsNE8SWnlWruvN9i2is7c00vepFV9wI2Uw1f0EIqSpD9WspYlrQ7aNEfqdqUC3 If2mGj9LdMlGpEJvXUOzrm6/YgQeeNRTgl7n6Iz0Zt6jPHCL4trPnCBra4goIYvy Y48MwFbMhOGGD340AXKuBO5GuTE3psd0fc9HEhMDmLFjVtcnUnDw6HJ1Igw/197s o28YTEV3Kd6/kI4IF+6v5Y5OQ9kGaH6BFGeHbVJJ00dv9OjDEPJfYLfIjvI5V9VL sRldpsnyT5RqYHR0JAAN0FPCbaapATX2m+chpQ== -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:11 2025 by rpki-client