$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer File: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer (raw, json) Hash identifier: ZDoeB6SnG653Nq0BTz6jmFABuHlXslyAsZH4mUfWGvE= Subject key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849D82F28F90AC8F97F8C9E51C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 May 2025 23:23:27 +0000 Certificate not after: Mon 16 Aug 2027 23:23:27 +0000 Subordinate resources: AS: 10465 AS: 10993 AS: 19130 IP: 64.136.128.0/19 IP: 69.26.128.0/19 IP: 69.84.0.0/20 IP: 206.72.64.0/19 IP: 216.240.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:2f:28:f9:0a:c8:f9:7f:8c:9e:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 13 23:23:27 2025 GMT Not After : Aug 16 23:23:27 2027 GMT Subject: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c2:62:54:2a:e9:b6:b8:eb:45:67:45:b8:79: 37:b8:f6:e6:49:88:a8:05:33:eb:4f:5e:d9:e3:e0: 09:a7:5a:36:4c:ca:94:bb:b9:b8:99:cb:96:59:fe: 3a:fb:8a:16:04:27:68:a4:4c:07:d2:d5:8a:d9:87: 49:d0:5f:19:62:d5:12:a6:a8:ac:61:c5:37:db:b2: b2:8a:ff:51:8d:31:92:55:66:ad:48:60:73:94:e2: 9e:c5:cc:22:ea:e5:6f:67:29:78:c8:b2:70:7a:1b: 7d:97:bb:0f:6b:5f:b6:f7:46:b3:c7:47:5c:e6:f5: 28:38:24:d2:34:63:9f:fa:45:51:2d:8c:64:c2:88: 80:7f:d0:fb:92:07:f3:fc:76:95:d2:20:f0:86:66: 98:29:2f:eb:7a:3b:84:57:fc:87:28:c5:36:ca:91: 15:1d:31:53:75:f0:0a:54:2f:6a:a2:15:4f:53:5b: b4:30:77:8a:84:3a:86:3e:4b:1e:78:5c:d3:9b:93: 67:0d:c4:ab:a2:54:a5:76:7c:52:f5:00:d3:92:57: 59:13:4c:f5:d2:81:3d:7b:ae:20:ba:4a:fe:bf:f4: b6:5b:c8:c6:57:c8:94:f0:9d:b7:94:9f:b5:ab:fa: d3:6a:0b:05:c4:40:db:7c:3f:2a:eb:9f:3f:11:01: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 69.26.128.0/19 69.84.0.0/20 206.72.64.0/19 216.240.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10465 10993 19130 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:13:a6:e2:41:54:d3:dd:5a:0e:2d:48:cb:ac:3e:a7:cf:a9: 1e:2c:ec:6e:d3:48:e0:60:df:2c:95:b7:32:3e:48:38:8c:cf: af:b7:a2:6e:36:2a:a1:6b:f3:f1:46:0d:f1:fd:27:cd:aa:ce: c4:b3:4b:a0:38:e0:a2:48:87:e2:13:5c:5a:5e:3d:93:7c:3b: 99:ab:c3:7b:db:12:69:25:27:05:ff:20:e2:4a:f7:f3:51:8a: 52:d9:38:9d:7c:fe:ef:ce:89:f9:bb:dc:6c:82:a1:bb:bf:8b: 9d:2a:22:8b:86:c7:ed:7a:40:64:c3:0e:be:c5:36:dd:04:f0: 89:5a:66:3d:ba:d8:a9:00:a0:bb:a6:e7:6c:19:98:2c:1a:39: 4f:3e:45:36:46:7f:e9:e5:58:55:dc:c5:35:6f:80:05:84:84: 81:03:b0:c1:60:e7:81:ff:0e:9c:05:7e:a2:3e:98:6a:6e:22: 7f:53:59:61:32:ee:4c:86:90:8a:59:a5:b1:e5:7e:7d:43:13: b9:19:1d:29:4b:ea:76:e4:67:93:63:4c:c8:b4:8e:88:f7:ef: d2:80:2d:97:5a:8e:af:1c:be:9a:b2:1e:35:4e:d1:67:e1:bc: 4c:34:d2:28:d1:28:0f:ce:33:9b:5b:d5:6a:06:5b:8b:d5:c9: 83:ea:51:87 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEnYLyj5Csj5f4yeUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxMzIzMjMyN1oXDTI3MDgxNjIzMjMyN1owLzEtMCsGA1UEAxMk MjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVkY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MJiVCrptrjrRWdFuHk3uPbmSYioBTPrT17Z 4+AJp1o2TMqUu7m4mcuWWf46+4oWBCdopEwH0tWK2YdJ0F8ZYtUSpqisYcU327Ky iv9RjTGSVWatSGBzlOKexcwi6uVvZyl4yLJweht9l7sPa1+290azx0dc5vUoOCTS NGOf+kVRLYxkwoiAf9D7kgfz/HaV0iDwhmaYKS/rejuEV/yHKMU2ypEVHTFTdfAK VC9qohVPU1u0MHeKhDqGPkseeFzTm5NnDcSrolSldnxS9QDTkldZE0z10oE9e64g ukr+v/S2W8jGV8iU8J23lJ+1q/rTagsFxEDbfD8q658/EQHjDwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFENME25JVsYvv7MkahSaQ2mTnZvgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y MWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzIxYzU4MGMxLWEwNWQtNGUyOC1h NDhkLTllYTBlYzVlZGNhYy8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1 ZWRjYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAVAiIADBAVFGoADBARFVAADBAXOSEADBAXY8CAw IQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICKOECAirxAgJKujBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrE6bi QVTT3VoOLUjLrD6nz6keLOxu00jgYN8slbcyPkg4jM+vt6JuNiqha/PxRg3x/SfN qs7Es0ugOOCiSIfiE1xaXj2TfDuZq8N72xJpJScF/yDiSvfzUYpS2TidfP7vzon5 u9xsgqG7v4udKiKLhsftekBkww6+xTbdBPCJWmY9utipAKC7pudsGZgsGjlPPkU2 Rn/p5VhV3MU1b4AFhISBA7DBYOeB/w6cBX6iPphqbiJ/U1lhMu5MhpCKWaWx5X59 QxO5GR0pS+p25GeTY0zItI6I9+/SgC2XWo6vHL6ash41TtFn4bxMNNIo0SgPzjOb W9VqBluL1cmD6lGH -----END CERTIFICATE-----Generated at Sun Jun 15 04:56:50 2025 by rpki-client