$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer File: 467861ee-0aa8-4688-af94-7d540e2ddc56.cer (raw, json) Hash identifier: K0OzRQcwGwHGPauA1uwTGvHu8zJeBgRbAYzkYszhYRY= Subject key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858491D048B4CD3F0417E79619980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 22:21:25 +0000 Certificate not after: Sun 22 Nov 2026 01:45:24 +0000 Subordinate resources: AS: 400529 IP: 23.161.168.0/23 IP: 45.45.236.0/22 IP: 2602:fabf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:04:8b:4c:d3:f0:41:7e:79:61:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 7 22:21:25 2025 GMT Not After : Nov 22 01:45:24 2026 GMT Subject: CN=467861ee-0aa8-4688-af94-7d540e2ddc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:20:87:15:1f:0a:34:04:8a:22:29:40:6b: 30:35:bd:88:27:c3:43:2e:8f:70:d0:24:ad:73:db: 9c:27:2b:b9:15:2c:79:ee:f8:aa:8c:c7:9a:78:ab: fa:27:03:27:08:9e:ba:07:40:f6:c1:17:f2:36:2b: 81:d9:2a:6e:39:ce:e9:fe:fc:88:19:51:81:f9:84: 95:0d:0a:7c:e0:90:a6:07:99:d8:01:dd:c6:fb:28: 5d:78:a9:8a:9a:6c:73:b4:25:c3:5d:cf:ce:cf:d0: 97:f0:45:4d:4c:77:41:8a:fb:ac:3a:e2:d6:12:db: 00:7d:e5:2b:6b:d4:d2:28:20:77:b9:31:69:71:56: 44:89:0b:59:a8:cb:34:23:6a:f7:ea:b7:92:21:89: f8:f8:fe:0f:58:68:6e:88:ea:8d:ad:0e:d0:67:2f: 05:aa:29:56:13:69:df:1b:98:24:0d:55:30:70:12: 02:4d:30:04:35:e6:60:e1:4e:41:92:6c:e6:16:39: c4:b4:45:08:b4:40:56:07:fb:af:32:fd:3b:40:3d: 6e:f2:20:60:85:31:09:da:94:a4:b8:8b:8f:d8:77: 46:94:0d:c6:bf:ab:fe:07:67:96:d0:cf:51:d6:a0: 0b:eb:dc:da:a9:ba:e5:db:de:b5:5b:c6:f0:60:e7: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.161.168.0/23 45.45.236.0/22 IPv6: 2602:fabf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400529 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:36:36:c7:2e:1a:68:95:88:ee:85:ee:03:59:f9:3b:26:c2: 75:af:83:1e:d8:f3:08:8c:bb:c0:ca:82:f6:48:87:96:ce:f7: d1:12:3c:92:cd:74:46:f8:b8:a3:b2:06:85:46:eb:0a:28:23: cd:09:e7:df:4b:f8:36:de:22:f1:92:2b:aa:e7:96:54:f9:47: ec:76:3b:cf:34:f4:a1:c1:a2:b4:2e:05:0e:c1:1a:2f:52:ca: ef:08:b0:84:c2:86:e2:1f:f9:a4:63:e1:a5:48:4b:95:f3:ac: 75:0c:35:46:9f:6c:82:1a:6a:6d:63:e6:d3:c7:46:94:d1:6a: 30:62:5d:e8:88:10:01:02:49:48:a2:35:5b:32:b2:80:fe:14: 76:cf:4f:fa:9c:30:67:eb:e1:00:a2:8b:b0:4b:27:aa:b6:52: 89:ee:5d:d6:05:2a:35:f5:40:60:3c:52:9b:9e:4e:75:b6:71: b4:7d:e3:f5:d6:95:5c:3d:d5:6d:e3:86:6b:d7:9e:98:2d:f0: 49:c0:4e:15:88:2e:b2:ad:52:b2:04:6a:6e:d2:49:3c:a2:04: 31:ef:8d:99:05:db:96:8d:a1:cf:d3:ff:04:b4:8e:21:e4:3c: 2b:27:b1:5a:88:77:9c:1e:4b:f0:18:ee:41:1c:ce:1f:bb:e3: 0d:f2:0e:93 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEkdBItM0/BBfnlhmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwNzIyMjEyNVoXDTI2MTEyMjAxNDUyNFowLzEtMCsGA1UEAxMk NDY3ODYxZWUtMGFhOC00Njg4LWFmOTQtN2Q1NDBlMmRkYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTYghxUfCjQEiiIpQGswNb2IJ8NDLo9w0CSt c9ucJyu5FSx57viqjMeaeKv6JwMnCJ66B0D2wRfyNiuB2SpuOc7p/vyIGVGB+YSV DQp84JCmB5nYAd3G+yhdeKmKmmxztCXDXc/Oz9CX8EVNTHdBivusOuLWEtsAfeUr a9TSKCB3uTFpcVZEiQtZqMs0I2r36reSIYn4+P4PWGhuiOqNrQ7QZy8FqilWE2nf G5gkDVUwcBICTTAENeZg4U5BkmzmFjnEtEUItEBWB/uvMv07QD1u8iBghTEJ2pSk uIuP2HdGlA3Gv6v+B2eW0M9R1qAL69zaqbrl2961W8bwYOcgcQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBMvDupitbfHqu8J1T5UW01T+v1NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUyZGRjNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2Nzg2MWVlLTBhYTgtNDY4OC1h Zjk0LTdkNTQwZTJkZGM1Ni80Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUy ZGRjNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXoagDBAItLewwDgQCAAIwCAMGBCYC+r8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYckTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcNjbHLhpolYjuhe4D Wfk7JsJ1r4Me2PMIjLvAyoL2SIeWzvfREjySzXRG+LijsgaFRusKKCPNCeffS/g2 3iLxkiuq55ZU+UfsdjvPNPShwaK0LgUOwRovUsrvCLCEwobiH/mkY+GlSEuV86x1 DDVGn2yCGmptY+bTx0aU0WowYl3oiBABAklIojVbMrKA/hR2z0/6nDBn6+EAoouw SyeqtlKJ7l3WBSo19UBgPFKbnk51tnG0feP11pVcPdVt44Zr156YLfBJwE4ViC6y rVKyBGpu0kk8ogQx742ZBduWjaHP0/8EtI4h5DwrJ7FaiHecHkvwGO5BHM4fu+MN 8g6T -----END CERTIFICATE-----Generated at Sat Apr 26 23:01:08 2025 by rpki-client