$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer File: 54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer (raw, json) Hash identifier: thatbJdsHRrp/YM30S+FcDAb7h+5ICIKc7+1cQWV+H0= Subject key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584856361C92842E794D3DFC5980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Dec 2024 17:15:26 +0000 Certificate not after: Mon 23 Nov 2026 01:45:25 +0000 Subordinate resources: AS: 22296 IP: 23.155.8.0/24 IP: 205.207.133.0/24 IP: 2602:2e5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:56:36:1c:92:84:2e:79:4d:3d:fc:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 26 17:15:26 2024 GMT Not After : Nov 23 01:45:25 2026 GMT Subject: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:ba:c8:fb:e9:87:14:4c:41:88:01:54:9a: 69:53:6c:c0:0e:84:7a:86:5d:38:c6:f1:41:ed:38: bc:7a:74:e8:28:37:7b:ca:39:33:ad:1d:61:c7:74: 74:b4:d5:e7:f9:00:ab:a0:7a:ac:22:53:f4:3d:b5: 36:d0:03:76:29:c9:05:c1:e6:23:e3:e1:db:50:4c: b6:65:29:7e:a5:ec:54:93:c0:a8:0d:bb:c5:c7:36: 75:f0:d7:1b:ae:62:90:b2:c3:30:ae:6a:7e:83:89: ce:f1:c7:1b:ce:9e:fe:ba:12:75:b5:2b:c2:55:b4: 3a:52:4f:79:40:77:36:91:0e:05:d9:8c:e1:1c:54: bd:6b:a2:29:2e:18:1c:7e:79:d4:5a:18:f5:4a:ac: 86:ba:e5:37:a2:c4:6a:29:ce:f4:8e:0f:d8:61:4e: d0:11:56:c5:0a:08:88:c4:72:8f:1b:c3:59:50:ac: 56:58:41:5c:d1:82:1b:16:05:ce:35:3a:77:9c:a2: 4b:d4:04:4e:06:b7:4a:d2:0a:d1:29:dd:b2:1f:9a: 9a:3e:87:05:df:84:93:30:f1:55:06:ff:13:60:fd: 3c:e2:e1:44:5f:c6:64:db:78:04:fe:e9:2e:9b:a4: 87:94:c4:c8:6c:ec:48:36:54:8f:bb:75:35:3f:88: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.155.8.0/24 205.207.133.0/24 IPv6: 2602:2e5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22296 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3c:3a:97:14:d0:41:c3:cd:e4:8b:32:91:60:3d:c1:a1:da: d9:7a:92:81:88:b5:6a:7d:30:3d:af:cf:4c:a8:5c:88:d8:e5: 0a:be:87:95:a5:9f:eb:3b:2f:f9:44:9c:ef:62:1c:f6:6e:31: ce:5a:f8:71:1b:8e:0b:6c:91:2a:99:85:a5:b1:d9:dd:18:d9: ba:51:a9:3d:98:4e:9c:3a:50:67:1f:42:0b:cb:01:8c:e1:2e: 82:7b:7b:4c:90:12:c5:b1:40:c8:56:26:09:30:25:ce:78:cd: 95:d6:70:9b:6e:ef:5f:dd:70:4a:e1:4a:56:d5:d5:cf:d1:00: d0:88:a0:c4:06:1d:90:04:15:dd:ba:f6:3b:b3:83:78:c7:f8: a5:1f:58:b8:f4:fe:0c:94:51:03:ae:c5:43:64:77:90:1b:27: fb:1a:1e:8f:89:7a:17:a8:88:6b:31:b8:74:a4:68:19:48:60: 9f:e3:36:96:a0:78:6b:9b:07:6c:d6:6e:29:40:f3:55:04:82: 43:98:7a:c0:a9:56:c1:0a:23:e4:7c:65:d5:7b:a2:3b:c9:a7: 4c:47:d0:f5:3f:e2:79:11:78:76:ab:80:d2:aa:af:84:2a:a2: db:90:bc:a3:39:b6:2f:95:94:13:69:c9:42:55:8f:55:73:45: 73:c8:1b:f7 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEhWNhyShC55TT38WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIyNjE3MTUyNloXDTI2MTEyMzAxNDUyNVowLzEtMCsGA1UEAxMk NTQyOTNjZDItMWQ4Yy00M2YyLTkwYjgtYzdmZDhiMWMyZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA+6yPvphxRMQYgBVJppU2zADoR6hl04xvFB 7Ti8enToKDd7yjkzrR1hx3R0tNXn+QCroHqsIlP0PbU20AN2KckFweYj4+HbUEy2 ZSl+pexUk8CoDbvFxzZ18NcbrmKQssMwrmp+g4nO8ccbzp7+uhJ1tSvCVbQ6Uk95 QHc2kQ4F2YzhHFS9a6IpLhgcfnnUWhj1SqyGuuU3osRqKc70jg/YYU7QEVbFCgiI xHKPG8NZUKxWWEFc0YIbFgXONTp3nKJL1AROBrdK0grRKd2yH5qaPocF34STMPFV Bv8TYP084uFEX8Zk23gE/ukum6SHlMTIbOxINlSPu3U1P4gZJQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFNlUOn4GfESFdmmrFl+H0NRZtjMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 NDI5M2NkMi0xZDhjLTQzZjItOTBiOC1jN2ZkOGIxYzJlZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU0MjkzY2QyLTFkOGMtNDNmMi05 MGI4LWM3ZmQ4YjFjMmVmYi81NDI5M2NkMi0xZDhjLTQzZjItOTBiOC1jN2ZkOGIx YzJlZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmwgDBADNz4UwDgQCAAIwCAMGBCYCAuUAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAlcYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACw8OpcU0EHDzeSLMpFg PcGh2tl6koGItWp9MD2vz0yoXIjY5Qq+h5Wln+s7L/lEnO9iHPZuMc5a+HEbjgts kSqZhaWx2d0Y2bpRqT2YTpw6UGcfQgvLAYzhLoJ7e0yQEsWxQMhWJgkwJc54zZXW cJtu71/dcErhSlbV1c/RANCIoMQGHZAEFd269juzg3jH+KUfWLj0/gyUUQOuxUNk d5AbJ/saHo+JeheoiGsxuHSkaBlIYJ/jNpageGubB2zWbilA81UEgkOYesCpVsEK I+R8ZdV7ojvJp0xH0PU/4nkReHargNKqr4QqotuQvKM5ti+VlBNpyUJVj1VzRXPI G/c= -----END CERTIFICATE-----Generated at Sun Apr 27 09:14:14 2025 by rpki-client