$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer File: 80e43277-4490-4cc9-99ec-5726af08c8ab.cer (raw, json) Hash identifier: BMjkKFnlNadUF39naKztKO91awV2iLLyI2+ihnfOjsk= Subject key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584949F70545CB91295108CC4040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 00:45:33 +0000 Certificate not after: Sun 27 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 18677 AS: 23520 IP: 63.245.0.0/17 IP: 67.230.0.0/17 IP: 69.79.0.0/16 IP: 72.252.0.0/16 IP: 2604:c000::/32 IP: 2607:f438::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:f7:05:45:cb:91:29:51:08:cc:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 24 00:45:33 2025 GMT Not After : Jun 27 00:45:33 2027 GMT Subject: CN=80e43277-4490-4cc9-99ec-5726af08c8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:29:37:41:cb:00:6c:51:2f:ad:12:7d:2d:eb: 2b:05:ec:c2:d3:e7:5b:3e:0c:b3:e8:9c:86:3f:98: b0:c7:a4:6a:d2:72:6d:2f:4f:ee:af:c4:0c:a5:ec: 09:b2:d9:10:47:1f:7b:b6:00:aa:d0:28:85:d6:18: 07:07:74:7f:01:67:9e:20:ed:22:50:ba:03:aa:09: 04:71:dc:7a:78:15:a0:74:92:ef:af:59:c8:29:55: b3:f3:8e:54:90:48:35:b7:67:b5:d1:fd:9c:a0:79: ce:f0:37:d2:b9:a3:1b:70:9e:c4:45:45:51:60:e7: 99:3e:a0:76:36:e0:23:b9:15:f0:03:53:a6:f6:da: 63:ac:42:2d:e6:f6:52:10:4d:f3:d9:9a:d7:99:54: aa:95:63:00:e2:5e:a3:69:b7:ab:cb:b5:fd:6f:76: 00:3a:4e:77:1c:22:f4:b4:4f:17:1c:d4:cb:31:d4: 8a:71:2d:d4:51:a3:a3:49:8c:68:e3:41:5f:13:e3: 84:75:83:1e:86:7c:4e:43:43:b9:a1:60:71:0a:64: 7e:ee:9d:a4:78:8f:e5:5e:d7:bc:7d:8c:96:29:c6: d9:ea:3b:ab:44:97:e9:54:87:ea:48:6d:89:19:b5: 13:d9:8e:f0:de:39:62:55:1b:c1:cd:d2:82:6d:e0: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 63.245.0.0/17 67.230.0.0/17 69.79.0.0/16 72.252.0.0/16 IPv6: 2604:c000::/32 2607:f438::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18677 23520 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:da:24:fe:33:6e:4d:66:5e:e6:68:db:c3:8b:33:d5:37:25: 4a:1b:d2:5f:70:c3:d1:8a:32:0c:55:5d:5a:39:ff:95:02:b9: 66:0d:f1:69:5f:99:ce:5e:bf:65:f4:95:ab:7d:ac:92:a3:f3: 39:6d:2c:bb:ca:04:c4:ee:b1:79:2b:82:6a:bb:ed:76:5c:0d: a4:3b:79:12:0a:96:c2:5a:27:60:d4:fb:f2:80:07:d7:25:d0: 00:f8:83:44:51:2c:73:a6:f4:e3:15:f3:b8:e3:6a:e2:90:cb: 8c:fd:f8:b5:57:fa:48:ed:89:f5:e5:77:cd:25:97:ff:44:3a: a3:13:42:e5:3b:f7:88:f8:43:3e:5e:25:12:97:22:ec:93:c3: a0:c0:01:d4:ec:56:d3:79:bf:d2:f9:0f:be:4c:1e:78:8e:69: 66:3d:65:9f:be:dd:59:4c:98:56:a7:0d:9a:97:68:e3:e1:6d: 33:94:fd:7d:ba:2e:d5:d9:b3:31:d2:45:76:fe:a0:92:69:d4: 5d:63:51:b5:45:f8:5d:84:65:3e:d6:99:25:e1:e1:2d:c9:05: 07:3d:76:6f:b6:c7:88:bf:bb:b6:c1:5b:d7:06:1b:34:a0:26: a4:60:d0:7c:6e:52:31:d5:71:04:13:6b:1e:f6:3e:d4:ef:d1: 77:f4:4f:c1 -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWElJ9wVFy5EpUQjMQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMyNDAwNDUzM1oXDTI3MDYyNzAwNDUzM1owLzEtMCsGA1UEAxMk ODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhjOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCk3QcsAbFEvrRJ9LesrBezC0+dbPgyz6JyG P5iwx6Rq0nJtL0/ur8QMpewJstkQRx97tgCq0CiF1hgHB3R/AWeeIO0iULoDqgkE cdx6eBWgdJLvr1nIKVWz845UkEg1t2e10f2coHnO8DfSuaMbcJ7ERUVRYOeZPqB2 NuAjuRXwA1Om9tpjrEIt5vZSEE3z2ZrXmVSqlWMA4l6jabery7X9b3YAOk53HCL0 tE8XHNTLMdSKcS3UUaOjSYxo40FfE+OEdYMehnxOQ0O5oWBxCmR+7p2keI/lXte8 fYyWKcbZ6jurRJfpVIfqSG2JGbUT2Y7w3jliVRvBzdKCbeBCpQIDAQABo4IERDCC BEAwHQYDVR0OBBYEFPVuUClwEK5DQZfh/4wo5JI5Hd3wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzgwZTQzMjc3LTQ0OTAtNGNjOS05 OWVjLTU3MjZhZjA4YzhhYi84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYw OGM4YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRQYIKwYBBQUH AQcBAf8ENjA0MBwEAgABMBYDBAc/9QADBAdD5gADAwBFTwMDAEj8MBQEAgACMA4D BQAmBMAAAwUAJgf0ODAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgJI9QICW+AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWdok/jNuTWZe5mjbw4sz1TclShvSX3DD0YoyDFVdWjn/lQK5Zg3xaV+Z zl6/ZfSVq32skqPzOW0su8oExO6xeSuCarvtdlwNpDt5EgqWwlonYNT78oAH1yXQ APiDRFEsc6b04xXzuONq4pDLjP34tVf6SO2J9eV3zSWX/0Q6oxNC5Tv3iPhDPl4l Epci7JPDoMAB1OxW03m/0vkPvkweeI5pZj1ln77dWUyYVqcNmpdo4+FtM5T9fbou 1dmzMdJFdv6gkmnUXWNRtUX4XYRlPtaZJeHhLckFBz12b7bHiL+7tsFb1wYbNKAm pGDQfG5SMdVxBBNrHvY+1O/Rd/RPwQ== -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:47 2025 by rpki-client