$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer File: 8450660f-e06c-43ee-910d-d4b472fdc395.cer (raw, json) Hash identifier: k5VyMRsxvg2I9btqvnZy1dGxsd6Yvn7Egd2e/7DKTkM= Subject key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858497ACABBBE2B3F282288EE2280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Apr 2025 12:30:56 +0000 Certificate not after: Wed 14 Jul 2027 12:30:56 +0000 Subordinate resources: AS: 25973 IP: 64.235.224.0/19 IP: 67.199.128.0/19 IP: 67.201.0.0/18 IP: 68.64.128.0/18 IP: 69.43.240.0/20 IP: 69.174.0.0/17 IP: 70.39.128.0/17 IP: 72.37.128.0/17 IP: 173.205.0.0/17 IP: 204.237.128.0/17 IP: 207.223.96.0/20 IP: 216.193.192.0/18 IP: 2001:4890::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:ca:bb:be:2b:3f:28:22:88:ee:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 10 12:30:56 2025 GMT Not After : Jul 14 12:30:56 2027 GMT Subject: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bd:4e:54:df:0b:1d:d9:78:92:6e:f3:11:eb: f7:de:89:70:12:67:6d:6f:af:19:19:88:32:06:97: 5f:ee:fc:bb:d0:3e:ba:51:c2:8f:d9:90:68:e3:22: 1d:d6:af:26:64:ab:3c:ba:e2:de:c4:42:db:67:f6: 18:ff:99:ab:04:30:67:63:a4:6e:80:f1:d0:b7:6f: 9f:23:08:5f:f9:f2:17:16:01:80:83:84:6a:c7:a5: f4:68:df:c3:91:fc:86:fd:7e:f8:db:7b:43:7e:57: 55:49:49:56:cd:5a:1c:7c:4e:4e:1a:bd:f6:f1:b0: 31:46:04:bd:70:bc:1d:5e:85:87:4b:02:0d:56:26: 93:b2:d3:7b:cf:3f:fc:28:e4:e5:8d:e2:74:21:97: 67:9f:14:11:ea:e4:26:81:64:01:04:35:07:5f:9b: ff:dc:eb:6e:c3:09:f8:1e:a1:db:af:85:ec:65:05: 47:a9:c3:00:41:0e:dc:68:e7:d5:03:6f:b9:41:cf: 7d:68:18:62:49:02:8b:fa:aa:40:18:e4:a5:e0:56: 77:91:81:f5:81:d9:20:b3:0c:b1:2c:76:2f:31:bd: 44:22:a6:c0:f4:dd:aa:81:70:50:e7:01:b9:0d:7c: f9:ed:25:ba:0b:bf:36:55:b2:11:86:9e:00:b6:a1: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.235.224.0/19 67.199.128.0/19 67.201.0.0/18 68.64.128.0/18 69.43.240.0/20 69.174.0.0/17 70.39.128.0/17 72.37.128.0/17 173.205.0.0/17 204.237.128.0/17 207.223.96.0/20 216.193.192.0/18 IPv6: 2001:4890::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25973 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9b:5f:98:8d:0d:e2:c9:a2:93:6b:03:44:83:62:74:dd:bd: 99:9c:50:de:1e:3b:82:3c:af:f6:49:89:2d:1e:c7:40:de:cc: ac:51:10:c5:b8:1d:ad:4f:d0:4d:1d:fd:3b:d1:c9:29:d1:b9: b0:41:ad:39:cc:83:cb:88:97:95:87:ce:4b:ef:b2:d4:84:b1: c6:2d:a0:19:bf:76:47:55:a1:49:50:af:37:bb:67:be:18:8e: 7f:0a:1c:20:23:f5:22:58:c1:1d:1f:df:7b:4c:91:f0:26:4b: fc:0d:6f:fd:0f:1f:e9:4f:02:5e:22:f1:01:92:7b:06:1b:d9: 4f:47:b4:aa:56:44:66:17:db:24:95:a6:e0:55:31:16:a5:6e: 58:b9:e2:c3:c9:ab:74:0c:f1:5c:df:a7:7d:f2:f1:fe:58:30: 89:03:5c:c7:a8:05:81:6f:27:5b:0a:70:5a:dc:96:3d:36:6c: dc:18:68:5a:82:44:f0:8f:76:94:d5:8f:5e:08:d5:34:3d:c5: af:20:64:c8:53:4a:37:22:be:60:c8:c5:7d:16:6d:0b:96:c7: ae:24:b9:e4:94:c8:c7:8a:38:f8:dc:8e:92:db:3c:33:cc:dc: 0e:a4:eb:72:be:8d:32:5e:55:fa:89:25:62:45:d5:2c:a4:cf: bc:66:58:39 -----BEGIN CERTIFICATE----- MIIHWTCCBkGgAwIBAgIUAQ0Mn0MoWEl6yru+Kz8oIojuIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQxMDEyMzA1NloXDTI3MDcxNDEyMzA1NlowLzEtMCsGA1UEAxMk ODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRjMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr1OVN8LHdl4km7zEev33olwEmdtb68ZGYgy Bpdf7vy70D66UcKP2ZBo4yId1q8mZKs8uuLexELbZ/YY/5mrBDBnY6RugPHQt2+f Iwhf+fIXFgGAg4Rqx6X0aN/DkfyG/X7423tDfldVSUlWzVocfE5OGr328bAxRgS9 cLwdXoWHSwINViaTstN7zz/8KOTljeJ0IZdnnxQR6uQmgWQBBDUHX5v/3Otuwwn4 HqHbr4XsZQVHqcMAQQ7caOfVA2+5Qc99aBhiSQKL+qpAGOSl4FZ3kYH1gdkgswyx LHYvMb1EIqbA9N2qgXBQ5wG5DXz57SW6C782VbIRhp4AtqHPdwIDAQABo4IEazCC BGcwHQYDVR0OBBYEFGkldXcEO5WxfhZIcgTvI6wKqIHNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg0NTA2NjBmLWUwNmMtNDNlZS05 MTBkLWQ0YjQ3MmZkYzM5NS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJm ZGMzOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBAVA6+ADBAVDx4ADBAZDyQADBAZEQIADBARFK/AD BAdFrgADBAdGJ4ADBAdIJYADBAetzQADBAfM7YADBATP32ADBAbYwcAwDQQCAAIw BwMFACABSJAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICZXUwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI5tf mI0N4smik2sDRINidN29mZxQ3h47gjyv9kmJLR7HQN7MrFEQxbgdrU/QTR39O9HJ KdG5sEGtOcyDy4iXlYfOS++y1ISxxi2gGb92R1WhSVCvN7tnvhiOfwocICP1IljB HR/fe0yR8CZL/A1v/Q8f6U8CXiLxAZJ7BhvZT0e0qlZEZhfbJJWm4FUxFqVuWLni w8mrdAzxXN+nffLx/lgwiQNcx6gFgW8nWwpwWtyWPTZs3BhoWoJE8I92lNWPXgjV ND3FryBkyFNKNyK+YMjFfRZtC5bHriS55JTIx4o4+NyOkts8M8zcDqTrcr6NMl5V +oklYkXVLKTPvGZYOQ== -----END CERTIFICATE-----Generated at Sun Apr 27 16:45:05 2025 by rpki-client