$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer File: 8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer (raw, json) Hash identifier: fGdyPMpNNeXFnr/qcuClmFOvGIdq7gvoddcU43IcJfo= Subject key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584976A1FAD5E9E1D5EF26986000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 00:45:34 +0000 Certificate not after: Tue 13 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 394470 IP: 172.83.150.0/24 IP: 216.10.70.0/23 IP: 2620:25:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a1:fa:d5:e9:e1:d5:ef:26:98:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 9 00:45:34 2025 GMT Not After : Jul 13 00:45:34 2027 GMT Subject: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:b7:ac:f9:b3:13:d5:79:1b:f2:32:c8:ab: 9f:d0:a1:31:0f:96:44:67:41:99:30:b9:f6:d3:95: 60:1b:9d:ad:fd:40:c2:48:c7:4d:c7:f9:02:df:3e: 8c:a0:07:7a:b3:cd:30:50:d1:4b:15:e2:d4:b3:68: 31:df:0d:3c:fe:a7:6d:e3:f6:cc:55:96:53:99:86: fd:fd:e3:3f:3d:76:ea:62:fc:01:a3:ee:5d:3d:a3: 2d:0a:e5:4d:93:f9:9e:b1:e5:3c:25:8f:b9:48:29: 35:1a:da:ad:7f:b3:bc:ca:6e:88:13:b8:34:3b:2a: e6:56:c4:24:3b:99:49:1a:26:2f:0e:54:e3:7c:a5: b0:83:21:f7:f4:26:a8:6c:34:34:2d:4c:09:64:6b: 9f:73:96:32:5e:6d:41:ed:f2:ef:25:d2:1b:4a:ca: 8f:94:d6:97:6d:b7:f0:82:87:ec:a3:82:d4:f4:a6: f3:d3:0d:1b:76:5f:1d:c7:78:81:39:1a:a7:3f:b1: 36:03:b0:d5:d5:ec:44:a2:91:9d:22:ba:b6:b3:54: bf:0b:fd:69:d0:9c:3e:3c:de:10:4c:d7:3c:06:0c: 1a:fe:f5:ba:cf:e0:cc:5e:15:30:24:e8:c2:4b:ed: b7:dd:66:fe:27:96:70:68:3d:de:61:2c:c0:9a:a0: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 172.83.150.0/24 216.10.70.0/23 IPv6: 2620:25:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394470 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:70:de:f7:00:4a:1c:36:37:2a:01:e8:6f:c4:a5:c3:7b:0c: 7b:8a:7f:92:b0:b5:83:2e:6e:93:40:6f:97:cf:56:85:a7:a5: 8c:60:29:21:64:9b:d5:af:a7:2b:65:a0:0f:99:ca:cd:52:2b: e5:a6:cc:4d:e6:c6:a7:2e:9d:60:51:e9:a8:92:26:2d:0e:f3: 1a:0a:fc:a2:86:f1:f4:75:03:5b:0f:d8:30:34:7b:66:3d:db: 01:d8:d2:7a:8d:32:73:3e:d0:58:e9:18:f8:75:ef:f1:a8:47: 43:18:be:8f:66:5c:98:21:35:22:10:80:f9:70:a1:a4:87:2a: 1f:24:ee:19:57:dc:da:6b:d0:42:87:71:c8:38:18:6c:e4:07: 42:a1:e9:40:53:7e:2c:0c:3e:69:bc:7f:86:e8:02:55:23:a8: 39:07:b0:58:bd:9e:65:9d:8c:db:e8:b6:41:b7:b0:bc:00:aa: 6f:d3:90:56:10:35:90:df:8f:37:a2:4d:40:67:b9:4e:fd:62: a1:38:4e:8e:d4:41:20:f5:b0:9a:3e:11:a3:0a:f2:1f:2e:52: 5b:3c:de:48:89:ef:96:a2:ad:24:7b:61:2a:3e:ac:52:39:c0: 02:58:69:86:13:53:c5:7f:1f:11:ec:12:27:50:fe:c3:35:47: 0a:5a:11:ee -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEl2ofrV6eHV7yaYYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQwOTAwNDUzNFoXDTI3MDcxMzAwNDUzNFowLzEtMCsGA1UEAxMk OGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCy3rPmzE9V5G/IyyKuf0KExD5ZEZ0GZMLn2 05VgG52t/UDCSMdNx/kC3z6MoAd6s80wUNFLFeLUs2gx3w08/qdt4/bMVZZTmYb9 /eM/PXbqYvwBo+5dPaMtCuVNk/meseU8JY+5SCk1Gtqtf7O8ym6IE7g0OyrmVsQk O5lJGiYvDlTjfKWwgyH39CaobDQ0LUwJZGufc5YyXm1B7fLvJdIbSsqPlNaXbbfw gofso4LU9Kbz0w0bdl8dx3iBORqnP7E2A7DV1exEopGdIrq2s1S/C/1p0Jw+PN4Q TNc8Bgwa/vW6z+DMXhUwJOjCS+233Wb+J5ZwaD3eYSzAmqCIpwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFClaJH6iiZviuixJgU9V5mNKmvroMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhiMjEyNGE4LWQ2YjYtNDgzZS05 MmRlLTY3ZjhkNzk3NWNjNC84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5 NzVjYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBACsU5YDBAHYCkYwDwQCAAIwCQMHACYgACWgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBOYwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAenDe9wBKHDY3KgHo b8Slw3sMe4p/krC1gy5uk0Bvl89WhaeljGApIWSb1a+nK2WgD5nKzVIr5abMTebG py6dYFHpqJImLQ7zGgr8oobx9HUDWw/YMDR7Zj3bAdjSeo0ycz7QWOkY+HXv8ahH Qxi+j2ZcmCE1IhCA+XChpIcqHyTuGVfc2mvQQodxyDgYbOQHQqHpQFN+LAw+abx/ hugCVSOoOQewWL2eZZ2M2+i2QbewvACqb9OQVhA1kN+PN6JNQGe5Tv1ioThOjtRB IPWwmj4RowryHy5SWzzeSInvlqKtJHthKj6sUjnAAlhphhNTxX8fEewSJ1D+wzVH CloR7g== -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:17 2025 by rpki-client