$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer File: a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer (raw, json) Hash identifier: c8UZaAXuCAup09o0x9w/mmZWJUFvnPsOElxwbQpMIY0= Subject key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858499DB79384BDF829D52477C640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 18503 IP: 199.34.241.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:93:84:bd:f8:29:d5:24:77:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:3b:78:9a:5c:4c:48:e4:82:2c:be:94:fb: 30:af:2b:df:b6:1a:68:3f:93:5c:e5:f4:6c:b5:b1: 8c:56:bd:92:a6:ec:59:37:08:10:d0:96:8b:63:8a: 6a:ad:55:91:14:6c:31:8e:0b:91:32:d2:f2:3a:9b: 43:74:59:c0:1a:c8:00:94:cc:da:47:ac:e7:ca:ca: 44:e5:8e:48:31:41:9b:8a:1a:a2:11:c1:91:69:c6: 4e:c5:70:22:de:80:3e:cb:5b:2c:1d:ba:3c:29:bb: 56:15:e7:0f:03:f4:e2:7f:1c:9e:6b:f4:b2:5b:e2: 5e:ab:af:a7:c4:0c:30:c0:15:69:90:c1:f5:45:b4: cf:1d:b2:3e:ea:50:f5:d5:f9:04:11:41:b5:15:bd: 15:0f:4f:36:ec:e7:14:43:8b:7e:64:f9:96:d6:96: d4:bf:b8:16:da:2c:77:9f:27:b0:e1:d4:b1:f8:f9: 15:ff:92:54:28:4b:2c:2b:f3:25:45:6a:04:48:7c: c0:90:f3:b3:eb:74:87:14:ce:8e:cd:f5:2c:01:4f: c2:1c:50:2b:c6:ad:b0:92:85:b7:75:64:51:bb:42: 29:af:16:65:7b:98:17:38:8e:9f:63:59:7f:a6:57: e3:a0:53:0b:fe:44:5f:19:70:ec:f6:79:0d:b2:87: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.34.241.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18503 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b5:5b:6c:22:d4:a9:13:30:97:3c:a9:78:c7:a7:2e:50:8b: d3:20:87:df:bc:f5:35:fa:a7:b3:70:a4:f0:fd:dc:9e:68:99: 4b:11:5e:66:60:5c:ce:ad:c6:81:fd:ec:24:06:8f:80:b7:c3: 7d:b4:42:62:a4:63:ab:1c:a9:06:25:48:f5:e2:e9:41:d1:b6: 0e:24:fe:b7:a7:45:68:c2:5c:86:9d:a1:de:de:e8:68:f0:66: 24:79:37:99:55:e4:7d:d2:31:9b:e0:e9:9c:de:4a:68:18:83: bc:51:df:d7:5c:66:64:7f:24:f6:0a:a3:63:f5:08:13:0d:0c: 16:ff:a0:f3:4d:f8:fd:d1:94:ca:11:f7:f1:58:64:bc:28:ed: 65:71:ff:69:29:59:9f:a1:a8:8f:96:2b:20:fd:bb:bc:39:cb: 7f:b9:1a:5f:83:49:8a:96:b3:f7:4a:d4:58:d9:47:42:1b:0d: d8:c0:7b:1a:d4:a2:b8:cc:22:c3:c8:c4:54:72:ed:e7:ae:21: ec:a8:f4:ec:58:52:1a:27:b3:cd:ef:c5:fe:7b:1f:96:f7:dd: 41:b8:11:9c:2f:ec:78:2e:4e:0f:bb:1c:77:9d:1b:0b:82:2f: 03:e5:1a:c2:99:af:60:b3:ed:27:9c:98:67:98:71:66:d0:11: 27:c8:cd:04 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmdt5OEvfgp1SR3xkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk YTUzYWMwYjEtODNhMy00N2YyLWIyOGUtYjJiMTk3N2RjMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV07eJpcTEjkgiy+lPswryvfthpoP5Nc5fRs tbGMVr2SpuxZNwgQ0JaLY4pqrVWRFGwxjguRMtLyOptDdFnAGsgAlMzaR6znyspE 5Y5IMUGbihqiEcGRacZOxXAi3oA+y1ssHbo8KbtWFecPA/Tifxyea/SyW+Jeq6+n xAwwwBVpkMH1RbTPHbI+6lD11fkEEUG1Fb0VD0827OcUQ4t+ZPmW1pbUv7gW2ix3 nyew4dSx+PkV/5JUKEssK/MlRWoESHzAkPOz63SHFM6OzfUsAU/CHFArxq2wkoW3 dWRRu0IprxZle5gXOI6fY1l/plfjoFML/kRfGXDs9nkNsocZ0QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKzEKxn9e2SU8b6NbwzoirTUfPKDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h NTNhYzBiMS04M2EzLTQ3ZjItYjI4ZS1iMmIxOTc3ZGMzNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2E1M2FjMGIxLTgzYTMtNDdmMi1i MjhlLWIyYjE5NzdkYzM3NS9hNTNhYzBiMS04M2EzLTQ3ZjItYjI4ZS1iMmIxOTc3 ZGMzNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHIvEwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SEcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYbVbbCLUqRMwlzypeMenLlCL0yCH37z1Nfqns3Ck8P3cnmiZ SxFeZmBczq3Ggf3sJAaPgLfDfbRCYqRjqxypBiVI9eLpQdG2DiT+t6dFaMJchp2h 3t7oaPBmJHk3mVXkfdIxm+DpnN5KaBiDvFHf11xmZH8k9gqjY/UIEw0MFv+g8034 /dGUyhH38VhkvCjtZXH/aSlZn6Goj5YrIP27vDnLf7kaX4NJipaz90rUWNlHQhsN 2MB7GtSiuMwiw8jEVHLt564h7Kj07FhSGiezze/F/nsflvfdQbgRnC/seC5OD7sc d50bC4IvA+UawpmvYLPtJ5yYZ5hxZtARJ8jNBA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:27 2025 by rpki-client