$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer File: cc195d24-8046-44e5-bf80-7bdde011ee7b.cer (raw, json) Hash identifier: p13Z+bD0XxdFF5fSKd/A1cx/tZ7I/TxpYnZAQL2QWI0= Subject key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858498CF771D0E6AC8453D21D1CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Apr 2025 00:45:34 +0000 Certificate not after: Wed 21 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 400240 IP: 23.189.112.0/24 IP: 2620:9e:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:f7:71:d0:e6:ac:84:53:d2:1d:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 17 00:45:34 2025 GMT Not After : Jul 21 00:45:34 2027 GMT Subject: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:9e:a9:5a:ee:31:d0:de:59:4b:ad:06:fe: 0c:a0:91:ad:86:1c:91:10:9f:a7:07:1e:77:e4:68: e8:28:e5:b5:56:ac:32:17:67:0d:31:99:04:29:ae: df:58:8a:fa:b5:65:79:7a:41:b4:8a:87:d9:5d:2a: c7:bd:8b:f3:fe:79:02:63:c0:c2:9e:08:af:4f:89: d1:c9:9e:58:18:11:14:ea:ca:91:cb:5a:fe:4f:1f: 8e:3e:dd:b8:16:15:15:f6:dc:5b:77:08:8e:c7:86: 69:da:53:58:40:37:22:b2:0a:3c:b4:06:fb:f0:7c: 96:60:db:f6:b2:16:4a:21:1d:b0:34:56:f2:a3:52: d0:25:31:8b:f6:bf:d5:53:58:3d:c9:4d:e4:79:37: ee:cf:c6:0f:00:13:e3:4f:fb:65:bf:38:06:9d:b5: 62:d5:72:3b:f6:08:8e:45:97:8d:b0:80:d8:e8:69: 3b:b5:10:f0:5a:59:8b:0b:50:66:c3:db:65:88:89: 20:0f:c2:2f:7d:5b:5e:4a:91:36:39:65:65:d3:d1: c9:39:42:70:9c:9d:c2:e9:58:8a:1d:02:3d:d1:13: 1a:21:56:c2:13:14:80:7c:e7:bf:6a:40:d3:d7:96: db:9d:91:01:e9:9d:35:da:9c:44:30:72:9d:9a:56: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.189.112.0/24 IPv6: 2620:9e:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400240 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:22:cb:ba:f6:63:36:79:b9:29:04:d8:c5:e3:1e:ba:b6: 2d:57:32:81:e5:12:4f:83:2c:e7:97:29:d2:51:c4:8a:29:d6: 43:1f:59:10:19:1f:dc:5a:d7:a3:45:e9:e0:14:6e:79:5a:82: 45:05:6f:93:be:f5:c3:2a:2e:72:df:4f:48:b8:4e:6c:e1:2c: 18:f1:dc:26:e4:c5:be:e3:8f:19:12:d1:23:c9:a2:c7:52:aa: 71:4a:3f:fc:9a:90:62:e6:2e:81:dc:71:f0:48:e2:12:03:11: fb:5f:d7:67:17:37:55:28:d9:3d:bb:6d:af:1b:98:c3:b5:98: dc:ce:01:37:a3:c7:58:a4:7a:7f:39:06:fe:a6:65:6d:19:e2: 49:ed:25:7d:f1:56:9a:08:3e:48:82:85:fc:06:7e:71:49:3a: 0a:25:50:9d:66:f2:be:88:52:4c:b8:a1:3e:5b:c6:35:ab:97: d5:6f:88:93:c3:7d:26:eb:e1:61:77:aa:29:9c:7f:86:a3:7f: 5c:fe:d6:d2:6d:cd:a3:7c:43:6c:46:9e:43:eb:f9:51:3d:ed: dd:84:5d:47:7f:67:44:e3:fc:b0:9d:bc:9c:c7:3a:74:09:d1: cd:37:1a:cf:8d:67:de:15:03:41:78:c7:dd:ae:e4:74:3b:0b: c3:c7:ca:93 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEmM93HQ5qyEU9IdHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQxNzAwNDUzNFoXDTI3MDcyMTAwNDUzNFowLzEtMCsGA1UEAxMk Y2MxOTVkMjQtODA0Ni00NGU1LWJmODAtN2JkZGUwMTFlZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjKeqVruMdDeWUutBv4MoJGthhyREJ+nBx53 5GjoKOW1VqwyF2cNMZkEKa7fWIr6tWV5ekG0iofZXSrHvYvz/nkCY8DCngivT4nR yZ5YGBEU6sqRy1r+Tx+OPt24FhUV9txbdwiOx4Zp2lNYQDcisgo8tAb78HyWYNv2 shZKIR2wNFbyo1LQJTGL9r/VU1g9yU3keTfuz8YPABPjT/tlvzgGnbVi1XI79giO RZeNsIDY6Gk7tRDwWlmLC1Bmw9tliIkgD8IvfVteSpE2OWVl09HJOUJwnJ3C6ViK HQI90RMaIVbCExSAfOe/akDT15bbnZEB6Z012pxEMHKdmlb2NQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFLuI+bfc2MBlUnFXNvJgDEfljPFOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j YzE5NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRkZTAxMWVlN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NjMTk1ZDI0LTgwNDYtNDRlNS1i ZjgwLTdiZGRlMDExZWU3Yi9jYzE5NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRkZTAx MWVlN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXvXAwDwQCAAIwCQMHACYgAJ7gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGG3AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaDoiy7r2YzZ5uSkE2MXjHrq2 LVcygeUST4Ms55cp0lHEiinWQx9ZEBkf3FrXo0Xp4BRueVqCRQVvk771wyouct9P SLhObOEsGPHcJuTFvuOPGRLRI8mix1KqcUo//JqQYuYugdxx8EjiEgMR+1/XZxc3 VSjZPbttrxuYw7WY3M4BN6PHWKR6fzkG/qZlbRniSe0lffFWmgg+SIKF/AZ+cUk6 CiVQnWbyvohSTLihPlvGNauX1W+Ik8N9JuvhYXeqKZx/hqN/XP7W0m3No3xDbEae Q+v5UT3t3YRdR39nROP8sJ28nMc6dAnRzTcaz41n3hUDQXjH3a7kdDsLw8fKkw== -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:46 2025 by rpki-client