$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer File: d184e471-080a-4e54-bf94-60dd0c8beb48.cer (raw, json) Hash identifier: 2WLKs3CQ+xrtWczRG5W7leC/z6/l65H7rGS89qxl2wM= Subject key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848BE7E98D0A4D06E8DB1207DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Feb 2025 01:45:33 +0000 Certificate not after: Sat 08 May 2027 00:45:33 +0000 Subordinate resources: AS: 18531 AS: 22926 AS: 25928 AS: 393809 AS: 398546 IP: 23.166.64.0/24 IP: 45.40.0.0/20 IP: 66.232.160.0/19 IP: 67.43.112.0/20 IP: 72.14.0.0/19 IP: 74.118.200.0/21 IP: 96.47.192.0/20 IP: 130.51.248.0/22 IP: 192.68.255.0/24 IP: 208.70.36.0/22 IP: 208.84.188.0/22 IP: 2602:fea0::/36 IP: 2602:ff53::/36 IP: 2607:f5e8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:7e:98:d0:a4:d0:6e:8d:b1:20:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 2 01:45:33 2025 GMT Not After : May 8 00:45:33 2027 GMT Subject: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:3c:32:14:a5:f0:1d:ce:37:b5:1e:bf:38: e8:77:b9:d8:be:53:94:7d:20:5c:6e:91:c6:9a:8e: fa:84:76:28:89:f3:d3:25:d6:4a:b1:bd:a7:5d:a6: 3f:7b:a5:81:32:33:f4:d6:fe:19:57:bb:df:f0:78: fb:1c:aa:9b:e5:39:b6:f3:02:f2:0f:74:78:d4:c2: 88:9f:14:f9:a2:45:8c:6a:70:f9:4c:44:35:e2:8a: f6:d8:e5:92:00:30:47:f3:0f:3a:0d:5f:ef:12:7a: f1:20:0f:aa:a3:e5:a7:97:22:51:3b:ab:9e:29:2d: 42:d5:a1:94:de:19:14:20:9b:f7:eb:b2:c5:e0:af: a0:7b:f2:e2:d8:73:1e:3e:00:61:d4:35:f4:10:ba: 75:84:e3:ab:84:cb:4d:31:a4:38:35:6e:e4:aa:86: 5c:f8:13:da:ee:1c:54:a6:ce:f1:2b:d4:47:50:f7: a9:89:f9:69:50:ed:c9:16:d8:e5:d1:75:6c:9b:02: cf:c9:8a:d8:6c:7b:e0:8b:fc:c9:7f:60:e6:7f:11: 08:33:9f:85:9a:83:ba:33:1f:19:e7:98:98:37:a1: 62:e4:6e:8e:bb:ac:3c:5d:86:c2:7b:28:a7:06:19: f0:5b:60:46:8d:a8:38:1b:cc:ad:ad:2d:cf:6c:b3: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.166.64.0/24 45.40.0.0/20 66.232.160.0/19 67.43.112.0/20 72.14.0.0/19 74.118.200.0/21 96.47.192.0/20 130.51.248.0/22 192.68.255.0/24 208.70.36.0/22 208.84.188.0/22 IPv6: 2602:fea0::/36 2602:ff53::/36 2607:f5e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18531 22926 25928 393809 398546 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1d:5e:d7:a3:27:ae:14:01:47:fc:1a:40:1a:f2:89:5b:ec: 75:bc:f1:73:2e:80:8d:5b:c6:e0:9b:e7:07:c7:09:ea:fa:63: 9d:0f:4c:bf:0c:de:d5:1a:9b:68:23:88:71:b4:f7:72:2d:fb: 83:0e:3b:82:07:c3:46:78:28:a1:e8:23:4b:bb:78:ab:b9:53: a6:eb:bb:fa:3f:64:bd:3c:c9:d8:5e:46:33:b9:e0:45:c4:9b: 56:5d:ee:92:9c:d0:63:de:9a:16:7b:f9:a2:e1:57:c2:d9:9b: 6e:f6:83:67:6e:a1:25:8f:bb:b1:65:79:3f:21:a3:3b:ff:50: d4:5a:02:b0:8d:78:4e:9d:71:8e:84:46:11:cc:70:3f:74:b6: 12:85:7a:3f:c4:e5:46:4d:5a:5e:93:a2:d5:d8:79:f0:1f:70: 95:b9:42:b2:b4:1c:e3:29:7f:28:a4:41:56:85:bf:0c:bf:b4: 3f:c9:5c:f3:74:12:7b:68:1f:fa:61:bd:e1:8a:26:bd:e4:6e: 47:b7:a9:76:58:4b:f5:50:08:30:34:0b:d8:2c:1f:9a:3f:3c: 42:a3:7b:3b:6d:a5:ae:0d:35:fe:59:15:b5:e6:94:6c:aa:37: 46:e0:9b:09:7b:14:32:1f:00:60:1a:91:18:ce:8b:67:99:5e: 7f:72:5d:53 -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEi+fpjQpNBujbEgfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIwMjAxNDUzM1oXDTI3MDUwODAwNDUzM1owLzEtMCsGA1UEAxMk ZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJlYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYk8MhSl8B3ON7Uevzjod7nYvlOUfSBcbpHG mo76hHYoifPTJdZKsb2nXaY/e6WBMjP01v4ZV7vf8Hj7HKqb5Tm28wLyD3R41MKI nxT5okWManD5TEQ14or22OWSADBH8w86DV/vEnrxIA+qo+WnlyJRO6ueKS1C1aGU 3hkUIJv367LF4K+ge/Li2HMePgBh1DX0ELp1hOOrhMtNMaQ4NW7kqoZc+BPa7hxU ps7xK9RHUPepiflpUO3JFtjl0XVsmwLPyYrYbHvgi/zJf2DmfxEIM5+FmoO6Mx8Z 55iYN6Fi5G6Ou6w8XYbCeyinBhnwW2BGjag4G8ytrS3PbLM6kwIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFIIqxl8Fd5bWEvskhuZyxhKltkFRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k MTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QxODRlNDcxLTA4MGEtNGU1NC1i Zjk0LTYwZGQwYzhiZWI0OC9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4 YmViNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwegYIKwYBBQUH AQcBAf8EazBpMEgEAgABMEIDBAAXpkADBAQtKAADBAVC6KADBARDK3ADBAVIDgAD BANKdsgDBARgL8ADBAKCM/gDBADARP8DBALQRiQDBALQVLwwHQQCAAIwFwMGBCYC /qAAAwYEJgL/UwADBQAmB/XoMCsGCCsGAQUFBwEIAQH/BBwwGqAYMBYCAkhjAgJZ jgICZUgCAwYCUQIDBhTSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEQdXtejJ64UAUf8GkAa8olb7HW88XMu gI1bxuCb5wfHCer6Y50PTL8M3tUam2gjiHG093It+4MOO4IHw0Z4KKHoI0u7eKu5 U6bru/o/ZL08ydheRjO54EXEm1Zd7pKc0GPemhZ7+aLhV8LZm272g2duoSWPu7Fl eT8hozv/UNRaArCNeE6dcY6ERhHMcD90thKFej/E5UZNWl6TotXYefAfcJW5QrK0 HOMpfyikQVaFvwy/tD/JXPN0EntoH/phveGKJr3kbke3qXZYS/VQCDA0C9gsH5o/ PEKjezttpa4NNf5ZFbXmlGyqN0bgmwl7FDIfAGAakRjOi2eZXn9yXVM= -----END CERTIFICATE-----Generated at Sat Apr 26 21:00:33 2025 by rpki-client