$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer File: a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer (raw, json) Hash identifier: BcKsmEbP2WeD5b1ZRGKLyoRGZ2Y42UXFBN0NvLnT1HQ= Subject key identifier: 35:1D:42:87:DA:37:2A:71:0C:3F:13:03:E8:05:3C:9D:74:B2:21:DA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849763D8FC3CC4953686C9BDE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 21:23:15 +0000 Certificate not after: Mon 12 Jul 2027 21:23:15 +0000 Subordinate resources: AS: 223 AS: 546 AS: 551 AS: 773 AS: 3063 AS: 53538 AS: 54670 AS: 394757 IP: 157.185.0.0/18 IP: 192.5.49.0/24 IP: 192.33.112.0/24 IP: 192.48.111.0/24 IP: 192.70.178.0/24 IP: 192.84.120.0/24 IP: 192.94.214.0/24 IP: 198.51.22.0/24 IP: 209.128.224.0/19 IP: 2607:7100::/32 IP: 2620:105:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:3d:8f:c3:cc:49:53:68:6c:9b:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 8 21:23:15 2025 GMT Not After : Jul 12 21:23:15 2027 GMT Subject: CN=a20fe800-abb3-4f4b-a5be-6e36a478c95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:c5:49:6f:66:fe:a0:90:97:fe:06:4d:64: 49:7b:94:78:ef:b8:dd:ac:e0:b7:6a:52:7c:b1:44: 4b:1f:34:94:36:e7:2a:6a:27:a0:b2:78:69:68:a4: e6:ea:08:91:70:60:3e:39:52:a8:93:75:09:65:9c: 8d:6c:31:f8:ab:c1:55:19:fa:69:af:63:69:18:a3: 90:1b:44:72:45:66:79:68:a9:35:ea:4c:9d:2a:5a: 07:79:5f:1a:f3:cf:4d:1a:60:42:94:4a:32:13:d1: c6:5f:8b:a4:e7:9f:f5:6e:33:c4:25:b5:5f:38:80: 00:c2:e5:33:be:bd:5c:a6:63:29:54:c3:5d:87:e9: c4:f3:ee:5e:f7:0e:8d:2f:1f:fe:fd:8e:1d:c1:99: 60:5d:ab:61:38:dc:91:f9:69:9d:89:42:0f:7f:23: 4a:bf:a1:fd:34:06:6b:bc:de:5b:58:bc:3b:b4:71: 66:2e:50:75:da:67:88:a1:a4:4c:dc:6c:e7:45:28: c0:04:e5:0e:cd:06:33:c7:02:e6:8b:e1:39:ec:e7: e9:32:96:cb:b4:08:12:45:d2:d3:f4:6a:81:6a:82: c5:8b:05:4a:6e:98:2d:d3:43:b4:5c:5d:85:84:ef: 8f:50:3d:23:33:88:77:89:f4:98:78:da:d9:ba:06: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1D:42:87:DA:37:2A:71:0C:3F:13:03:E8:05:3C:9D:74:B2:21:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 157.185.0.0/18 192.5.49.0/24 192.33.112.0/24 192.48.111.0/24 192.70.178.0/24 192.84.120.0/24 192.94.214.0/24 198.51.22.0/24 209.128.224.0/19 IPv6: 2607:7100::/32 2620:105:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 223 546 551 773 3063 53538 54670 394757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:41:13:bb:fc:37:00:79:74:78:a3:3d:e1:a5:6a:2b:d9:c5: 3d:d9:12:67:d9:7b:41:4a:84:ff:c1:41:8f:1f:21:5f:81:ab: ab:5f:e8:69:9c:35:43:4a:84:5f:ff:41:a8:fc:49:2b:55:46: 7d:87:8f:24:44:0b:41:c9:cf:a4:8a:b4:cc:70:5f:a1:8a:f3: e4:a7:3b:0f:22:7b:09:31:97:16:6f:8e:f9:84:62:94:97:d8: e0:de:79:b2:97:6f:46:99:a9:ee:2b:26:61:07:0c:b0:c6:cb: fd:e7:65:ef:1a:44:04:56:43:1b:71:82:7f:86:e4:1c:f8:07: 44:3e:76:c5:08:67:b9:69:90:df:a9:69:5e:ff:f7:24:72:99: d4:85:3b:a1:6d:70:98:62:7f:87:9a:fc:0e:26:d3:39:ab:70: 1e:e2:ad:88:63:91:fb:d1:31:e0:c6:27:79:12:19:6b:ca:f2: 8f:02:8a:83:99:cb:a9:0c:33:a8:e4:b9:4e:05:a2:ff:c3:ce: 58:5a:75:e9:4e:59:89:d9:a8:db:1e:49:33:01:8d:99:e5:1f: 53:27:84:92:5e:8b:0b:92:76:d1:6f:f8:c3:00:06:79:c5:7f: ff:ca:95:0a:13:4d:5b:28:a4:31:ab:3b:9e:7e:f2:6d:16:41: 6b:04:0b:9b -----BEGIN CERTIFICATE----- MIIHbjCCBlagAwIBAgIUAQ0Mn0MoWEl2PY/DzElTaGyb3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwODIxMjMxNVoXDTI3MDcxMjIxMjMxNVowLzEtMCsGA1UEAxMk YTIwZmU4MDAtYWJiMy00ZjRiLWE1YmUtNmUzNmE0NzhjOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMPFSW9m/qCQl/4GTWRJe5R477jdrOC3alJ8 sURLHzSUNucqaiegsnhpaKTm6giRcGA+OVKok3UJZZyNbDH4q8FVGfppr2NpGKOQ G0RyRWZ5aKk16kydKloHeV8a889NGmBClEoyE9HGX4uk55/1bjPEJbVfOIAAwuUz vr1cpmMpVMNdh+nE8+5e9w6NLx/+/Y4dwZlgXathONyR+WmdiUIPfyNKv6H9NAZr vN5bWLw7tHFmLlB12meIoaRM3GznRSjABOUOzQYzxwLmi+E57OfpMpbLtAgSRdLT 9GqBaoLFiwVKbpgt00O0XF2FhO+PUD0jM4h3ifSYeNrZugYi/QIDAQABo4IEgDCC BHwwHQYDVR0OBBYEFDUdQofaNypxDD8TA+gFPJ10siHaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MjBmZTgwMC1hYmIzLTRmNGItYTViZS02ZTM2YTQ3OGM5NWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyMGZlODAwLWFiYjMtNGY0Yi1h NWJlLTZlMzZhNDc4Yzk1Zi9hMjBmZTgwMC1hYmIzLTRmNGItYTViZS02ZTM2YTQ3 OGM5NWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwZgYIKwYBBQUH AQcBAf8EVzBVMDwEAgABMDYDBAaduQADBADABTEDBADAIXADBADAMG8DBADARrID BADAVHgDBADAXtYDBADGMxYDBAXRgOAwFQQCAAIwDwMFACYHcQADBgAmIAEFIDA4 BggrBgEFBQcBCAEB/wQpMCegJTAjAgIA3wICAiICAgInAgIDBQICC/cCAwDRIgID ANWOAgMGBgUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAE0ETu/w3AHl0eKM94aVqK9nFPdkSZ9l7QUqE/8FB jx8hX4Grq1/oaZw1Q0qEX/9BqPxJK1VGfYePJEQLQcnPpIq0zHBfoYrz5Kc7DyJ7 CTGXFm+O+YRilJfY4N55spdvRpmp7ismYQcMsMbL/edl7xpEBFZDG3GCf4bkHPgH RD52xQhnuWmQ36lpXv/3JHKZ1IU7oW1wmGJ/h5r8DibTOatwHuKtiGOR+9Ex4MYn eRIZa8ryjwKKg5nLqQwzqOS5TgWi/8POWFp16U5Zidmo2x5JMwGNmeUfUyeEkl6L C5J20W/4wwAGecV//8qVChNNWyikMas7nn7ybRZBawQLmw== -----END CERTIFICATE-----Generated at Sun Apr 27 05:50:47 2025 by rpki-client