$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc.cer File: b1f7da37-7fdd-4d04-8a10-40434b8992dc.cer (raw, json) Hash identifier: 36FRlDJuq1CJjKj3xmS36cUqvOPTTaakXx0hzga05Ik= Subject key identifier: 21:12:EE:09:AC:4C:FF:31:6E:61:98:E2:39:4B:80:AE:1A:0F:5A:6D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584975F9623B4FE962F84F056700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/b1f7da37-7fdd-4d04-8a10-40434b8992dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 19:05:53 +0000 Certificate not after: Mon 12 Jul 2027 19:05:53 +0000 Subordinate resources: AS: 11979 IP: 66.38.0.0/17 IP: 66.198.232.0/21 IP: 74.50.32.0/20 IP: 205.167.124.0/23 IP: 2607:f9d0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:f9:62:3b:4f:e9:62:f8:4f:05:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 8 19:05:53 2025 GMT Not After : Jul 12 19:05:53 2027 GMT Subject: CN=b1f7da37-7fdd-4d04-8a10-40434b8992dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:ea:2f:85:ba:ac:e1:34:c8:f7:e2:37:46: b8:da:a2:95:17:34:8a:64:ba:f0:2c:2c:05:51:b0: 45:57:42:83:c3:bd:db:7e:31:f1:50:86:80:cd:a1: cd:f0:26:65:ea:25:fc:ac:7e:cb:77:a7:6a:9c:29: c9:06:b8:d9:d9:91:52:f0:b6:3c:79:67:f5:a0:93: 2d:5e:5a:c1:4a:47:6a:15:16:b6:00:8f:d3:b6:af: 0c:c2:35:bb:c3:d2:36:d2:0a:bd:55:d6:ce:c7:79: 3c:9b:e2:ec:31:0c:71:56:fc:c9:84:4e:6b:a7:f1: f8:e6:c3:2e:75:ab:cf:2b:d4:be:a7:16:24:4d:39: 5e:59:16:0f:55:10:31:25:77:c4:6f:e4:47:e1:27: 66:1f:ac:b1:53:c8:51:a3:3d:af:e1:f9:be:a1:76: dc:3a:d4:0d:cb:92:c7:6d:a3:e3:63:19:ab:8e:97: e0:fc:3c:81:5d:52:b2:67:3f:76:9b:d9:9a:ae:8f: 38:87:03:cf:a9:6e:11:18:e1:88:67:b1:84:ab:1a: 8a:99:69:32:e1:ae:cb:a2:32:e4:e8:e9:e6:79:5d: 59:1d:86:77:1d:9b:ea:1a:47:e3:bd:19:c9:be:d3: d4:63:80:ee:ae:4e:61:7d:7b:38:58:63:8b:6b:56: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:EE:09:AC:4C:FF:31:6E:61:98:E2:39:4B:80:AE:1A:0F:5A:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/b1f7da37-7fdd-4d04-8a10-40434b8992dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.38.0.0/17 66.198.232.0/21 74.50.32.0/20 205.167.124.0/23 IPv6: 2607:f9d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11979 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f8:d1:98:b1:30:23:c7:34:e6:23:a8:c1:7b:2d:6b:09:15: 75:ab:72:88:7d:97:48:2a:70:a1:72:1f:68:d4:0a:2a:65:ed: cd:ae:72:cf:35:07:dc:2c:8f:f1:5f:65:17:17:b8:b7:55:bb: 31:60:ce:41:48:ee:14:e1:e2:f8:57:68:0d:b0:7a:98:21:66: 50:fe:7c:27:f7:a6:a4:30:2b:6c:4a:af:27:b3:64:e5:b6:b8: ff:b3:f8:08:4d:cc:58:3e:3b:67:46:42:74:3f:74:57:52:5a: 5b:a1:16:7f:13:50:1b:8d:f4:de:b3:aa:88:76:cf:17:d2:e4: 61:3c:cc:18:b7:4e:37:0a:aa:0f:6a:51:c1:31:a5:2b:b7:6f: 35:fa:85:11:e5:6b:31:bc:e8:7f:e9:0a:25:9b:1a:1e:ed:e7: 80:d0:1e:11:ba:2d:a6:8f:91:76:28:02:1d:21:7f:52:54:b2: b2:1c:94:c4:4b:ac:ee:3e:ee:45:48:77:ae:fb:4f:fe:81:12: 1d:74:73:06:a5:e7:af:81:5a:e0:79:84:5c:e2:14:7c:5e:e4: 87:75:bb:2e:63:8f:35:d9:0e:8a:bf:4f:aa:dd:fa:cd:9c:10: ca:a6:e5:d6:93:56:30:3e:8f:b1:9f:51:9b:95:5d:77:3c:f5: b3:83:0a:db -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEl1+WI7T+li+E8FZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwODE5MDU1M1oXDTI3MDcxMjE5MDU1M1owLzEtMCsGA1UEAxMk YjFmN2RhMzctN2ZkZC00ZDA0LThhMTAtNDA0MzRiODk5MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQvqL4W6rOE0yPfiN0a42qKVFzSKZLrwLCwF UbBFV0KDw73bfjHxUIaAzaHN8CZl6iX8rH7Ld6dqnCnJBrjZ2ZFS8LY8eWf1oJMt XlrBSkdqFRa2AI/Ttq8MwjW7w9I20gq9VdbOx3k8m+LsMQxxVvzJhE5rp/H45sMu davPK9S+pxYkTTleWRYPVRAxJXfEb+RH4SdmH6yxU8hRoz2v4fm+oXbcOtQNy5LH baPjYxmrjpfg/DyBXVKyZz92m9maro84hwPPqW4RGOGIZ7GEqxqKmWky4a7LojLk 6OnmeV1ZHYZ3HZvqGkfjvRnJvtPUY4Durk5hfXs4WGOLa1ZsbwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFCES7gmsTP8xbmGY4jlLgK4aD1ptMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i MWY3ZGEzNy03ZmRkLTRkMDQtOGExMC00MDQzNGI4OTkyZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2IxZjdkYTM3LTdmZGQtNGQwNC04 YTEwLTQwNDM0Yjg5OTJkYy9iMWY3ZGEzNy03ZmRkLTRkMDQtOGExMC00MDQzNGI4 OTkyZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAdCJgADBANCxugDBARKMiADBAHNp3wwDQQCAAIw BwMFACYH+dAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLsswVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASfjR mLEwI8c05iOowXstawkVdatyiH2XSCpwoXIfaNQKKmXtza5yzzUH3CyP8V9lFxe4 t1W7MWDOQUjuFOHi+FdoDbB6mCFmUP58J/empDArbEqvJ7Nk5ba4/7P4CE3MWD47 Z0ZCdD90V1JaW6EWfxNQG4303rOqiHbPF9LkYTzMGLdONwqqD2pRwTGlK7dvNfqF EeVrMbzof+kKJZsaHu3ngNAeEbotpo+RdigCHSF/UlSyshyUxEus7j7uRUh3rvtP /oESHXRzBqXnr4Fa4HmEXOIUfF7kh3W7LmOPNdkOir9Pqt36zZwQyqbl1pNWMD6P sZ9Rm5Vddzz1s4MK2w== -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:53 2025 by rpki-client