$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer File: 8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer (raw, json) Hash identifier: cUhMjN0QipjGTtDjxL4RjTtRYSZLsW9ZTbMcx+T24cM= Subject key identifier: 49:E3:4F:3A:15:91:89:41:88:4E:97:05:49:FD:DA:6F:61:EB:34:9B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858489E0719DCFAF17C7BEE2C2580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jan 2025 10:38:55 +0000 Certificate not after: Mon 26 Apr 2027 09:38:55 +0000 Subordinate resources: AS: 6562 IP: 199.175.0.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:07:19:dc:fa:f1:7c:7b:ee:2c:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 21 10:38:55 2025 GMT Not After : Apr 26 09:38:55 2027 GMT Subject: CN=8d56a37a-70c9-45c6-b734-00fcd55a27d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:2f:4a:51:18:54:9e:9b:01:c9:04:01:47: ec:7f:a9:e6:b4:62:d3:9c:d1:d4:c1:cb:61:d0:14: 8e:d7:0c:98:49:c4:d6:57:55:fd:fd:b5:0e:1e:a6: 9d:76:ba:be:1f:d9:98:c6:26:0a:31:e6:1e:42:98: 29:45:03:66:33:27:a8:c3:c3:a6:a4:03:cc:41:b1: 73:e0:9c:0d:6f:84:d1:85:71:1d:8b:70:c7:35:72: b3:72:f7:5d:df:4f:f1:0c:db:9d:8c:10:cb:d6:77: 4c:b6:e8:9b:51:99:69:08:2d:85:c1:6b:db:be:6e: d9:cd:3f:af:2d:11:1a:3d:b7:c9:7e:e2:cb:51:74: a8:7c:51:f3:a2:0f:cb:0d:37:68:e5:84:2d:94:85: bf:a4:72:50:4e:39:a5:35:b2:9b:95:82:8f:0c:b5: 50:d2:0c:49:6d:6d:16:e6:70:6e:4c:15:5b:23:5b: 77:95:7d:e1:16:9b:fe:13:df:ee:51:84:25:66:13: 37:3d:c5:76:df:aa:ff:23:d9:24:a7:64:60:85:68: d7:de:2a:c5:47:88:13:ae:ad:fb:fd:15:01:73:2d: 30:88:a1:b1:3b:b6:99:34:ca:b5:15:29:d5:4c:37: 0b:7b:bc:7b:30:ec:1c:28:05:2d:51:45:23:93:0b: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:4F:3A:15:91:89:41:88:4E:97:05:49:FD:DA:6F:61:EB:34:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.175.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:af:83:90:99:60:0e:4d:ee:a9:c7:c3:9f:86:16:58:42:98: eb:d4:b5:89:32:2b:a4:58:45:63:32:63:b0:e5:09:e0:55:60: 8a:3e:26:15:b1:05:04:9e:62:d8:cd:20:7e:2e:4f:6d:ca:53: 0b:13:ce:eb:ae:f6:27:d0:d2:38:75:c3:14:68:b2:90:17:8b: a0:9a:7d:a5:c4:18:ff:07:06:bf:de:b6:9c:f6:64:79:4f:3d: 19:39:88:d3:3c:ae:7e:8a:77:e6:2c:29:fb:a7:0d:5c:8a:8b: 69:f3:bd:68:74:c9:95:b9:2e:77:45:05:3d:59:6b:0b:3e:6b: 1a:0f:db:d2:3c:cf:6c:ca:50:e1:19:2a:d5:7e:48:a4:5c:8d: 59:89:26:a0:f3:15:38:46:8a:1c:cd:04:52:40:91:0b:70:7b: 94:ee:96:39:77:fc:64:2e:f2:17:c7:17:22:e1:46:ce:46:a7: cc:07:08:9e:07:f7:45:1c:74:0e:12:dc:1d:69:e5:39:eb:1e: 83:6c:68:c6:5c:93:5c:6b:88:fc:9d:d3:12:16:fe:96:a1:ec: 01:a0:c5:19:11:b2:fd:b5:66:39:5e:42:92:38:82:21:52:70: 76:61:8e:fd:91:2b:af:5e:99:60:71:a9:c1:10:37:fc:01:86: f1:21:79:99 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEieBxnc+vF8e+4sJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMTEwMzg1NVoXDTI3MDQyNjA5Mzg1NVowLzEtMCsGA1UEAxMk OGQ1NmEzN2EtNzBjOS00NWM2LWI3MzQtMDBmY2Q1NWEyN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcvSlEYVJ6bAckEAUfsf6nmtGLTnNHUwcth 0BSO1wyYScTWV1X9/bUOHqaddrq+H9mYxiYKMeYeQpgpRQNmMyeow8OmpAPMQbFz 4JwNb4TRhXEdi3DHNXKzcvdd30/xDNudjBDL1ndMtuibUZlpCC2FwWvbvm7ZzT+v LREaPbfJfuLLUXSofFHzog/LDTdo5YQtlIW/pHJQTjmlNbKblYKPDLVQ0gxJbW0W 5nBuTBVbI1t3lX3hFpv+E9/uUYQlZhM3PcV236r/I9kkp2RghWjX3irFR4gTrq37 /RUBcy0wiKGxO7aZNMq1FSnVTDcLe7x7MOwcKAUtUUUjkwtiMQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEnjTzoVkYlBiE6XBUn92m9h6zSbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 ZDU2YTM3YS03MGM5LTQ1YzYtYjczNC0wMGZjZDU1YTI3ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhkNTZhMzdhLTcwYzktNDVjNi1i NzM0LTAwZmNkNTVhMjdkMS84ZDU2YTM3YS03MGM5LTQ1YzYtYjczNC0wMGZjZDU1 YTI3ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHrwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC GaIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYq+DkJlgDk3uqcfDn4YWWEKY69S1iTIrpFhFYzJjsOUJ4FVg ij4mFbEFBJ5i2M0gfi5PbcpTCxPO6672J9DSOHXDFGiykBeLoJp9pcQY/wcGv962 nPZkeU89GTmI0zyufop35iwp+6cNXIqLafO9aHTJlbkud0UFPVlrCz5rGg/b0jzP bMpQ4Rkq1X5IpFyNWYkmoPMVOEaKHM0EUkCRC3B7lO6WOXf8ZC7yF8cXIuFGzkan zAcIngf3RRx0DhLcHWnlOeseg2xoxlyTXGuI/J3TEhb+lqHsAaDFGRGy/bVmOV5C kjiCIVJwdmGO/ZErr16ZYHGpwRA3/AGG8SF5mQ== -----END CERTIFICATE-----Generated at Sun Jun 15 05:02:00 2025 by rpki-client