$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72.cer File: a17da6e4-914e-42ef-9d06-8048ae444a72.cer (raw, json) Hash identifier: 87k7c8NB4WX0U/UNizBxIaNhU5Pk/MAORXVvRcaER/g= Subject key identifier: 39:35:F3:D6:61:0A:FA:4C:4D:F3:59:1B:58:7F:D4:1A:AC:2F:57:8E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491554444B4139F57F491ED300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 04:15:35 +0000 Certificate not after: Tue 08 Jun 2027 03:15:35 +0000 Subordinate resources: AS: 13848 AS: 14466 AS: 53807 IP: 216.109.96.0/20 IP: 2620:ec:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:54:44:4b:41:39:f5:7f:49:1e:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 5 04:15:35 2025 GMT Not After : Jun 8 03:15:35 2027 GMT Subject: CN=a17da6e4-914e-42ef-9d06-8048ae444a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:af:1a:c2:d8:71:9c:3d:b4:3a:e0:e4:c5: 47:bb:77:b0:bd:12:38:52:a9:18:00:50:92:18:cd: 6a:ba:34:53:d9:5e:d0:18:52:98:ed:dc:1d:75:5c: b4:ac:2c:47:f1:be:07:37:8c:18:18:bb:ef:87:d9: b5:bd:6e:b4:ad:5e:b5:ab:01:93:43:7f:38:48:cd: be:15:3d:3b:d2:61:33:5e:3b:27:04:51:ce:c7:27: fe:35:12:7c:6c:94:ae:0a:3c:7d:d1:c4:30:fb:c0: db:9a:e3:9a:fb:ed:96:68:fa:51:77:77:f2:10:a1: 13:59:12:cc:1d:b3:e0:00:3e:54:39:84:a7:d4:6b: 62:40:91:f5:bb:cf:71:ba:26:6e:c3:2d:d7:a2:8f: 3c:38:04:ba:5a:ad:83:79:1e:ad:10:dc:89:f6:66: 06:f2:e0:bf:54:da:13:a9:3c:63:7a:be:74:69:46: b0:8e:e0:ee:75:51:22:b8:40:fc:9e:7b:ca:b7:c3: 70:04:10:2e:fa:81:7d:7a:99:72:40:ef:5f:e0:fd: 1b:6c:c5:c2:ff:6f:7e:c8:59:a4:21:dd:97:61:d2: 3a:6b:01:6e:27:00:b2:2c:6a:04:42:49:94:72:7d: ff:f4:62:9e:b4:6b:b3:b6:2c:6d:3b:8e:d8:d3:68: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:F3:D6:61:0A:FA:4C:4D:F3:59:1B:58:7F:D4:1A:AC:2F:57:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 216.109.96.0/20 IPv6: 2620:ec:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13848 14466 53807 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:31:ff:41:14:b9:fe:3e:52:23:ce:22:ac:49:c6:ba:72:d0: 29:48:e7:4b:d0:a7:a2:ba:e8:f3:40:1b:4a:9e:f5:bd:2f:73: a3:64:6a:9d:50:d5:21:ea:f1:a4:33:26:eb:9c:9f:99:56:21: ef:11:cc:5b:b0:cb:fc:6e:1e:45:99:be:c3:fb:65:8f:36:48: 8e:e2:b1:cd:64:ba:db:dd:a2:78:0a:fc:04:d1:4f:cc:a6:fa: ac:9a:57:42:e9:8c:f3:44:1d:82:14:ac:56:24:f7:c5:d3:3f: 21:51:41:ae:ad:3b:ea:46:f0:2a:0b:e3:5c:d6:59:e2:15:c8: b5:83:2b:ae:13:0e:c0:e2:fc:db:58:fe:53:f2:da:a5:d2:97: 5d:c1:3f:dc:cc:b6:3e:9f:15:33:17:88:16:0c:f7:3e:75:de: d7:3f:95:e0:4d:46:83:67:e7:67:a2:ad:58:0f:38:5c:8d:56: af:ab:d5:b0:6c:c5:ce:85:01:b8:37:f4:46:42:cc:37:16:17: 86:c5:d7:a5:b9:4f:67:42:76:2c:56:58:55:2b:c6:78:5e:0e: 15:26:3a:8a:f2:05:f5:0f:29:b2:12:f4:1c:6b:92:53:42:e5: 0b:3f:3b:74:23:3a:78:a4:e6:9e:83:65:95:7d:e2:72:32:60: c3:3e:3f:f2 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEkVVERLQTn1f0ke0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNTA0MTUzNVoXDTI3MDYwODAzMTUzNVowLzEtMCsGA1UEAxMk YTE3ZGE2ZTQtOTE0ZS00MmVmLTlkMDYtODA0OGFlNDQ0YTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlevGsLYcZw9tDrg5MVHu3ewvRI4UqkYAFCS GM1qujRT2V7QGFKY7dwddVy0rCxH8b4HN4wYGLvvh9m1vW60rV61qwGTQ384SM2+ FT070mEzXjsnBFHOxyf+NRJ8bJSuCjx90cQw+8DbmuOa++2WaPpRd3fyEKETWRLM HbPgAD5UOYSn1GtiQJH1u89xuiZuwy3Xoo88OAS6Wq2DeR6tENyJ9mYG8uC/VNoT qTxjer50aUawjuDudVEiuED8nnvKt8NwBBAu+oF9eplyQO9f4P0bbMXC/29+yFmk Id2XYdI6awFuJwCyLGoEQkmUcn3/9GKetGuztixtO47Y02jR4QIDAQABo4IENDCC BDAwHQYDVR0OBBYEFDk189ZhCvpMTfNZG1h/1BqsL1eOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h MTdkYTZlNC05MTRlLTQyZWYtOWQwNi04MDQ4YWU0NDRhNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ExN2RhNmU0LTkxNGUtNDJlZi05 ZDA2LTgwNDhhZTQ0NGE3Mi9hMTdkYTZlNC05MTRlLTQyZWYtOWQwNi04MDQ4YWU0 NDRhNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBATYbWAwDwQCAAIwCQMHACYgAOyAADAiBggrBgEF BQcBCAEB/wQTMBGgDzANAgI2GAICOIICAwDSLzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeMf9BFLn+PlIj ziKsSca6ctApSOdL0KeiuujzQBtKnvW9L3OjZGqdUNUh6vGkMybrnJ+ZViHvEcxb sMv8bh5Fmb7D+2WPNkiO4rHNZLrb3aJ4CvwE0U/MpvqsmldC6YzzRB2CFKxWJPfF 0z8hUUGurTvqRvAqC+Nc1lniFci1gyuuEw7A4vzbWP5T8tql0pddwT/czLY+nxUz F4gWDPc+dd7XP5XgTUaDZ+dnoq1YDzhcjVavq9WwbMXOhQG4N/RGQsw3FheGxdel uU9nQnYsVlhVK8Z4Xg4VJjqK8gX1DymyEvQca5JTQuULPzt0Izp4pOaeg2WVfeJy MmDDPj/y -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:25 2025 by rpki-client