$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer File: e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer (raw, json) Hash identifier: uMQry8K/omrBxIvnjSm+p2EWZEVqnob649BOgNOAq3M= Subject key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C12AE53C7F3E4C97430F8D20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Feb 2025 00:44:20 +0000 Certificate not after: Sat 08 May 2027 23:44:20 +0000 Subordinate resources: AS: 11336 AS: 26816 AS: 31747 IP: 69.52.0.0/16 IP: 199.242.0.0/21 IP: 199.253.64.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:2a:e5:3c:7f:3e:4c:97:43:0f:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 3 00:44:20 2025 GMT Not After : May 8 23:44:20 2027 GMT Subject: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:84:3b:44:f8:1a:db:a5:18:29:e0:00:de: 32:65:39:e3:bf:9a:6a:a0:41:4d:71:c7:8b:a9:16: b2:c3:06:4d:ee:6b:87:47:1f:8f:b9:9b:87:47:ac: bc:33:9a:c4:c9:a5:3e:b0:c3:d8:25:5e:b7:ed:68: 12:71:7c:bd:e1:66:81:37:27:d8:8b:11:98:16:8d: b7:40:e6:10:e2:30:eb:f9:f9:95:89:4c:ad:0c:f6: db:df:86:db:ec:95:16:23:2e:0b:25:85:08:2d:83: da:a4:14:96:be:9c:b7:5a:9c:03:e0:bf:39:c1:a8: 57:69:4b:da:46:62:f8:07:fc:66:26:ca:5f:b9:74: 93:c2:eb:ab:b9:7b:ae:28:34:30:0e:eb:ba:4c:f4: 44:b9:85:e4:4f:41:ff:ad:fc:40:56:6e:ab:dc:da: 30:39:d8:f2:6c:bc:af:ab:10:0b:8b:e4:42:3b:3e: 5b:ae:9a:da:60:22:81:6b:2f:90:2e:b6:ce:d6:fd: 0a:f0:90:a7:d7:a9:c0:06:5b:be:10:1b:39:bd:9c: fc:5f:64:fc:3a:a6:27:43:43:5a:ed:4a:2f:73:4c: 33:38:41:26:88:73:89:c3:ca:1d:53:30:c9:be:08: 3c:de:67:5e:c8:b9:45:f6:f2:8a:84:c9:03:03:a7: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.52.0.0/16 199.242.0.0/21 199.253.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11336 26816 31747 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8a:7e:9a:0b:3a:e4:45:ec:62:89:3d:cc:38:49:a2:49:1d: e1:56:35:1d:34:3b:d8:cc:b4:1c:a2:6f:11:55:bf:5f:2e:eb: 5c:31:8d:28:e2:36:22:11:12:56:5d:c3:ca:b1:f7:a6:b8:78: c3:07:cb:15:93:bf:cc:24:fd:07:68:21:46:e9:ff:62:5b:4a: 94:99:d2:4e:57:18:69:19:93:eb:e8:bb:7b:c7:df:49:28:7a: 57:b2:50:da:bd:00:93:82:fc:d0:07:1a:51:59:a0:77:f3:3a: 26:19:c2:5a:7a:01:54:f8:63:ec:16:b2:c6:6c:04:31:71:eb: b3:cc:10:07:eb:00:f4:87:2c:32:18:c7:e0:bd:0d:c9:9a:07: c2:80:39:a9:44:f7:8e:67:d2:5b:c4:93:83:5c:4a:34:fa:e8: 2d:2f:16:a5:de:07:47:a2:d2:c3:a5:48:6d:75:1e:1b:7e:b9: 2e:91:1f:85:88:be:78:55:86:ba:c8:ea:7d:cd:a4:16:ae:75: 2d:3c:cf:d2:ae:d6:93:0b:ce:06:32:ab:56:ba:39:56:f0:6b: 19:33:47:78:13:12:7f:c9:db:52:4e:ba:d2:9e:9b:2e:96:36: 47:62:a4:d3:85:0f:33:06:e6:73:11:ee:e8:a7:28:dd:5d:e4: 5f:3c:91:36 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEjBKuU8fz5Ml0MPjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwMzAwNDQyMFoXDTI3MDUwODIzNDQyMFowLzEtMCsGA1UEAxMk ZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZiMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdaEO0T4GtulGCngAN4yZTnjv5pqoEFNcceL qRaywwZN7muHRx+PuZuHR6y8M5rEyaU+sMPYJV637WgScXy94WaBNyfYixGYFo23 QOYQ4jDr+fmViUytDPbb34bb7JUWIy4LJYUILYPapBSWvpy3WpwD4L85wahXaUva RmL4B/xmJspfuXSTwuuruXuuKDQwDuu6TPREuYXkT0H/rfxAVm6r3NowOdjybLyv qxALi+RCOz5brpraYCKBay+QLrbO1v0K8JCn16nABlu+EBs5vZz8X2T8OqYnQ0Na 7Uovc0wzOEEmiHOJw8odUzDJvgg83mdeyLlF9vKKhMkDA6fV/wIDAQABo4IELTCC BCkwHQYDVR0OBBYEFAkZnxUgrSc3t4EqpVuh8u/7NVtdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l OTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U5OTdiMWZiLWMxY2MtNDVkZC1h N2VjLTMyNzVhNTI2YjI2MS9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUy NmIyNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwBFNAMEA8fyAAMEBcf9QDAhBggrBgEFBQcBCAEB /wQSMBCgDjAMAgIsSAICaMACAnwDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGqKfpoLOuRF7GKJPcw4SaJJ HeFWNR00O9jMtByibxFVv18u61wxjSjiNiIRElZdw8qx96a4eMMHyxWTv8wk/Qdo IUbp/2JbSpSZ0k5XGGkZk+vou3vH30koeleyUNq9AJOC/NAHGlFZoHfzOiYZwlp6 AVT4Y+wWssZsBDFx67PMEAfrAPSHLDIYx+C9DcmaB8KAOalE945n0lvEk4NcSjT6 6C0vFqXeB0ei0sOlSG11Hht+uS6RH4WIvnhVhrrI6n3NpBaudS08z9Ku1pMLzgYy q1a6OVbwaxkzR3gTEn/J21JOutKemy6WNkdipNOFDzMG5nMR7uinKN1d5F88kTY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:19:25 2025 by rpki-client