$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer File: 551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer (raw, json) Hash identifier: VAPbMe7dYULEV/sSdBHE0+AobkB1+nG8ksCAf3ZhOTc= Subject key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority key identifier: 27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5 Certificate issuer: /CN=99f8fed2-292b-4722-b928-fee7bf0a5910 Certificate serial: 010D0C9F432858497D8562BD3140812DC234F100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml Certificate not before: Fri 11 Apr 2025 11:58:37 +0000 Certificate not after: Thu 15 Jul 2027 11:58:37 +0000 Subordinate resources: AS: 7224 AS: 10291 AS: 16509 AS: 19047 AS: 63088 AS: 401654 IP: 72.21.192.0/19 IP: 204.246.160.0/19 IP: 205.251.192.0/18 IP: 207.171.160.0/19 IP: 216.137.32.0/19 IP: 2600:9000::/28 IP: 2605:b940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:85:62:bd:31:40:81:2d:c2:34:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f8fed2-292b-4722-b928-fee7bf0a5910 Validity Not Before: Apr 11 11:58:37 2025 GMT Not After : Jul 15 11:58:37 2027 GMT Subject: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:7d:88:97:9a:55:9b:78:09:20:d8:2e:46: 14:2b:de:1e:7d:99:47:85:19:9f:0e:07:12:80:98: 7e:cc:6f:8a:70:ac:4e:af:f6:92:39:5a:24:cd:48: af:98:1d:7b:a8:9e:cb:a8:c5:a6:17:e2:4e:01:12: 55:19:0c:26:dc:e4:0d:51:a8:bc:3f:43:03:bb:3a: 99:f8:77:d8:c7:d0:dd:06:de:f3:bd:48:98:85:a7: 10:e1:65:29:4f:c8:da:17:bc:9d:3c:b6:10:dd:f0: ec:c8:e7:5f:08:76:54:a5:41:8d:c8:f3:21:e6:8a: 3e:39:2f:ee:e4:4f:84:5d:ca:64:71:10:45:3d:83: e8:d4:db:94:40:82:b8:c3:85:fd:01:20:95:b9:68: b1:18:f0:9b:c7:7a:0f:5c:5e:a5:9f:43:39:e4:46: b0:f9:f8:7e:60:b3:a8:c6:e1:8c:21:37:72:0f:40: f1:f6:a7:78:27:4b:b1:99:e1:fa:ee:b1:09:05:56: 1e:1c:fa:9f:f5:34:d9:58:76:60:62:a2:c7:8a:43: 73:f4:bc:af:f5:41:2b:3e:34:ec:4c:c8:45:ff:0b: 26:6c:9e:d9:1d:83:0f:be:85:5d:c1:83:33:eb:a2: a7:aa:f3:f6:be:6f:87:c2:12:ee:87:3f:d0:1e:28: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl X509v3 Authority Key Identifier: keyid:27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer sbgp-ipAddrBlock: critical IPv4: 72.21.192.0/19 204.246.160.0/19 205.251.192.0/18 207.171.160.0/19 216.137.32.0/19 IPv6: 2600:9000::/28 2605:b940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7224 10291 16509 19047 63088 401654 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6a:50:cb:f1:38:46:df:1c:c5:72:f6:3e:e6:99:02:31:a0: ce:87:3a:fa:62:9e:e8:4f:f9:bd:06:2b:e6:23:8a:4a:f0:b3: d4:6e:e8:e9:b2:a7:c2:43:cf:01:55:cf:0a:cc:1c:72:8f:38: 7c:e1:4e:8e:d7:c3:79:2f:5c:46:22:09:45:fc:55:f9:34:55: e3:8e:d4:e7:bb:2c:b4:eb:48:7b:65:98:79:82:c8:f7:eb:ca: 60:69:1b:d6:33:94:cf:9e:f6:c4:e8:75:f7:78:ac:2c:84:19: 57:f2:fa:9e:33:32:aa:f9:c4:fc:a2:08:7a:9c:1a:7f:b1:1b: d1:e1:f3:de:3a:ec:31:f9:e6:3e:77:91:c8:64:73:4c:87:ff: 4b:7b:02:ea:9b:bf:1a:ed:80:75:7d:e6:7a:1c:6b:51:e9:69: 87:1d:99:ad:63:02:80:9c:59:cd:2a:93:8b:41:c9:3c:20:36: 1c:93:70:af:eb:ee:23:8b:4a:40:0f:d4:cc:c2:c5:f0:38:5b: 56:79:aa:20:11:b9:c2:95:64:0c:9d:87:2f:5a:4d:51:af:a1: 02:70:d8:5c:e1:e3:7a:9f:7e:02:77:af:5a:de:ed:fb:87:10: 6e:33:66:91:b0:75:0c:b3:ee:18:0b:f5:c7:10:c0:07:b3:1d: f8:2e:7e:64 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUAQ0Mn0MoWEl9hWK9MUCBLcI08QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmOGZlZDItMjkyYi00NzIyLWI5MjgtZmVlN2JmMGE1 OTEwMB4XDTI1MDQxMTExNTgzN1oXDTI3MDcxNTExNTgzN1owPTE7MDkGA1UEAxMy NTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQy Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmn2Il5pVm3gJINgu RhQr3h59mUeFGZ8OBxKAmH7Mb4pwrE6v9pI5WiTNSK+YHXuonsuoxaYX4k4BElUZ DCbc5A1RqLw/QwO7Opn4d9jH0N0G3vO9SJiFpxDhZSlPyNoXvJ08thDd8OzI518I dlSlQY3I8yHmij45L+7kT4RdymRxEEU9g+jU25RAgrjDhf0BIJW5aLEY8JvHeg9c XqWfQznkRrD5+H5gs6jG4YwhN3IPQPH2p3gnS7GZ4frusQkFVh4c+p/1NNlYdmBi oseKQ3P0vK/1QSs+NOxMyEX/CyZsntkdgw++hV3BgzProqeq8/a+b4fCEu6HP9Ae KPKPAgMBAAGjggRPMIIESzAdBgNVHQ4EFgQU6PPFIOIO8l06t6IWuxQEMWo3OPEw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEz NDMtNDI4ZC1iZjc4LWY5ODJiNmU2MDUwNS8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4 YWY1LWEzNDMtNDI4ZC1iZjc4LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVs eFc1VngzUjQwczQubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2U3NTE4YWY1LWEzNDMtNDI4ZC1i Zjc4LWY5ODJiNmU2MDUwNS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5Lzk5ZjhmZWQyLTI5MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC85OWY4ZmVk Mi0yOTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAuY3JsMB8GA1UdIwQYMBaAFCez ySj/JZNoxbJofjkPLyzpOMn1MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTlm OGZlZDItMjkyYi00NzIyLWI5MjgtZmVlN2JmMGE1OTEwLmNlcjBNBggrBgEFBQcB BwEB/wQ+MDwwJAQCAAEwHgMEBUgVwAMEBcz2oAMEBs37wAMEBc+roAMEBdiJIDAU BAIAAjAOAwUEJgCQAAMFACYFuUAwLwYIKwYBBQUHAQgBAf8EIDAeoBwwGgICHDgC AigzAgJAfQICSmcCAwD2cAIDBiD2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABJqUMvxOEbfHMVy9j7mmQIx oM6HOvpinuhP+b0GK+Yjikrws9Ru6Omyp8JDzwFVzwrMHHKPOHzhTo7Xw3kvXEYi CUX8Vfk0VeOO1Oe7LLTrSHtlmHmCyPfrymBpG9YzlM+e9sTodfd4rCyEGVfy+p4z Mqr5xPyiCHqcGn+xG9Hh89467DH55j53kchkc0yH/0t7AuqbvxrtgHV95noca1Hp aYcdma1jAoCcWc0qk4tByTwgNhyTcK/r7iOLSkAP1MzCxfA4W1Z5qiARucKVZAyd hy9aTVGvoQJw2Fzh43qffgJ3r1re7fuHEG4zZpGwdQyz7hgL9ccQwAezHfgufmQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:06 2025 by rpki-client