$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1666fd44-33a2-4a6e-9669-f713e5644402.cer File: 1666fd44-33a2-4a6e-9669-f713e5644402.cer (raw, json) Hash identifier: gDe6sYQMPmzxJBxaOJ1dB+U6yjvWm+kttlhxTxh87XY= Subject key identifier: 85:B9:F5:76:65:66:1D:C3:23:20:C7:FE:FB:7B:EF:28:03:67:DC:D6 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849D870566AA8BC6BE2A3DF2800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1666fd44-33a2-4a6e-9669-f713e5644402/1666fd44-33a2-4a6e-9669-f713e5644402.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1666fd44-33a2-4a6e-9669-f713e5644402/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 01:34:46 +0000 Certificate not after: Tue 17 Aug 2027 01:34:46 +0000 Subordinate resources: AS: 27569 IP: 69.85.64.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:70:56:6a:a8:bc:6b:e2:a3:df:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 14 01:34:46 2025 GMT Not After : Aug 17 01:34:46 2027 GMT Subject: CN=1666fd44-33a2-4a6e-9669-f713e5644402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:7d:42:32:86:ed:f5:66:d0:49:92:1a:25: ce:a7:92:97:4d:9c:ae:b1:1c:5b:f0:2c:c5:09:b3: 39:c4:21:4b:eb:6a:57:8b:10:d5:ac:f9:9c:d5:8c: 8f:c4:61:32:72:ce:8c:9d:6e:ae:30:a6:b6:35:77: 0a:5e:10:44:dc:1d:8f:01:e0:77:5d:d2:57:bf:d2: a9:18:d4:62:5b:99:20:99:21:3b:92:bf:c9:04:25: cb:3d:6d:f8:7d:14:50:a0:27:62:ba:af:f8:f0:7d: c2:28:04:6a:11:b5:05:3a:6b:ec:38:e1:6a:c2:8c: 3d:7e:b0:3d:2c:da:6b:87:ed:11:82:15:08:52:49: 1c:75:f4:3e:e7:42:b0:c8:7b:c6:bf:d7:d3:a1:4d: 67:f2:0b:ca:ea:bd:89:fa:84:65:21:a7:7e:c6:11: 4b:93:17:e6:22:09:6e:30:95:89:86:8d:1a:3d:74: 06:53:6a:6d:4e:69:e0:63:15:3b:9d:0f:4b:b6:d7: 34:3e:6e:0e:04:4b:d6:b1:e1:35:80:76:14:c8:cf: fe:e1:f0:90:f7:98:66:3e:02:4d:c7:52:c1:32:91: f9:16:ca:3b:fa:b6:3b:ce:cc:1c:1e:71:65:52:96: 8e:eb:b9:2a:36:9e:71:33:ff:b3:f7:74:7a:ca:75: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B9:F5:76:65:66:1D:C3:23:20:C7:FE:FB:7B:EF:28:03:67:DC:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1666fd44-33a2-4a6e-9669-f713e5644402/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1666fd44-33a2-4a6e-9669-f713e5644402/1666fd44-33a2-4a6e-9669-f713e5644402.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 69.85.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27569 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d3:e1:07:85:10:bd:cd:7a:13:df:a8:b0:3d:3b:e5:84:fc: 04:77:c9:87:68:0c:f9:55:47:65:1b:56:01:2c:88:30:e0:7e: 85:3f:4a:6d:8c:ec:a4:db:aa:6a:fb:b9:29:5f:64:da:04:a7: 55:88:9f:e2:26:4b:29:c2:db:66:3b:ac:d8:76:fd:89:19:4f: 8b:9f:17:06:e7:24:9a:1c:08:a3:86:f2:19:f1:08:5d:f3:58: 87:9f:25:04:17:86:14:4c:2c:27:f9:e0:1c:59:ea:68:24:4d: a7:31:7d:89:7a:e2:2d:61:68:bb:97:fc:98:a4:32:ae:95:e5: 0a:8b:2b:22:56:5d:b5:2e:cd:84:e6:f1:d0:dd:eb:5f:25:2a: 2c:61:99:72:8a:34:1e:74:e2:cf:cf:d4:b8:4c:a2:c5:03:55: 4c:2b:12:5f:23:12:67:56:95:8b:2b:a9:46:5a:e0:34:8e:06: 41:bf:a2:f4:12:fb:f1:6f:01:f4:ce:19:aa:00:5b:b5:be:29: db:b7:12:0f:74:aa:46:2f:53:0f:bd:6f:1e:4a:d8:85:ff:41: fd:ee:ee:ee:3b:78:76:cc:fb:11:ba:58:e4:3d:39:38:52:4f: 86:c2:d6:4f:80:01:a5:89:c3:99:95:33:74:48:51:76:a9:b3: 1c:a3:ad:8f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnYcFZqqLxr4qPfKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxNDAxMzQ0NloXDTI3MDgxNzAxMzQ0NlowLzEtMCsGA1UEAxMk MTY2NmZkNDQtMzNhMi00YTZlLTk2NjktZjcxM2U1NjQ0NDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QF9QjKG7fVm0EmSGiXOp5KXTZyusRxb8CzF CbM5xCFL62pXixDVrPmc1YyPxGEycs6MnW6uMKa2NXcKXhBE3B2PAeB3XdJXv9Kp GNRiW5kgmSE7kr/JBCXLPW34fRRQoCdiuq/48H3CKARqEbUFOmvsOOFqwow9frA9 LNprh+0RghUIUkkcdfQ+50KwyHvGv9fToU1n8gvK6r2J+oRlIad+xhFLkxfmIglu MJWJho0aPXQGU2ptTmngYxU7nQ9Lttc0Pm4OBEvWseE1gHYUyM/+4fCQ95hmPgJN x1LBMpH5Fso7+rY7zswcHnFlUpaO67kqNp5xM/+z93R6ynXFVQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIW59XZlZh3DIyDH/vt77ygDZ9zWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x NjY2ZmQ0NC0zM2EyLTRhNmUtOTY2OS1mNzEzZTU2NDQ0MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzE2NjZmZDQ0LTMzYTItNGE2ZS05 NjY5LWY3MTNlNTY0NDQwMi8xNjY2ZmQ0NC0zM2EyLTRhNmUtOTY2OS1mNzEzZTU2 NDQ0MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVFVUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC a7EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdNPhB4UQvc16E9+osD075YT8BHfJh2gM+VVHZRtWASyIMOB+ hT9KbYzspNuqavu5KV9k2gSnVYif4iZLKcLbZjus2Hb9iRlPi58XBuckmhwIo4by GfEIXfNYh58lBBeGFEwsJ/ngHFnqaCRNpzF9iXriLWFou5f8mKQyrpXlCosrIlZd tS7NhObx0N3rXyUqLGGZcoo0HnTiz8/UuEyixQNVTCsSXyMSZ1aViyupRlrgNI4G Qb+i9BL78W8B9M4ZqgBbtb4p27cSD3SqRi9TD71vHkrYhf9B/e7u7jt4dsz7EbpY 5D05OFJPhsLWT4ABpYnDmZUzdEhRdqmzHKOtjw== -----END CERTIFICATE-----Generated at Tue Jul 1 17:52:32 2025 by rpki-client