$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer File: 7801f48a-31fe-43fd-b9d7-b370febfe411.cer (raw, json) Hash identifier: KOohgHwAnPmi2m4tykx0UR0exxtLnaVwtqbxQA5tkjI= Subject key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584909DF119C803DEB0E02D6BCD4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Mar 2025 01:45:33 +0000 Certificate not after: Fri 04 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 399007 IP: 65.49.160.0/19 IP: 146.12.224.0/19 IP: 199.247.176.0/20 IP: 2605:f340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:df:11:9c:80:3d:eb:0e:02:d6:bc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 1 01:45:33 2025 GMT Not After : Jun 4 00:45:33 2027 GMT Subject: CN=7801f48a-31fe-43fd-b9d7-b370febfe411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:4f:7b:3d:14:30:1b:f5:a3:5d:e3:ab:56: 35:fb:a7:f2:dd:45:6c:a7:3e:9a:16:a7:63:46:97: f2:e1:67:88:9c:d2:7c:ef:ad:26:58:f2:7b:26:6d: 1a:4b:c3:25:17:05:e0:1e:fc:76:94:e0:af:ef:3c: 21:7e:1f:61:11:3f:ac:c2:dc:e8:14:4e:04:80:8d: b1:c4:67:be:fc:de:88:73:0f:1d:62:12:92:e3:e5: 5f:c5:a1:0d:40:fc:87:b7:a9:ee:ea:a5:25:f1:45: ad:73:07:d8:ad:29:0c:18:f6:a1:8b:84:88:74:41: 07:99:84:e5:87:d8:23:48:d2:5b:25:ae:64:b9:d8: 1f:93:ac:6f:9f:ec:c2:ec:01:d5:9d:d4:68:18:18: 2d:a6:34:6b:24:da:25:61:7a:83:1e:dc:06:cc:70: 4e:00:6e:f4:43:75:e0:72:cb:ef:48:c8:7b:66:68: 71:81:b3:f7:b3:95:cf:98:46:f8:a3:af:4e:0e:8e: f4:3e:23:4c:6f:5e:3b:66:58:1c:d0:06:5e:a9:ce: 88:bc:02:21:3c:cf:cb:65:3a:fa:e3:59:36:a2:87: 98:1a:03:b1:bd:6f:43:6d:35:0b:26:97:5e:9c:a0: e9:6a:c4:38:00:7d:50:ff:aa:98:a9:d1:e2:b2:bd: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 65.49.160.0/19 146.12.224.0/19 199.247.176.0/20 IPv6: 2605:f340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b2:e4:85:44:53:b3:67:f4:a0:35:d2:66:41:8d:3f:93:c7: 60:f7:e3:23:71:d0:c9:28:e3:5b:5e:2f:db:95:ad:9a:0d:cc: 7c:80:05:ed:c5:bf:31:c5:cd:02:c4:31:41:6b:63:da:b8:6b: f0:2f:95:02:2d:68:ee:63:db:68:ce:08:16:19:37:94:01:4c: da:2e:c5:a3:bc:31:5c:75:20:92:3d:ed:2d:b2:dc:d5:d7:04: e5:c1:d3:9c:df:f2:6a:b1:53:86:b8:51:40:47:5a:f5:52:48: ec:d9:8b:47:10:75:06:6c:4a:66:a7:ee:05:91:e6:c2:4b:dc: 87:35:fb:82:ce:bf:75:21:a0:f8:05:f4:a5:68:31:bc:ec:52: 91:8a:0f:e7:f9:bc:4e:67:21:6f:c6:65:c1:1c:50:c8:de:37: a7:0a:5f:91:43:11:b9:ee:9d:e5:6a:85:86:f8:ce:a3:ba:eb: d4:8c:de:8b:7a:73:38:21:4a:18:68:90:a7:d2:13:66:d6:32: ea:96:b5:d9:e4:d9:09:1c:6b:a1:65:57:c8:89:44:78:8c:34: 8f:44:5b:88:ea:b7:8b:c7:16:d2:6b:79:53:8d:48:13:82:20: 13:f8:cc:3d:0d:59:42:c4:af:83:a1:64:0b:ec:b4:75:65:c4: c0:9a:c8:e5 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEkJ3xGcgD3rDgLWvNQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwMTAxNDUzM1oXDTI3MDYwNDAwNDUzM1owLzEtMCsGA1UEAxMk NzgwMWY0OGEtMzFmZS00M2ZkLWI5ZDctYjM3MGZlYmZlNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y1Pez0UMBv1o13jq1Y1+6fy3UVspz6aFqdj Rpfy4WeInNJ8760mWPJ7Jm0aS8MlFwXgHvx2lOCv7zwhfh9hET+swtzoFE4EgI2x xGe+/N6Icw8dYhKS4+VfxaENQPyHt6nu6qUl8UWtcwfYrSkMGPahi4SIdEEHmYTl h9gjSNJbJa5kudgfk6xvn+zC7AHVndRoGBgtpjRrJNolYXqDHtwGzHBOAG70Q3Xg csvvSMh7ZmhxgbP3s5XPmEb4o69ODo70PiNMb147Zlgc0AZeqc6IvAIhPM/LZTr6 41k2ooeYGgOxvW9DbTULJpdenKDpasQ4AH1Q/6qYqdHisr1/OwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFPV6D4WVicSlg7XS3GxavwV+mnifMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 ODAxZjQ4YS0zMWZlLTQzZmQtYjlkNy1iMzcwZmViZmU0MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc4MDFmNDhhLTMxZmUtNDNmZC1i OWQ3LWIzNzBmZWJmZTQxMS83ODAxZjQ4YS0zMWZlLTQzZmQtYjlkNy1iMzcwZmVi ZmU0MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAVBMaADBAWSDOADBATH97AwDQQCAAIwBwMFACYF 80AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhafMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGSy5IVEU7Nn 9KA10mZBjT+Tx2D34yNx0Mko41teL9uVrZoNzHyABe3FvzHFzQLEMUFrY9q4a/Av lQItaO5j22jOCBYZN5QBTNouxaO8MVx1IJI97S2y3NXXBOXB05zf8mqxU4a4UUBH WvVSSOzZi0cQdQZsSman7gWR5sJL3Ic1+4LOv3UhoPgF9KVoMbzsUpGKD+f5vE5n IW/GZcEcUMjeN6cKX5FDEbnuneVqhYb4zqO669SM3ot6czghShhokKfSE2bWMuqW tdnk2Qkca6FlV8iJRHiMNI9EW4jqt4vHFtJreVONSBOCIBP4zD0NWULEr4OhZAvs tHVlxMCayOU= -----END CERTIFICATE-----Generated at Sun May 11 02:00:16 2025 by rpki-client