$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer File: 8583e379-1578-4044-8426-ddcb4a4a8192.cer (raw, json) Hash identifier: PfZ6KwdttTbe5mD+Y+0mtIoHpx7S7xsRNdwDDXmSC3g= Subject key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849C202742EBACA3AF3E1E6F720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 00:45:35 +0000 Certificate not after: Mon 09 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 64200 IP: 67.21.34.0/23 IP: 192.154.192.0/21 IP: 192.154.208.0 -- 192.154.212.255 IP: 192.154.215.0 -- 192.154.223.255 IP: 192.154.232.0 -- 192.154.240.255 IP: 192.154.242.0 -- 192.154.247.255 IP: 192.154.249.0/24 IP: 192.154.251.0 -- 192.154.252.255 IP: 199.188.88.0/21 IP: 2604:8180::/31 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:02:74:2e:ba:ca:3a:f3:e1:e6:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 6 00:45:35 2025 GMT Not After : Aug 9 00:45:35 2027 GMT Subject: CN=8583e379-1578-4044-8426-ddcb4a4a8192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:55:27:04:4f:ae:58:e6:77:88:33:66:c8: 17:69:80:1e:c7:97:fe:d8:ed:5d:7b:4f:3b:4d:54: 55:cc:1e:ab:fc:96:b0:35:87:31:d6:a1:f7:30:6a: 52:5b:69:3b:80:4b:cd:c5:7a:3e:2c:33:3a:18:ad: 6e:81:8c:b9:99:11:fc:6d:da:8d:d6:a0:d0:3e:7d: 7c:4f:6b:e7:86:10:db:67:ca:46:94:70:1a:9d:bb: 55:f7:2d:ec:e2:19:63:dd:ca:0e:07:dc:bd:00:a3: 62:78:95:ec:9e:97:38:65:38:16:2a:27:9c:0a:c1: 00:79:94:86:ff:65:61:2f:8d:3d:66:50:ad:8a:90: 6a:53:05:2f:84:19:50:df:c1:d3:ed:d6:5b:93:f9: d2:e0:84:a7:57:9a:c6:5b:26:69:6e:20:1a:20:a2: 70:78:cc:cc:d4:d1:94:5f:ac:d7:7c:9d:10:e0:79: 48:e4:4d:2a:76:2c:6d:c2:65:12:5d:b3:8c:bb:c4: fe:7a:47:fe:36:e8:92:89:6f:c4:b9:f8:f9:41:fe: 7c:98:66:98:a9:89:a0:b2:ad:13:22:ab:69:83:55: 2e:89:ae:67:41:4a:e9:f5:05:b8:01:a1:c0:c2:15: e8:71:5d:87:80:48:21:b6:85:20:69:a9:8f:87:ec: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 67.21.34.0/23 192.154.192.0/21 192.154.208.0-192.154.212.255 192.154.215.0-192.154.223.255 192.154.232.0-192.154.240.255 192.154.242.0-192.154.247.255 192.154.249.0/24 192.154.251.0-192.154.252.255 199.188.88.0/21 IPv6: 2604:8180::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64200 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bc:85:39:55:c8:a0:ed:5d:91:b7:b3:d2:aa:a2:fc:60:47: 90:91:05:0c:a1:53:64:6b:14:4a:79:dd:83:e6:cc:e0:ad:d5: d5:0a:1e:b0:02:6f:86:d2:ab:1c:b6:91:68:9d:31:3c:46:eb: 50:a6:51:fe:3f:ca:e4:c6:f0:75:6f:fa:c6:36:d1:01:5c:f2: 8a:ba:6a:cc:eb:c4:6e:6d:ac:19:7f:33:d4:5f:fb:bf:74:2a: 20:cb:e6:d7:37:0b:f6:52:30:06:7e:c5:19:35:74:4f:31:9c: db:90:d5:0f:85:93:93:e3:82:46:1e:4f:88:cd:4e:26:2d:4b: b7:cd:ae:5c:0b:0a:a7:e6:95:da:aa:7c:34:fb:4d:d3:59:2a: 68:d4:ca:80:2b:56:2b:41:b3:d9:61:f4:01:ab:e1:1f:9b:7e: 0f:ae:76:ba:96:64:74:50:4e:5d:25:12:73:86:53:8d:33:c2: 1f:83:55:3d:51:f5:4f:78:f5:c6:75:38:01:e9:7f:67:29:30: 0a:c5:de:9e:8b:69:b1:81:cb:2c:65:82:68:1a:d0:46:63:28: 21:51:2b:7a:1a:9c:44:2e:89:3f:ec:12:6a:0b:ec:25:82:45: b7:84:1c:17:ed:8b:96:64:6f:08:93:0c:4b:f1:9a:7f:50:67: 9d:f6:05:e4 -----BEGIN CERTIFICATE----- MIIHcTCCBlmgAwIBAgIUAQ0Mn0MoWEnCAnQuuso68+Hm9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUwNjAwNDUzNVoXDTI3MDgwOTAwNDUzNVowLzEtMCsGA1UEAxMk ODU4M2UzNzktMTU3OC00MDQ0LTg0MjYtZGRjYjRhNGE4MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSJVJwRPrljmd4gzZsgXaYAex5f+2O1de087 TVRVzB6r/JawNYcx1qH3MGpSW2k7gEvNxXo+LDM6GK1ugYy5mRH8bdqN1qDQPn18 T2vnhhDbZ8pGlHAanbtV9y3s4hlj3coOB9y9AKNieJXsnpc4ZTgWKiecCsEAeZSG /2VhL409ZlCtipBqUwUvhBlQ38HT7dZbk/nS4ISnV5rGWyZpbiAaIKJweMzM1NGU X6zXfJ0Q4HlI5E0qdixtwmUSXbOMu8T+ekf+NuiSiW/Eufj5Qf58mGaYqYmgsq0T Iqtpg1Uuia5nQUrp9QW4AaHAwhXocV2HgEghtoUgaamPh+y+dwIDAQABo4IEgzCC BH8wHQYDVR0OBBYEFInHXz/Op10NwxD5IyxlkicMYx1iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0YTgxOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg1ODNlMzc5LTE1NzgtNDA0NC04 NDI2LWRkY2I0YTRhODE5Mi84NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0 YTgxOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwgYYGCCsGAQUF BwEHAQH/BHcwdTBkBAIAATBeAwQBQxUiAwQDwJrAMAwDBATAmtADBADAmtQwDAME AMCa1wMEBcCawDAMAwQDwJroAwQAwJrwMAwDBAHAmvIDBAPAmvADBADAmvkwDAME AMCa+wMEAMCa/AMEA8e8WDANBAIAAjAHAwUBJgSBgDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMA+sgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAWLyFOVXIoO1dkbez0qqi/GBHkJEFDKFTZGsU Snndg+bM4K3V1QoesAJvhtKrHLaRaJ0xPEbrUKZR/j/K5MbwdW/6xjbRAVzyirpq zOvEbm2sGX8z1F/7v3QqIMvm1zcL9lIwBn7FGTV0TzGc25DVD4WTk+OCRh5PiM1O Ji1Lt82uXAsKp+aV2qp8NPtN01kqaNTKgCtWK0Gz2WH0AavhH5t+D652upZkdFBO XSUSc4ZTjTPCH4NVPVH1T3j1xnU4Ael/ZykwCsXenotpsYHLLGWCaBrQRmMoIVEr ehqcRC6JP+wSagvsJYJFt4QcF+2LlmRvCJMMS/Gaf1BnnfYF5A== -----END CERTIFICATE-----Generated at Sun May 11 16:44:49 2025 by rpki-client