$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer File: a29e3674-acc6-4858-b0f1-7a2daaaed119.cer (raw, json) Hash identifier: nnp7+Dk+92MwCdinvIzl0NGVnhAbTiHlr54pjERHxG0= Subject key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848C6DEA6E64DA15E05D790CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Feb 2025 01:45:33 +0000 Certificate not after: Tue 11 May 2027 00:45:33 +0000 Subordinate resources: AS: 21693 IP: 151.215.0.0/16 IP: 192.92.217.0/24 IP: 2620:18b::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:de:a6:e6:4d:a1:5e:05:d7:90:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 5 01:45:33 2025 GMT Not After : May 11 00:45:33 2027 GMT Subject: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:35:58:89:cb:fe:b4:26:97:e4:fa:b9:93: 08:45:bd:9a:e7:35:3b:65:ca:0f:bc:f8:ec:01:77: cf:b5:d3:04:3e:46:36:13:9c:d3:d5:ee:e4:77:a0: 81:13:5c:b3:d6:bf:0f:56:ee:36:ac:71:7d:ff:b3: 36:47:3e:d4:8e:e3:7f:6c:01:37:29:c0:15:46:00: 9a:2c:d5:81:99:c8:36:ef:ac:e4:5d:f6:0c:66:97: c5:7d:6d:f6:c5:c9:84:ee:d9:00:a1:cb:29:96:6d: 73:1c:11:30:e4:ab:a7:d0:b3:8d:21:7f:37:84:3c: 9e:c6:0b:a5:df:05:e2:48:d9:1c:b0:4e:bb:fd:35: ae:69:a4:8f:1d:da:95:91:ed:c2:a2:e6:10:9c:33: c6:0e:0c:7d:2e:04:aa:6d:08:85:6f:d7:35:4e:ef: 68:09:d8:0a:ac:d3:d5:05:f5:13:d5:45:9c:b7:69: 54:31:f2:5a:c7:65:7f:ba:5d:59:da:de:2f:4b:22: 82:10:29:40:9d:a4:40:93:20:8d:94:bf:8a:78:ea: d0:65:2d:1b:f5:8d:9f:3e:80:40:bd:11:c2:be:24: ae:51:67:34:5a:fe:8f:80:f7:dc:82:fc:6c:60:cf: b8:51:7b:e3:58:0f:70:60:6a:91:e7:ee:4b:e8:0a: 10:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 151.215.0.0/16 192.92.217.0/24 IPv6: 2620:18b::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21693 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d2:b2:13:03:6f:e9:7f:c7:7d:53:0c:66:9a:af:8e:0a:7c: f1:46:bf:a3:18:3c:6e:fb:2f:7a:b9:c0:71:d6:10:61:10:72: bb:70:66:76:7a:e6:b9:fd:10:cf:68:d3:4c:25:a3:cf:be:43: b0:7d:57:5f:ac:4d:87:fa:fa:8b:2a:57:8c:b6:db:99:51:76: e2:6d:a9:f8:b9:d8:8b:6b:26:c4:f2:dc:c0:74:c4:df:86:7f: 7b:7a:e9:a3:df:30:33:22:7d:ec:a8:65:47:3e:2d:46:56:ff: ea:9b:07:00:b0:fc:e0:66:33:19:89:c8:4c:cf:62:6d:05:8f: 49:ec:12:b4:4e:98:41:7c:89:b7:a4:71:ae:46:ab:9d:34:47: a7:07:e9:5a:8b:4b:3e:1c:30:5f:5c:14:2c:08:3e:00:a5:06: 1f:09:71:0f:3a:75:17:03:31:ed:41:a8:be:36:d2:0d:97:e0: f3:03:9b:04:95:40:46:f3:c2:92:9d:85:71:4a:a8:48:92:8b: 66:7e:02:f8:1e:66:9a:3d:00:77:b6:65:46:d4:fe:c6:82:6c: 3c:84:37:4b:d5:13:ce:45:ca:84:09:ae:dc:15:b2:ac:a8:2b: 17:8c:f3:90:a3:dd:e3:b8:8a:03:3c:75:cc:e6:b0:19:c8:0b: 6d:a5:b1:fe -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEjG3qbmTaFeBdeQywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIwNTAxNDUzM1oXDTI3MDUxMTAwNDUzM1owLzEtMCsGA1UEAxMk YTI5ZTM2NzQtYWNjNi00ODU4LWIwZjEtN2EyZGFhYWVkMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtA1WInL/rQml+T6uZMIRb2a5zU7ZcoPvPjs AXfPtdMEPkY2E5zT1e7kd6CBE1yz1r8PVu42rHF9/7M2Rz7UjuN/bAE3KcAVRgCa LNWBmcg276zkXfYMZpfFfW32xcmE7tkAocsplm1zHBEw5Kun0LONIX83hDyexgul 3wXiSNkcsE67/TWuaaSPHdqVke3CouYQnDPGDgx9LgSqbQiFb9c1Tu9oCdgKrNPV BfUT1UWct2lUMfJax2V/ul1Z2t4vSyKCEClAnaRAkyCNlL+KeOrQZS0b9Y2fPoBA vRHCviSuUWc0Wv6PgPfcgvxsYM+4UXvjWA9wYGqR5+5L6AoQ+wIDAQABo4IELjCC BCowHQYDVR0OBBYEFJpdbTNadjp62H08oif5+QyNbDuPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h MjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFhZWQxMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2EyOWUzNjc0LWFjYzYtNDg1OC1i MGYxLTdhMmRhYWFlZDExOS9hMjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFh ZWQxMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMBEEAgABMAsDAwCX1wMEAMBc2TANBAIAAjAHAwUAJiABizAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJUvTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAu0rITA2/pf8d9Uwxmmq+O CnzxRr+jGDxu+y96ucBx1hBhEHK7cGZ2eua5/RDPaNNMJaPPvkOwfVdfrE2H+vqL KleMttuZUXbiban4udiLaybE8tzAdMTfhn97eumj3zAzIn3sqGVHPi1GVv/qmwcA sPzgZjMZichMz2JtBY9J7BK0TphBfIm3pHGuRqudNEenB+lai0s+HDBfXBQsCD4A pQYfCXEPOnUXAzHtQai+NtINl+DzA5sElUBG88KSnYVxSqhIkotmfgL4HmaaPQB3 tmVG1P7Ggmw8hDdL1RPORcqECa7cFbKsqCsXjPOQo93juIoDPHXM5rAZyAttpbH+ -----END CERTIFICATE-----Generated at Thu May 8 09:56:51 2025 by rpki-client