$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer File: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer (raw, json) Hash identifier: TJ2xqfkmks+ZNd0yFqE2xlo8MhtVCOUscaWWVOmAT0o= Subject key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584842EFCEEA40DBE3D690F4F240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Dec 2024 19:33:25 +0000 Certificate not after: Tue 05 Jan 2027 01:45:27 +0000 Subordinate resources: AS: 398949 AS: 399609 AS: 400952 IP: 192.64.206.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:ef:ce:ea:40:db:e3:d6:90:f4:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 19 19:33:25 2024 GMT Not After : Jan 5 01:45:27 2027 GMT Subject: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:7a:97:5f:e0:f8:f0:71:bb:10:ce:e5:a7: 9b:4e:6c:dd:87:1a:20:ee:39:1f:af:d0:f5:f3:b1: 55:26:19:66:ca:0a:1c:aa:2a:89:eb:ae:d8:89:21: cc:a0:dd:c0:6e:29:bd:4c:87:b2:d5:48:cb:06:f0: 65:73:35:45:4a:3f:bd:54:dc:53:78:20:30:d9:35: 0d:a4:41:46:43:6f:a9:c7:dd:14:eb:30:1d:02:ca: 8c:dd:7f:13:2f:22:59:94:00:bf:76:c1:23:fb:20: 67:6b:82:c1:bf:d3:e4:c1:66:39:60:e5:3f:63:19: cb:6f:f0:4e:d8:78:b6:d3:2d:7c:7d:61:34:b2:fa: f0:18:5e:fc:30:c4:07:86:5d:08:e5:71:c1:7c:46: a7:0f:a1:4d:73:39:e5:99:2c:a5:e5:76:5d:b2:c0: d2:04:99:81:91:8f:78:e6:96:71:87:14:61:f6:39: 5f:57:a5:f7:ef:f7:a9:ca:d7:3e:ca:d9:fa:c6:41: 79:bd:bf:93:c5:46:5d:8b:d4:12:fa:30:33:75:ff: ee:bf:f5:0d:e5:cf:c7:9a:85:f8:a9:11:dc:77:e0: b6:86:9a:41:24:a7:89:c0:13:65:76:e1:9a:80:54: ca:bd:68:d3:d8:95:cd:28:8d:30:a9:fa:b8:b5:a1: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.64.206.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398949 399609 400952 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bb:a9:62:2f:e1:b7:7d:04:1f:29:e1:ec:15:af:e5:44:f9: 21:4a:1e:dc:31:da:11:c8:df:f2:4d:d5:2c:89:12:4f:7f:f2: f0:fb:62:3e:c1:20:2f:e8:1d:af:46:66:40:16:95:bd:82:bf: d5:51:38:26:aa:2e:39:53:67:b7:bc:e8:03:33:e6:35:6c:f0: 22:45:63:34:29:f8:08:41:72:5e:0c:84:f3:e0:1f:a5:b6:ec: 82:48:70:21:ca:d8:48:e7:22:44:ce:1e:ef:dc:a3:c8:dc:38: fc:df:da:06:68:cc:15:55:08:f9:4e:d6:f5:24:08:f7:b4:24: ae:ca:d9:ee:f8:0d:89:bb:d4:c3:3c:37:ab:5a:f9:95:1c:72: ce:e4:05:34:a0:83:2b:f6:54:31:89:09:a4:b5:f2:71:66:4c: d8:ac:1a:f0:eb:94:fc:9b:45:51:35:6e:9b:6b:65:06:8e:4f: ff:e0:57:c3:3e:58:b4:10:e2:d6:c8:1d:28:86:6a:29:1f:42: 86:08:f1:4e:f0:4b:04:81:2b:3f:32:11:83:8e:90:10:61:98: 82:0a:d0:1e:49:b1:ad:1e:57:9b:66:db:e5:63:72:92:55:3f: ec:56:b9:72:75:f6:06:b4:70:1c:bb:cb:d5:e4:73:ec:ec:5a: 8a:e9:b3:27 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEhC787qQNvj1pD08kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTIxOTE5MzMyNVoXDTI3MDEwNTAxNDUyN1owLzEtMCsGA1UEAxMk YmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFiNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzp6l1/g+PBxuxDO5aebTmzdhxog7jkfr9D1 87FVJhlmygocqiqJ667YiSHMoN3Abim9TIey1UjLBvBlczVFSj+9VNxTeCAw2TUN pEFGQ2+px90U6zAdAsqM3X8TLyJZlAC/dsEj+yBna4LBv9PkwWY5YOU/YxnLb/BO 2Hi20y18fWE0svrwGF78MMQHhl0I5XHBfEanD6FNcznlmSyl5XZdssDSBJmBkY94 5pZxhxRh9jlfV6X37/epytc+ytn6xkF5vb+TxUZdi9QS+jAzdf/uv/UN5c/HmoX4 qRHcd+C2hppBJKeJwBNlduGagFTKvWjT2JXNKI0wqfq4taEOXwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFPFVajZbzSq7YcClrDe1fuLW1u4KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i ZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JlOTA4OTVhLTNjNDMtNGIzOC1h NWFhLWIxZWJjMjYxYjZmOS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2 MWI2ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAQM4wJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID BhZlAgMGGPkCAwYeODBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZu6liL+G3fQQfKeHsFa/lRPkhSh7cMdoR yN/yTdUsiRJPf/Lw+2I+wSAv6B2vRmZAFpW9gr/VUTgmqi45U2e3vOgDM+Y1bPAi RWM0KfgIQXJeDITz4B+ltuyCSHAhythI5yJEzh7v3KPI3Dj839oGaMwVVQj5Ttb1 JAj3tCSuytnu+A2Ju9TDPDerWvmVHHLO5AU0oIMr9lQxiQmktfJxZkzYrBrw65T8 m0VRNW6ba2UGjk//4FfDPli0EOLWyB0ohmopH0KGCPFO8EsEgSs/MhGDjpAQYZiC CtAeSbGtHlebZtvlY3KSVT/sVrlydfYGtHAcu8vV5HPs7FqK6bMn -----END CERTIFICATE-----Generated at Sat May 10 07:35:35 2025 by rpki-client