$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer File: 3990f0e4-fc13-467e-a765-98d98d252d56.cer (raw, json) Hash identifier: ezVHyfTmSx794yRQxme+2CBOts5lyB1C9MxchwLTtC4= Subject key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849ADADF5C1FDFE3A71DCB11880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 17:59:11 +0000 Certificate not after: Sun 01 Aug 2027 17:59:11 +0000 Subordinate resources: AS: 11215 AS: 13637 AS: 13973 AS: 25956 AS: 36366 AS: 53659 IP: 66.64.0.0/18 IP: 66.196.192.0/18 IP: 67.200.128.0/17 IP: 69.94.224.0/19 IP: 74.213.0.0/18 IP: 96.43.0.0/19 IP: 104.219.224.0/22 IP: 139.138.128.0/18 IP: 162.252.160.0/22 IP: 192.52.188.0/22 IP: 192.64.92.0/22 IP: 199.15.164.0/22 IP: 199.115.168.0/22 IP: 199.241.248.0/21 IP: 209.94.224.0/19 IP: 209.189.232.0/21 IP: 216.74.224.0/19 IP: 216.130.240.0/20 IP: 216.201.128.0/17 IP: 216.215.64.0/18 IP: 2605:b400::/32 IP: 2607:f568::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:ad:f5:c1:fd:fe:3a:71:dc:b1:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 17:59:11 2025 GMT Not After : Aug 1 17:59:11 2027 GMT Subject: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:c3:7f:48:fb:1f:3a:84:42:ac:3a:8e:d3: 48:07:90:8d:4f:40:fa:8f:43:12:23:16:2c:fc:1b: be:97:d4:5c:81:8c:67:b0:20:58:73:c7:cc:01:7f: 1d:13:6c:e6:2b:dd:27:21:7d:ee:58:40:87:dd:dd: c7:15:b9:52:c3:df:99:7e:60:25:5d:90:f5:5f:69: d6:3a:a3:51:97:80:64:06:bb:ab:3f:9b:88:05:e9: 6c:5a:3a:74:47:a7:b7:28:19:dd:81:21:11:5d:c6: 82:3a:0f:f1:83:ea:e7:98:ed:78:eb:c0:72:6a:c1: c5:84:c9:ec:f7:f0:0b:6e:b7:99:1a:1a:21:3f:4d: 10:08:b2:71:ae:1f:9e:11:04:31:7e:1b:77:87:e5: e6:82:dd:ff:cf:f1:5c:18:66:f0:54:92:b1:3e:c4: 2f:90:68:ea:60:ed:6f:2f:5f:bc:92:9a:1e:0b:1c: c1:f6:84:87:ea:8a:02:c3:43:2b:e9:90:d2:18:c0: 2c:49:38:34:3b:79:e4:5e:73:4d:19:62:05:7a:89: 4f:30:f7:86:2e:7a:71:bc:1e:2c:41:03:ea:ed:4b: d9:0e:98:0f:19:7a:2d:45:b1:79:0e:1c:9d:fa:02: 33:8f:b7:36:6d:9f:05:9d:64:7f:3f:fd:f6:ab:aa: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 104.219.224.0/22 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 IPv6: 2605:b400::/32 2607:f568::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11215 13637 13973 25956 36366 53659 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:56:b5:82:1a:eb:ac:99:38:6d:10:21:1f:18:69:ed:14:92: 4a:d1:4d:14:2e:79:61:1a:58:61:79:8d:0a:93:e3:db:ea:c3: 96:8a:13:e0:b9:ec:bb:72:63:67:c7:a4:a2:12:49:71:c8:02: 7c:40:1b:54:57:96:16:e2:0c:32:ea:72:1c:08:51:c6:cf:e2: 12:39:0f:a8:c3:f4:8b:c0:b2:01:fc:bb:5b:9a:04:9c:d6:3c: a1:c3:25:13:33:c6:2a:7f:96:39:f8:69:ce:ed:7f:ef:b6:1a: 81:eb:95:d0:96:bc:a7:45:13:17:bc:b4:30:ae:a0:a3:48:86: ad:ff:a3:74:4d:55:98:d6:7f:ed:22:e3:55:65:ca:68:29:af: 34:e0:b1:74:0d:87:c5:1f:60:5f:bd:e4:37:90:38:21:84:05: d1:9c:99:ba:78:dc:37:cf:f4:0c:c7:a4:62:04:c1:e5:a1:78: 50:9c:fe:9f:51:e1:f5:75:97:d1:7b:5e:1b:95:a9:f0:d0:18: 90:9a:c6:c8:5d:13:8f:4b:f2:b6:82:51:57:4b:be:8a:e5:e5: aa:66:91:23:87:37:3b:73:76:a0:9a:32:53:0c:77:93:a5:c0: 88:b5:7f:3a:87:cc:01:9f:d8:bd:41:df:1e:46:ba:80:86:d3: 53:af:c7:c2 -----BEGIN CERTIFICATE----- MIIHqTCCBpGgAwIBAgIUAQ0Mn0MoWEmtrfXB/f46cdyxGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODE3NTkxMVoXDTI3MDgwMTE3NTkxMVowLzEtMCsGA1UEAxMk Mzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUyZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbvDf0j7HzqEQqw6jtNIB5CNT0D6j0MSIxYs /Bu+l9RcgYxnsCBYc8fMAX8dE2zmK90nIX3uWECH3d3HFblSw9+ZfmAlXZD1X2nW OqNRl4BkBrurP5uIBelsWjp0R6e3KBndgSERXcaCOg/xg+rnmO1468ByasHFhMns 9/ALbreZGhohP00QCLJxrh+eEQQxfht3h+Xmgt3/z/FcGGbwVJKxPsQvkGjqYO1v L1+8kpoeCxzB9oSH6ooCw0Mr6ZDSGMAsSTg0O3nkXnNNGWIFeolPMPeGLnpxvB4s QQPq7UvZDpgPGXotRbF5Dhyd+gIzj7c2bZ8FnWR/P/32q6rgDwIDAQABo4IEuzCC BLcwHQYDVR0OBBYEFP89ZyImURnyc5R+bRUzHRMQpEG9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z OTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM5OTBmMGU0LWZjMTMtNDY3ZS1h NzY1LTk4ZDk4ZDI1MmQ1Ni8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQy NTJkNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwgakGCCsGAQUF BwEHAQH/BIGZMIGWMH4EAgABMHgDBAZCQAADBAZCxMADBAdDyIADBAVFXuADBAZK 1QADBAVgKwADBAJo2+ADBAaLioADBAKi/KADBALANLwDBALAQFwDBALHD6QDBALH c6gDBAPH8fgDBAXRXuADBAPRvegDBAXYSuADBATYgvADBAfYyYADBAbY10AwFAQC AAIwDgMFACYFtAADBQAmB/VoMC8GCCsGAQUFBwEIAQH/BCAwHqAcMBoCAivPAgI1 RQICNpUCAmVkAgMAjg4CAwDRmzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNVrWCGuusmThtECEfGGntFJJK 0U0ULnlhGlhheY0Kk+Pb6sOWihPguey7cmNnx6SiEklxyAJ8QBtUV5YW4gwy6nIc CFHGz+ISOQ+ow/SLwLIB/LtbmgSc1jyhwyUTM8Yqf5Y5+GnO7X/vthqB65XQlryn RRMXvLQwrqCjSIat/6N0TVWY1n/tIuNVZcpoKa804LF0DYfFH2BfveQ3kDghhAXR nJm6eNw3z/QMx6RiBMHloXhQnP6fUeH1dZfRe14blanw0BiQmsbIXROPS/K2glFX S76K5eWqZpEjhzc7c3agmjJTDHeTpcCItX86h8wBn9i9Qd8eRrqAhtNTr8fC -----END CERTIFICATE-----Generated at Mon May 12 18:00:23 2025 by rpki-client