$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer File: c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer (raw, json) Hash identifier: Jej8qK2p0g/qw+r8aZ2taEQ6V6qu3i7jbAA05zWA6ig= Subject key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B066A950D755069962F640F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 17:22:57 +0000 Certificate not after: Mon 02 Aug 2027 17:22:57 +0000 Subordinate resources: AS: 12208 IP: 66.248.208.0/20 IP: 74.209.64.0/18 IP: 97.107.96.0/20 IP: 152.44.48.0/20 IP: 162.254.44.0/22 IP: 173.248.192.0/19 IP: 192.34.196.0/23 IP: 192.96.62.0/23 IP: 192.159.208.0/20 IP: 199.58.112.0/22 IP: 199.195.224.0/22 IP: 2605:1900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:66:a9:50:d7:55:06:99:62:f6:40:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 29 17:22:57 2025 GMT Not After : Aug 2 17:22:57 2027 GMT Subject: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:02:0a:48:c1:ba:66:5e:59:26:bd:21:6d: 1e:e0:e5:5c:56:9a:be:f3:6d:02:91:d4:05:b2:37: 93:05:b9:a9:a2:62:c2:a1:3c:3f:54:99:f3:3c:fd: 43:07:2f:b4:c0:d2:75:00:81:61:e0:8f:08:f8:5c: ac:c9:9f:a6:3c:84:85:0a:9c:65:d6:ec:25:58:d5: ba:bd:3b:1d:d6:3d:68:90:70:57:25:ea:a9:ef:64: 2c:7f:17:ba:a9:f1:aa:87:d3:ba:6d:3e:44:53:9f: e5:0f:1c:00:90:84:94:f9:93:0d:2e:fe:cb:34:79: d9:99:fe:31:5b:00:55:db:1c:3e:bd:bc:6b:4b:9b: 5f:3f:95:ca:a7:91:76:37:2e:47:43:03:d5:99:bb: 95:93:37:33:c3:c8:fd:1f:71:1b:9c:28:32:ea:5f: 36:ee:00:2e:0b:c9:d5:74:53:32:fd:6f:22:ea:20: 1f:d8:71:1e:6f:c5:95:4f:30:5f:cc:77:dd:d4:3e: e5:52:35:69:48:ba:1d:9c:1a:ff:89:31:97:43:61: 39:44:f8:dc:d5:bb:5e:56:a4:8c:6f:04:5e:39:e8: dc:5c:6e:2f:f5:fb:1e:0a:fa:e3:e3:e4:06:df:ff: d4:93:0d:e0:29:ae:f4:60:0d:d0:6f:d9:f3:fd:0a: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.248.208.0/20 74.209.64.0/18 97.107.96.0/20 152.44.48.0/20 162.254.44.0/22 173.248.192.0/19 192.34.196.0/23 192.96.62.0/23 192.159.208.0/20 199.58.112.0/22 199.195.224.0/22 IPv6: 2605:1900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12208 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f6:77:ad:47:e6:5c:c2:e0:74:1c:23:cc:f7:ee:16:c8:dd: 8d:03:7e:46:85:7a:60:99:4d:17:a0:97:ae:f0:dd:5c:75:33: b4:76:88:bf:b6:f4:95:18:0e:d1:9c:a4:87:96:c1:8f:f8:2e: 3c:6f:32:16:f9:3f:9f:5b:ee:9a:fb:f9:57:81:64:02:85:66: 83:af:d9:df:05:7c:3a:fe:53:91:63:df:c4:80:e0:14:61:4e: 71:27:fb:fb:6f:46:6c:e5:3d:64:8a:e5:bf:51:3b:6b:e3:c6: 86:fa:51:24:44:45:e3:47:a6:1c:66:1c:6b:6f:5e:03:3b:77: 8e:99:53:ea:c5:aa:44:38:eb:e0:03:32:60:38:7e:10:9f:92: b5:fd:c9:f6:59:13:e3:eb:8f:2e:16:b0:1a:89:95:ef:9b:80: 61:7f:55:a3:eb:48:da:1e:3b:6f:e0:97:f5:b9:74:26:33:ee: 00:e6:34:62:12:3d:03:c6:f7:be:42:0d:a8:96:d9:e7:7e:f4: 09:7d:78:e4:17:a3:87:76:fa:4e:85:8a:0e:83:5a:4f:b5:21: 48:41:ea:fe:69:c9:5b:ac:0b:86:fa:56:7c:0f:20:1f:78:4b: 62:97:4f:5d:77:8b:ab:cb:07:5b:57:ce:3d:e4:8f:c2:83:11: 0f:72:be:a0 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEmwZqlQ11UGmWL2QPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyOTE3MjI1N1oXDTI3MDgwMjE3MjI1N1owLzEtMCsGA1UEAxMk YzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhACCkjBumZeWSa9IW0e4OVcVpq+820CkdQF sjeTBbmpomLCoTw/VJnzPP1DBy+0wNJ1AIFh4I8I+FysyZ+mPISFCpxl1uwlWNW6 vTsd1j1okHBXJeqp72Qsfxe6qfGqh9O6bT5EU5/lDxwAkISU+ZMNLv7LNHnZmf4x WwBV2xw+vbxrS5tfP5XKp5F2Ny5HQwPVmbuVkzczw8j9H3EbnCgy6l827gAuC8nV dFMy/W8i6iAf2HEeb8WVTzBfzHfd1D7lUjVpSLodnBr/iTGXQ2E5RPjc1bteVqSM bwReOejcXG4v9fseCvrj4+QG3//Ukw3gKa70YA3Qb9nz/Qp7zwIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFK8yzIKI2mvxDb0pybRAivjoxhbYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j NzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2M3M2UxMDU0LTVmNGItNGFhNS05 ZTU1LTFjNWM4N2ZiNzA5ZC9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdm YjcwOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIDBARC+NADBAZK0UADBARha2ADBASYLDADBAKi/iwD BAWt+MADBAHAIsQDBAHAYD4DBATAn9ADBALHOnADBALHw+AwDQQCAAIwBwMFACYF GQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICL7AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANvZ3rUfmXMLg dBwjzPfuFsjdjQN+RoV6YJlNF6CXrvDdXHUztHaIv7b0lRgO0Zykh5bBj/guPG8y Fvk/n1vumvv5V4FkAoVmg6/Z3wV8Ov5TkWPfxIDgFGFOcSf7+29GbOU9ZIrlv1E7 a+PGhvpRJERF40emHGYca29eAzt3jplT6sWqRDjr4AMyYDh+EJ+Stf3J9lkT4+uP LhawGomV75uAYX9Vo+tI2h47b+CX9bl0JjPuAOY0YhI9A8b3vkINqJbZ5370CX14 5Bejh3b6ToWKDoNaT7UhSEHq/mnJW6wLhvpWfA8gH3hLYpdPXXeLq8sHW1fOPeSP woMRD3K+oA== -----END CERTIFICATE-----Generated at Mon May 12 20:44:26 2025 by rpki-client