$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer File: e9769409-4db3-443e-9837-3afd4dca595d.cer (raw, json) Hash identifier: bmNkVA8bz1Bgi7+BO+/QJFy0URMuLS/SLERE+VTZpIg= Subject key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A55730DF02A495A05F364A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Apr 2025 18:17:53 +0000 Certificate not after: Thu 29 Jul 2027 18:17:53 +0000 Subordinate resources: AS: 23316 AS: 394013 IP: 23.227.224.0/19 IP: 24.72.144.0/20 IP: 68.170.64.0/20 IP: 68.170.160.0/20 IP: 98.159.80.0/20 IP: 103.103.240.0/22 IP: 104.243.112.0/20 IP: 107.190.240.0/20 IP: 108.60.32.0/19 IP: 108.161.16.0/20 IP: 162.208.92.0/22 IP: 162.211.144.0/21 IP: 162.255.0.0/21 IP: 170.62.125.0/24 IP: 198.44.208.0/20 IP: 206.81.112.0/20 IP: 2607:f7b0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:57:30:df:02:a4:95:a0:5f:36:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 25 18:17:53 2025 GMT Not After : Jul 29 18:17:53 2027 GMT Subject: CN=e9769409-4db3-443e-9837-3afd4dca595d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:16:9d:86:ff:82:c2:73:3f:9a:69:30:58: fc:8d:40:ab:5c:7d:a7:ea:ca:0b:01:ee:bb:f7:73: 78:60:ce:b8:f1:c4:9b:16:b1:f8:76:5f:eb:46:c7: 56:ff:ad:e3:c8:c5:4f:fe:8f:61:40:7c:49:09:7f: c9:14:e8:b3:66:5f:f6:a0:6f:3b:21:8b:1c:9c:0f: d8:27:9e:bd:2e:79:fc:40:e4:af:f1:48:93:06:45: 17:c7:a9:00:85:5f:53:0f:6f:b1:e0:fc:e1:9d:11: bf:5e:18:08:ad:3e:44:ff:ac:29:c0:96:a2:56:44: ac:c4:ef:42:6a:42:1a:89:66:c2:ac:3e:84:50:c4: 06:42:d2:33:8d:37:8e:ae:b7:4c:56:0d:30:4c:0f: 94:d2:10:bd:17:f4:30:e9:80:75:af:ce:dd:5d:7d: e1:58:b8:11:a1:df:15:43:85:e8:d8:d0:6d:13:0e: 35:bc:04:82:9f:07:31:80:d2:b7:87:44:d5:87:82: c7:9a:3e:66:2f:fe:17:d3:66:db:a4:9f:8d:bd:d7: 6b:ba:b0:58:00:4e:2d:97:1b:5f:23:44:82:23:e1: 56:75:83:c4:19:63:0d:59:d7:17:b4:6d:db:76:78: 53:1d:2a:92:bb:ce:4a:a3:32:5f:03:f9:dd:ee:a0: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.227.224.0/19 24.72.144.0/20 68.170.64.0/20 68.170.160.0/20 98.159.80.0/20 103.103.240.0/22 104.243.112.0/20 107.190.240.0/20 108.60.32.0/19 108.161.16.0/20 162.208.92.0/22 162.211.144.0/21 162.255.0.0/21 170.62.125.0/24 198.44.208.0/20 206.81.112.0/20 IPv6: 2607:f7b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23316 394013 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f5:f4:c8:9f:b2:b2:f3:a8:66:a2:42:ac:7b:f7:ea:06:bb: 68:e1:3b:4f:b2:3a:15:9f:83:3e:06:65:b4:0f:e5:90:fa:1c: 50:f8:6b:69:82:7e:5b:c3:97:0e:7d:ba:c2:05:2a:8f:ea:ef: c9:47:55:e9:32:83:ef:2e:c4:39:13:ff:e6:45:50:26:38:22: 70:a9:56:61:bb:02:4e:52:e2:d0:70:43:e4:6a:95:0b:1d:8c: 14:ca:1f:db:92:44:1e:d4:66:18:d1:08:f2:ba:a4:70:1f:1d: 5b:f5:ac:59:f2:a8:08:09:a3:17:bb:a4:84:83:54:80:d1:96: 35:99:ab:39:e2:c5:c9:97:14:b6:a5:8d:69:1f:46:fd:f3:fb: 9f:45:97:a9:11:fa:69:0c:d2:fa:bf:9c:87:d1:87:0d:41:79: 96:26:f3:7c:c4:50:35:ee:df:ed:89:c5:7f:b2:65:c8:cf:e2: e5:81:65:55:71:bd:0d:52:18:5f:12:12:b6:ec:b6:9a:06:63: ab:7f:d6:44:dd:6b:f6:76:1c:dc:ab:91:52:58:cf:34:2f:9d: 2a:24:b9:9f:63:57:11:e3:9d:d2:a3:87:0d:b6:ce:74:36:21: 3e:90:9e:2b:8a:9e:18:38:e4:c2:69:ff:32:85:14:fa:61:73: 6f:59:c7:d6 -----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIUAQ0Mn0MoWEmlVzDfAqSVoF82SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNTE4MTc1M1oXDTI3MDcyOTE4MTc1M1owLzEtMCsGA1UEAxMk ZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+MWnYb/gsJzP5ppMFj8jUCrXH2n6soLAe67 93N4YM648cSbFrH4dl/rRsdW/63jyMVP/o9hQHxJCX/JFOizZl/2oG87IYscnA/Y J569Lnn8QOSv8UiTBkUXx6kAhV9TD2+x4PzhnRG/XhgIrT5E/6wpwJaiVkSsxO9C akIaiWbCrD6EUMQGQtIzjTeOrrdMVg0wTA+U0hC9F/Qw6YB1r87dXX3hWLgRod8V Q4Xo2NBtEw41vASCnwcxgNK3h0TVh4LHmj5mL/4X02bbpJ+NvddrurBYAE4tlxtf I0SCI+FWdYPEGWMNWdcXtG3bdnhTHSqSu85KozJfA/nd7qDoqwIDAQABo4IEiTCC BIUwHQYDVR0OBBYEFPbICXbk8M4uBkgZ8R/YywTB/7XsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l OTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2U5NzY5NDA5LTRkYjMtNDQzZS05 ODM3LTNhZmQ0ZGNhNTk1ZC9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRj YTU5NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwgYgGCCsGAQUF BwEHAQH/BHkwdzBmBAIAATBgAwQFF+PgAwQEGEiQAwQERKpAAwQERKqgAwQEYp9Q AwQCZ2fwAwQEaPNwAwQEa77wAwQFbDwgAwQEbKEQAwQCotBcAwQDotOQAwQDov8A AwQAqj59AwQExizQAwQEzlFwMA0EAgACMAcDBQAmB/ewMB4GCCsGAQUFBwEIAQH/ BA8wDaALMAkCAlsUAgMGAx0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFPX0yJ+ysvOoZqJCrHv36ga7aOE7 T7I6FZ+DPgZltA/lkPocUPhraYJ+W8OXDn26wgUqj+rvyUdV6TKD7y7EORP/5kVQ JjgicKlWYbsCTlLi0HBD5GqVCx2MFMof25JEHtRmGNEI8rqkcB8dW/WsWfKoCAmj F7ukhINUgNGWNZmrOeLFyZcUtqWNaR9G/fP7n0WXqRH6aQzS+r+ch9GHDUF5libz fMRQNe7f7YnFf7JlyM/i5YFlVXG9DVIYXxIStuy2mgZjq3/WRN1r9nYc3KuRUljP NC+dKiS5n2NXEeOd0qOHDbbOdDYhPpCeK4qeGDjkwmn/MoUU+mFzb1nH1g== -----END CERTIFICATE-----Generated at Mon May 12 18:49:13 2025 by rpki-client