$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975.cer File: 13c009bf-1d64-4cb3-a803-ec59ff959975.cer (raw, json) Hash identifier: cjG0wm/gh6j9HHu818pzRAotk5VbcvmSOJJgy1EyLqc= Subject key identifier: AC:9C:07:CC:B1:D1:44:FE:41:C1:B9:9C:B8:BA:8F:96:0B:3C:3F:7A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858493A9E55658F8E7179873E46C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/13c009bf-1d64-4cb3-a803-ec59ff959975.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 12:49:44 +0000 Certificate not after: Mon 21 Jun 2027 12:49:44 +0000 Subordinate resources: AS: 14948 AS: 40491 AS: 55250 AS: 63185 AS: 394138 AS: 395969 AS: 401458 AS: 402332 IP: 162.44.0.0/16 IP: 172.110.52.0/22 IP: 192.69.82.0/23 IP: 2620:10e:7000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:9e:55:65:8f:8e:71:79:87:3e:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 12:49:44 2025 GMT Not After : Jun 21 12:49:44 2027 GMT Subject: CN=13c009bf-1d64-4cb3-a803-ec59ff959975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:3d:2f:ac:45:ff:2c:60:db:34:0f:5a:aa: 44:29:97:a8:87:ad:7f:4d:21:91:dc:3e:2f:44:9b: 30:e9:ef:3c:a9:c0:3c:26:cd:cb:37:95:f0:0a:92: e5:10:d5:18:17:ee:ac:97:a4:a1:3e:d2:6c:77:72: c2:48:cb:85:b4:24:61:e8:06:bb:c4:92:0a:ed:47: a0:29:07:c2:71:6c:67:fc:e6:2a:de:96:0d:62:d6: 63:a6:a9:a2:0e:f2:27:0c:47:93:e7:2e:8e:45:d1: 98:09:59:c3:d8:9b:ff:54:4c:e3:ed:dc:16:10:c6: c3:01:18:85:c2:67:59:f2:de:35:de:25:c3:a3:b0: 11:e3:fc:71:d6:44:fd:d0:b6:ae:df:12:09:72:ba: bc:66:ac:6a:1c:2d:16:05:b2:50:b3:a7:76:f1:3c: 77:e9:de:7d:f6:7b:a7:a5:b5:54:a6:bb:73:3f:e9: 8c:f8:d2:cd:74:fd:dd:04:a4:f8:a0:7a:cd:9b:c4: 6b:52:76:86:09:94:53:07:50:76:0e:65:c3:46:7c: 02:d9:25:e8:59:2f:da:1f:88:82:c3:44:13:a9:da: 60:e5:b9:34:7c:5f:22:cf:fe:ce:c9:7e:1e:67:6b: b8:b9:7a:67:5c:6a:50:0c:91:68:79:a4:45:e9:68: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:07:CC:B1:D1:44:FE:41:C1:B9:9C:B8:BA:8F:96:0B:3C:3F:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/13c009bf-1d64-4cb3-a803-ec59ff959975.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.44.0.0/16 172.110.52.0/22 192.69.82.0/23 IPv6: 2620:10e:7000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14948 40491 55250 63185 394138 395969 401458 402332 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7a:1a:e7:9a:2c:00:7a:81:cd:ec:92:69:62:f7:6d:17:b0: e3:a5:cb:bd:e9:56:a2:8d:60:1b:f6:53:c4:be:40:d5:eb:7b: 60:84:b9:7e:f3:75:d9:38:ce:d4:ac:0e:29:d2:90:87:85:63: c8:f3:16:75:1f:c4:f7:42:63:a7:a1:5e:b6:0c:44:dc:14:d6: 58:c2:6b:2c:a0:31:83:7c:1f:78:5d:0f:02:81:7b:a9:b7:8e: 4a:d7:c6:66:9a:f5:76:a7:47:41:57:a7:54:54:d0:1e:65:bd: 8b:30:08:b3:e2:24:d4:db:87:5c:11:7f:56:03:dc:d9:c0:c2: 80:97:0a:a4:16:f5:64:4a:87:c3:bf:be:61:a0:78:2e:d9:b8: 2c:1d:6b:00:25:17:65:ee:ea:64:7e:3d:e1:3a:59:86:75:d0: 81:a6:c2:44:e4:d9:80:0c:88:85:44:0f:0e:81:be:ac:8e:82: 29:df:d0:fc:92:a6:cd:99:d4:72:a3:33:fc:2f:44:18:16:e4: db:53:29:c9:76:52:70:12:1c:e1:ea:79:0e:91:b8:a4:2b:fe: 84:54:1a:e4:2c:5d:d6:38:cc:e1:55:87:dd:25:b2:3f:55:fe: b1:ef:76:95:6e:20:32:1d:cf:32:b1:78:f8:ab:1a:b4:e4:0b: b6:31:9a:fb -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEk6nlVlj45xeYc+RsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxODEyNDk0NFoXDTI3MDYyMTEyNDk0NFowLzEtMCsGA1UEAxMk MTNjMDA5YmYtMWQ2NC00Y2IzLWE4MDMtZWM1OWZmOTU5OTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZo9L6xF/yxg2zQPWqpEKZeoh61/TSGR3D4v RJsw6e88qcA8Js3LN5XwCpLlENUYF+6sl6ShPtJsd3LCSMuFtCRh6Aa7xJIK7Ueg KQfCcWxn/OYq3pYNYtZjpqmiDvInDEeT5y6ORdGYCVnD2Jv/VEzj7dwWEMbDARiF wmdZ8t413iXDo7AR4/xx1kT90Lau3xIJcrq8ZqxqHC0WBbJQs6d28Tx36d599nun pbVUprtzP+mM+NLNdP3dBKT4oHrNm8RrUnaGCZRTB1B2DmXDRnwC2SXoWS/aH4iC w0QTqdpg5bk0fF8iz/7OyX4eZ2u4uXpnXGpQDJFoeaRF6WjxgwIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFKycB8yx0UT+QcG5nLi6j5YLPD96MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x M2MwMDliZi0xZDY0LTRjYjMtYTgwMy1lYzU5ZmY5NTk5NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzYzAwOWJmLTFkNjQtNGNiMy1h ODAzLWVjNTlmZjk1OTk3NS8xM2MwMDliZi0xZDY0LTRjYjMtYTgwMy1lYzU5ZmY5 NTk5NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBcEAgABMBEDAwCiLAMEAqxuNAMEAcBFUjAOBAIAAjAIAwYAJiAB DnAwPAYIKwYBBQUHAQgBAf8ELTAroCkwJwICOmQCAwCeKwIDANfSAgMA9tECAwYD mgIDBgrBAgMGIDICAwYjnDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACehrnmiwAeoHN7JJpYvdtF7Djpcu9 6VaijWAb9lPEvkDV63tghLl+83XZOM7UrA4p0pCHhWPI8xZ1H8T3QmOnoV62DETc FNZYwmssoDGDfB94XQ8CgXupt45K18ZmmvV2p0dBV6dUVNAeZb2LMAiz4iTU24dc EX9WA9zZwMKAlwqkFvVkSofDv75hoHgu2bgsHWsAJRdl7upkfj3hOlmGddCBpsJE 5NmADIiFRA8Ogb6sjoIp39D8kqbNmdRyozP8L0QYFuTbUynJdlJwEhzh6nkOkbik K/6EVBrkLF3WOMzhVYfdJbI/Vf6x73aVbiAyHc8ysXj4qxq05Au2MZr7 -----END CERTIFICATE-----Generated at Sat May 10 04:49:11 2025 by rpki-client