$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer File: 33beb877-dbaf-4d25-870e-a43af90cc071.cer (raw, json) Hash identifier: GwA5mj4FiCHx3gVIg9xNQA02xMxmgzRdB6F0y9ZvqYQ= Subject key identifier: A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848D6C3B571FC6F43D252991030 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Feb 2025 18:24:12 +0000 Certificate not after: Sun 16 May 2027 17:24:12 +0000 Subordinate resources: AS: 26860 IP: 66.17.96.0/19 IP: 2001:49b0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:c3:b5:71:fc:6f:43:d2:52:99:10:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 10 18:24:12 2025 GMT Not After : May 16 17:24:12 2027 GMT Subject: CN=33beb877-dbaf-4d25-870e-a43af90cc071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:5f:8e:97:99:c4:09:1a:3a:03:75:7a:9f: a4:2a:30:8e:1f:17:88:8d:5f:99:77:38:7c:5b:48: 73:4d:50:f6:41:f2:6e:c5:7f:08:ed:12:a4:bb:3a: ba:d5:a2:d6:eb:16:6b:de:40:da:95:bf:88:f4:15: 51:88:12:d9:55:f2:e5:4f:aa:bd:21:0c:5f:a6:3a: 8c:35:ff:ec:43:d5:8f:18:16:f8:93:ec:37:84:de: c1:93:db:50:4c:9c:5d:4e:03:0b:87:9c:f3:21:40: 1b:89:dd:c3:b2:5e:99:d3:ee:3d:7d:d0:d4:c4:80: 1b:99:aa:47:65:f9:e9:7e:52:6b:90:39:fd:80:3c: 54:b6:a1:5d:d4:73:36:5d:9e:ad:a0:7d:cc:6c:11: f8:62:9b:98:73:8e:7d:9c:5e:d7:74:5f:4b:ee:f5: 71:92:0f:b7:95:93:53:f2:c5:3c:00:40:a8:63:0d: ae:94:e5:17:13:04:7e:e1:a9:53:88:cd:44:ec:62: 66:1e:38:61:72:5e:7f:0b:9c:c1:92:19:36:26:dc: e5:8f:9e:f9:2b:7f:4c:87:3d:30:a7:11:4b:7c:f6: f7:17:1b:92:4e:c9:e2:80:29:9d:26:ff:85:70:bf: d9:0a:13:c8:40:e5:f6:12:c7:f8:85:8d:29:1c:ca: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.17.96.0/19 IPv6: 2001:49b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:95:f3:2d:38:75:d7:48:4a:d6:c1:68:52:88:be:7a:a8:52: 37:ae:1e:a3:be:7e:ce:cf:da:74:32:8a:9c:4f:f6:ca:b4:1a: 1c:e9:b2:d4:db:a6:e7:44:a9:77:ee:51:7e:ff:46:43:66:1c: ee:30:7c:0e:62:6c:6a:da:c7:66:2d:63:64:fd:48:16:28:bc: a5:2e:84:62:7e:1f:5b:67:c7:ca:5c:81:1f:f0:fb:9a:2f:2f: 36:71:7a:f9:39:b8:65:87:47:84:78:bc:26:3f:29:b8:35:6a: 8d:1d:fc:0d:bb:da:49:db:24:83:0e:72:aa:df:4f:8a:ef:8f: 33:4b:e3:1e:fc:36:ee:72:e6:ec:5b:08:7e:b8:03:c5:c0:78: 71:2c:5f:bf:46:65:56:c9:88:79:9a:0a:34:04:02:ee:1e:66: ea:68:7b:6b:dd:cd:04:1d:22:7e:c0:95:8a:72:af:5e:15:c7: 35:67:fe:1c:58:e8:ad:c7:ee:42:a9:a1:c3:40:81:6c:9d:79: 6d:d6:39:98:7d:e4:66:38:3a:d4:2d:48:5b:15:2a:77:7f:8a: 2c:5b:59:71:58:91:97:ac:32:51:ca:87:8f:4f:00:f1:db:f1: e7:45:83:81:bc:cc:dd:99:fe:8f:8d:b6:2b:47:52:36:7b:08: 51:61:f1:d5 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEjWw7Vx/G9D0lKZEDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMDE4MjQxMloXDTI3MDUxNjE3MjQxMlowLzEtMCsGA1UEAxMk MzNiZWI4NzctZGJhZi00ZDI1LTg3MGUtYTQzYWY5MGNjMDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLpfjpeZxAkaOgN1ep+kKjCOHxeIjV+Zdzh8 W0hzTVD2QfJuxX8I7RKkuzq61aLW6xZr3kDalb+I9BVRiBLZVfLlT6q9IQxfpjqM Nf/sQ9WPGBb4k+w3hN7Bk9tQTJxdTgMLh5zzIUAbid3Dsl6Z0+49fdDUxIAbmapH ZfnpflJrkDn9gDxUtqFd1HM2XZ6toH3MbBH4YpuYc459nF7XdF9L7vVxkg+3lZNT 8sU8AECoYw2ulOUXEwR+4alTiM1E7GJmHjhhcl5/C5zBkhk2Jtzlj575K39Mhz0w pxFLfPb3FxuSTsnigCmdJv+FcL/ZChPIQOX2Esf4hY0pHMonIwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFKDuLfyN5rvDrLoU1uKVIHPnLPkPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z M2JlYjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNhZjkwY2MwNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMzYmViODc3LWRiYWYtNGQyNS04 NzBlLWE0M2FmOTBjYzA3MS8zM2JlYjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNhZjkw Y2MwNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVCEWAwDQQCAAIwBwMFACABSbAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaOwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATJXzLTh110hK1sFoUoi+eqhSN64e o75+zs/adDKKnE/2yrQaHOmy1Num50Spd+5Rfv9GQ2Yc7jB8DmJsatrHZi1jZP1I Fii8pS6EYn4fW2fHylyBH/D7mi8vNnF6+Tm4ZYdHhHi8Jj8puDVqjR38DbvaSdsk gw5yqt9Piu+PM0vjHvw27nLm7FsIfrgDxcB4cSxfv0ZlVsmIeZoKNAQC7h5m6mh7 a93NBB0ifsCVinKvXhXHNWf+HFjorcfuQqmhw0CBbJ15bdY5mH3kZjg61C1IWxUq d3+KLFtZcViRl6wyUcqHj08A8dvx50WDgbzM3Zn+j422K0dSNnsIUWHx1Q== -----END CERTIFICATE-----Generated at Mon May 5 23:24:56 2025 by rpki-client