$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer File: 35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer (raw, json) Hash identifier: rYeKGgXtfA3+xp54xnKnaZ4aByDbiRvv8VA3wfJhvEc= Subject key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858484E10E7E9360AE4EA159BADE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Dec 2024 19:14:00 +0000 Certificate not after: Sun 28 Mar 2027 18:14:00 +0000 Subordinate resources: AS: 3402 IP: 64.239.32.0/22 IP: 64.239.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:10:e7:e9:36:0a:e4:ea:15:9b:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 23 19:14:00 2024 GMT Not After : Mar 28 18:14:00 2027 GMT Subject: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:d1:64:a7:2d:4e:56:bc:89:6a:a9:3d:41: 45:d6:37:c7:87:8b:bc:62:33:c0:24:ad:9c:d1:d5: 6d:d8:bb:88:5c:d0:30:9d:c8:0e:84:2d:e2:54:cf: 08:72:2f:32:e1:37:9c:6c:cf:0a:e5:d9:db:e6:36: 12:25:4d:38:8d:8e:a9:0a:a6:6a:bd:2a:34:18:2e: a1:09:2f:d1:7c:f5:ea:e8:cb:49:f8:80:e5:2b:fe: 2e:b1:fd:d4:a8:7e:b8:7a:55:b6:84:f6:e9:63:5c: 88:0b:29:60:35:49:7d:7a:93:69:c0:fa:1c:05:19: 1e:0a:db:d2:db:3e:f1:76:76:7e:43:f9:b6:1b:bd: 45:e8:27:73:00:ac:e8:1f:e7:b0:70:52:6e:e6:ae: e6:f6:ec:cc:49:e1:c3:08:ed:76:68:dc:8a:38:e1: 09:98:38:e2:d6:18:96:e0:f2:fe:e5:d8:6a:b9:9c: 5b:f7:3b:db:f4:11:03:0d:77:ae:9d:7e:b9:64:34: 7e:65:f8:80:05:a2:20:f2:61:c9:0b:d8:21:56:3e: 5a:82:e6:34:24:88:d3:bd:37:d8:16:12:b1:70:a8: 08:b7:05:77:bb:8c:34:9c:5f:47:4a:5f:67:b2:3a: 26:ef:eb:40:81:9f:24:8c:49:80:a8:b5:ad:bb:e2: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.239.32.0/22 64.239.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3a:5c:34:78:8c:25:7e:1b:38:07:37:bf:db:8b:d4:ce:4b: fb:5c:68:39:8a:a2:ff:30:f4:dd:e9:6c:2e:27:21:10:a2:35: ae:e7:49:d0:dc:09:1d:62:09:6b:c0:b5:9b:dc:76:aa:4b:91: 8f:ea:e7:08:5b:59:3d:d4:fb:7d:e4:e0:d8:de:71:a9:e1:79: 07:8e:1c:8d:31:b2:2c:f5:4d:a8:23:25:4c:cf:bf:34:ea:bc: 26:e7:17:58:42:b6:2e:74:23:e6:51:cc:f3:e7:db:a0:7d:26: ba:ea:23:d8:e2:fc:2a:34:78:93:7f:d5:be:b5:57:c6:4d:ca: e5:0a:a8:e0:45:da:67:49:a8:0a:8f:02:60:24:e6:3b:ee:74: a1:bf:92:ea:c4:00:6f:82:63:83:be:7b:e1:8e:20:b3:45:2a: 4a:6d:1b:d3:4d:d9:d8:b4:4f:2a:b7:81:9d:46:12:f3:18:11: ea:1b:86:23:96:67:b9:48:ba:6d:17:79:4c:90:00:f2:df:3a: 47:b4:41:8c:03:f1:4b:57:ef:d5:c5:a8:35:47:8c:e9:64:e8: d7:36:db:96:db:c8:0b:47:4e:94:35:79:85:d6:6e:08:d2:4b: b0:68:ca:3f:fb:75:b4:0a:04:f4:4d:a2:fa:53:52:fd:80:9e: e3:41:53:2a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEhOEOfpNgrk6hWbreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIyMzE5MTQwMFoXDTI3MDMyODE4MTQwMFowLzEtMCsGA1UEAxMk MzVhMTEzYmYtMmE1ZC00ZTk3LTlhM2MtMzEzNjYyZjVhNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnzRZKctTla8iWqpPUFF1jfHh4u8YjPAJK2c 0dVt2LuIXNAwncgOhC3iVM8Ici8y4TecbM8K5dnb5jYSJU04jY6pCqZqvSo0GC6h CS/RfPXq6MtJ+IDlK/4usf3UqH64elW2hPbpY1yICylgNUl9epNpwPocBRkeCtvS 2z7xdnZ+Q/m2G71F6CdzAKzoH+ewcFJu5q7m9uzMSeHDCO12aNyKOOEJmDji1hiW 4PL+5dhquZxb9zvb9BEDDXeunX65ZDR+ZfiABaIg8mHJC9ghVj5aguY0JIjTvTfY FhKxcKgItwV3u4w0nF9HSl9nsjom7+tAgZ8kjEmAqLWtu+IbYQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFHPyZJqWDkTuQZPoi/5MOepI3tjWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z NWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJmNWE1OGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzM1YTExM2JmLTJhNWQtNGU5Ny05 YTNjLTMxMzY2MmY1YTU4Yy8zNWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJm NWE1OGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJA7yADBAJA73QwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICDUowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAjDpcNHiMJX4bOAc3v9uL1M5L+1xoOYqi/zD03els LichEKI1rudJ0NwJHWIJa8C1m9x2qkuRj+rnCFtZPdT7feTg2N5xqeF5B44cjTGy LPVNqCMlTM+/NOq8JucXWEK2LnQj5lHM8+fboH0muuoj2OL8KjR4k3/VvrVXxk3K 5Qqo4EXaZ0moCo8CYCTmO+50ob+S6sQAb4Jjg7574Y4gs0UqSm0b003Z2LRPKreB nUYS8xgR6huGI5ZnuUi6bRd5TJAA8t86R7RBjAPxS1fv1cWoNUeM6WTo1zbbltvI C0dOlDV5hdZuCNJLsGjKP/t1tAoE9E2i+lNS/YCe40FTKg== -----END CERTIFICATE-----Generated at Thu May 8 21:33:44 2025 by rpki-client