$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer File: 4a669737-4387-4a5c-829a-5cf431c6469e.cer (raw, json) Hash identifier: ewPVAJpAT6Wesx4ZI6PAQJiOan1SB4iFtO1Fc3DvBcc= Subject key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285849031FCF2B9BC5BA02E811A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 15:45:20 +0000 Certificate not after: Tue 01 Jun 2027 14:45:20 +0000 Subordinate resources: AS: 393453 IP: 23.133.96.0/24 IP: 192.138.12.0/22 IP: 2620:138:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:1f:cf:2b:9b:c5:ba:02:e8:11:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 26 15:45:20 2025 GMT Not After : Jun 1 14:45:20 2027 GMT Subject: CN=4a669737-4387-4a5c-829a-5cf431c6469e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:0f:32:9e:02:cd:e7:8c:41:40:1e:c2:b5: 64:ac:a8:27:01:c6:c4:d0:7a:4e:e1:80:f6:f7:2c: 09:d4:b0:77:e2:1f:28:06:5b:d9:df:b6:27:e2:c7: d9:f2:59:68:ce:c0:04:e0:ed:d7:4f:12:7f:19:fd: 93:31:ba:3e:a0:23:a5:ad:8c:c3:16:91:03:f8:ec: 21:6c:24:bb:7c:57:cf:b1:7d:24:03:8e:08:34:8e: fe:3f:65:ad:15:c2:7c:c2:ed:99:02:99:9a:16:8c: 41:ed:3f:f0:cb:35:67:4b:84:af:b4:fa:10:fc:95: 4d:55:e4:9a:0a:4a:1d:bf:a3:50:b1:7e:f5:12:43: 2e:b5:bb:31:69:06:e5:2f:00:2d:ed:f0:c5:b2:3d: 02:aa:70:f0:c3:d2:e4:2d:1e:e9:00:7d:c5:8b:0f: a5:0b:b8:07:69:b7:d1:7d:0f:aa:33:a9:80:a3:4e: 68:9c:cc:96:97:6d:25:7a:19:65:f2:e9:e4:00:11: c5:3c:58:cf:0e:23:f9:50:0e:8a:e0:2f:80:e8:be: a3:83:e1:cf:b0:85:7e:be:90:28:5a:10:4e:2e:28: 16:50:84:c8:d8:d8:62:4f:31:c5:67:88:f3:83:31: f6:c1:6b:92:f0:3e:89:dd:85:e2:eb:9f:88:d1:8e: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.96.0/24 192.138.12.0/22 IPv6: 2620:138:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393453 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7b:e4:34:9a:5b:b7:27:2d:b1:61:40:31:b7:19:88:81:67: 2c:f9:65:f6:13:be:4a:2c:ea:dd:01:c9:a9:bb:9a:72:61:aa: 42:ee:4e:ae:cc:ec:68:c7:9b:3f:c4:92:04:f3:cc:5a:f9:b8: ee:bb:bd:bc:0c:94:a2:14:f8:56:45:fe:ed:93:77:89:15:91: c2:1f:9e:2c:fc:e5:dc:1d:f4:56:f8:ea:d4:9b:38:87:51:44: dd:f2:d3:6d:29:6a:cc:95:fd:5c:35:05:2f:cb:1c:3a:55:ad: ab:fa:34:62:aa:23:bf:fc:f7:2d:e2:9f:69:09:7b:15:dd:99: 26:b5:63:9a:8e:13:22:5a:6f:c1:76:25:36:af:2e:4f:db:12: 1d:b8:29:83:16:af:4d:d1:29:27:e1:a1:a6:93:61:76:89:16: d0:05:f8:a6:50:63:69:73:c6:a3:75:3a:fe:7b:e2:5b:b5:94: 51:b8:6b:2c:5a:f9:5a:7a:34:71:80:8a:15:23:d3:9b:42:a2: 97:50:04:c0:7b:11:46:e4:be:48:39:dc:b6:37:ec:dd:5d:dd: 8d:af:7b:c3:1e:0c:f0:d1:1a:a5:00:28:2f:7c:57:06:ff:b9: 5e:13:85:86:7a:4e:c5:92:8d:ff:98:65:e6:6b:e0:0b:22:4f: c2:a7:e9:4f -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEkDH88rm8W6AugRpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNjE1NDUyMFoXDTI3MDYwMTE0NDUyMFowLzEtMCsGA1UEAxMk NGE2Njk3MzctNDM4Ny00YTVjLTgyOWEtNWNmNDMxYzY0NjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20APMp4CzeeMQUAewrVkrKgnAcbE0HpO4YD2 9ywJ1LB34h8oBlvZ37Yn4sfZ8llozsAE4O3XTxJ/Gf2TMbo+oCOlrYzDFpED+Owh bCS7fFfPsX0kA44INI7+P2WtFcJ8wu2ZApmaFoxB7T/wyzVnS4SvtPoQ/JVNVeSa Ckodv6NQsX71EkMutbsxaQblLwAt7fDFsj0CqnDww9LkLR7pAH3Fiw+lC7gHabfR fQ+qM6mAo05onMyWl20lehll8unkABHFPFjPDiP5UA6K4C+A6L6jg+HPsIV+vpAo WhBOLigWUITI2NhiTzHFZ4jzgzH2wWuS8D6J3YXi65+I0Y6gewIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMEhHPu3fLeT1RTouIpeCpYlwqipMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 YTY2OTczNy00Mzg3LTRhNWMtODI5YS01Y2Y0MzFjNjQ2OWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzRhNjY5NzM3LTQzODctNGE1Yy04 MjlhLTVjZjQzMWM2NDY5ZS80YTY2OTczNy00Mzg3LTRhNWMtODI5YS01Y2Y0MzFj NjQ2OWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhWADBALAigwwDgQCAAIwCAMGACYgAThAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYA7TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTe+Q0mlu3Jy2xYUAx txmIgWcs+WX2E75KLOrdAcmpu5pyYapC7k6uzOxox5s/xJIE88xa+bjuu728DJSi FPhWRf7tk3eJFZHCH54s/OXcHfRW+OrUmziHUUTd8tNtKWrMlf1cNQUvyxw6Va2r +jRiqiO//Pct4p9pCXsV3ZkmtWOajhMiWm/BdiU2ry5P2xIduCmDFq9N0Skn4aGm k2F2iRbQBfimUGNpc8ajdTr+e+JbtZRRuGssWvlaejRxgIoVI9ObQqKXUATAexFG 5L5IOdy2N+zdXd2Nr3vDHgzw0RqlACgvfFcG/7leE4WGek7Fko3/mGXma+ALIk/C p+lP -----END CERTIFICATE-----Generated at Sat May 10 07:31:53 2025 by rpki-client