$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e380694-69c6-4a0a-9065-d7b9868759b6.cer File: 6e380694-69c6-4a0a-9065-d7b9868759b6.cer (raw, json) Hash identifier: sl6Rc9omaEg3r6FkHxuoKP12nMg7NhzHtQVbBIJb11w= Subject key identifier: 53:18:D8:C3:33:0E:CE:79:5A:20:97:5B:1D:42:D1:8D:23:FE:54:32 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FD3B9DC286B808BB9A01FEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e380694-69c6-4a0a-9065-d7b9868759b6/6e380694-69c6-4a0a-9065-d7b9868759b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e380694-69c6-4a0a-9065-d7b9868759b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 13:06:31 +0000 Certificate not after: Sun 30 May 2027 12:06:31 +0000 Subordinate resources: AS: 400998 IP: 67.221.241.0/24 IP: 69.67.175.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:3b:9d:c2:86:b8:08:bb:9a:01:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 24 13:06:31 2025 GMT Not After : May 30 12:06:31 2027 GMT Subject: CN=6e380694-69c6-4a0a-9065-d7b9868759b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:a0:7e:ac:89:5f:ca:b0:c8:b2:26:8b:dc: f9:78:1d:ee:b6:37:c4:e0:c1:3c:ed:57:7d:46:7e: ee:8e:7a:f9:27:22:8a:7d:a1:26:ba:0a:50:87:e5: b1:23:41:68:66:65:92:e7:c2:0a:06:35:ad:2e:d6: d5:5b:2c:37:62:ea:39:b2:7e:94:b7:59:46:72:1b: 1d:96:ec:9b:72:79:55:d6:c7:59:32:78:9e:e3:3d: e1:65:41:58:18:60:d4:73:67:1b:ea:bf:2e:69:5a: 89:a1:c5:c4:6c:29:a8:f8:57:60:6c:71:21:eb:06: eb:a7:10:f3:8a:9f:8d:17:11:43:46:0c:ac:92:c9: 01:a3:f6:e1:37:15:2a:35:0e:0b:c8:69:73:92:d3: b3:a1:58:2c:74:b1:23:9e:41:ee:4b:31:33:16:f8: 2f:d8:35:79:51:ba:41:6c:76:1e:c5:70:2b:02:d7: 9e:03:ab:b5:5f:64:f1:14:97:6a:c9:76:50:08:92: 56:0a:8f:9f:90:59:5b:fa:88:2a:00:31:bb:9e:34: 9f:0f:93:25:84:c4:8d:a8:38:7c:e4:aa:0e:43:57: 3e:e9:03:00:09:9a:ab:99:28:ed:2e:63:c5:d5:68: bd:da:8f:7c:1c:98:19:3d:8e:a4:62:bf:b0:42:90: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:18:D8:C3:33:0E:CE:79:5A:20:97:5B:1D:42:D1:8D:23:FE:54:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e380694-69c6-4a0a-9065-d7b9868759b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e380694-69c6-4a0a-9065-d7b9868759b6/6e380694-69c6-4a0a-9065-d7b9868759b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 67.221.241.0/24 69.67.175.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400998 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:14:8e:a0:7b:f7:73:04:b1:fa:25:5a:c0:71:f8:b5:e4:a7: 3c:09:d6:f5:f3:9a:c0:84:dc:90:45:08:c0:2f:1b:e4:38:21: c3:7c:db:9e:9b:1e:da:9a:4e:03:89:60:fe:0d:0b:6e:93:d5: a6:3b:b6:46:b6:ee:e8:b5:4f:a3:85:86:2d:d9:ad:37:c9:a3: 4a:9e:84:99:0d:b2:d0:23:42:d2:39:c7:86:c0:80:3a:e1:dd: 8d:28:ed:05:84:e6:8b:2e:88:f2:6f:a1:89:78:b1:ac:9c:05: 06:ff:e5:63:8d:85:da:14:cb:53:2a:bd:35:7b:8f:59:4c:27: 6a:fe:37:43:26:40:af:0f:00:13:53:2e:e5:81:a0:17:bb:6c: 24:4d:7b:4f:06:bf:23:9b:42:53:c9:55:94:7f:70:c2:97:b6: 9a:4a:8f:e9:49:f2:43:6d:b1:e8:23:f9:85:21:fb:c8:22:b4: 23:fd:b6:23:db:c3:23:38:f4:8a:e1:6b:83:6e:ea:c1:82:69: 42:0d:6e:e4:55:27:5c:88:80:e5:fe:98:84:bf:ec:e3:a5:4c: ce:07:06:5f:d3:63:39:7c:f1:c3:94:d6:79:67:71:8b:f2:9d: 49:a4:0f:08:bf:55:64:79:47:56:b3:c4:0e:b1:e6:5b:24:49: 97:c0:82:ba -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEj9O53ChrgIu5oB/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNDEzMDYzMVoXDTI3MDUzMDEyMDYzMVowLzEtMCsGA1UEAxMk NmUzODA2OTQtNjljNi00YTBhLTkwNjUtZDdiOTg2ODc1OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuqgfqyJX8qwyLImi9z5eB3utjfE4ME87Vd9 Rn7ujnr5JyKKfaEmugpQh+WxI0FoZmWS58IKBjWtLtbVWyw3Yuo5sn6Ut1lGchsd luybcnlV1sdZMnie4z3hZUFYGGDUc2cb6r8uaVqJocXEbCmo+FdgbHEh6wbrpxDz ip+NFxFDRgyskskBo/bhNxUqNQ4LyGlzktOzoVgsdLEjnkHuSzEzFvgv2DV5UbpB bHYexXArAteeA6u1X2TxFJdqyXZQCJJWCo+fkFlb+ogqADG7njSfD5MlhMSNqDh8 5KoOQ1c+6QMACZqrmSjtLmPF1Wi92o98HJgZPY6kYr+wQpCxjwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFMY2MMzDs55WiCXWx1C0Y0j/lQyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 ZTM4MDY5NC02OWM2LTRhMGEtOTA2NS1kN2I5ODY4NzU5YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzZlMzgwNjk0LTY5YzYtNGEwYS05 MDY1LWQ3Yjk4Njg3NTliNi82ZTM4MDY5NC02OWM2LTRhMGEtOTA2NS1kN2I5ODY4 NzU5YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABD3fEDBABFQ68wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBh5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAEUjqB793MEsfolWsBx+LXkpzwJ1vXzmsCE3JBF CMAvG+Q4IcN8256bHtqaTgOJYP4NC26T1aY7tka27ui1T6OFhi3ZrTfJo0qehJkN stAjQtI5x4bAgDrh3Y0o7QWE5osuiPJvoYl4saycBQb/5WONhdoUy1MqvTV7j1lM J2r+N0MmQK8PABNTLuWBoBe7bCRNe08GvyObQlPJVZR/cMKXtppKj+lJ8kNtsegj +YUh+8gitCP9tiPbwyM49Irha4Nu6sGCaUINbuRVJ1yIgOX+mIS/7OOlTM4HBl/T Yzl88cOU1nlncYvynUmkDwi/VWR5R1azxA6x5lskSZfAgro= -----END CERTIFICATE-----Generated at Sun May 11 15:40:39 2025 by rpki-client