$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer File: 8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer (raw, json) Hash identifier: qk3MA2VuBKssFRDxUuBJKwfLaLYN1CLVrJMs+E3X40U= Subject key identifier: 6C:05:B6:82:2D:55:D5:F2:29:8E:15:FC:50:02:3C:62:47:41:FD:12 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492FFF8C453D38D85784513080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 17:31:43 +0000 Certificate not after: Thu 17 Jun 2027 17:31:43 +0000 Subordinate resources: AS: 397253 IP: 209.178.201.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:ff:8c:45:3d:38:d8:57:84:51:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 17:31:43 2025 GMT Not After : Jun 17 17:31:43 2027 GMT Subject: CN=8205fc61-ee5e-4638-8ad1-a24d7b9c9474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5d:ef:25:4c:bb:f2:01:a1:56:85:76:af:8d: f4:cb:49:3f:76:10:1f:e3:94:45:63:79:df:56:26: 29:33:57:14:ae:a5:48:be:ad:24:8b:63:9c:bc:6f: d3:e9:30:9f:b5:76:fa:6b:04:6d:63:bd:de:a1:bc: cc:a9:80:3b:6d:ba:1d:1f:c9:67:a0:4a:db:2b:2e: 81:91:36:b6:71:72:22:c4:f9:01:5d:0b:be:2c:5a: 64:72:53:23:f2:27:a1:1f:12:13:32:17:b3:f3:44: bf:7b:f4:f4:e2:09:70:1a:88:3e:69:a8:cf:ba:4a: 9f:28:bd:3a:d3:55:02:e1:de:2c:36:be:44:69:5a: 47:05:ce:ed:c9:da:ca:82:ec:5c:a5:8b:2d:7d:24: 6b:7a:08:24:2f:0d:0a:c6:af:8a:0e:23:39:9f:42: 54:ba:fa:24:cf:30:8f:db:28:66:39:0c:7a:7d:b3: f8:df:7f:93:6f:cb:7d:d7:60:36:35:02:ab:35:49: c3:65:da:cc:77:99:3b:cf:39:42:c9:31:a7:64:b6: 09:11:57:47:fb:c1:1b:18:b1:ea:c8:49:59:bf:83: ec:3e:c0:1e:b7:05:5d:9b:9a:8c:59:c8:7b:db:be: 07:05:eb:73:c4:54:b8:2b:0a:84:4a:fd:7c:7c:c6: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:05:B6:82:2D:55:D5:F2:29:8E:15:FC:50:02:3C:62:47:41:FD:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 209.178.201.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397253 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:75:e9:e0:6c:72:1d:2a:0d:be:fa:08:12:ce:e0:ae:f8:1a: 05:e9:1e:28:f6:4b:02:f9:3a:89:f2:13:b2:19:a8:83:35:09: 84:d8:c7:d4:ba:01:7f:e6:cf:5a:5d:0c:1d:cf:69:6c:b4:dd: d4:08:61:25:98:a1:f2:4e:58:64:a6:04:27:f1:cb:a6:af:c0: 1c:ea:40:30:cb:9f:e4:2f:f1:95:2e:ec:92:a6:06:0e:6b:aa: b8:6d:a2:de:c5:3e:ac:83:1f:e3:a1:de:bd:d1:29:96:26:7c: 30:05:08:dc:83:e0:8f:1f:a3:a6:5c:77:4f:ac:59:c5:78:0d: f5:53:39:d1:86:6e:2c:b8:02:6c:55:48:e9:a0:48:e4:cb:a7: a4:a6:b4:20:cf:70:e2:a4:e5:e3:a1:ee:41:b5:9b:44:ba:d4: 2b:a9:97:fa:76:70:29:34:b7:d0:51:a4:82:79:21:68:82:cc: 4c:ed:2d:a2:b5:76:42:b5:c7:ad:20:47:54:ca:cf:3d:7a:b0: 44:4c:d4:83:87:33:7d:fb:0b:4e:75:00:44:a9:05:a7:72:9d: 77:9a:d1:2f:a0:a9:d3:36:53:21:b5:97:9d:23:e4:c8:09:67: af:18:25:cb:fe:c5:69:2f:0b:f6:60:82:4a:d9:ea:e2:e3:7e: 18:0d:b9:74 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkv/4xFPTjYV4RRMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNDE3MzE0M1oXDTI3MDYxNzE3MzE0M1owLzEtMCsGA1UEAxMk ODIwNWZjNjEtZWU1ZS00NjM4LThhZDEtYTI0ZDdiOWM5NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg13vJUy78gGhVoV2r430y0k/dhAf45RFY3nf ViYpM1cUrqVIvq0ki2OcvG/T6TCftXb6awRtY73eobzMqYA7bbodH8lnoErbKy6B kTa2cXIixPkBXQu+LFpkclMj8iehHxITMhez80S/e/T04glwGog+aajPukqfKL06 01UC4d4sNr5EaVpHBc7tydrKguxcpYstfSRreggkLw0Kxq+KDiM5n0JUuvokzzCP 2yhmOQx6fbP433+Tb8t912A2NQKrNUnDZdrMd5k7zzlCyTGnZLYJEVdH+8EbGLHq yElZv4PsPsAetwVdm5qMWch7274HBetzxFS4KwqESv18fMbhRQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGwFtoItVdXyKY4V/FACPGJHQf0SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 MjA1ZmM2MS1lZTVlLTQ2MzgtOGFkMS1hMjRkN2I5Yzk0NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzgyMDVmYzYxLWVlNWUtNDYzOC04 YWQxLWEyNGQ3YjljOTQ3NC84MjA1ZmM2MS1lZTVlLTQ2MzgtOGFkMS1hMjRkN2I5 Yzk0NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRsskwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg/FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJZ16eBsch0qDb76CBLO4K74GgXpHij2SwL5OonyE7IZqIM1 CYTYx9S6AX/mz1pdDB3PaWy03dQIYSWYofJOWGSmBCfxy6avwBzqQDDLn+Qv8ZUu 7JKmBg5rqrhtot7FPqyDH+Oh3r3RKZYmfDAFCNyD4I8fo6Zcd0+sWcV4DfVTOdGG biy4AmxVSOmgSOTLp6SmtCDPcOKk5eOh7kG1m0S61Cupl/p2cCk0t9BRpIJ5IWiC zEztLaK1dkK1x60gR1TKzz16sERM1IOHM337C051AESpBadynXea0S+gqdM2UyG1 l50j5MgJZ68YJcv+xWkvC/ZggkrZ6uLjfhgNuXQ= -----END CERTIFICATE-----Generated at Wed May 7 19:42:10 2025 by rpki-client