$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer File: 89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer (raw, json) Hash identifier: RyIZrIEDCaCR1NgmacFGPKw85tyKNZN2Nq6SAwH9kMM= Subject key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B5900DDF6F947FA757C91BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 20:58:27 +0000 Certificate not after: Tue 04 May 2027 19:58:27 +0000 Subordinate resources: AS: 14237 IP: 216.152.248.0/21 IP: 2606:e580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b5:90:0d:df:6f:94:7f:a7:57:c9:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 29 20:58:27 2025 GMT Not After : May 4 19:58:27 2027 GMT Subject: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:50:99:3d:80:47:a1:c1:4e:1d:30:f8:d2: 51:ff:7c:6f:3f:6b:26:3e:69:fe:8e:7a:29:e0:09: 70:90:f8:e9:10:7f:8e:12:62:a2:b1:6c:eb:a3:1c: 79:78:91:a5:59:dc:e7:7f:e5:06:d5:7a:d4:52:b1: e3:c2:ae:2d:6b:2d:78:76:13:bd:ff:bc:e1:0d:e3: 65:1b:e4:eb:38:76:5c:76:79:f9:82:84:74:0d:3f: 2a:2d:59:39:55:cc:0c:db:bf:35:dc:8c:a3:c5:3c: fb:a3:34:a5:cc:4e:dc:b4:11:ec:65:23:a7:4e:b7: 19:9d:78:80:bc:be:3a:d9:8a:db:26:f1:fe:d7:58: cf:59:53:1f:21:6d:c7:fb:09:7b:cc:df:b9:08:b2: 95:38:28:61:6c:6d:49:93:ce:44:48:65:30:0a:b4: b7:a6:ae:9b:5b:7e:0f:e0:5a:b5:6e:cc:bb:33:d8: 83:94:87:08:80:4d:58:07:f6:c7:d3:78:63:8a:6e: 4e:e0:9d:6c:92:09:88:95:c7:f3:e0:c5:4f:7c:48: c1:3e:e7:e7:d9:16:08:68:c2:01:5b:58:58:bb:dd: 44:e2:9f:d4:f2:81:4c:86:52:78:f3:84:ab:da:da: f9:f3:8d:ea:e1:39:8c:8e:9d:cf:cb:7e:7b:be:8d: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 216.152.248.0/21 IPv6: 2606:e580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14237 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a0:b9:24:fd:37:62:cf:fe:8a:4b:ba:18:cf:4c:d1:f8:bd: 19:5c:8e:ce:73:01:0e:03:59:11:64:85:34:41:dd:69:57:5f: ad:75:94:d4:71:92:68:bd:51:96:cc:12:05:e3:1f:a2:5d:05: f5:cd:16:f5:3e:09:2c:af:fe:9c:e2:28:16:3f:4f:cb:2a:a4: c7:67:ef:30:17:fc:69:4c:e2:7f:54:f1:c5:6d:db:97:f1:07: ce:a2:67:64:f0:0c:5e:af:31:ff:3b:be:e0:08:7e:d8:09:cf: 63:7c:cc:6a:ea:96:2c:a2:c7:c5:1a:70:3b:a0:52:16:60:94: 87:d1:66:f6:6d:cf:38:30:34:28:a6:02:d9:c9:2d:c7:58:23: 6c:54:7b:b5:7c:2d:0b:c8:2e:89:80:c4:49:a7:40:8a:5c:a5: ad:18:16:7b:be:74:81:a3:0b:5c:32:cf:ad:62:b7:79:c5:38: 53:01:5a:3b:d7:b3:09:d2:80:be:f8:08:f0:f9:88:ee:f4:f1: e1:d1:53:ab:82:aa:d9:bb:45:75:19:5d:14:9f:4d:68:57:d7: 37:48:eb:f2:77:1e:f6:ec:14:4b:de:90:38:ed:f9:98:34:c6: 0b:8f:07:e5:ea:83:c4:e2:c5:b9:82:6f:10:33:3f:63:d0:c3: 92:a8:ed:97 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEi1kA3fb5R/p1fJG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyOTIwNTgyN1oXDTI3MDUwNDE5NTgyN1owLzEtMCsGA1UEAxMk ODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbdQmT2AR6HBTh0w+NJR/3xvP2smPmn+jnop 4AlwkPjpEH+OEmKisWzroxx5eJGlWdznf+UG1XrUUrHjwq4tay14dhO9/7zhDeNl G+TrOHZcdnn5goR0DT8qLVk5VcwM27813IyjxTz7ozSlzE7ctBHsZSOnTrcZnXiA vL462YrbJvH+11jPWVMfIW3H+wl7zN+5CLKVOChhbG1Jk85ESGUwCrS3pq6bW34P 4Fq1bsy7M9iDlIcIgE1YB/bH03hjim5O4J1skgmIlcfz4MVPfEjBPufn2RYIaMIB W1hYu91E4p/U8oFMhlJ484Sr2tr5843q4TmMjp3Py357vo1mLQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCuuUnnCEE5nBRk8BUy4J+4cpZWrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg5YmUyZWZhLTNjMmYtNDZkMi1i NWU3LWNiOGQ5NTM2OTA2My84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUz NjkwNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPYmPgwDQQCAAIwBwMFACYG5YAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICN50wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh6C5JP03Ys/+iku6GM9M0fi9GVyO znMBDgNZEWSFNEHdaVdfrXWU1HGSaL1RlswSBeMfol0F9c0W9T4JLK/+nOIoFj9P yyqkx2fvMBf8aUzif1TxxW3bl/EHzqJnZPAMXq8x/zu+4Ah+2AnPY3zMauqWLKLH xRpwO6BSFmCUh9Fm9m3PODA0KKYC2cktx1gjbFR7tXwtC8guiYDESadAilylrRgW e750gaMLXDLPrWK3ecU4UwFaO9ezCdKAvvgI8PmI7vTx4dFTq4Kq2btFdRldFJ9N aFfXN0jr8nce9uwUS96QOO35mDTGC48H5eqDxOLFuYJvEDM/Y9DDkqjtlw== -----END CERTIFICATE-----Generated at Fri May 9 10:22:04 2025 by rpki-client