$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer File: 8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer (raw, json) Hash identifier: G4VCoBhoyXOQfTQKjvGkW8xJcA668OXsKQZ35rabOVA= Subject key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584890B4261EB46F7B65398E5900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Jan 2025 16:06:16 +0000 Certificate not after: Wed 21 Apr 2027 15:06:16 +0000 Subordinate resources: AS: 30011 IP: 162.118.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:b4:26:1e:b4:6f:7b:65:39:8e:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 16 16:06:16 2025 GMT Not After : Apr 21 15:06:16 2027 GMT Subject: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:5b:83:c4:04:7d:36:90:1d:5e:bc:a6:fb: b6:50:90:ab:fb:50:35:fd:17:54:51:f9:48:97:46: 72:92:0f:ae:95:ed:0d:bf:a8:5a:88:c4:31:5c:df: 1d:b7:e3:0c:7a:25:e9:2e:b4:4b:e9:6a:47:1b:b9: 22:92:58:11:32:89:74:6c:50:e0:bf:22:ca:47:9d: d8:0d:5d:1e:7f:cf:12:ec:a6:4a:21:f6:35:ac:51: 52:b5:95:77:7b:09:ca:a9:d4:4a:b9:3d:2a:84:0e: 0d:13:48:c5:a6:f4:3c:ea:27:77:09:c9:e1:1c:fe: d0:82:96:ee:fd:56:f6:1d:67:04:8e:10:d2:26:00: 74:2b:3e:ef:58:e7:16:69:94:b3:95:39:72:e4:8d: 9a:29:21:33:41:4b:bd:61:b8:a8:d3:45:0b:11:73: 16:1c:01:1d:75:f6:3e:53:11:98:3f:1d:1e:d8:8e: fb:b4:9a:c7:97:c3:4f:96:58:59:ae:e7:80:ea:cd: 27:dc:de:a9:63:85:31:af:42:35:aa:a1:ae:15:38: 31:96:31:b5:ae:2d:e5:ee:c6:cd:3e:9c:06:14:d6: 0c:16:6a:cf:d2:56:c6:17:ce:d7:f8:a1:3a:ef:5e: 3a:a6:64:43:d5:1b:42:bf:73:7b:c1:29:3d:23:58: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.118.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30011 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fd:ba:7b:c0:e5:be:50:3b:8c:1d:4b:02:a8:05:18:2c:88: 26:43:67:4e:59:db:67:b3:56:3b:8b:ca:b9:e9:bd:a9:97:1f: 88:e2:b7:7e:0a:01:42:b0:93:79:a1:54:39:32:fc:30:64:4e: 2c:f5:b3:12:ff:37:d4:5c:d4:44:48:03:5c:91:ca:64:d1:61: bb:8b:c5:b0:c9:1f:f2:73:a0:84:4f:ce:8a:2b:61:a4:e3:40: 12:8a:69:9f:dc:24:04:3f:7e:56:65:7e:ec:83:7e:27:b0:2f: ce:bb:cf:79:a0:c7:1e:67:eb:20:7e:da:40:42:cb:13:70:56: 28:49:c4:2a:4a:88:3a:87:1a:ee:0c:c4:32:8f:4f:1e:93:16: 3f:f1:7e:21:eb:77:57:06:44:d7:34:84:6a:d6:11:23:15:43: 63:f1:e5:05:f8:54:d1:4e:35:d3:0b:ad:73:b4:31:46:45:ed: c7:f4:c8:93:f7:b5:1a:20:2b:8d:ae:a3:fa:7a:4b:2e:4b:78: 0d:1a:2e:50:fe:de:c9:fe:8c:21:5f:1f:55:6b:af:2a:1e:c3: 41:0b:f3:7f:8c:31:6e:3c:5d:7e:13:a1:1a:d7:48:55:f8:3c: 81:7b:b4:68:38:53:ab:7e:98:a6:90:d6:60:f1:82:6f:9c:28: 92:13:bc:5b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEiQtCYetG97ZTmOWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDExNjE2MDYxNloXDTI3MDQyMTE1MDYxNlowLzEtMCsGA1UEAxMk OGE4NDQzZDEtNWM3Yy00NGViLTgyMmMtNjJhMWExNDIzYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNbg8QEfTaQHV68pvu2UJCr+1A1/RdUUflI l0Zykg+ule0Nv6haiMQxXN8dt+MMeiXpLrRL6WpHG7kiklgRMol0bFDgvyLKR53Y DV0ef88S7KZKIfY1rFFStZV3ewnKqdRKuT0qhA4NE0jFpvQ86id3CcnhHP7Qgpbu /Vb2HWcEjhDSJgB0Kz7vWOcWaZSzlTly5I2aKSEzQUu9Ybio00ULEXMWHAEddfY+ UxGYPx0e2I77tJrHl8NPllhZrueA6s0n3N6pY4Uxr0I1qqGuFTgxljG1ri3l7sbN PpwGFNYMFmrP0lbGF87X+KE67146pmRD1RtCv3N7wSk9I1gM7wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDLLgEMD2Wm2HRFNi81hPZY1IAvFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YTg0NDNkMS01YzdjLTQ0ZWItODIyYy02MmExYTE0MjNhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhhODQ0M2QxLTVjN2MtNDRlYi04 MjJjLTYyYTFhMTQyM2EyYi84YTg0NDNkMS01YzdjLTQ0ZWItODIyYy02MmExYTE0 MjNhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASidhAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dTswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAaf26e8DlvlA7jB1LAqgFGCyIJkNnTlnbZ7NWO4vKuem9qZcf iOK3fgoBQrCTeaFUOTL8MGROLPWzEv831FzUREgDXJHKZNFhu4vFsMkf8nOghE/O iithpONAEoppn9wkBD9+VmV+7IN+J7AvzrvPeaDHHmfrIH7aQELLE3BWKEnEKkqI Ooca7gzEMo9PHpMWP/F+Iet3VwZE1zSEatYRIxVDY/HlBfhU0U410wutc7QxRkXt x/TIk/e1GiArja6j+npLLkt4DRouUP7eyf6MIV8fVWuvKh7DQQvzf4wxbjxdfhOh GtdIVfg8gXu0aDhTq36YppDWYPGCb5wokhO8Ww== -----END CERTIFICATE-----Generated at Mon May 5 22:54:36 2025 by rpki-client