$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer File: b676c353-1e86-47cb-b6c0-e0f33199eecd.cer (raw, json) Hash identifier: gMMrjHJLCG/0gXH9zJGPCY4w0vaKWgFpqcyWwKnE19E= Subject key identifier: 3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487AA3AF5604180CDB98C56F50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 18:25:19 +0000 Certificate not after: Tue 13 Apr 2027 17:25:19 +0000 Subordinate resources: AS: 401564 IP: 63.247.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:a3:af:56:04:18:0c:db:98:c5:6f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 8 18:25:19 2025 GMT Not After : Apr 13 17:25:19 2027 GMT Subject: CN=b676c353-1e86-47cb-b6c0-e0f33199eecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:89:38:cf:c4:f5:f4:52:b0:41:92:81:6c: 80:24:f2:4b:55:45:b4:80:9d:f1:bb:79:8f:57:f6: 40:41:29:4a:64:c6:ca:48:90:31:9f:43:64:3e:91: 40:df:70:31:7f:b9:62:3e:89:02:e4:cf:e9:ef:ee: 09:d5:00:fa:f7:f2:06:e5:36:18:d8:db:bb:72:9e: ed:e1:58:a4:81:54:9f:61:b3:64:ab:df:56:30:29: 95:22:6f:89:9a:db:aa:09:f9:c2:d7:60:de:51:ce: 4d:98:69:96:0f:57:d4:ef:65:67:a6:79:09:68:e0: 87:18:83:e8:13:ed:ab:b2:45:3e:1f:56:21:b5:e7: f2:f1:64:8f:de:b8:e1:46:82:60:b1:17:a7:11:89: 72:59:6b:24:0d:30:76:ce:3c:72:71:ec:aa:8f:fc: 59:8b:4d:90:e5:31:30:aa:a8:c9:46:99:43:f9:e3: dd:5a:21:3a:8b:49:69:1a:d4:37:0a:4a:ab:cd:75: 96:ae:e3:65:4b:44:a4:fc:20:28:14:02:42:06:94: d0:87:cc:b6:fc:c8:ff:94:64:f8:61:7f:51:db:4a: 5d:b7:43:44:f4:f7:c7:80:12:21:e9:d1:3e:8e:cc: b0:60:2b:79:b7:39:87:c2:75:63:b7:50:fb:f1:19: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 63.247.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401564 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5e:a0:8b:fd:c8:ae:0d:e4:81:e8:72:d2:3e:ff:8b:ac:0d: 55:f6:f2:2d:2d:81:33:ed:4d:09:72:1a:d6:e7:a9:76:c8:53: 66:bd:00:03:f7:cd:07:b9:68:5d:6d:32:6b:6b:93:c3:46:5e: b5:a3:fa:7c:2c:3c:f0:e9:4c:00:91:e2:e6:eb:43:06:14:88: 57:6a:71:95:3d:e5:ab:aa:c9:87:37:92:f2:3d:f9:3f:0e:b9: 1f:7a:af:f8:0e:3d:1b:12:22:7a:52:42:33:f3:71:b7:c8:c9: 3f:82:f0:30:74:e8:03:a8:9d:12:1c:12:ba:f7:b5:be:03:c2: 1f:db:2a:68:74:ba:0a:d2:8e:f3:25:6e:bc:bd:85:c2:e8:21: a5:8c:88:c2:4f:0a:38:16:87:8b:ad:2c:c9:64:45:e3:ae:e1: 0d:6e:1b:c4:4c:34:c2:29:e0:94:93:ac:f2:8d:14:5f:7f:61: f1:70:e2:97:86:f9:18:35:7d:f4:30:2a:1b:ce:f4:ae:cb:a6: 78:02:e3:8b:44:64:1b:29:2a:5e:d9:04:c2:1d:eb:4f:c7:c1: e6:85:75:ce:76:01:4c:60:52:4d:e3:d1:06:8b:bf:08:a5:bf: 6c:dd:7a:41:3b:5e:b5:3a:02:3e:f1:6a:a0:e5:4c:7d:d7:ec: 55:63:40:37 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEh6o69WBBgM25jFb1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwODE4MjUxOVoXDTI3MDQxMzE3MjUxOVowLzEtMCsGA1UEAxMk YjY3NmMzNTMtMWU4Ni00N2NiLWI2YzAtZTBmMzMxOTllZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7uJOM/E9fRSsEGSgWyAJPJLVUW0gJ3xu3mP V/ZAQSlKZMbKSJAxn0NkPpFA33Axf7liPokC5M/p7+4J1QD69/IG5TYY2Nu7cp7t 4VikgVSfYbNkq99WMCmVIm+JmtuqCfnC12DeUc5NmGmWD1fU72VnpnkJaOCHGIPo E+2rskU+H1Yhtefy8WSP3rjhRoJgsRenEYlyWWskDTB2zjxyceyqj/xZi02Q5TEw qqjJRplD+ePdWiE6i0lpGtQ3CkqrzXWWruNlS0Sk/CAoFAJCBpTQh8y2/Mj/lGT4 YX9R20pdt0NE9PfHgBIh6dE+jsywYCt5tzmHwnVjt1D78Rn6PQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDzsjugPT2d0xFCNMynwP4jU6C/wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Njc2YzM1My0xZTg2LTQ3Y2ItYjZjMC1lMGYzMzE5OWVlY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2NzZjMzUzLTFlODYtNDdjYi1i NmMwLWUwZjMzMTk5ZWVjZC9iNjc2YzM1My0xZTg2LTQ3Y2ItYjZjMC1lMGYzMzE5 OWVlY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAU/9+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiCcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADReoIv9yK4N5IHoctI+/4usDVX28i0tgTPtTQlyGtbnqXbI U2a9AAP3zQe5aF1tMmtrk8NGXrWj+nwsPPDpTACR4ubrQwYUiFdqcZU95auqyYc3 kvI9+T8OuR96r/gOPRsSInpSQjPzcbfIyT+C8DB06AOonRIcErr3tb4Dwh/bKmh0 ugrSjvMlbry9hcLoIaWMiMJPCjgWh4utLMlkReOu4Q1uG8RMNMIp4JSTrPKNFF9/ YfFw4peG+Rg1ffQwKhvO9K7LpngC44tEZBspKl7ZBMId60/HweaFdc52AUxgUk3j 0QaLvwilv2zdekE7XrU6Aj7xaqDlTH3X7FVjQDc= -----END CERTIFICATE-----Generated at Fri May 9 23:49:49 2025 by rpki-client