$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c.cer File: c43461c6-7f30-4e29-b5d4-59628f6d093c.cer (raw, json) Hash identifier: 82muJA6MQu6AsMrCfpwP2+Km1iZ3htYfgj5vW4dK11k= Subject key identifier: 96:26:92:EF:EC:36:EB:8F:D4:04:C5:88:12:1D:2E:40:01:BF:D9:BA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858493DF099A0CF42D83844234680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/c43461c6-7f30-4e29-b5d4-59628f6d093c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Mar 2025 17:22:55 +0000 Certificate not after: Tue 22 Jun 2027 17:22:55 +0000 Subordinate resources: AS: 15211 AS: 394628 IP: 74.122.184.0/21 IP: 135.84.132.0/22 IP: 2620:30::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3d:f0:99:a0:cf:42:d8:38:44:23:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 19 17:22:55 2025 GMT Not After : Jun 22 17:22:55 2027 GMT Subject: CN=c43461c6-7f30-4e29-b5d4-59628f6d093c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d4:93:ea:f6:18:3a:79:c9:dc:5b:cd:1f:95: b6:78:ec:5c:82:5c:72:04:a6:fe:bc:a9:23:7b:94: 15:d1:e7:03:f2:76:72:0f:53:82:48:79:8f:ee:35: 06:5f:0c:5f:7c:2c:8c:c2:6a:e0:0f:fd:43:75:8d: b2:71:50:21:37:67:1f:12:d8:8c:f5:3e:e1:33:a9: bb:bb:01:d6:a4:17:b7:0f:35:4e:be:c7:b6:cf:c9: 1b:76:11:a1:17:d3:32:4a:3d:ac:70:98:29:1d:ee: 48:73:5d:bd:d1:3a:a8:db:84:f1:3e:db:29:6f:b6: d1:91:7f:bc:78:fa:84:6f:5a:77:c0:70:a3:cf:b3: 2c:12:64:4d:d2:f0:15:02:50:9a:b4:50:4c:22:9d: 63:4b:eb:4b:e9:1c:9a:37:52:f8:2c:ce:86:81:cb: 62:23:ed:73:09:86:59:1a:c4:bf:a6:85:e9:9c:e4: 4c:fe:60:c3:56:72:53:11:a5:fa:86:24:6e:b7:b6: 12:64:40:eb:45:70:21:dc:1c:5f:42:09:05:ce:cd: 38:2d:53:bc:d6:53:79:c9:22:55:5a:cd:45:3f:91: 36:75:67:5d:49:14:8f:3c:d5:4b:99:95:23:38:81: 2a:53:80:ce:bd:0d:22:79:e3:a6:82:fc:f1:02:b0: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:92:EF:EC:36:EB:8F:D4:04:C5:88:12:1D:2E:40:01:BF:D9:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43461c6-7f30-4e29-b5d4-59628f6d093c/c43461c6-7f30-4e29-b5d4-59628f6d093c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 74.122.184.0/21 135.84.132.0/22 IPv6: 2620:30::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15211 394628 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9f:d4:a5:06:cd:64:42:00:8c:bf:58:55:66:f3:7a:74:cb: 62:9b:ae:ca:60:1f:ba:25:c6:98:ba:25:9e:0b:15:b9:9d:e1: f4:c3:bb:c3:7b:af:b7:63:e8:7f:72:fb:50:e4:b5:6a:36:fa: 5c:c7:ba:e4:c3:f6:f9:44:04:ce:4e:f9:b1:03:d2:4d:71:b3: 31:6e:27:0a:55:64:a5:2a:68:08:6b:bf:42:b0:3e:24:80:ea: 00:45:b0:aa:fa:ee:e5:c8:83:d4:0e:c6:93:f3:67:53:c2:83: 2b:9b:30:de:7a:44:ee:5f:d5:bc:86:ad:85:cc:40:6d:14:43: dc:ec:8e:75:3d:ea:40:a6:0f:51:3b:07:ce:c2:fc:22:02:66: f7:1c:53:df:62:65:3f:12:d7:aa:3f:79:fd:4f:72:a7:37:57: 25:11:0d:72:4b:8e:70:cf:27:f8:07:68:13:1e:fc:d3:af:ef: ba:70:1a:76:4a:e8:f3:69:cf:7b:21:8f:d7:f7:0b:03:8e:22: ac:6b:c3:a2:f0:72:07:93:5a:92:28:fd:15:1d:7f:a8:68:df: c0:a7:c3:40:3f:c9:6b:12:93:eb:84:f0:62:ff:67:33:7e:36: 06:ad:e5:22:51:e7:bc:9e:a2:28:af:6e:93:7c:9c:56:6e:b5: d2:b9:23:84 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEk98Jmgz0LYOEQjRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxOTE3MjI1NVoXDTI3MDYyMjE3MjI1NVowLzEtMCsGA1UEAxMk YzQzNDYxYzYtN2YzMC00ZTI5LWI1ZDQtNTk2MjhmNmQwOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNST6vYYOnnJ3FvNH5W2eOxcglxyBKb+vKkj e5QV0ecD8nZyD1OCSHmP7jUGXwxffCyMwmrgD/1DdY2ycVAhN2cfEtiM9T7hM6m7 uwHWpBe3DzVOvse2z8kbdhGhF9MySj2scJgpHe5Ic1290Tqo24TxPtspb7bRkX+8 ePqEb1p3wHCjz7MsEmRN0vAVAlCatFBMIp1jS+tL6RyaN1L4LM6GgctiI+1zCYZZ GsS/poXpnORM/mDDVnJTEaX6hiRut7YSZEDrRXAh3BxfQgkFzs04LVO81lN5ySJV Ws1FP5E2dWddSRSPPNVLmZUjOIEqU4DOvQ0ieeOmgvzxArBD+wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJYmku/sNuuP1ATFiBIdLkABv9m6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NDM0NjFjNi03ZjMwLTRlMjktYjVkNC01OTYyOGY2ZDA5M2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M0MzQ2MWM2LTdmMzAtNGUyOS1i NWQ0LTU5NjI4ZjZkMDkzYy9jNDM0NjFjNi03ZjMwLTRlMjktYjVkNC01OTYyOGY2 ZDA5M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBANKergDBAKHVIQwDwQCAAIwCQMHBCYgADAAADAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgI7awIDBgWEMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGif1KUGzWRC AIy/WFVm83p0y2KbrspgH7olxpi6JZ4LFbmd4fTDu8N7r7dj6H9y+1DktWo2+lzH uuTD9vlEBM5O+bED0k1xszFuJwpVZKUqaAhrv0KwPiSA6gBFsKr67uXIg9QOxpPz Z1PCgyubMN56RO5f1byGrYXMQG0UQ9zsjnU96kCmD1E7B87C/CICZvccU99iZT8S 16o/ef1Pcqc3VyURDXJLjnDPJ/gHaBMe/NOv77pwGnZK6PNpz3shj9f3CwOOIqxr w6LwcgeTWpIo/RUdf6ho38Cnw0A/yWsSk+uE8GL/ZzN+Ngat5SJR57yeoiivbpN8 nFZutdK5I4Q= -----END CERTIFICATE-----Generated at Tue May 6 10:48:50 2025 by rpki-client