$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer File: d648fae7-947d-4ab0-9d26-c1da38e440ef.cer (raw, json) Hash identifier: aC7Si1UYgowiIY09w24o1+ObTBXe1S76SQAFt8ZlCzo= Subject key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285849304DCBCE3297CE376F8A9DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 20:09:23 +0000 Certificate not after: Thu 17 Jun 2027 20:09:23 +0000 Subordinate resources: AS: 400033 IP: 172.82.104.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:4d:cb:ce:32:97:ce:37:6f:8a:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 20:09:23 2025 GMT Not After : Jun 17 20:09:23 2027 GMT Subject: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:1b:e5:67:ad:36:1d:e2:ef:39:e3:d9:47: 97:c9:3d:fe:6c:19:32:27:27:84:82:ac:b4:08:6a: 2f:01:bb:ed:40:5d:69:22:95:87:75:09:48:9d:7b: c7:0c:ec:c7:62:72:69:4c:86:57:f2:12:25:45:67: 05:cf:65:e7:67:84:92:b0:88:b1:3b:5a:d0:bf:37: e2:0b:f1:01:5e:43:9d:55:5b:00:5c:6a:33:f3:ad: 41:a0:44:5c:dc:c0:3b:d7:48:ee:e5:5e:c2:76:57: fa:44:50:d7:39:f9:ad:93:fe:74:ec:2d:63:01:fb: 78:a9:38:0f:55:9e:75:0e:84:e3:fd:a8:47:28:eb: 81:99:e4:bd:48:de:f8:30:fc:2d:43:b1:1c:0a:bf: 0e:dd:d0:d2:af:f2:9c:1a:48:69:b6:96:26:05:cc: 23:68:fb:55:32:98:07:af:07:62:01:31:e0:e5:59: 16:7d:e8:43:d0:af:89:7c:85:38:3c:a4:84:dd:1e: 82:6d:d1:2c:76:7c:c7:d3:64:4f:08:27:b7:b2:9a: 3b:88:1e:6f:17:3b:41:c7:41:df:86:ef:5e:fc:39: 1b:c8:94:c3:29:28:69:38:52:f5:02:4d:a1:37:4f: 2c:ca:de:dc:f5:c4:38:a6:b0:4c:0e:9b:e2:11:21: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 172.82.104.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400033 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:19:1c:dc:83:b8:6a:9f:02:0d:2f:67:7a:2c:c4:ee:48:d3: 43:1f:c6:37:88:3b:d5:f0:66:bc:c4:f5:92:c2:48:a8:bf:1d: 2c:7f:d2:b1:9a:80:b0:c8:f9:1b:5b:18:64:63:cd:1b:60:6f: 4d:8b:78:a5:60:07:3e:70:ae:1e:9d:e3:15:5c:29:c3:8d:b1: 64:0c:3d:f3:d0:b4:91:d6:3e:27:82:57:41:81:70:37:42:01: aa:0e:df:ad:96:9f:9b:af:62:7e:d8:39:d9:26:c7:b9:47:a6: 48:2f:f6:0d:28:4e:46:e0:62:e6:b7:8f:9f:84:f8:d6:de:2f: 2b:c9:8b:40:5d:34:32:00:cd:56:16:80:af:d1:18:c2:69:d5: 7c:14:99:2d:37:d7:6a:11:19:9d:37:f0:9c:c2:fa:c2:4d:af: b9:a2:cf:62:a4:23:13:1a:89:1d:b8:64:04:d1:66:b4:0f:dd: 84:c3:af:2c:88:d8:04:68:48:6b:0f:b6:3f:58:5e:ca:60:5a: 8f:46:5c:4f:75:38:29:05:f7:ac:73:a3:24:9b:9d:f7:c5:4f: fc:ff:f2:92:85:4b:7a:d9:3a:ee:3b:e2:12:67:8c:e1:a4:37: 45:da:fc:45:6f:ad:96:89:85:05:75:3f:fc:4a:8c:fb:dd:10: 6f:3b:38:0a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkwTcvOMpfON2+KncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNDIwMDkyM1oXDTI3MDYxNzIwMDkyM1owLzEtMCsGA1UEAxMk ZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk4b5WetNh3i7znj2UeXyT3+bBkyJyeEgqy0 CGovAbvtQF1pIpWHdQlInXvHDOzHYnJpTIZX8hIlRWcFz2XnZ4SSsIixO1rQvzfi C/EBXkOdVVsAXGoz861BoERc3MA710ju5V7Cdlf6RFDXOfmtk/507C1jAft4qTgP VZ51DoTj/ahHKOuBmeS9SN74MPwtQ7EcCr8O3dDSr/KcGkhptpYmBcwjaPtVMpgH rwdiATHg5VkWfehD0K+JfIU4PKSE3R6CbdEsdnzH02RPCCe3spo7iB5vFztBx0Hf hu9e/DkbyJTDKShpOFL1Ak2hN08syt7c9cQ4prBMDpviESGvRQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIDzoMqdoOL7qdqPATvO3ON/wMbiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k NjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2NDhmYWU3LTk0N2QtNGFiMC05 ZDI2LWMxZGEzOGU0NDBlZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhl NDQwZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACsUmgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhqhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADEZHNyDuGqfAg0vZ3osxO5I00MfxjeIO9XwZrzE9ZLCSKi/ HSx/0rGagLDI+RtbGGRjzRtgb02LeKVgBz5wrh6d4xVcKcONsWQMPfPQtJHWPieC V0GBcDdCAaoO362Wn5uvYn7YOdkmx7lHpkgv9g0oTkbgYua3j5+E+NbeLyvJi0Bd NDIAzVYWgK/RGMJp1XwUmS0312oRGZ038JzC+sJNr7miz2KkIxMaiR24ZATRZrQP 3YTDryyI2ARoSGsPtj9YXspgWo9GXE91OCkF96xzoySbnffFT/z/8pKFS3rZOu47 4hJnjOGkN0Xa/EVvrZaJhQV1P/xKjPvdEG87OAo= -----END CERTIFICATE-----Generated at Tue May 6 16:11:08 2025 by rpki-client