$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer File: f9441892-5f50-4eb3-a218-8dada1be8f65.cer (raw, json) Hash identifier: Kc4zbvc8BrfXGfImDETrucFvzKbQC/CqlWUrJftsE1c= Subject key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584913FD46D9577C43F1212DDAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 16:44:30 +0000 Certificate not after: Mon 07 Jun 2027 15:44:30 +0000 Subordinate resources: AS: 62640 IP: 162.218.192.0/21 IP: 2605:540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:fd:46:d9:57:7c:43:f1:21:2d:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 4 16:44:30 2025 GMT Not After : Jun 7 15:44:30 2027 GMT Subject: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6a:37:98:65:a8:2a:74:24:d7:dc:3a:2e:33: fb:55:dc:96:cf:5d:07:08:25:0c:20:c4:bf:c2:a4: a9:1e:cc:5c:8c:6e:77:c1:81:52:27:c4:32:97:0a: 9c:1f:48:38:d7:8e:ef:ed:f1:b4:1f:0b:cd:cd:e6: f7:12:f2:11:38:64:46:86:74:1f:3c:f1:9d:70:dc: bd:5f:8e:84:d2:a7:3d:60:36:dc:0a:ed:b1:f9:9c: 41:24:83:87:2a:c2:f4:3d:aa:39:c5:b4:b5:30:d6: d6:ea:d5:1c:4e:77:c7:88:2f:23:ed:37:b5:c0:27: 7f:5c:57:ed:81:3e:26:99:14:c5:72:62:8a:75:7a: c1:9c:81:76:78:80:ae:d7:f8:c5:e1:91:9b:b2:62: 8a:98:7b:50:0f:e7:96:b2:f4:c9:23:2e:47:77:1e: 57:0e:70:54:28:5f:43:31:36:dc:b1:82:1e:2d:0f: ca:42:d6:e0:24:f8:16:12:f6:99:73:0d:93:04:17: 3f:8c:0e:be:d8:34:3b:ab:ed:db:34:f2:59:2d:dd: 58:9a:8f:38:3e:5b:b7:85:83:89:b2:91:f3:7a:a6: 9c:31:3b:7b:bd:79:cf:18:97:a6:30:f5:da:e3:f2: 9a:c0:db:32:35:ff:0b:68:5e:3f:99:0d:84:45:72: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 162.218.192.0/21 IPv6: 2605:540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62640 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d3:68:70:86:39:6b:df:1e:4b:19:24:7b:f9:d5:bd:a1:90: be:b3:77:d2:d3:30:c1:8f:33:ce:13:99:5b:06:9a:23:d9:07: 55:10:32:9a:a3:d6:6f:9c:d9:8c:6e:b4:7e:db:8d:76:e8:35: c5:76:f8:6c:12:bc:a4:02:7b:b6:ee:d6:56:53:12:81:be:2f: 86:83:e4:f9:ed:14:b7:73:7d:56:25:a3:60:4a:2c:b1:2c:78: 83:40:ed:98:85:5f:28:5c:6f:88:65:7b:2c:12:43:af:d2:79: 5b:0c:b5:c6:cf:58:b9:69:9c:69:e3:38:ee:5f:d5:66:05:ad: 50:96:a3:ac:9b:b7:58:05:d7:d7:ea:71:4a:f3:2f:1b:40:ca: 6a:9e:8d:c9:34:ac:e9:93:e2:dd:6e:be:b4:8f:19:42:da:6b: e8:30:15:a0:61:68:a3:90:fb:b1:32:49:cc:dc:55:13:31:ec: f4:1d:d1:72:32:ef:73:87:9f:8d:2f:c6:ff:23:b3:25:fa:a6: a1:7e:b8:bb:05:5d:1e:83:4a:32:7d:aa:9b:e0:26:a8:4e:b6: 3e:ef:90:c2:0b:20:ad:c0:8b:42:5f:5a:b4:31:c1:cb:f2:51: 44:af:b7:c9:60:1a:d9:6d:cd:b0:7a:df:dc:ab:cf:e9:a7:86: a2:8c:2a:46 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkT/UbZV3xD8SEt2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNDE2NDQzMFoXDTI3MDYwNzE1NDQzMFowLzEtMCsGA1UEAxMk Zjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimo3mGWoKnQk19w6LjP7VdyWz10HCCUMIMS/ wqSpHsxcjG53wYFSJ8QylwqcH0g4147v7fG0HwvNzeb3EvIROGRGhnQfPPGdcNy9 X46E0qc9YDbcCu2x+ZxBJIOHKsL0Pao5xbS1MNbW6tUcTnfHiC8j7Te1wCd/XFft gT4mmRTFcmKKdXrBnIF2eICu1/jF4ZGbsmKKmHtQD+eWsvTJIy5Hdx5XDnBUKF9D MTbcsYIeLQ/KQtbgJPgWEvaZcw2TBBc/jA6+2DQ7q+3bNPJZLd1Ymo84Plu3hYOJ spHzeqacMTt7vXnPGJemMPXa4/KawNsyNf8LaF4/mQ2ERXJUrQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFoSv01z/ZhAYDBW17Y8vJ43qrPJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m OTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y5NDQxODkyLTVmNTAtNGViMy1h MjE4LThkYWRhMWJlOGY2NS9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFi ZThmNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOi2sAwDQQCAAIwBwMFACYFBUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPSwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFTTaHCGOWvfHksZJHv51b2hkL6z d9LTMMGPM84TmVsGmiPZB1UQMpqj1m+c2YxutH7bjXboNcV2+GwSvKQCe7bu1lZT EoG+L4aD5PntFLdzfVYlo2BKLLEseINA7ZiFXyhcb4hleywSQ6/SeVsMtcbPWLlp nGnjOO5f1WYFrVCWo6ybt1gF19fqcUrzLxtAymqejck0rOmT4t1uvrSPGULaa+gw FaBhaKOQ+7EySczcVRMx7PQd0XIy73OHn40vxv8jsyX6pqF+uLsFXR6DSjJ9qpvg JqhOtj7vkMILIK3Ai0JfWrQxwcvyUUSvt8lgGtltzbB639yrz+mnhqKMKkY= -----END CERTIFICATE-----Generated at Sat May 10 10:31:19 2025 by rpki-client