$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft File: ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft (raw, json) Hash identifier: aVUnYaM5gMT1zHrcGpvKBPPzj5ScBXOVAuId4SK/+xo= Subject key identifier: EE:BA:97:0A:49:6F:1D:63:88:4B:3F:81:C4:13:5F:2A:29:74:58:07 Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F432858497AD93EF7873B3D178FCC9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft Manifest number: 010D0C9F4328584073A8555E8FD3615D57A33CCF Signing time: Thu 10 Apr 2025 13:00:07 +0000 Manifest this update: Thu 10 Apr 2025 13:00:07 +0000 Manifest next update: Sat 12 Apr 2025 13:00:00 +0000 Files and hashes: 1: 14516a78-5003-3ee4-a230-723f4f86845d.roa (hash: OGW1/QJgLwd1aomYBkSLHhycGfswYYzItU2iIU0ScK0=) 2: ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl (hash: plT9n/4BaDGJG0aQ0KZuAfYegZVhZSgR8nEpy6Eoz9k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:3e:f7:87:3b:3d:17:8f:cc:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Apr 10 13:00:07 2025 GMT Not After : Apr 12 13:00:00 2025 GMT Subject: CN=4b49c446-1c00-4fb8-b2ff-3ca93a3236e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:0d:74:63:d8:9c:52:33:1f:a6:6d:e5:72: 87:14:28:b4:23:60:f2:1f:5c:f2:73:be:c9:03:d2: 0e:8f:da:75:4f:0a:5c:cc:52:a9:75:75:42:fa:1c: f3:e2:c8:5f:64:23:1b:69:0c:fa:0a:7f:37:b3:46: b9:c7:68:a2:c3:b9:62:5e:e1:08:ae:85:de:ba:8b: a8:19:16:55:fd:4b:3e:1c:14:78:11:0c:ee:11:b6: 3f:b8:1e:f4:de:d9:3d:be:ff:1c:94:d5:e9:58:d0: 2e:3e:5c:93:0a:6d:fc:a5:39:60:d6:9a:d9:94:25: 91:a9:34:a3:9d:b2:9a:b2:c3:16:31:5f:be:d1:b3: 64:da:44:cd:f8:cc:74:d3:0f:62:2d:08:ca:97:97: 6c:b1:24:74:15:30:e0:96:b1:7a:76:b3:66:8f:9a: d7:f5:77:f1:e8:90:2d:07:f8:e0:0b:16:1b:3b:9b: f8:42:96:ab:6c:cf:26:b7:24:91:86:44:fe:68:c9: 14:2a:61:40:b1:18:13:a5:87:2f:d6:19:c4:93:49: 63:ca:7d:20:e1:4d:03:09:00:d9:cb:dc:81:03:07: 15:ed:f0:d7:5f:1f:cc:e6:f6:28:31:c4:c6:d5:0f: 1f:de:0f:49:02:7c:ba:10:c5:13:c8:ab:92:f1:15: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:97:0A:49:6F:1D:63:88:4B:3F:81:C4:13:5F:2A:29:74:58:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b1:16:d5:9d:36:70:c0:7b:fb:78:20:ab:32:2b:25:7b:71: 47:4a:97:08:b1:67:18:62:eb:d3:f9:6f:79:85:43:a9:b0:e7: 02:06:63:1d:ce:8f:da:8f:67:95:0b:32:59:51:a5:79:fe:3f: a9:5a:af:be:1e:b2:d4:51:93:6a:ef:e6:39:f6:50:4c:b9:96: 5b:d6:6c:7e:0d:8d:b6:3b:40:10:5f:b8:51:30:cc:e2:89:91: d6:20:fc:1b:36:86:ed:29:42:e1:a6:46:b3:07:57:ea:30:16: 0b:e3:4d:b6:f9:33:57:59:22:4c:97:21:12:a8:89:f7:7a:fe: 54:b1:07:5b:cc:40:40:8f:9b:29:c2:34:4a:61:fb:a4:4e:32: f0:65:a1:9b:08:b1:40:b4:79:fb:4f:a2:3b:61:0d:e1:38:ee: ea:ea:ff:e7:37:ab:5e:81:10:a9:5a:ef:0c:e3:49:83:7b:54: 99:13:35:4b:cf:79:2a:7c:fe:50:6b:84:2d:dd:83:a5:bb:10: 1b:18:30:29:f5:c8:a8:58:00:7d:b1:ea:b0:cf:06:3a:ca:c4: 16:36:92:2a:9a:8f:94:ab:b5:f5:00:df:85:86:b1:4d:82:61: 84:1e:f5:d3:29:ed:b8:c8:ef:af:db:4e:fa:73:9f:d7:fa:7b: a9:dc:5a:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl62T73hzs9F4/MlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI1MDQxMDEzMDAwN1oXDTI1MDQxMjEzMDAwMFowLzEtMCsGA1UEAxMk NGI0OWM0NDYtMWMwMC00ZmI4LWIyZmYtM2NhOTNhMzIzNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4wNdGPYnFIzH6Zt5XKHFCi0I2DyH1zyc77J A9IOj9p1TwpczFKpdXVC+hzz4shfZCMbaQz6Cn83s0a5x2iiw7liXuEIroXeuouo GRZV/Us+HBR4EQzuEbY/uB703tk9vv8clNXpWNAuPlyTCm38pTlg1prZlCWRqTSj nbKassMWMV++0bNk2kTN+Mx00w9iLQjKl5dssSR0FTDglrF6drNmj5rX9Xfx6JAt B/jgCxYbO5v4QparbM8mtySRhkT+aMkUKmFAsRgTpYcv1hnEk0ljyn0g4U0DCQDZ y9yBAwcV7fDXXx/M5vYoMcTG1Q8f3g9JAny6EMUTyKuS8RU1JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO66lwpJbx1jiEs/gcQTXyopdFgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvYmE0MzRmYjMtMTQ2Yi00 YmM1LWE4Y2QtMzhkZGYxNjAzNDcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSsRbVnTZwwHv7eCCrMisl e3FHSpcIsWcYYuvT+W95hUOpsOcCBmMdzo/aj2eVCzJZUaV5/j+pWq++HrLUUZNq 7+Y59lBMuZZb1mx+DY22O0AQX7hRMMziiZHWIPwbNobtKULhpkazB1fqMBYL4022 +TNXWSJMlyESqIn3ev5UsQdbzEBAj5spwjRKYfukTjLwZaGbCLFAtHn7T6I7YQ3h OO7q6v/nN6tegRCpWu8M40mDe1SZEzVLz3kqfP5Qa4Qt3YOluxAbGDAp9cioWAB9 seqwzwY6ysQWNpIqmo+Uq7X1AN+FhrFNgmGEHvXTKe24yO+v2076c5/X+nup3FrG -----END CERTIFICATE-----Generated at Thu Apr 10 20:28:12 2025 by rpki-client