$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer File: cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer (raw, json) Hash identifier: pcLbbW0x31sZEU0qdlHNc6XCh+yl0MKMb5hQ/FZXvX8= Subject key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858495521C3AFEB5F481DE2F2FB60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Mar 2025 00:45:34 +0000 Certificate not after: Thu 01 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 22594 IP: 2620:5b:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:21:c3:af:eb:5f:48:1d:e2:f2:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 28 00:45:34 2025 GMT Not After : Jul 1 00:45:34 2027 GMT Subject: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:dc:42:7d:49:68:02:b2:0c:74:89:64:6a: 19:0c:3b:13:96:3d:0e:fd:47:fa:e1:f9:da:83:4e: 60:27:ad:11:26:17:ab:6a:d6:e4:36:2f:f6:c2:49: ff:16:9a:c7:aa:95:8d:65:4d:04:8f:c0:62:0c:46: 0e:9c:b9:c5:6e:d3:b2:ee:3a:17:53:73:20:6d:2a: bd:fb:ec:22:25:9e:0d:a3:fa:ab:c3:c7:e2:50:4e: 63:28:48:2b:66:b1:70:ab:f2:6c:a1:55:76:bb:2f: 5d:42:21:2c:10:97:c0:2e:84:96:22:31:ca:2a:ec: 28:85:e0:4c:86:15:f8:af:8e:a3:cb:d5:27:67:7b: 0c:43:e9:06:1c:7a:4c:74:7e:de:68:58:bc:cd:56: 02:b9:9f:80:15:b2:72:04:f0:b7:3c:06:89:d8:6e: 35:66:19:20:e1:24:90:ab:68:e9:d1:46:6d:33:c3: f6:15:52:bf:b4:f4:fe:39:72:0b:4b:35:cd:cb:e3: 76:64:1a:51:81:6f:bf:10:04:fc:20:e5:15:d5:a4: ea:8b:9a:4c:17:96:d4:8c:fb:f7:02:09:2e:8e:92: 45:2b:40:61:cc:fd:50:57:4e:c4:45:bf:bb:e7:13: fc:e2:06:85:d3:b8:f4:12:55:99:5d:e2:47:19:6a: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22594 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:02:3f:c0:b1:34:d6:94:0a:31:b6:58:70:6c:fd:3d:cc:68: ff:9e:53:d0:a7:e9:64:05:d9:a0:12:82:bd:d4:12:94:50:62: ca:3b:6f:87:56:e7:27:94:e4:d9:18:7c:cf:5f:33:08:bd:f6: 1a:c2:36:14:b0:e9:d4:72:ef:52:55:d0:d6:a2:e8:c4:e9:f0: 8c:17:53:9a:f9:0f:8a:99:79:d3:f3:52:ec:d3:01:06:49:97: 6e:c5:e1:b1:39:0b:f3:1d:7d:27:60:41:02:19:23:59:0c:5d: 49:ee:ae:b3:c4:b3:ba:ef:77:be:f9:08:1b:46:e9:cc:c9:17: a5:f8:91:d7:69:63:31:4f:70:98:f0:25:50:f2:17:49:55:a3: c1:43:9a:a2:6a:f9:fe:c1:5f:f7:3b:70:76:8d:71:b8:65:6f: 07:a9:dc:a1:9d:a6:12:6c:7c:5f:b5:d2:ff:3a:bc:b4:39:4c: 93:79:20:6b:50:9f:52:1d:a8:5e:b9:a8:04:97:d2:a3:da:19: 8e:ba:5d:fc:72:72:51:69:11:a5:75:7d:6b:82:f7:43:df:be: 48:83:1a:1b:0d:45:89:b7:db:37:f1:75:ec:d2:0f:7e:76:14: 80:55:4a:27:8c:ce:cb:21:2f:57:5e:ed:81:8f:39:8f:c4:97: 59:09:21:5d -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWElVIcOv619IHeLy+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDMyODAwNDUzNFoXDTI3MDcwMTAwNDUzNFowLzEtMCsGA1UEAxMk Y2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVDcQn1JaAKyDHSJZGoZDDsTlj0O/Uf64fna g05gJ60RJheratbkNi/2wkn/FprHqpWNZU0Ej8BiDEYOnLnFbtOy7joXU3MgbSq9 ++wiJZ4No/qrw8fiUE5jKEgrZrFwq/JsoVV2uy9dQiEsEJfALoSWIjHKKuwoheBM hhX4r46jy9UnZ3sMQ+kGHHpMdH7eaFi8zVYCuZ+AFbJyBPC3PAaJ2G41Zhkg4SSQ q2jp0UZtM8P2FVK/tPT+OXILSzXNy+N2ZBpRgW+/EAT8IOUV1aTqi5pMF5bUjPv3 AgkujpJFK0BhzP1QV07ERb+75xP84gaF07j0ElWZXeJHGWqNrQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFHb51oAWZrqwHMP5KhxwechDwrRUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmNWI5ZWY2LTNiN2MtNDg1ZS05 ODA0LWUzYWQ2NWM1NGY2NC9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVj NTRmNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABbQAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICWEIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAAwI/wLE01pQKMbZYcGz9Pcxo/55T0KfpZAXZoBKCvdQS lFBiyjtvh1bnJ5Tk2Rh8z18zCL32GsI2FLDp1HLvUlXQ1qLoxOnwjBdTmvkPipl5 0/NS7NMBBkmXbsXhsTkL8x19J2BBAhkjWQxdSe6us8Szuu93vvkIG0bpzMkXpfiR 12ljMU9wmPAlUPIXSVWjwUOaomr5/sFf9ztwdo1xuGVvB6ncoZ2mEmx8X7XS/zq8 tDlMk3kga1CfUh2oXrmoBJfSo9oZjrpd/HJyUWkRpXV9a4L3Q9++SIMaGw1Fibfb N/F17NIPfnYUgFVKJ4zOyyEvV17tgY85j8SXWQkhXQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:04 2025 by rpki-client