$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer File: 65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer (raw, json) Hash identifier: wfPi30rdfxOLrgPzatgsg/InCFg/UscPN2kiWRuK/cg= Subject key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858493A7CEA9023D2FDF603C98300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 11:42:24 +0000 Certificate not after: Sun 18 Oct 2026 22:56:01 +0000 Subordinate resources: AS: 399575 IP: 74.85.208.0/20 IP: 206.204.224.0/20 IP: 216.205.96.0/20 IP: 2606:67c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:7c:ea:90:23:d2:fd:f6:03:c9:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Mar 18 11:42:24 2025 GMT Not After : Oct 18 22:56:01 2026 GMT Subject: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:3a:1e:d9:c1:8b:e5:05:4a:d1:92:c3:36: 56:ca:15:73:09:9b:80:c6:4c:6e:9d:f1:dd:a9:ae: d6:b8:07:5a:4b:42:f4:2f:e4:ce:01:63:68:d4:1e: 6b:60:21:de:85:43:13:f3:b1:00:f2:c1:98:0d:de: 5d:49:e8:7a:af:2a:cd:a1:ac:44:35:54:0e:93:17: f2:77:e6:38:1f:15:39:8d:44:e1:89:55:b7:55:fc: 14:c3:0a:3c:e6:e2:ea:e5:dd:b0:d8:f9:4a:1d:8e: 00:7c:94:1a:06:1b:f7:e8:6b:fa:af:cb:89:e7:4d: db:88:a1:a2:55:86:7f:ad:89:e9:25:d1:c0:7f:84: 59:08:ba:6b:6c:e1:d8:ad:e6:e3:1f:88:9e:d8:65: 64:f3:f8:35:bb:90:10:cd:b8:b0:86:48:20:cc:dd: 9a:d9:a1:0d:4e:ac:39:72:4e:7b:23:89:ab:73:a0: dc:8a:a9:f6:bc:15:fd:2b:3f:f2:06:09:98:8f:8c: e3:76:32:e9:a1:36:51:3e:36:4b:01:08:ef:eb:f6: 26:de:5c:b6:c6:04:97:1f:40:53:b2:3f:39:d3:84: 65:1f:f2:22:c0:1d:af:fb:ce:d8:a1:ec:09:af:58: 4b:f5:3d:41:98:0a:14:85:f8:e4:95:2c:63:67:a9: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 74.85.208.0/20 206.204.224.0/20 216.205.96.0/20 IPv6: 2606:67c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399575 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d3:82:99:06:df:6a:e0:c4:5a:c3:fd:05:ab:1d:cf:bc:97: 75:d0:03:d1:99:29:2b:2d:ed:e4:00:47:a9:ee:7f:7c:8f:8f: 8b:2b:32:1a:f3:b8:3f:b5:c2:8a:c1:25:45:65:47:89:3c:f0: 59:f8:9d:b7:45:62:5a:81:b4:68:a7:17:f8:49:d6:63:6a:73: 7c:89:e7:6c:d0:1d:bf:91:29:11:c3:a6:68:d2:34:f0:3c:04: a8:ec:01:f3:94:e2:96:5d:2a:c7:0e:a1:7b:aa:80:8f:2f:13: 12:29:7b:2f:d3:27:1b:3a:ea:35:70:42:b2:2a:e1:04:e5:7e: 3c:76:02:fe:a7:e7:1a:0a:4b:0a:46:91:ac:00:ff:46:21:14: b7:72:f3:69:ff:65:17:cd:d5:ed:eb:fa:81:c0:a9:b5:c9:99: 35:61:81:49:59:08:7b:7d:a8:70:c8:fb:b5:ca:14:5b:42:70: ca:4c:33:70:ba:0a:07:64:25:7e:7d:c7:21:d0:07:59:ba:17: 36:c7:47:6d:67:a4:f9:f6:38:0b:cc:6a:fa:7a:ff:36:56:b2: b5:1d:12:a0:83:5d:fd:16:fd:e6:c9:2f:62:0d:76:6b:cc:53: 7e:ca:26:ca:97:b1:17:a0:72:de:6c:b4:dd:d7:69:24:19:3b: 87:d2:e5:39 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEk6fOqQI9L99gPJgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDMxODExNDIyNFoXDTI2MTAxODIyNTYwMVowLzEtMCsGA1UEAxMk NjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNmOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N06HtnBi+UFStGSwzZWyhVzCZuAxkxunfHd qa7WuAdaS0L0L+TOAWNo1B5rYCHehUMT87EA8sGYDd5dSeh6ryrNoaxENVQOkxfy d+Y4HxU5jUThiVW3VfwUwwo85uLq5d2w2PlKHY4AfJQaBhv36Gv6r8uJ503biKGi VYZ/rYnpJdHAf4RZCLprbOHYrebjH4ie2GVk8/g1u5AQzbiwhkggzN2a2aENTqw5 ck57I4mrc6Dciqn2vBX9Kz/yBgmYj4zjdjLpoTZRPjZLAQjv6/Ym3ly2xgSXH0BT sj8504RlH/IiwB2v+87YoewJr1hL9T1BmAoUhfjklSxjZ6m9WQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFLvVu7SxMq0MGNHmARMDDMFNNLjCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82 NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY1Zjg3ZmMzLWZjNzktNGRiOS05 NWJjLWIyZDg0YzRjZjhjYS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0 Y2Y4Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARKVdADBATOzOADBATYzWAwDQQCAAIwBwMFACYG Z8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhjXMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHnTgpkG32rg xFrD/QWrHc+8l3XQA9GZKSst7eQAR6nuf3yPj4srMhrzuD+1worBJUVlR4k88Fn4 nbdFYlqBtGinF/hJ1mNqc3yJ52zQHb+RKRHDpmjSNPA8BKjsAfOU4pZdKscOoXuq gI8vExIpey/TJxs66jVwQrIq4QTlfjx2Av6n5xoKSwpGkawA/0YhFLdy82n/ZRfN 1e3r+oHAqbXJmTVhgUlZCHt9qHDI+7XKFFtCcMpMM3C6CgdkJX59xyHQB1m6FzbH R21npPn2OAvMavp6/zZWsrUdEqCDXf0W/ebJL2INdmvMU37KJsqXsRegct5stN3X aSQZO4fS5Tk= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:34 2025 by rpki-client