$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer File: b985122e-f2ff-4349-8e7b-d604ee2577f1.cer (raw, json) Hash identifier: dApNLOvSm+JXEpWQXRmQZMK8bCiZ00ZiHJHMUiyEPiI= Subject key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285848FDD4EDAD6D404D5BE2D2CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 18:15:25 +0000 Certificate not after: Tue 13 Oct 2026 18:46:56 +0000 Subordinate resources: AS: 11052 AS: 47090 IP: 170.188.0.0/16 IP: 199.190.170.0/23 IP: 199.249.237.0 -- 199.249.240.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:d4:ed:ad:6d:40:4d:5b:e2:d2:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Feb 24 18:15:25 2025 GMT Not After : Oct 13 18:46:56 2026 GMT Subject: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:2f:69:0d:99:5f:78:c6:7a:ea:cc:58:78: 10:a2:fe:83:f9:ec:de:73:21:cf:12:15:84:1e:e2: 08:62:6f:55:44:ce:61:33:da:f8:07:86:87:44:3b: ef:e7:3b:58:8b:e2:c8:1e:cf:88:2a:65:f4:9c:c8: 22:3d:87:14:ea:cb:1b:f9:20:46:bf:a8:5f:62:d3: aa:44:ea:a2:38:fe:1d:0d:b1:f2:f6:83:e7:46:40: bb:51:0e:e0:db:a5:c8:a1:8d:0f:1d:88:ac:32:de: 91:33:65:0a:ca:7c:f4:4f:1f:68:0d:c7:51:c1:0b: 34:22:36:93:44:00:68:b1:8a:8c:44:c4:0e:8d:eb: 2b:e6:9e:ea:ec:ba:82:b9:93:34:52:75:ab:8a:a7: 75:e5:66:82:69:39:4a:64:3f:64:26:b6:44:c9:bf: 9e:03:cc:75:38:6f:f2:3b:f8:9e:e8:0f:93:c8:08: 18:3e:51:56:43:8e:62:46:69:df:ac:de:da:7a:d0: 2b:79:6f:d8:fc:f2:55:03:d3:8b:de:c5:46:74:d4: 0d:76:e7:dd:31:20:6a:4b:e2:12:14:4e:cb:4b:ba: b5:61:5a:f7:79:d5:fd:3b:fe:04:b8:1e:6a:0a:d7: 75:27:4d:1c:2e:dc:90:12:fd:28:7a:8e:47:19:0e: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 170.188.0.0/16 199.190.170.0/23 199.249.237.0-199.249.240.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11052 47090 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f8:b4:8b:55:3a:5f:16:12:aa:0b:a0:91:33:71:e1:4f:4f: 4d:ce:e5:0f:4a:3c:0a:f4:ec:b6:aa:d9:4a:15:e6:fa:06:b0: c2:d6:fc:37:47:f6:f7:55:c6:8c:bf:5b:cb:5d:b8:1f:01:57: 58:e1:f6:d7:42:33:3b:7c:4b:18:4b:e5:ed:b4:cc:60:55:9e: a4:50:8f:97:eb:58:d3:06:a7:22:ee:e0:56:31:6f:ec:4f:69: e4:51:78:fa:05:d5:3a:33:a3:76:7d:d3:66:b4:be:dd:09:e3: a8:ab:bd:98:5f:2c:a5:cc:78:31:76:98:fd:a8:b7:36:4f:1c: 1c:2e:16:b4:f5:8b:75:b6:97:5f:07:8e:78:c3:2d:7b:ba:3c: 6a:d7:20:27:fe:7a:2e:84:72:93:09:8f:73:73:db:0f:c9:f4: be:11:35:f7:7b:69:f9:17:49:b4:c3:7b:11:27:2b:5f:43:bf: 9a:46:81:9a:d6:1d:7c:02:11:99:2a:8b:cb:5c:34:aa:a6:ab: 81:ab:57:f2:a2:9d:93:96:82:9c:e7:1b:11:fb:0d:65:29:b6: e4:89:f4:ba:fd:79:87:e2:62:b4:0e:69:7b:01:3d:84:18:52: 42:d1:ce:79:9a:42:76:3f:8e:0d:b3:f9:2d:cd:aa:03:5b:b4: 9c:33:53:b4 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEj91O2tbUBNW+LSywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDIyNDE4MTUyNVoXDTI2MTAxMzE4NDY1NlowLzEtMCsGA1UEAxMk Yjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAkvaQ2ZX3jGeurMWHgQov6D+ezecyHPEhWE HuIIYm9VRM5hM9r4B4aHRDvv5ztYi+LIHs+IKmX0nMgiPYcU6ssb+SBGv6hfYtOq ROqiOP4dDbHy9oPnRkC7UQ7g26XIoY0PHYisMt6RM2UKynz0Tx9oDcdRwQs0IjaT RABosYqMRMQOjesr5p7q7LqCuZM0UnWriqd15WaCaTlKZD9kJrZEyb+eA8x1OG/y O/ie6A+TyAgYPlFWQ45iRmnfrN7aetAreW/Y/PJVA9OL3sVGdNQNdufdMSBqS+IS FE7LS7q1YVr3edX9O/4EuB5qCtd1J00cLtyQEv0oeo5HGQ6N+wIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFDJD5zz3GwXfNgpGTjEWUUuHYSbbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i OTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2I5ODUxMjJlLWYyZmYtNDM0OS04 ZTdiLWQ2MDRlZTI1NzdmMS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUy NTc3ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMgYIKwYBBQUH AQcBAf8EIzAhMB8EAgABMBkDAwCqvAMEAce+qjAMAwQAx/ntAwQAx/nwMB4GCCsG AQUFBwEIAQH/BA8wDaALMAkCAissAgMAt/IwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOPi0i1U6XxYSqgug kTNx4U9PTc7lD0o8CvTstqrZShXm+gawwtb8N0f291XGjL9by124HwFXWOH210Iz O3xLGEvl7bTMYFWepFCPl+tY0wanIu7gVjFv7E9p5FF4+gXVOjOjdn3TZrS+3Qnj qKu9mF8spcx4MXaY/ai3Nk8cHC4WtPWLdbaXXweOeMMte7o8atcgJ/56LoRykwmP c3PbD8n0vhE193tp+RdJtMN7EScrX0O/mkaBmtYdfAIRmSqLy1w0qqargatX8qKd k5aCnOcbEfsNZSm25In0uv15h+JitA5pewE9hBhSQtHOeZpCdj+ODbP5Lc2qA1u0 nDNTtA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:10 2025 by rpki-client