$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer File: 6e10601c-e280-4510-9d84-b6d2b02b8446.cer (raw, json) Hash identifier: 3b6bVzI+jjymOfYzW/9GQYkefos4czdGHIacEHKIpQQ= Subject key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584927A64B3128216954CA16AB30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 17:45:25 +0000 Certificate not after: Fri 09 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 393397 IP: 64.188.48.0/21 IP: 66.150.64.0/21 IP: 69.72.96.0/19 IP: 156.146.64.0/19 IP: 2607:8c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:a6:4b:31:28:21:69:54:ca:16:ab:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 11 17:45:25 2025 GMT Not After : Apr 9 00:45:33 2027 GMT Subject: CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:ab:a0:85:e5:e1:62:40:5a:0f:c5:97:69: e7:5a:08:2d:4b:91:6f:fd:d3:40:f5:e3:aa:c8:32: d5:f8:8f:fc:6b:84:57:15:76:db:cc:f2:80:df:86: 1e:85:26:f4:22:de:dc:d5:dc:88:d9:65:c0:ec:d5: 82:58:f4:31:3a:7c:e9:5a:69:ea:85:4a:a2:ed:ea: d3:f5:0e:b2:e8:5a:ad:ba:a4:4c:a4:6a:ba:7c:bd: a9:29:9a:f8:7a:f9:f9:e3:86:53:a5:37:c9:3e:1f: 77:e1:7b:c1:ce:f3:b7:aa:60:b9:d9:18:ee:10:b5: a8:56:83:c5:a8:11:e2:7d:a4:d1:80:5d:06:cf:1c: de:e3:a8:7e:fe:7b:7e:b6:df:c6:b4:23:3e:30:09: 97:f9:39:bd:b1:7c:84:51:27:55:40:d0:3a:f0:84: 58:54:ca:4c:14:b3:23:16:26:33:55:9f:fe:5a:f0: 51:de:88:3b:ff:3e:cf:47:be:ff:f3:0b:c5:ba:75: 18:e8:18:a8:05:0e:7f:16:c6:94:3b:ac:45:a5:08: 60:d2:26:c5:e0:10:0a:de:e3:a6:15:7b:bc:c7:40: 85:34:26:9c:c1:a8:f1:55:dc:52:cf:05:1a:87:b3: 2a:20:3a:83:a9:64:72:af:54:b9:84:91:0a:2c:90: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.188.48.0/21 66.150.64.0/21 69.72.96.0/19 156.146.64.0/19 IPv6: 2607:8c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393397 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:00:ef:2f:2f:6e:d7:a4:f2:d1:ef:5e:03:07:65:15:04:c0: a3:26:db:b4:f3:fc:fd:5b:a8:64:88:11:46:74:a6:0c:91:bb: 0a:ce:11:3f:7b:12:a3:d0:bb:de:51:f7:86:43:b3:85:ed:5a: a6:5b:55:7f:28:be:87:11:52:50:cd:12:b3:c1:e6:8d:9a:a4: 40:dd:db:6c:03:29:c2:e1:3b:ce:cf:ed:37:1b:94:3d:66:8b: 25:d7:36:2b:de:66:c4:3a:69:9c:5b:68:e4:b3:6b:8c:b2:e5: bd:96:2f:1e:e0:57:91:bf:01:11:45:79:d6:1c:88:c0:6b:7e: ce:7a:48:57:bc:80:53:ae:55:63:d1:95:ad:da:37:a6:ce:00: b4:77:16:be:5c:a2:a4:c7:96:a2:6d:27:91:85:cb:ae:16:a2: 70:55:2b:e6:b0:66:ba:d8:8f:50:95:8b:3c:67:24:81:ba:68: ec:b3:46:6b:d1:95:5f:d0:4a:f8:2a:91:33:f7:dc:fa:54:3b: 30:3f:ba:11:f8:15:98:20:53:23:17:76:45:eb:50:6a:1d:fd: c1:b0:51:64:54:e8:4f:ac:4b:18:61:60:8e:0c:72:01:d8:06: 76:57:9b:d9:f3:48:28:6a:bc:fd:cc:d9:73:83:f6:65:23:94: 6d:9b:aa:b8 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEknpksxKCFpVMoWqzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxMTE3NDUyNVoXDTI3MDQwOTAwNDUzM1owLzEtMCsGA1UEAxMk NmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNGroIXl4WJAWg/Fl2nnWggtS5Fv/dNA9eOq yDLV+I/8a4RXFXbbzPKA34YehSb0It7c1dyI2WXA7NWCWPQxOnzpWmnqhUqi7erT 9Q6y6FqtuqRMpGq6fL2pKZr4evn544ZTpTfJPh934XvBzvO3qmC52RjuELWoVoPF qBHifaTRgF0Gzxze46h+/nt+tt/GtCM+MAmX+Tm9sXyEUSdVQNA68IRYVMpMFLMj FiYzVZ/+WvBR3og7/z7PR77/8wvFunUY6BioBQ5/FsaUO6xFpQhg0ibF4BAK3uOm FXu8x0CFNCacwajxVdxSzwUah7MqIDqDqWRyr1S5hJEKLJCRKQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFE7tRJdYmhw5mjO4pYAHlteDOopEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZlMTA2MDFjLWUyODAtNDUxMC05 ZDg0LWI2ZDJiMDJiODQ0Ni82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAy Yjg0NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBANAvDADBANClkADBAVFSGADBAWckkAwDQQCAAIw BwMFACYHjIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgC1MFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH8A 7y8vbtek8tHvXgMHZRUEwKMm27Tz/P1bqGSIEUZ0pgyRuwrOET97EqPQu95R94ZD s4XtWqZbVX8ovocRUlDNErPB5o2apEDd22wDKcLhO87P7TcblD1miyXXNiveZsQ6 aZxbaOSza4yy5b2WLx7gV5G/ARFFedYciMBrfs56SFe8gFOuVWPRla3aN6bOALR3 Fr5coqTHlqJtJ5GFy64WonBVK+awZrrYj1CVizxnJIG6aOyzRmvRlV/QSvgqkTP3 3PpUOzA/uhH4FZggUyMXdkXrUGod/cGwUWRU6E+sSxhhYI4McgHYBnZXm9nzSChq vP3M2XOD9mUjlG2bqrg= -----END CERTIFICATE-----Generated at Wed Apr 9 17:17:29 2025 by rpki-client