$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer File: 1889ddcb-202e-4e86-8fb3-63c498cba935.cer (raw, json) Hash identifier: CP8MToddEmI6Pw1jhbHl8jQtyg1KDci8EQcx8oNlvsk= Subject key identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849653E041991E88DF6B4AB7300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Apr 2025 19:15:25 +0000 Certificate not after: Tue 06 Jul 2027 19:15:25 +0000 Subordinate resources: AS: 401550 IP: 199.36.25.0/24 IP: 2602:f755::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:3e:04:19:91:e8:8d:f6:b4:ab:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 2 19:15:25 2025 GMT Not After : Jul 6 19:15:25 2027 GMT Subject: CN=1889ddcb-202e-4e86-8fb3-63c498cba935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:8b:f7:6b:4c:a3:bb:a3:74:4f:13:50:80: 01:c5:dd:1b:81:ca:17:99:22:1e:f5:33:94:6d:ca: 8a:65:08:a8:1e:a4:68:36:6b:88:38:f8:11:a2:48: e6:3c:88:a0:51:53:10:4b:e9:10:ab:0e:8d:27:cb: aa:0b:3b:e3:e3:1a:66:cd:d6:cf:50:fe:a5:2f:87: 13:3d:93:47:21:72:64:22:39:a3:88:00:db:a0:1b: a8:52:16:df:de:60:9b:7b:8a:3c:d5:87:2e:a7:fd: 63:34:ea:a7:cb:b7:a7:4c:2b:76:d1:1d:b5:c6:7e: 71:42:dc:f6:90:10:25:21:cb:d2:81:91:05:5f:b6: 69:a9:15:b1:ae:63:02:cf:23:ec:1f:24:8e:7f:4b: 17:0f:9f:56:37:75:94:b5:91:5e:44:25:fb:12:a0: 47:cd:1d:a2:dd:0b:0d:a2:a8:17:e3:62:45:45:8a: 60:ff:93:c6:4a:60:8c:cf:e8:03:6b:c5:0c:3f:7d: 44:2f:d5:09:c3:6e:19:c1:f3:4c:39:a1:40:52:f9: a6:85:15:b1:36:ad:df:03:48:7d:dc:72:3b:6a:7d: 3b:c4:14:6f:e8:44:5b:19:f1:bb:9f:98:8c:55:d2: d5:d7:e8:50:35:fb:b0:09:b8:19:54:d4:7f:81:54: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.36.25.0/24 IPv6: 2602:f755::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401550 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0a:1e:53:84:32:ce:af:25:80:6c:ea:03:db:2d:ce:c1:e5: 4b:a3:fe:27:dc:45:9d:f8:a3:9a:f7:c3:de:8a:d6:65:64:b7: e8:71:5e:71:4a:7c:56:3c:b3:c8:05:cd:d2:02:3e:b1:66:f1: 80:cb:61:c9:a9:a2:59:67:06:d5:01:aa:72:cc:31:7b:85:07: 26:28:1f:80:60:04:59:ce:6f:34:16:b1:d4:54:99:5a:c8:03: c1:64:b0:ea:98:25:0b:16:01:a6:fb:79:f4:35:ee:9e:26:82: 71:5c:a0:f1:bc:cf:a2:f4:23:92:99:1f:98:83:53:fd:51:60: a5:31:01:07:1f:ab:85:5e:80:3d:1c:ab:c7:d2:08:6a:44:ed: 35:15:61:b2:58:c6:87:c5:ed:3c:cb:4c:5a:0c:d9:54:0a:be: 74:27:d7:79:59:78:15:4e:0c:cf:2b:c1:30:74:ef:fb:6d:65: 7b:32:2d:ad:e1:4e:c1:72:92:2d:be:41:a4:9f:12:f3:e6:5d: 6d:c1:d1:3e:76:3d:c3:08:49:b5:89:c9:e3:91:f8:51:a2:62: 85:d1:cc:21:c2:cd:fc:25:80:4f:47:fc:48:d9:5e:62:9d:75: e7:43:dd:a9:fb:ac:1e:6f:6b:6e:0c:74:88:3b:bf:b0:88:f6: ec:26:f7:ea -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEllPgQZkeiN9rSrcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwMjE5MTUyNVoXDTI3MDcwNjE5MTUyNVowLzEtMCsGA1UEAxMk MTg4OWRkY2ItMjAyZS00ZTg2LThmYjMtNjNjNDk4Y2JhOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyCL92tMo7ujdE8TUIABxd0bgcoXmSIe9TOU bcqKZQioHqRoNmuIOPgRokjmPIigUVMQS+kQqw6NJ8uqCzvj4xpmzdbPUP6lL4cT PZNHIXJkIjmjiADboBuoUhbf3mCbe4o81Ycup/1jNOqny7enTCt20R21xn5xQtz2 kBAlIcvSgZEFX7ZpqRWxrmMCzyPsHySOf0sXD59WN3WUtZFeRCX7EqBHzR2i3QsN oqgX42JFRYpg/5PGSmCMz+gDa8UMP31EL9UJw24ZwfNMOaFAUvmmhRWxNq3fA0h9 3HI7an07xBRv6ERbGfG7n5iMVdLV1+hQNfuwCbgZVNR/gVTXPQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHu8bm0DUWaPsmXIlTlhIKh+ov7gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ODg5ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0OThjYmE5MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE4ODlkZGNiLTIwMmUtNGU4Ni04 ZmIzLTYzYzQ5OGNiYTkzNS8xODg5ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0OThj YmE5MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHJBkwDgQCAAIwCAMGACYC91UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgjjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+Ch5ThDLOryWAbOoD2y3OweVL o/4n3EWd+KOa98PeitZlZLfocV5xSnxWPLPIBc3SAj6xZvGAy2HJqaJZZwbVAapy zDF7hQcmKB+AYARZzm80FrHUVJlayAPBZLDqmCULFgGm+3n0Ne6eJoJxXKDxvM+i 9COSmR+Yg1P9UWClMQEHH6uFXoA9HKvH0ghqRO01FWGyWMaHxe08y0xaDNlUCr50 J9d5WXgVTgzPK8EwdO/7bWV7Mi2t4U7BcpItvkGknxLz5l1twdE+dj3DCEm1icnj kfhRomKF0cwhws38JYBPR/xI2V5inXXnQ92p+6web2tuDHSIO7+wiPbsJvfq -----END CERTIFICATE-----Generated at Fri Apr 4 16:27:13 2025 by rpki-client