$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer File: 9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer (raw, json) Hash identifier: T50DiRJiNHOB4lsgIQjzdhyFzjtlw7f4hxIAIL8CZkk= Subject key identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849548788094D80756489B47200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Mar 2025 19:34:48 +0000 Certificate not after: Wed 30 Jun 2027 19:34:48 +0000 Subordinate resources: IP: 136.242.64.0/20 IP: 208.90.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:87:88:09:4d:80:75:64:89:b4:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 27 19:34:48 2025 GMT Not After : Jun 30 19:34:48 2027 GMT Subject: CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:3a:aa:bb:12:5e:29:df:34:be:00:f6:39: 80:84:96:31:71:82:e1:ea:fb:8b:f8:07:0f:49:71: 35:98:eb:ef:ca:59:bf:70:5a:2f:75:30:d6:b2:23: 9a:21:53:82:fa:2c:e1:ae:90:08:57:25:c1:44:aa: 67:f5:29:63:aa:71:7e:a4:4e:c4:d9:13:e7:f0:83: 43:75:0d:76:1c:2d:57:2a:f8:0d:0c:c5:d5:21:dc: e2:1e:c1:51:a6:d3:ee:97:96:61:b2:96:d4:a8:64: 0b:c4:c9:1f:27:f7:26:b1:ab:03:45:d6:94:3b:1d: 93:82:70:50:2b:eb:b5:76:e0:9a:cb:40:3a:48:56: 4d:d4:e2:fa:5f:f6:88:07:19:f1:23:4c:dc:7d:f2: 80:d0:f4:20:55:79:0c:3f:51:f5:7b:50:eb:68:65: 69:dc:fd:94:13:8f:72:25:b6:88:1b:4b:e7:88:9d: e6:d4:ec:d7:74:c9:0b:13:47:da:56:4d:67:0d:72: 2f:4e:51:5c:c4:65:bd:4c:4b:14:6b:50:67:23:b9: ac:49:e3:1a:f1:f8:de:b1:ac:91:31:15:8b:2e:c0: 1d:5a:0c:00:6b:b9:52:b9:eb:d0:ea:37:2f:37:03: 65:fa:90:27:8e:1b:3d:e8:d5:46:d8:e0:e7:4b:dd: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 136.242.64.0/20 208.90.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9f:b3:45:15:b4:d4:5e:e5:1d:38:5e:f4:8c:f1:b0:74:f2: 6a:62:01:a6:ff:a7:28:11:86:63:92:aa:f5:a3:c2:d4:16:f6: 01:12:cd:fc:59:45:79:21:ad:ae:0d:cb:02:f1:8d:2d:60:12: fa:a1:76:ca:51:67:e8:77:f8:9c:25:62:9c:ec:12:b9:66:6a: c0:67:8d:2f:18:4b:d1:b7:0e:91:f2:25:7e:84:eb:75:fe:57: 1b:48:7a:6a:c9:0d:35:ec:fa:52:7d:57:88:4d:d5:b1:cc:a7: ff:b7:19:b7:ff:13:7e:a2:6b:90:2b:3d:1b:3d:1f:73:3c:9f: ab:14:eb:4e:b5:4e:e1:bb:4a:c0:7f:36:e6:2a:58:de:5b:38: 7c:b2:26:dc:83:7e:3c:f2:19:4a:25:97:78:88:1d:09:92:82: 84:79:73:1e:c9:65:e1:ac:37:f0:60:9e:37:fc:55:b9:57:41: 58:53:3e:3a:4a:04:eb:6a:68:93:63:d4:9f:08:7a:75:d4:4e: df:eb:9c:67:df:2b:e0:03:6b:48:e3:ba:5e:fa:c5:6b:72:c5: 37:fd:72:08:e8:85:30:88:65:42:17:4d:54:2c:4e:39:06:9c: 31:03:46:f1:20:c4:67:b2:57:8d:28:80:cc:4a:e4:00:2a:c7: 0f:b7:7d:50 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWElUh4gJTYB1ZIm0cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNzE5MzQ0OFoXDTI3MDYzMDE5MzQ0OFowLzEtMCsGA1UEAxMk OTk0MGE1ZTctZGZiYi00YmMwLWFmZDktNjBiZjBjMDc5ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJM6qrsSXinfNL4A9jmAhJYxcYLh6vuL+AcP SXE1mOvvylm/cFovdTDWsiOaIVOC+izhrpAIVyXBRKpn9SljqnF+pE7E2RPn8IND dQ12HC1XKvgNDMXVIdziHsFRptPul5ZhspbUqGQLxMkfJ/cmsasDRdaUOx2TgnBQ K+u1duCay0A6SFZN1OL6X/aIBxnxI0zcffKA0PQgVXkMP1H1e1DraGVp3P2UE49y JbaIG0vniJ3m1OzXdMkLE0faVk1nDXIvTlFcxGW9TEsUa1BnI7msSeMa8fjesayR MRWLLsAdWgwAa7lSuevQ6jcvNwNl+pAnjhs96NVG2ODnS931CQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFO374aUqG5HvyPalzg3MYrwlXRTqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 OTQwYTVlNy1kZmJiLTRiYzAtYWZkOS02MGJmMGMwNzllYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzk5NDBhNWU3LWRmYmItNGJjMC1h ZmQ5LTYwYmYwYzA3OWViMC85OTQwYTVlNy1kZmJiLTRiYzAtYWZkOS02MGJmMGMw NzllYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBASI8kADBALQWuQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJZ+zRRW01F7l HThe9IzxsHTyamIBpv+nKBGGY5Kq9aPC1Bb2ARLN/FlFeSGtrg3LAvGNLWAS+qF2 ylFn6Hf4nCVinOwSuWZqwGeNLxhL0bcOkfIlfoTrdf5XG0h6askNNez6Un1XiE3V scyn/7cZt/8TfqJrkCs9Gz0fczyfqxTrTrVO4btKwH825ipY3ls4fLIm3IN+PPIZ SiWXeIgdCZKChHlzHsll4aw38GCeN/xVuVdBWFM+OkoE62pok2PUnwh6ddRO3+uc Z98r4ANrSOO6XvrFa3LFN/1yCOiFMIhlQhdNVCxOOQacMQNG8SDEZ7JXjSiAzErk ACrHD7d9UA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:52:42 2025 by rpki-client