$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer File: a25dba35-fbce-4e02-ac3e-dba534f71021.cer (raw, json) Hash identifier: EDWtofRwtkWsiR8W28fZIM3RDxl2rIHtVr7OEd/9+xc= Subject key identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849576A8B5A2E4B385859C112C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Mar 2025 20:23:49 +0000 Certificate not after: Thu 01 Jul 2027 20:23:49 +0000 Subordinate resources: AS: 10446 IP: 209.94.64.0/24 IP: 209.94.76.0/24 IP: 209.94.95.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:6a:8b:5a:2e:4b:38:58:59:c1:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 28 20:23:49 2025 GMT Not After : Jul 1 20:23:49 2027 GMT Subject: CN=a25dba35-fbce-4e02-ac3e-dba534f71021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:59:f8:90:9f:10:9e:1f:32:8d:ac:76:75: 39:0b:8b:64:b7:b3:30:f6:71:49:dc:8f:06:1b:46: b9:7d:d7:54:ea:09:31:24:97:83:98:02:f0:26:92: a0:45:3d:b7:0b:19:05:ca:23:75:65:f7:00:3c:07: e1:d7:38:d8:05:e5:18:b9:d7:e7:42:fc:46:85:c7: 83:b9:d3:af:a0:8f:6e:15:e5:7e:47:75:3f:35:50: d7:b7:6c:32:1d:ef:4f:85:70:38:fa:30:f1:06:47: 85:09:73:87:cb:06:88:28:0e:b3:31:88:55:48:65: 16:9d:f6:64:33:c6:e6:b8:0b:03:85:db:c4:48:80: bf:56:c4:70:03:8f:55:14:93:e9:48:31:55:a5:55: f2:08:8e:65:e4:09:a8:4a:8e:51:e0:a5:7a:7f:74: 29:49:48:72:32:d3:4c:4c:92:a8:63:70:a8:3d:87: d5:c3:ee:64:63:13:58:c0:3a:5e:ef:13:46:4b:9b: 86:9e:e8:5b:2c:89:fe:66:a7:fc:1f:21:11:73:d2: 31:01:73:7a:40:32:62:48:a3:1e:da:95:e8:a8:54: 92:47:af:ff:4f:62:92:d8:f0:ef:3e:24:9e:bb:47: 91:de:5e:ae:70:bc:be:40:57:ff:50:6b:a5:a3:24: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 209.94.64.0/24 209.94.76.0/24 209.94.95.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:67:21:f6:c7:1d:b8:db:0f:d9:56:25:8e:b7:fc:7b:1d:12: 0a:13:8c:85:60:08:2e:73:d4:53:99:9b:55:e6:30:ee:10:33: 0e:c3:0c:df:ec:4d:da:7b:b4:e4:3c:25:b2:31:8d:71:5b:ae: 5b:ec:03:ca:c8:c9:ea:79:1b:33:ae:e5:5d:90:b0:ab:8d:94: 35:1b:8d:0b:fa:6f:e3:96:90:90:96:71:99:32:71:35:2e:e5: 94:05:79:a7:2a:17:da:21:0e:5e:8b:93:4a:b3:40:97:db:60: 06:8a:f1:bb:c2:57:62:7b:dd:3a:23:d9:a2:68:bb:7f:f5:40: cb:5c:ab:90:6c:7b:f2:be:92:3e:84:8f:7d:77:a3:72:13:c1: 31:7c:07:38:43:d6:7f:4d:fd:55:44:bf:3e:c8:af:7a:70:94: 58:bb:5b:57:65:20:d7:fc:12:aa:d8:9b:9b:78:be:84:57:4f: 84:09:f6:9e:39:ed:2d:8c:db:b7:41:05:aa:21:e7:1d:52:c8: ac:6f:dd:d9:6b:1f:c7:37:7d:dc:41:e9:85:12:72:1c:e5:40: 58:05:99:52:c1:ac:b9:15:92:c1:9f:7f:c8:1a:28:59:c7:c7: 67:68:8d:18:14:9d:3b:dc:f1:cb:a6:c3:6b:db:c6:3a:2f:30: 75:ef:55:5d -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWElXaotaLks4WFnBEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyODIwMjM0OVoXDTI3MDcwMTIwMjM0OVowLzEtMCsGA1UEAxMk YTI1ZGJhMzUtZmJjZS00ZTAyLWFjM2UtZGJhNTM0ZjcxMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzupZ+JCfEJ4fMo2sdnU5C4tkt7Mw9nFJ3I8G G0a5fddU6gkxJJeDmALwJpKgRT23CxkFyiN1ZfcAPAfh1zjYBeUYudfnQvxGhceD udOvoI9uFeV+R3U/NVDXt2wyHe9PhXA4+jDxBkeFCXOHywaIKA6zMYhVSGUWnfZk M8bmuAsDhdvESIC/VsRwA49VFJPpSDFVpVXyCI5l5AmoSo5R4KV6f3QpSUhyMtNM TJKoY3CoPYfVw+5kYxNYwDpe7xNGS5uGnuhbLIn+Zqf8HyERc9IxAXN6QDJiSKMe 2pXoqFSSR6//T2KS2PDvPiSeu0eR3l6ucLy+QFf/UGuloyS1rQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFOzH4PZflsVNuHJkQQZMNyML/kZrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MjVkYmEzNS1mYmNlLTRlMDItYWMzZS1kYmE1MzRmNzEwMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EyNWRiYTM1LWZiY2UtNGUwMi1h YzNlLWRiYTUzNGY3MTAyMS9hMjVkYmEzNS1mYmNlLTRlMDItYWMzZS1kYmE1MzRm NzEwMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADRXkADBADRXkwDBADRXl8wGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICKM4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOGch9scduNsP2VYljrf8ex0SChOMhWAI LnPUU5mbVeYw7hAzDsMM3+xN2nu05DwlsjGNcVuuW+wDysjJ6nkbM67lXZCwq42U NRuNC/pv45aQkJZxmTJxNS7llAV5pyoX2iEOXouTSrNAl9tgBorxu8JXYnvdOiPZ omi7f/VAy1yrkGx78r6SPoSPfXejchPBMXwHOEPWf039VUS/PsivenCUWLtbV2Ug 1/wSqtibm3i+hFdPhAn2njntLYzbt0EFqiHnHVLIrG/d2Wsfxzd93EHphRJyHOVA WAWZUsGsuRWSwZ9/yBooWcfHZ2iNGBSdO9zxy6bDa9vGOi8wde9VXQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:20 2025 by rpki-client