$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d4e2560f-eef5-4804-a8ee-c3a52d098e3a.cer File: d4e2560f-eef5-4804-a8ee-c3a52d098e3a.cer (raw, json) Hash identifier: bTGezE6B2AXTd8OYDbi2g1ijdjIEOSIB0B9vrsBgiz4= Subject key identifier: E2:0D:C3:DA:79:2E:EE:C9:1A:7A:41:AA:F3:96:A5:7E:39:E1:CF:BB Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849904267094AD80254B1AD66E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d4e2560f-eef5-4804-a8ee-c3a52d098e3a/d4e2560f-eef5-4804-a8ee-c3a52d098e3a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d4e2560f-eef5-4804-a8ee-c3a52d098e3a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 05:04:01 +0000 Certificate not after: Thu 22 Jul 2027 05:04:01 +0000 Subordinate resources: AS: 53474 IP: 206.183.155.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:90:42:67:09:4a:d8:02:54:b1:ad:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 05:04:01 2025 GMT Not After : Jul 22 05:04:01 2027 GMT Subject: CN=d4e2560f-eef5-4804-a8ee-c3a52d098e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:90:d5:21:19:c7:45:8c:84:da:c1:93:27:e3: c9:aa:ad:04:95:21:a2:51:62:86:d7:a6:f2:de:ae: 61:e0:4f:3f:a8:74:e9:b5:65:19:83:fb:a0:c1:8d: 7d:53:86:ab:86:3d:b0:c1:20:da:cd:34:d9:35:2e: 02:b0:5e:2b:79:81:ea:20:26:1b:7b:bd:66:88:66: ec:33:9f:fc:90:b2:8a:fb:2d:83:c8:e4:a8:79:de: 64:84:ef:02:9a:c6:35:39:67:06:58:8c:aa:e5:46: 31:45:52:ac:9e:ef:50:9f:06:e0:f7:bc:8d:4a:04: 11:be:15:f4:cd:be:f0:6e:77:1a:08:19:eb:08:05: 13:1d:0a:19:3c:e8:c5:39:11:b4:a3:ad:cc:5f:7f: b7:5d:e2:37:7c:f1:02:ad:84:ce:9e:6f:ee:8e:14: c8:c0:91:6c:3a:3c:94:28:ae:1a:54:24:36:65:6d: 62:66:da:d9:6a:26:aa:57:66:14:82:3f:a9:7b:4a: 0b:cf:4d:9c:e2:3e:4c:a2:37:29:60:e9:c5:58:37: 45:12:31:c7:2e:ff:73:0a:f2:a6:2c:ad:ea:fc:2e: 35:d3:4a:46:56:1d:7c:74:55:8b:ad:4c:b4:93:bc: 1c:ca:54:6c:52:15:e7:47:c8:82:82:41:6e:3e:12: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:C3:DA:79:2E:EE:C9:1A:7A:41:AA:F3:96:A5:7E:39:E1:CF:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d4e2560f-eef5-4804-a8ee-c3a52d098e3a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d4e2560f-eef5-4804-a8ee-c3a52d098e3a/d4e2560f-eef5-4804-a8ee-c3a52d098e3a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 206.183.155.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53474 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7e:9a:0e:9f:ec:b9:97:00:db:db:1b:d2:82:16:51:99:e7: b4:fe:e9:a4:78:56:2b:ec:95:21:74:c9:fc:c3:b9:ee:1f:f5: 79:d2:ef:10:4e:40:0d:b0:93:e3:06:95:11:f6:06:8c:e0:a9: 49:a4:70:a9:7a:04:96:44:c5:40:b1:da:bd:bd:c9:f4:93:3d: c7:f4:7f:ac:91:9c:3a:9a:32:e6:11:ff:f2:29:aa:46:3e:2b: bb:41:a6:48:e5:14:54:6a:49:bd:f9:4e:56:8f:74:5b:13:63: 3f:a8:ef:06:5a:be:d1:df:e1:80:79:11:26:01:56:c4:b1:65: 63:a2:26:ab:6e:94:b2:82:1d:22:76:bc:86:ed:27:36:ff:a5: 97:20:5e:c1:c4:99:4e:fa:eb:14:5f:2f:32:8b:7f:4c:26:6a: 2e:86:b6:27:5d:08:76:9d:3b:2e:e4:3f:dc:67:97:ff:16:d0: 8f:73:a8:b5:63:dd:25:17:e1:d9:49:c7:d9:0e:37:1d:21:49: 5f:e2:fa:fd:c8:68:95:5b:fb:7e:4d:97:c1:ca:7c:99:6a:1f: e1:02:4f:b5:e6:c4:1c:cb:0b:e0:55:e3:77:b7:64:68:d2:59: 74:69:ea:27:83:33:ce:b6:31:5a:98:63:93:e1:04:19:f3:4f: 2f:55:c0:5e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmQQmcJStgCVLGtZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODA1MDQwMVoXDTI3MDcyMjA1MDQwMVowLzEtMCsGA1UEAxMk ZDRlMjU2MGYtZWVmNS00ODA0LWE4ZWUtYzNhNTJkMDk4ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZDVIRnHRYyE2sGTJ+PJqq0ElSGiUWKG16by 3q5h4E8/qHTptWUZg/ugwY19U4arhj2wwSDazTTZNS4CsF4reYHqICYbe71miGbs M5/8kLKK+y2DyOSoed5khO8CmsY1OWcGWIyq5UYxRVKsnu9Qnwbg97yNSgQRvhX0 zb7wbncaCBnrCAUTHQoZPOjFORG0o63MX3+3XeI3fPECrYTOnm/ujhTIwJFsOjyU KK4aVCQ2ZW1iZtrZaiaqV2YUgj+pe0oLz02c4j5MojcpYOnFWDdFEjHHLv9zCvKm LK3q/C4100pGVh18dFWLrUy0k7wcylRsUhXnR8iCgkFuPhLIdQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOINw9p5Lu7JGnpBqvOWpX454c+7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k NGUyNTYwZi1lZWY1LTQ4MDQtYThlZS1jM2E1MmQwOThlM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Q0ZTI1NjBmLWVlZjUtNDgwNC1h OGVlLWMzYTUyZDA5OGUzYS9kNGUyNTYwZi1lZWY1LTQ4MDQtYThlZS1jM2E1MmQw OThlM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADOt5swGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANDiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACt+mg6f7LmXANvbG9KCFlGZ57T+6aR4VivslSF0yfzDue4f 9XnS7xBOQA2wk+MGlRH2BozgqUmkcKl6BJZExUCx2r29yfSTPcf0f6yRnDqaMuYR //IpqkY+K7tBpkjlFFRqSb35TlaPdFsTYz+o7wZavtHf4YB5ESYBVsSxZWOiJqtu lLKCHSJ2vIbtJzb/pZcgXsHEmU766xRfLzKLf0wmai6GtiddCHadOy7kP9xnl/8W 0I9zqLVj3SUX4dlJx9kONx0hSV/i+v3IaJVb+35Nl8HKfJlqH+ECT7XmxBzLC+BV 43e3ZGjSWXRp6ieDM862MVqYY5PhBBnzTy9VwF4= -----END CERTIFICATE-----Generated at Mon Apr 21 01:49:22 2025 by rpki-client