$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer File: dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer (raw, json) Hash identifier: bY93jEUti7/i4kuEwvaOuTVFbN2yBn61j1LxjSyfqig= Subject key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858495EF525C75ADFA1CDDBDFCF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Mar 2025 13:13:45 +0000 Certificate not after: Sun 04 Jul 2027 13:13:45 +0000 Subordinate resources: AS: 32249 IP: 162.250.56.0/22 IP: 2605:4780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:f5:25:c7:5a:df:a1:cd:db:df:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 31 13:13:45 2025 GMT Not After : Jul 4 13:13:45 2027 GMT Subject: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:c4:fc:e6:4f:86:75:11:3f:be:95:e1:87: 5c:0d:50:6f:4d:c3:19:03:e0:e6:ec:d6:24:dc:c2: 4d:e0:64:6f:bf:4c:c6:21:4d:15:01:bb:f6:c3:9c: d5:7b:a6:60:cf:18:4a:8e:fd:20:f3:e6:f4:eb:96: 66:a3:5f:1d:a6:ca:09:2f:a0:48:41:9b:38:36:1d: cc:2c:21:5d:7b:35:68:a1:08:51:28:dd:de:f5:0d: a5:04:fa:5d:36:dd:bc:20:c6:9d:e4:d9:5f:75:77: 55:e4:1f:ac:72:7d:80:02:7e:64:82:dc:bc:81:18: d4:f5:ae:8f:9b:6c:43:66:51:6b:cb:ad:50:9d:73: 79:cb:62:2b:b1:4f:bc:5e:91:ea:46:38:da:44:00: 14:55:b2:ce:f6:57:b4:ca:25:a2:b2:5f:e5:64:3b: b2:67:6e:1b:87:f5:8e:82:d7:b2:d7:8c:f7:32:ed: ca:a0:7d:a6:b1:d0:d2:4c:ce:d6:ea:9b:47:d1:df: 47:bb:8b:66:d5:a9:f8:05:fd:ef:ce:3d:bd:3e:77: 6d:d7:87:0a:cb:69:15:e9:6b:c7:f1:71:6f:ab:47: 5d:ea:80:e3:30:8f:7d:ad:ce:1a:99:47:f3:34:54: 84:1d:7f:52:47:d2:2d:9c:8a:2b:4b:44:f3:52:51: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 162.250.56.0/22 IPv6: 2605:4780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32249 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:19:4a:8b:a0:c1:42:e4:1c:66:fc:d6:f8:e4:e9:bb:7e:06: 6d:11:37:3a:45:2f:e2:f0:6e:89:f2:63:6b:d3:43:a2:c2:be: b4:97:93:3a:6c:cf:6b:38:f1:52:ca:62:98:52:b5:f4:89:b8: f6:43:a4:4e:71:28:8d:8e:84:25:b9:bc:e0:12:30:49:08:cf: 6d:3a:2f:b1:fc:07:1f:32:a8:5e:66:23:f8:b0:3b:0c:8d:22: d8:e9:cc:d2:2a:9d:d7:23:5c:84:e2:9c:47:ef:14:7a:fa:49: ac:cb:f3:f4:15:bc:38:84:1e:64:e1:24:bb:96:3c:1e:89:e7: 5d:7f:7d:9d:4d:96:7a:81:5e:b9:f2:c3:da:12:ef:e5:d9:9e: 70:f0:bf:04:b6:44:3e:53:3a:21:b1:ca:e7:91:fc:d4:8a:96: f9:75:ef:e5:a5:11:7d:a8:f9:f4:80:05:24:fd:ec:fa:cc:55: 5c:40:61:41:af:b1:e7:ef:2b:1a:f3:02:37:78:2e:d3:77:b9: ac:b3:14:31:e7:b0:72:d2:ed:d1:07:f6:6e:3e:e7:68:e8:43: 2f:d7:7f:f5:3c:4c:30:fe:92:79:16:23:ef:ac:d3:57:2c:db: 09:79:e2:64:a0:50:6c:d1:db:3a:26:cb:8e:8a:ab:e4:d7:95: 3c:d7:63:bf -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEle9SXHWt+hzdvfzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMzMTEzMTM0NVoXDTI3MDcwNDEzMTM0NVowLzEtMCsGA1UEAxMk ZGJhNmE2NDMtYjVkMC00ZjA5LThlNjAtZTgyYmExZWI3ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxvE/OZPhnURP76V4YdcDVBvTcMZA+Dm7NYk 3MJN4GRvv0zGIU0VAbv2w5zVe6ZgzxhKjv0g8+b065Zmo18dpsoJL6BIQZs4Nh3M LCFdezVooQhRKN3e9Q2lBPpdNt28IMad5NlfdXdV5B+scn2AAn5kgty8gRjU9a6P m2xDZlFry61QnXN5y2IrsU+8XpHqRjjaRAAUVbLO9le0yiWisl/lZDuyZ24bh/WO gtey14z3Mu3KoH2msdDSTM7W6ptH0d9Hu4tm1an4Bf3vzj29Pndt14cKy2kV6WvH 8XFvq0dd6oDjMI99rc4amUfzNFSEHX9SR9ItnIorS0TzUlHOtQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDV/oCTYhyE7WWTo+0IoNYCuXVMnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k YmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFlYjc4NDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RiYTZhNjQzLWI1ZDAtNGYwOS04 ZTYwLWU4MmJhMWViNzg0OC9kYmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFl Yjc4NDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKi+jgwDQQCAAIwBwMFACYFR4AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICffkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPxlKi6DBQuQcZvzW+OTpu34GbRE3 OkUv4vBuifJja9NDosK+tJeTOmzPazjxUspimFK19Im49kOkTnEojY6EJbm84BIw SQjPbTovsfwHHzKoXmYj+LA7DI0i2OnM0iqd1yNchOKcR+8UevpJrMvz9BW8OIQe ZOEku5Y8HonnXX99nU2WeoFeufLD2hLv5dmecPC/BLZEPlM6IbHK55H81IqW+XXv 5aURfaj59IAFJP3s+sxVXEBhQa+x5+8rGvMCN3gu03e5rLMUMeewctLt0Qf2bj7n aOhDL9d/9TxMMP6SeRYj76zTVyzbCXniZKBQbNHbOibLjoqr5NeVPNdjvw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:51 2025 by rpki-client