$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer File: 2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer (raw, json) Hash identifier: +fHowcPWUGqbrd3VSOMOUJv85q5sCxoWR+OLz+f+iNo= Subject key identifier: 1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849B3097D7129CC064D3BF3DA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 16:02:38 +0000 Certificate not after: Tue 03 Aug 2027 16:02:38 +0000 Subordinate resources: AS: 393873 IP: 192.138.133.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:09:7d:71:29:cc:06:4d:3b:f3:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 30 16:02:38 2025 GMT Not After : Aug 3 16:02:38 2027 GMT Subject: CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:3a:1d:f0:8b:77:b3:18:ca:be:f6:3c:98: 3b:2b:2a:53:a2:38:ae:b9:59:59:72:2b:bb:84:9c: 0b:c3:5e:de:f4:68:2e:8a:14:79:bf:de:ca:53:f4: c9:26:1f:7d:32:00:bb:85:d7:fd:2d:9a:ff:84:c3: a3:e8:cf:00:7c:97:ce:64:14:6e:10:0c:e0:98:1c: 8e:d4:bc:9e:69:7d:c8:f6:a0:e5:1f:84:f4:c3:cb: 6b:88:ad:65:dc:7f:8a:f6:87:6c:30:d1:e4:91:80: bf:ba:b7:eb:72:b9:0b:0d:0c:58:75:59:ba:9d:81: d2:f2:f4:af:3e:58:6a:22:e4:30:6f:31:22:4c:55: b1:f9:db:7f:80:d2:39:47:b6:be:59:bf:99:d4:e3: 18:e8:e2:cb:6b:8d:7b:f1:e9:1f:f0:12:46:c7:fa: b7:09:c8:47:c0:fa:7f:c9:bb:36:74:c7:5c:bb:a7: 36:d8:8d:7d:9a:a3:fe:dd:d2:33:9e:1a:d2:dc:80: 62:46:ce:ae:55:12:69:b7:2f:f8:27:8a:e6:80:1e: af:7f:07:d2:0b:e7:e4:cb:6b:9a:77:f4:85:b3:58: 4e:26:cb:8c:86:40:d2:29:fa:7a:b8:2f:14:54:28: c3:23:1d:5a:49:09:aa:a2:5e:d9:44:a6:6b:49:21: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.138.133.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393873 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:59:da:4a:cd:50:9c:7b:b8:b2:fc:1b:8e:5e:5e:15:eb:a8: 85:94:99:6b:f0:40:c8:5d:6b:43:21:2f:01:54:b6:fb:78:ed: 65:52:52:55:29:58:32:9a:82:11:2b:0a:aa:67:26:c2:80:a2: 8a:4d:c9:97:e5:7e:68:32:d1:59:fc:6d:39:f6:21:1b:28:2e: 38:2d:89:77:9d:50:67:36:e0:6e:05:a1:51:89:eb:7d:d0:e1: fa:5a:8b:83:7e:f9:42:5f:bb:2f:2f:f5:4c:0d:f5:75:0d:9f: e6:22:9c:9b:b0:02:19:1c:44:3d:04:57:c0:60:fb:be:4b:f8: b5:68:b4:60:de:ea:dd:ac:e3:ae:e4:3d:77:9a:82:ea:e7:37: 3c:ac:d1:04:86:76:cd:1c:45:28:f3:9f:5d:ba:df:04:31:a4: 76:c5:c3:8d:06:52:e1:75:83:ed:bc:93:9f:30:c2:f0:39:df: 92:53:55:1d:43:b5:21:c1:88:fd:21:a3:80:65:34:86:cd:d0: 9d:91:72:ce:2f:f8:2d:db:d7:4f:9e:38:d2:5e:64:d3:f4:24: 64:ba:f2:5e:41:7f:06:af:52:af:ab:5d:9f:2b:ab:e4:45:68: be:03:42:89:77:c5:b1:c7:36:e7:53:21:4c:e9:a7:b8:89:de: 38:8e:5d:ec -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmzCX1xKcwGTTvz2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQzMDE2MDIzOFoXDTI3MDgwMzE2MDIzOFowLzEtMCsGA1UEAxMk MmM2ZWZhMzMtNWNhMi00YjM1LThmNjMtMjllZjJmZjNhYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueM6HfCLd7MYyr72PJg7KypTojiuuVlZciu7 hJwLw17e9GguihR5v97KU/TJJh99MgC7hdf9LZr/hMOj6M8AfJfOZBRuEAzgmByO 1LyeaX3I9qDlH4T0w8triK1l3H+K9odsMNHkkYC/urfrcrkLDQxYdVm6nYHS8vSv PlhqIuQwbzEiTFWx+dt/gNI5R7a+Wb+Z1OMY6OLLa4178ekf8BJGx/q3CchHwPp/ ybs2dMdcu6c22I19mqP+3dIznhrS3IBiRs6uVRJpty/4J4rmgB6vfwfSC+fky2ua d/SFs1hOJsuMhkDSKfp6uC8UVCjDIx1aSQmqol7ZRKZrSSGeGwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBrbW4fYXvAQjZT816Qy2ypBiAUkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y YzZlZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVmMmZmM2FiZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJjNmVmYTMzLTVjYTItNGIzNS04 ZjYzLTI5ZWYyZmYzYWJmOC8yYzZlZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVmMmZm M2FiZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAioUwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgKRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH5Z2krNUJx7uLL8G45eXhXrqIWUmWvwQMhda0MhLwFUtvt4 7WVSUlUpWDKaghErCqpnJsKAoopNyZflfmgy0Vn8bTn2IRsoLjgtiXedUGc24G4F oVGJ633Q4fpai4N++UJfuy8v9UwN9XUNn+YinJuwAhkcRD0EV8Bg+75L+LVotGDe 6t2s467kPXeagurnNzys0QSGds0cRSjzn1263wQxpHbFw40GUuF1g+28k58wwvA5 35JTVR1DtSHBiP0ho4BlNIbN0J2Rcs4v+C3b10+eONJeZNP0JGS68l5BfwavUq+r XZ8rq+RFaL4DQol3xbHHNudTIUzpp7iJ3jiOXew= -----END CERTIFICATE-----Generated at Mon May 12 03:56:53 2025 by rpki-client