$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239.cer File: 6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239.cer (raw, json) Hash identifier: MjyIWkPaeBWYJ5oCQos3eCcM7X1qkXDmCsan2T9jLbs= Subject key identifier: 81:D5:BE:D2:E6:A8:8F:A6:F8:AF:0E:07:14:B5:ED:9A:70:77:F6:5E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849BF37C3FFB20D7E839C7FF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 46936 IP: 162.253.100.0/22 IP: 198.101.28.0/22 IP: 2604:8c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c3:ff:b2:0d:7e:83:9c:7f:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:6a:67:1c:a6:b6:8f:23:6e:73:91:68:f7: 33:5b:46:81:15:31:81:71:44:d7:ad:cc:80:ee:f1: 12:2c:3d:86:60:84:44:a8:76:78:6b:d1:56:15:b0: 7a:7b:b2:d4:0b:7b:ed:8c:55:7b:b4:75:60:04:05: 3c:95:d4:34:e9:1a:b1:10:e0:cd:5b:e6:7c:3a:5a: fe:5a:ba:b3:aa:5b:2d:a4:8b:82:fe:5e:d9:8e:ed: 93:ba:7c:33:81:a7:3e:58:8d:cd:a1:a3:f6:1d:32: cf:2b:3f:66:af:52:07:85:72:c6:f6:d6:6f:45:0b: 4c:46:6a:99:22:ff:fb:f3:af:27:c9:6b:c3:b7:99: 27:e9:b4:12:12:24:4d:f7:21:26:80:93:48:de:a9: ee:00:cd:2a:b5:13:00:40:80:4b:26:88:40:88:94: 4d:d7:d7:b2:ff:ed:b2:69:66:90:82:67:97:1f:e7: 50:0f:61:d4:e6:8a:fe:5c:d0:6a:e8:08:13:e2:d6: d4:15:2d:0f:d3:ca:74:47:dd:4a:0f:2a:ef:11:c6: 63:17:4e:2d:4e:92:f3:3a:25:a9:4e:31:dd:28:24: 97:34:84:64:e3:c3:ba:f4:cd:a4:cc:5e:0c:2f:d9: e4:9d:84:aa:6b:b5:7a:9e:8a:1e:36:ae:a9:81:a6: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:BE:D2:E6:A8:8F:A6:F8:AF:0E:07:14:B5:ED:9A:70:77:F6:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239/6f0ca3d2-5d8d-44a0-8f7c-d08a95e16239.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.253.100.0/22 198.101.28.0/22 IPv6: 2604:8c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:db:cc:f9:34:dd:c4:32:8a:e0:7a:91:54:af:24:1e:ef:bf: b9:71:04:52:8c:2b:f5:1d:75:0f:f8:11:60:e4:ca:80:f7:c4: b6:7c:bf:2f:d0:c6:2e:43:8d:49:2a:66:50:00:39:28:3e:ab: 30:b5:a6:b9:b6:45:b5:20:80:66:68:ad:69:8e:04:60:82:38: 1e:b1:da:60:38:18:8f:34:fe:c7:64:d0:a9:c4:9c:af:15:b0: 3a:1c:26:60:29:d7:43:11:9f:b7:7e:fe:cc:4e:99:34:d0:fc: 1a:f0:e2:ac:ca:92:bf:49:44:18:a1:86:f5:ba:ff:05:26:98: 26:4e:80:62:19:d1:28:91:80:61:27:e5:43:f7:51:c2:25:72: bc:b3:08:91:b9:17:9e:a7:a9:eb:0c:df:cc:1b:2c:cf:17:99: 00:0a:46:0e:4a:a8:92:c0:52:b5:37:f3:8a:40:69:54:f3:a4: d2:17:9a:37:77:6a:04:61:8f:54:f2:5c:fd:4b:6f:7b:27:6d: 71:fe:e6:72:45:3e:5b:63:6c:4d:05:f6:fb:41:00:b3:86:3d: c0:e6:bd:71:7c:b9:d5:5a:19:eb:78:fd:5a:cb:35:56:b7:99: f8:ee:24:80:d0:27:97:cd:c1:42:01:ad:da:41:c1:a3:cc:1d: cc:52:af:e1 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEm/N8P/sg1+g5x/84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk NmYwY2EzZDItNWQ4ZC00NGEwLThmN2MtZDA4YTk1ZTE2MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnRqZxymto8jbnORaPczW0aBFTGBcUTXrcyA 7vESLD2GYIREqHZ4a9FWFbB6e7LUC3vtjFV7tHVgBAU8ldQ06RqxEODNW+Z8Olr+ WrqzqlstpIuC/l7Zju2Tunwzgac+WI3NoaP2HTLPKz9mr1IHhXLG9tZvRQtMRmqZ Iv/7868nyWvDt5kn6bQSEiRN9yEmgJNI3qnuAM0qtRMAQIBLJohAiJRN19ey/+2y aWaQgmeXH+dQD2HU5or+XNBq6AgT4tbUFS0P08p0R91KDyrvEcZjF04tTpLzOiWp TjHdKCSXNIRk48O69M2kzF4ML9nknYSqa7V6nooeNq6pgaZXxQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFIHVvtLmqI+m+K8OBxS17Zpwd/ZeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 ZjBjYTNkMi01ZDhkLTQ0YTAtOGY3Yy1kMDhhOTVlMTYyMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzZmMGNhM2QyLTVkOGQtNDRhMC04 ZjdjLWQwOGE5NWUxNjIzOS82ZjBjYTNkMi01ZDhkLTQ0YTAtOGY3Yy1kMDhhOTVl MTYyMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKi/WQDBALGZRwwDQQCAAIwBwMFACYEjIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDALdYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHzbzPk03cQyiuB6kVSv JB7vv7lxBFKMK/UddQ/4EWDkyoD3xLZ8vy/Qxi5DjUkqZlAAOSg+qzC1prm2RbUg gGZorWmOBGCCOB6x2mA4GI80/sdk0KnEnK8VsDocJmAp10MRn7d+/sxOmTTQ/Brw 4qzKkr9JRBihhvW6/wUmmCZOgGIZ0SiRgGEn5UP3UcIlcryzCJG5F56nqesM38wb LM8XmQAKRg5KqJLAUrU384pAaVTzpNIXmjd3agRhj1TyXP1Lb3snbXH+5nJFPltj bE0F9vtBALOGPcDmvXF8udVaGet4/VrLNVa3mfjuJIDQJ5fNwUIBrdpBwaPMHcxS r+E= -----END CERTIFICATE-----Generated at Tue May 6 06:13:16 2025 by rpki-client