$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer File: 00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer (raw, json) Hash identifier: lgwDDIHr0WOX4HDAzGZc6hSix9lyiCTUjvHD8tcSVEE= Subject key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858499AECDC84B09B3C43C2870700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 00:45:33 +0000 Certificate not after: Mon 26 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 25816 IP: 98.142.112.0/20 IP: 104.254.44.0/22 IP: 192.245.89.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:ec:dc:84:b0:9b:3c:43:c2:87:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 22 00:45:33 2025 GMT Not After : Jul 26 00:45:33 2027 GMT Subject: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c3:a4:d1:7e:f6:a6:03:d3:a2:9b:ff:f0:bb: 55:8e:d3:d9:13:12:bf:26:4a:f8:91:c6:e9:e1:e8: 54:82:fb:82:13:60:13:33:53:5b:a1:ca:f6:5c:d3: 8e:1a:ba:3f:33:d3:df:66:f5:51:b0:e8:f0:fe:2e: b3:db:3b:66:ac:bc:16:fa:2a:12:70:fb:99:b8:c4: da:a1:c7:6f:f8:cb:7a:9d:9d:8b:5e:cf:a6:77:70: 15:78:e3:64:1d:5e:b2:a8:25:78:f7:fb:85:cd:42: f4:b2:0a:b9:bf:97:de:c8:e5:a8:d6:db:c5:25:8d: a6:5a:07:d9:6b:05:cb:e0:84:04:66:43:51:3f:0c: a5:32:67:bc:c4:a0:2b:19:c4:46:cf:ff:e7:45:5d: f0:21:ca:ab:da:e9:50:72:d2:65:63:db:27:17:32: 34:d3:18:5f:59:1c:cf:9f:20:f4:c1:21:a5:35:2e: da:e5:28:99:49:ab:4d:94:72:43:53:1c:6b:41:e1: 02:ac:4b:92:88:54:16:5d:5f:a7:fa:2d:8a:12:c6: e9:6d:b4:c7:91:32:fb:76:46:1a:f9:bf:b8:09:e1: 74:a0:0a:e4:94:b7:f3:51:27:77:e3:19:41:58:b3: 24:51:01:ca:fe:15:49:04:b8:d7:36:3c:ec:71:78: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 98.142.112.0/20 104.254.44.0/22 192.245.89.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25816 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6b:d4:09:17:43:00:23:bd:02:d1:16:83:af:55:17:eb:dc: 62:9a:90:f7:5e:c1:f1:61:6a:ad:64:22:88:69:cc:a9:7e:95: 77:f5:6d:2e:0f:38:8e:f1:59:3a:d1:02:74:eb:8f:c4:97:91: 5c:74:1d:cb:51:d0:eb:70:2a:9b:7a:3e:6e:17:eb:47:71:59: 8a:8b:c5:42:90:ff:d8:46:f4:3b:dc:5f:11:cd:1a:6c:5d:4d: c9:ce:94:fc:3b:57:bc:8e:33:da:fa:0c:8d:ea:c4:5d:52:93: 61:79:63:ec:25:c0:c4:d8:87:b1:36:31:35:4f:4f:27:c5:75: f4:36:df:7f:20:13:e7:db:e7:d5:b5:81:02:96:4b:9c:6f:b3: 02:35:43:fc:9b:3d:db:4c:7a:52:77:20:5d:c1:c0:ac:7c:08: 67:bd:f9:96:fe:8f:6b:ab:7f:a8:6c:d6:9e:1e:e5:88:f0:3f: 06:5d:56:dd:4b:2c:3b:52:f1:32:04:34:3e:62:d3:56:96:82: c3:3b:ab:39:94:d5:1f:68:e0:ca:5b:e4:ac:1c:b8:63:a7:27: 3e:0a:93:1d:12:d4:dc:e9:1e:63:f3:82:0f:72:a0:cc:a7:15: a8:dd:99:38:44:40:19:3a:c3:7d:03:6c:e2:5f:60:42:08:cb: db:7f:c8:89 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEma7NyEsJs8Q8KHBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQyMjAwNDUzM1oXDTI3MDcyNjAwNDUzM1owLzEtMCsGA1UEAxMk MDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78Ok0X72pgPTopv/8LtVjtPZExK/Jkr4kcbp 4ehUgvuCE2ATM1Nbocr2XNOOGro/M9PfZvVRsOjw/i6z2ztmrLwW+ioScPuZuMTa ocdv+Mt6nZ2LXs+md3AVeONkHV6yqCV49/uFzUL0sgq5v5feyOWo1tvFJY2mWgfZ awXL4IQEZkNRPwylMme8xKArGcRGz//nRV3wIcqr2ulQctJlY9snFzI00xhfWRzP nyD0wSGlNS7a5SiZSatNlHJDUxxrQeECrEuSiFQWXV+n+i2KEsbpbbTHkTL7dkYa +b+4CeF0oArklLfzUSd34xlBWLMkUQHK/hVJBLjXNjzscXgX4wIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFNeFH6r2FXAhIFdYixzRw7660vR3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w MGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzAwZmI2ZWZlLWRiYzEtNDVhOC1i MjY2LWNhNzJmN2UwNzljMi8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdl MDc5YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARijnADBAJo/iwDBADA9VkwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICZNgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQWvUCRdDACO9AtEWg69VF+vcYpqQ917B 8WFqrWQiiGnMqX6Vd/VtLg84jvFZOtECdOuPxJeRXHQdy1HQ63Aqm3o+bhfrR3FZ iovFQpD/2Eb0O9xfEc0abF1Nyc6U/DtXvI4z2voMjerEXVKTYXlj7CXAxNiHsTYx NU9PJ8V19DbffyAT59vn1bWBApZLnG+zAjVD/Js920x6UncgXcHArHwIZ735lv6P a6t/qGzWnh7liPA/Bl1W3UssO1LxMgQ0PmLTVpaCwzurOZTVH2jgylvkrBy4Y6cn PgqTHRLU3OkeY/OCD3KgzKcVqN2ZOERAGTrDfQNs4l9gQgjL23/IiQ== -----END CERTIFICATE-----Generated at Sun Jun 29 12:23:37 2025 by rpki-client