$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer File: 4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer (raw, json) Hash identifier: jRnyVDBi1it1nGYIX9JMyHsDvCZL64J4vMlvD18Jk7M= Subject key identifier: 19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B311DB831EA3700F12623080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 16:19:30 +0000 Certificate not after: Tue 03 Aug 2027 16:19:30 +0000 Subordinate resources: AS: 11753 AS: 25707 IP: 204.11.240.0/22 IP: 216.220.160.0/20 IP: 2604:b9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:11:db:83:1e:a3:70:0f:12:62:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 30 16:19:30 2025 GMT Not After : Aug 3 16:19:30 2027 GMT Subject: CN=4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:12:7d:a4:dc:69:51:90:70:c6:88:c8:fb: 33:45:0f:f4:34:b9:25:ce:89:f2:ab:5d:91:57:0f: c2:11:1d:6b:f8:e1:b4:35:76:f6:64:06:db:a4:b4: 92:43:6c:fd:a9:27:4f:98:76:94:21:d4:c7:b7:77: fc:e2:fa:00:d7:45:01:e2:2c:38:d5:94:9e:cd:74: ac:70:75:b0:58:97:11:bc:88:6f:25:f0:94:a3:ea: d1:2e:f6:0a:12:66:08:6e:7a:d9:f9:f5:39:b1:60: b6:4d:72:b0:84:8d:ab:0e:53:ca:23:c8:6c:fe:9d: 2c:cb:c3:d4:55:23:8f:ae:cd:b2:b7:94:5f:3d:4c: e9:ac:a9:92:19:6d:cf:fd:d4:58:ae:1e:76:9c:db: 4e:3f:65:90:ab:8c:c4:18:9f:19:03:14:7d:cb:08: 35:c6:34:9e:5a:78:c0:fd:a1:87:d4:fd:56:b2:89: 38:ed:34:8e:ea:02:64:f7:5c:fc:02:fd:b4:bd:3a: 86:d5:53:66:88:1c:2a:56:c9:55:ed:c9:ac:5e:5b: 37:2b:56:c6:84:9f:3b:18:bf:32:32:85:a2:e9:0c: 04:d1:63:ad:88:da:53:21:22:dc:51:8f:35:8c:84: f3:c1:a0:d4:a2:8e:a6:1c:eb:1c:a6:53:b0:6b:fb: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.240.0/22 216.220.160.0/20 IPv6: 2604:b9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11753 25707 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:99:69:16:2c:43:6d:b3:af:07:c8:63:e8:9a:91:a8:40:ea: dc:3a:27:ca:11:87:6c:a5:a0:70:e5:1e:3b:d1:3b:b5:50:24: 78:75:ad:76:0d:3d:73:0f:47:c2:9e:c9:d5:69:fa:37:ef:b4: 95:15:46:a8:db:e5:09:2b:a8:f9:e6:98:ac:8e:de:7c:e4:1a: cb:01:de:9a:e1:c2:3e:63:e4:6e:96:e4:3d:06:59:64:85:94: 55:c7:45:0b:20:d5:82:7d:c1:88:1d:f9:fe:14:24:ce:ea:00: 13:11:19:ed:3c:5b:5b:b2:95:24:8e:11:ab:61:51:b4:ca:a2: 82:8d:3a:8a:9c:d5:c7:af:44:36:8c:9f:64:21:1f:02:1d:67: 4c:69:3a:d1:79:8f:1a:45:2c:df:d8:9e:25:2c:8e:f5:f1:a8: 60:91:8c:ca:3c:ee:2a:bf:b7:33:15:95:10:e1:6c:a0:7f:1b: 1b:0a:e4:0c:55:1a:74:27:11:8f:02:94:26:f6:e1:1a:1a:4a: 13:c0:fa:fd:4c:bd:59:ba:a4:de:c7:af:b0:db:2d:70:5c:10: d2:7b:e1:3d:dd:03:85:5c:08:56:d9:9c:a3:31:f4:bd:a5:1e: 2f:13:87:d4:0c:4f:c8:02:58:3b:1b:dc:d4:d9:df:fe:a4:ed: 91:3f:0b:28 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEmzEduDHqNwDxJiMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQzMDE2MTkzMFoXDTI3MDgwMzE2MTkzMFowLzEtMCsGA1UEAxMk NGFhM2U5ZGMtYWQ1ZS00YmViLWJjYTEtOWEyMTAyZWJjZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy8SfaTcaVGQcMaIyPszRQ/0NLklzonyq12R Vw/CER1r+OG0NXb2ZAbbpLSSQ2z9qSdPmHaUIdTHt3f84voA10UB4iw41ZSezXSs cHWwWJcRvIhvJfCUo+rRLvYKEmYIbnrZ+fU5sWC2TXKwhI2rDlPKI8hs/p0sy8PU VSOPrs2yt5RfPUzprKmSGW3P/dRYrh52nNtOP2WQq4zEGJ8ZAxR9ywg1xjSeWnjA /aGH1P1Wsok47TSO6gJk91z8Av20vTqG1VNmiBwqVslV7cmsXls3K1bGhJ87GL8y MoWi6QwE0WOtiNpTISLcUY81jITzwaDUoo6mHOscplOwa/u1rQIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFBmUxn79Z7YgCReUl9i1N8i7i9MDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 YWEzZTlkYy1hZDVlLTRiZWItYmNhMS05YTIxMDJlYmNmNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzRhYTNlOWRjLWFkNWUtNGJlYi1i Y2ExLTlhMjEwMmViY2Y3My80YWEzZTlkYy1hZDVlLTRiZWItYmNhMS05YTIxMDJl YmNmNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALMC/ADBATY3KAwDQQCAAIwBwMFACYEucAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICLekCAmRrMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHaZaRYsQ22zrwfI Y+iakahA6tw6J8oRh2yloHDlHjvRO7VQJHh1rXYNPXMPR8KeydVp+jfvtJUVRqjb 5QkrqPnmmKyO3nzkGssB3prhwj5j5G6W5D0GWWSFlFXHRQsg1YJ9wYgd+f4UJM7q ABMRGe08W1uylSSOEathUbTKooKNOoqc1cevRDaMn2QhHwIdZ0xpOtF5jxpFLN/Y niUsjvXxqGCRjMo87iq/tzMVlRDhbKB/GxsK5AxVGnQnEY8ClCb24RoaShPA+v1M vVm6pN7Hr7DbLXBcENJ74T3dA4VcCFbZnKMx9L2lHi8Th9QMT8gCWDsb3NTZ3/6k 7ZE/Cyg= -----END CERTIFICATE-----Generated at Mon May 12 17:30:49 2025 by rpki-client