$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer File: 594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer (raw, json) Hash identifier: /GMRPWcyh+kB3RgTVWp8QZkzjePlPbV20gWkOpfh4tU= Subject key identifier: D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849C927EBDB5A403CBBDA87C220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 14:11:44 +0000 Certificate not after: Wed 11 Aug 2027 14:11:44 +0000 Subordinate resources: AS: 396891 IP: 23.190.8.0/24 IP: 2602:f9f1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:27:eb:db:5a:40:3c:bb:da:87:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 8 14:11:44 2025 GMT Not After : Aug 11 14:11:44 2027 GMT Subject: CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:90:b0:cc:59:78:ac:d7:73:12:d3:43:8c: 3f:d7:29:39:df:6e:09:c6:10:69:27:5e:f4:19:26: 13:7d:27:97:12:e2:40:f5:00:7d:96:61:b0:9b:19: da:29:ff:a2:1a:99:65:bd:2f:33:9c:17:ed:76:28: 39:97:e6:2d:b4:a6:5d:aa:89:4e:77:a2:2c:84:6f: 3e:fc:a6:9b:c5:f8:42:bc:c1:70:3d:f7:73:2e:69: ee:e4:de:70:23:94:b7:e9:18:75:95:62:51:f7:e9: 8b:6d:84:2f:a0:82:51:95:2f:14:ec:5e:fd:01:e8: fe:8a:b1:1c:59:80:ad:73:75:dc:e4:ec:54:af:a3: cf:c9:b6:04:ca:85:25:eb:ae:16:79:fb:79:8b:63: a9:f3:d1:2c:88:bb:4a:e0:8d:09:c0:bb:2c:f0:c9: b4:16:69:07:b6:0a:b2:2e:91:36:66:6b:f4:ff:5b: 2b:30:ad:90:f2:88:b4:6a:c3:01:cd:cc:02:67:17: 6e:bc:53:f1:cb:7f:54:a6:25:d7:11:60:a4:e6:99: 54:b5:14:e2:f9:df:bb:e7:0b:fd:e9:8b:28:80:4e: 8c:17:1a:93:a8:09:0b:c8:7c:b4:2b:79:34:af:03: 61:a4:e4:46:ca:60:1c:b6:fd:9e:95:78:3b:9d:1b: d0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.190.8.0/24 IPv6: 2602:f9f1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e9:3b:d3:5d:1a:13:47:c0:67:2f:2f:d8:d6:08:30:88:c7: 13:53:e8:ec:fd:a5:7f:3d:1a:cd:4a:72:73:ba:7e:8f:df:24: a6:b5:20:ac:d4:a1:63:cd:8e:e5:28:21:b4:f2:ea:ae:93:6b: f5:29:cd:bf:0a:ef:cd:8d:4a:fa:0c:29:74:9b:6b:38:23:00: a0:48:35:ab:cc:e1:75:0c:48:c4:82:98:2b:36:71:85:07:02: e7:d9:29:48:a0:5b:fd:b3:9c:0d:69:92:f6:b9:63:86:b4:63: cc:90:d1:2a:e3:94:f3:9b:8e:e8:aa:77:b6:78:ca:26:89:ab: 9f:41:9d:92:85:e2:d3:39:1b:ad:d2:0d:7f:08:13:98:7f:75: ae:f5:ce:f2:32:6c:f5:69:d8:fd:07:93:76:d4:9f:bc:14:94: 2b:da:95:e2:f2:54:ff:dd:cb:e0:b1:71:e4:fa:9d:1b:96:d3: 86:08:c7:b2:e0:93:78:b2:67:cd:b7:60:cf:05:22:3a:23:d6: d6:f1:a9:b2:fa:81:57:ab:68:0a:63:a7:97:0e:09:b3:ae:39: 4e:c8:c6:3b:7d:ae:ff:46:8e:aa:79:5e:8a:69:f4:92:e7:1f: 40:2d:c7:0f:db:61:21:8f:a3:c0:5a:2c:ab:60:f9:62:0e:a2: 75:8f:fe:05 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnJJ+vbWkA8u9qHwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwODE0MTE0NFoXDTI3MDgxMTE0MTE0NFowLzEtMCsGA1UEAxMk NTk0YmVmNWYtOGQxMS00YjZkLTkxY2EtOWNmNTYwYWU4Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWaQsMxZeKzXcxLTQ4w/1yk5324JxhBpJ170 GSYTfSeXEuJA9QB9lmGwmxnaKf+iGpllvS8znBftdig5l+YttKZdqolOd6IshG8+ /KabxfhCvMFwPfdzLmnu5N5wI5S36Rh1lWJR9+mLbYQvoIJRlS8U7F79Aej+irEc WYCtc3Xc5OxUr6PPybYEyoUl664Weft5i2Op89EsiLtK4I0JwLss8Mm0FmkHtgqy LpE2Zmv0/1srMK2Q8oi0asMBzcwCZxduvFPxy39UpiXXEWCk5plUtRTi+d+75wv9 6YsogE6MFxqTqAkLyHy0K3k0rwNhpORGymActv2elXg7nRvQqQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNfa6Zk1dMd2AOgdSnjPmzfHfo5QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 OTRiZWY1Zi04ZDExLTRiNmQtOTFjYS05Y2Y1NjBhZTg2NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU5NGJlZjVmLThkMTEtNGI2ZC05 MWNhLTljZjU2MGFlODY3NC81OTRiZWY1Zi04ZDExLTRiNmQtOTFjYS05Y2Y1NjBh ZTg2NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvggwDgQCAAIwCAMGACYC+fEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYOWzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg6TvTXRoTR8BnLy/Y1ggwiMcT U+js/aV/PRrNSnJzun6P3ySmtSCs1KFjzY7lKCG08uquk2v1Kc2/Cu/NjUr6DCl0 m2s4IwCgSDWrzOF1DEjEgpgrNnGFBwLn2SlIoFv9s5wNaZL2uWOGtGPMkNEq45Tz m47oqne2eMomiaufQZ2SheLTORut0g1/CBOYf3Wu9c7yMmz1adj9B5N21J+8FJQr 2pXi8lT/3cvgsXHk+p0bltOGCMey4JN4smfNt2DPBSI6I9bW8amy+oFXq2gKY6eX DgmzrjlOyMY7fa7/Ro6qeV6KafSS5x9ALccP22Ehj6PAWiyrYPliDqJ1j/4F -----END CERTIFICATE-----Generated at Tue May 13 04:15:26 2025 by rpki-client