$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b.cer File: 679734dc-7b32-421c-926d-8816be2f5e3b.cer (raw, json) Hash identifier: 51x2fMzKWQAjmI0D2XpqMWm39QrdL7YCxboT25XaTL0= Subject key identifier: 30:21:69:01:B6:1B:1D:09:B2:94:7C:EA:FE:8A:8D:64:46:61:76:38 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B3F430DFFB8072262C7CE1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/679734dc-7b32-421c-926d-8816be2f5e3b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 23:55:32 +0000 Certificate not after: Tue 03 Aug 2027 23:55:32 +0000 Subordinate resources: AS: 23370 IP: 199.167.48.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:f4:30:df:fb:80:72:26:2c:7c:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 30 23:55:32 2025 GMT Not After : Aug 3 23:55:32 2027 GMT Subject: CN=679734dc-7b32-421c-926d-8816be2f5e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:af:e2:31:d2:f6:0e:e1:3e:05:1a:59:76: b6:78:6f:77:28:0d:b7:7a:e0:75:76:9b:a1:ad:33: 16:bf:42:3e:a3:88:a0:86:bf:74:c7:b0:db:a2:b1: fa:14:f2:10:71:05:d9:00:af:13:0e:5f:74:ca:3d: 15:b6:a5:f3:73:14:31:a1:82:65:74:6a:e1:2c:0e: 7c:d0:94:0e:35:78:e5:b6:8a:21:11:5a:98:21:c1: 3a:85:34:11:8c:18:87:74:17:7b:50:4d:15:be:5a: 8a:95:82:52:06:e2:9e:a7:5f:8d:55:e2:72:4a:ea: 63:c5:ef:5e:73:0f:88:2e:a8:b9:12:e3:1e:da:67: 00:15:27:0d:11:da:ae:ae:18:03:32:ea:f7:d1:5a: 15:65:b4:4c:dc:e7:aa:60:dd:61:63:99:d5:d6:20: 8d:50:3a:5c:45:d8:a0:77:eb:f9:c2:87:16:5a:d1: b0:f5:fd:aa:b2:19:a6:80:fa:be:f5:43:36:16:44: e8:86:d0:5e:e1:ad:e4:fe:dd:da:4b:51:79:29:92: 2f:53:ff:c9:a8:db:bd:e4:6f:11:ec:78:f0:d2:c5: 66:72:10:4f:83:b9:28:51:cd:92:26:85:d0:04:1c: 5f:06:00:d9:31:49:f6:72:56:1b:c5:64:e5:26:38: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:69:01:B6:1B:1D:09:B2:94:7C:EA:FE:8A:8D:64:46:61:76:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/679734dc-7b32-421c-926d-8816be2f5e3b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.167.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23370 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1d:88:3f:e7:2e:e2:8f:a9:93:18:54:0a:60:27:41:28:e3: 24:5c:29:c0:30:86:2d:fa:c0:77:ef:35:79:06:18:33:a2:c3: 3d:01:fc:7e:6c:8b:32:52:51:43:bc:a1:2c:55:f6:65:b9:90: ac:06:81:23:68:7c:4f:5d:1d:a3:7a:11:ec:67:cc:99:18:46: 48:13:2f:d6:da:c9:b6:db:54:bc:64:b3:da:30:d5:86:f3:98: e9:7f:05:08:fa:00:fd:0b:63:1a:eb:4b:1c:67:fe:38:7f:61: b9:ba:32:ad:7c:48:0d:fc:87:0d:81:38:82:19:a8:9c:d4:50: 32:e6:68:8e:d1:b7:dc:75:19:93:45:8d:de:25:7d:02:69:6a: e1:3f:62:fd:7a:a4:03:f5:ab:f0:af:6c:5a:9f:b0:64:50:e3: f1:67:40:36:5f:68:52:04:2b:be:fa:3c:d5:cf:74:f1:da:30: 98:1b:0a:3c:09:35:1f:3f:61:55:a3:ec:1a:9c:c1:66:02:dd: eb:8d:7f:7d:e9:2f:23:94:5d:98:2f:d4:18:a1:4b:40:e5:9a: 88:46:72:7c:79:fb:94:56:8f:eb:0a:ce:d2:39:a3:ce:b5:08: 1a:46:68:ea:e7:d3:bb:8e:42:e4:d9:d6:c0:9e:84:74:8b:70: 1f:56:b6:a1 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmz9DDf+4ByJix84cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQzMDIzNTUzMloXDTI3MDgwMzIzNTUzMlowLzEtMCsGA1UEAxMk Njc5NzM0ZGMtN2IzMi00MjFjLTkyNmQtODgxNmJlMmY1ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nSv4jHS9g7hPgUaWXa2eG93KA23euB1dpuh rTMWv0I+o4ighr90x7DborH6FPIQcQXZAK8TDl90yj0VtqXzcxQxoYJldGrhLA58 0JQONXjltoohEVqYIcE6hTQRjBiHdBd7UE0VvlqKlYJSBuKep1+NVeJySupjxe9e cw+ILqi5EuMe2mcAFScNEdqurhgDMur30VoVZbRM3OeqYN1hY5nV1iCNUDpcRdig d+v5wocWWtGw9f2qshmmgPq+9UM2FkTohtBe4a3k/t3aS1F5KZIvU//JqNu95G8R 7Hjw0sVmchBPg7koUc2SJoXQBBxfBgDZMUn2clYbxWTlJjhccwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDAhaQG2Gx0JspR86v6KjWRGYXY4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 Nzk3MzRkYy03YjMyLTQyMWMtOTI2ZC04ODE2YmUyZjVlM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY3OTczNGRjLTdiMzItNDIxYy05 MjZkLTg4MTZiZTJmNWUzYi82Nzk3MzRkYy03YjMyLTQyMWMtOTI2ZC04ODE2YmUy ZjVlM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHpzAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC W0owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAah2IP+cu4o+pkxhUCmAnQSjjJFwpwDCGLfrAd+81eQYYM6LD PQH8fmyLMlJRQ7yhLFX2ZbmQrAaBI2h8T10do3oR7GfMmRhGSBMv1trJtttUvGSz 2jDVhvOY6X8FCPoA/QtjGutLHGf+OH9huboyrXxIDfyHDYE4ghmonNRQMuZojtG3 3HUZk0WN3iV9Amlq4T9i/XqkA/Wr8K9sWp+wZFDj8WdANl9oUgQrvvo81c908dow mBsKPAk1Hz9hVaPsGpzBZgLd641/fekvI5RdmC/UGKFLQOWaiEZyfHn7lFaP6wrO 0jmjzrUIGkZo6ufTu45C5NnWwJ6EdItwH1a2oQ== -----END CERTIFICATE-----Generated at Tue May 13 00:18:42 2025 by rpki-client