$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c.cer File: cb3396f6-6f2c-415f-b416-f1f38b798b6c.cer (raw, json) Hash identifier: UDspFQGdaOa28MNvVfgFaDpUBaUt3hbAVhI+s+bFWpw= Subject key identifier: FC:22:23:B9:10:4C:8B:FC:C2:5A:89:0D:8C:DE:A6:79:A1:E5:72:EE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494BD4F9CB88EAA92CC2D03580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/cb3396f6-6f2c-415f-b416-f1f38b798b6c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 16:48:34 +0000 Certificate not after: Sun 27 Jun 2027 16:48:34 +0000 Subordinate resources: AS: 13777 AS: 14103 AS: 17132 AS: 23327 IP: 69.2.16.0/20 IP: 69.63.224.0/20 IP: 69.89.96.0/19 IP: 75.75.192.0/19 IP: 207.179.64.0/18 IP: 208.77.128.0/22 IP: 216.163.32.0/19 IP: 2607:fd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:d4:f9:cb:88:ea:a9:2c:c2:d0:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 24 16:48:34 2025 GMT Not After : Jun 27 16:48:34 2027 GMT Subject: CN=cb3396f6-6f2c-415f-b416-f1f38b798b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:1e:60:78:ae:23:ba:dd:60:4e:c6:ad:c7: 0f:11:f0:d0:da:c5:66:a1:7f:29:1e:db:fc:50:d4: 81:53:c7:73:62:85:68:60:fb:0f:a4:3d:05:39:a9: 84:30:4d:08:80:b0:cb:3f:05:8d:41:b8:7a:3d:39: da:07:b2:9f:a4:5e:cc:41:bc:cf:10:ba:30:57:97: c3:00:02:f8:65:82:1a:ba:ba:f7:ee:57:e8:6e:d2: dc:a1:34:23:9b:1a:c2:ff:91:b0:c8:19:45:b2:0e: 39:54:b5:99:40:ad:5b:ff:17:8f:e0:8a:2f:ab:ed: 20:bc:2f:4b:b4:ef:91:62:d0:b2:f3:a3:13:82:d8: 26:58:d9:12:ae:4b:9a:2d:2e:e8:eb:6c:ae:15:2d: 82:4a:87:0e:23:a7:d2:67:33:67:d5:4e:c1:67:63: cc:79:a3:96:d2:ad:b2:57:70:0d:63:6b:de:ee:bf: 6e:bf:cb:6b:f4:38:59:d6:0a:dc:33:a4:b3:4c:bd: de:9f:d5:06:47:56:5c:6b:02:9e:9d:29:05:75:82: 2f:ea:a5:ee:e3:17:08:f8:76:42:73:7b:9e:51:9f: e6:c7:72:73:fd:29:30:ee:22:f6:cf:d4:10:a3:b2: a2:b4:10:38:fb:ea:1a:db:a3:d8:82:1f:f8:fe:52: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:22:23:B9:10:4C:8B:FC:C2:5A:89:0D:8C:DE:A6:79:A1:E5:72:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb3396f6-6f2c-415f-b416-f1f38b798b6c/cb3396f6-6f2c-415f-b416-f1f38b798b6c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 69.2.16.0/20 69.63.224.0/20 69.89.96.0/19 75.75.192.0/19 207.179.64.0/18 208.77.128.0/22 216.163.32.0/19 IPv6: 2607:fd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13777 14103 17132 23327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:73:90:7a:dc:51:30:74:ea:e3:50:47:fa:d6:8d:02:09:66: 8d:e8:a4:09:54:c4:75:9d:a7:e6:9a:3e:29:50:d7:3c:9b:12: 65:13:2b:78:4f:e0:b2:91:98:11:a9:88:9c:e5:c2:3c:89:28: e5:08:91:c3:20:0a:e8:f4:29:27:02:95:ef:45:a2:8c:65:47: a0:11:3d:70:ab:79:c4:5e:96:f6:c1:6c:9b:9c:1b:89:b5:ff: eb:b1:24:eb:3a:8f:d9:58:4f:04:cc:46:ac:2b:21:87:46:7a: 99:2c:f9:e9:29:0a:85:13:6e:0f:ea:b1:1c:c5:3f:8c:fe:18: 50:6c:39:8b:6b:a0:3f:75:66:ff:6d:94:5b:33:6b:a6:05:d8: be:3b:0b:00:c2:8f:71:6d:1d:93:96:c2:4b:84:29:e4:10:95: a0:f7:d1:3e:19:f9:a1:82:eb:af:5b:3c:fe:24:51:a2:70:6f: 35:ea:25:ea:4e:99:1c:97:47:10:71:43:ec:6a:7e:e3:73:8a: 4f:18:d3:24:d0:a5:ce:ab:c5:fe:b6:39:17:7e:eb:55:e6:af: e8:7e:e1:e2:58:f5:0f:df:e7:ff:27:bf:3b:f6:e1:3c:b7:ce: aa:85:f0:39:da:0f:ef:86:24:d0:fc:f7:d6:f7:6a:9f:be:40: b8:ae:51:77 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWElL1PnLiOqpLMLQNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNDE2NDgzNFoXDTI3MDYyNzE2NDgzNFowLzEtMCsGA1UEAxMk Y2IzMzk2ZjYtNmYyYy00MTVmLWI0MTYtZjFmMzhiNzk4YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUweYHiuI7rdYE7GrccPEfDQ2sVmoX8pHtv8 UNSBU8dzYoVoYPsPpD0FOamEME0IgLDLPwWNQbh6PTnaB7KfpF7MQbzPELowV5fD AAL4ZYIaurr37lfobtLcoTQjmxrC/5GwyBlFsg45VLWZQK1b/xeP4Iovq+0gvC9L tO+RYtCy86MTgtgmWNkSrkuaLS7o62yuFS2CSocOI6fSZzNn1U7BZ2PMeaOW0q2y V3ANY2ve7r9uv8tr9DhZ1grcM6SzTL3en9UGR1ZcawKenSkFdYIv6qXu4xcI+HZC c3ueUZ/mx3Jz/Skw7iL2z9QQo7KitBA4++oa26PYgh/4/lLW8wIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFPwiI7kQTIv8wlqJDYzepnmh5XLuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j YjMzOTZmNi02ZjJjLTQxNWYtYjQxNi1mMWYzOGI3OThiNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NiMzM5NmY2LTZmMmMtNDE1Zi1i NDE2LWYxZjM4Yjc5OGI2Yy9jYjMzOTZmNi02ZjJjLTQxNWYtYjQxNi1mMWYzOGI3 OThiNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARFAhADBARFP+ADBAVFWWADBAVLS8ADBAbPs0AD BALQTYADBAXYoyAwDQQCAAIwBwMFACYH/YAwJQYIKwYBBQUHAQgBAf8EFjAUoBIw EAICNdECAjcXAgJC7AICWx8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD3OQetxRMHTq41BH+taNAglmjeik CVTEdZ2n5po+KVDXPJsSZRMreE/gspGYEamInOXCPIko5QiRwyAK6PQpJwKV70Wi jGVHoBE9cKt5xF6W9sFsm5wbibX/67Ek6zqP2VhPBMxGrCshh0Z6mSz56SkKhRNu D+qxHMU/jP4YUGw5i2ugP3Vm/22UWzNrpgXYvjsLAMKPcW0dk5bCS4Qp5BCVoPfR Phn5oYLrr1s8/iRRonBvNeol6k6ZHJdHEHFD7Gp+43OKTxjTJNClzqvF/rY5F37r Veav6H7h4lj1D9/n/ye/O/bhPLfOqoXwOdoP74Yk0Pz31vdqn75AuK5Rdw== -----END CERTIFICATE-----Generated at Mon May 12 20:42:43 2025 by rpki-client