$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer File: d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer (raw, json) Hash identifier: H11nspcQRoq25d5TZtuvE+ARm1Cw379UnY2Z7edldFw= Subject key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849865C3EE030CEA18E67351D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 15:58:00 +0000 Certificate not after: Sun 18 Jul 2027 15:58:00 +0000 Subordinate resources: AS: 19830 IP: 64.18.96.0/19 IP: 208.99.96.0/20 IP: 2607:dd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:5c:3e:e0:30:ce:a1:8e:67:35:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 14 15:58:00 2025 GMT Not After : Jul 18 15:58:00 2027 GMT Subject: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:35:fe:ae:c2:91:b6:74:b8:00:44:52:53: e5:93:7d:ef:e1:6c:0c:68:c7:02:dc:fc:3f:40:15: e2:5b:2d:c6:96:82:de:96:37:15:a9:f1:c5:ae:41: 2b:2a:79:b0:94:99:da:b3:c1:62:12:fc:a6:51:23: e7:3b:0f:1e:99:a5:bc:af:a6:ef:b8:07:a3:c0:b3: ce:8a:a2:7b:fc:8e:7d:12:54:c4:cb:31:4f:55:38: 9a:e1:88:dd:3c:51:a1:f8:83:bb:ac:5d:15:b7:0a: 16:b0:d9:17:9f:17:d6:87:bd:7b:0d:fc:ba:f2:64: c3:34:91:7e:92:13:74:de:01:60:09:ee:c2:29:da: 01:d1:f3:63:ba:53:0c:76:c1:f8:fa:d1:e3:31:8e: 66:b1:9e:0c:5b:ea:99:b0:62:85:e4:53:06:77:ee: d4:f8:38:a4:92:da:b4:38:ef:06:4b:9f:cc:eb:f1: bb:e8:97:47:71:4a:92:66:6e:08:e3:90:6e:cc:0a: e5:4b:d7:94:09:0b:86:e4:e2:e0:ae:e1:a6:f1:99: c0:da:f6:8e:ba:9a:e3:24:16:73:40:3d:89:68:98: 62:b7:eb:8b:bc:f4:70:e8:03:99:1c:2f:0b:5d:73: a4:71:c8:bb:9e:15:9e:34:f8:f8:0e:ae:3b:d0:93: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.18.96.0/19 208.99.96.0/20 IPv6: 2607:dd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19830 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2e:b5:ec:8a:73:54:8a:ad:b4:79:28:e3:5a:a7:6a:02:73: 27:24:b0:e2:45:30:36:bf:24:6e:25:7d:40:5a:0e:a9:c2:90: 2e:08:29:7a:3b:aa:5d:c1:bc:d0:79:60:28:84:64:78:a0:bc: f1:5e:9c:b3:dc:d6:64:97:fe:57:04:5e:9b:6f:59:23:1f:32: 22:d6:63:73:8c:be:f6:63:42:e3:cf:7e:22:90:8c:31:e4:9a: 7d:9f:ca:e3:44:ad:dc:1c:4b:7a:60:5a:fd:e4:d4:27:e8:12: f3:cd:7b:35:c8:73:28:b8:45:a3:5b:d8:e3:c5:de:b1:3c:11: 1e:9a:c3:48:ec:7e:89:93:37:7a:0d:84:8f:c4:41:6b:e6:1c: 18:f6:4b:4c:57:b5:ec:cd:a6:01:2f:8b:09:a3:0a:6d:66:ed: d2:3f:9b:4a:03:47:e0:90:a9:70:b5:bf:42:c3:6e:34:26:2e: 0f:88:9f:48:dd:6f:c1:be:1c:6a:74:16:df:ea:48:b6:d4:35: 61:6a:4b:6c:bb:0b:b9:78:45:94:c5:3c:78:c3:ba:61:08:5c: 70:5a:ee:83:85:19:29:3e:6d:2e:c9:f8:fa:bd:4c:8c:13:77: 4a:8a:3e:79:8c:85:88:14:eb:c9:93:78:e4:b7:c2:ac:6a:8f: 30:01:14:11 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEmGXD7gMM6hjmc1HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNDE1NTgwMFoXDTI3MDcxODE1NTgwMFowLzEtMCsGA1UEAxMk ZDZhZDUyNmMtYjcwNS00ZjRlLWEyZGEtNmI3ZjEyZjFmN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBs1/q7CkbZ0uABEUlPlk33v4WwMaMcC3Pw/ QBXiWy3GloLeljcVqfHFrkErKnmwlJnas8FiEvymUSPnOw8emaW8r6bvuAejwLPO iqJ7/I59ElTEyzFPVTia4YjdPFGh+IO7rF0VtwoWsNkXnxfWh717Dfy68mTDNJF+ khN03gFgCe7CKdoB0fNjulMMdsH4+tHjMY5msZ4MW+qZsGKF5FMGd+7U+Dikktq0 OO8GS5/M6/G76JdHcUqSZm4I45BuzArlS9eUCQuG5OLgruGm8ZnA2vaOuprjJBZz QD2JaJhit+uLvPRw6AOZHC8LXXOkcci7nhWeNPj4Dq470JOkSwIDAQABo4IELzCC BCswHQYDVR0OBBYEFAb09AnOXY6MlXNpFCLPKn+5kaOeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k NmFkNTI2Yy1iNzA1LTRmNGUtYTJkYS02YjdmMTJmMWY3ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Q2YWQ1MjZjLWI3MDUtNGY0ZS1h MmRhLTZiN2YxMmYxZjdlMy9kNmFkNTI2Yy1iNzA1LTRmNGUtYTJkYS02YjdmMTJm MWY3ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVAEmADBATQY2AwDQQCAAIwBwMFACYH3YAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICTXYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjS617IpzVIqttHko41qn agJzJySw4kUwNr8kbiV9QFoOqcKQLggpejuqXcG80HlgKIRkeKC88V6cs9zWZJf+ VwRem29ZIx8yItZjc4y+9mNC489+IpCMMeSafZ/K40St3BxLemBa/eTUJ+gS8817 NchzKLhFo1vY48XesTwRHprDSOx+iZM3eg2Ej8RBa+YcGPZLTFe17M2mAS+LCaMK bWbt0j+bSgNH4JCpcLW/QsNuNCYuD4ifSN1vwb4canQW3+pIttQ1YWpLbLsLuXhF lMU8eMO6YQhccFrug4UZKT5tLsn4+r1MjBN3Soo+eYyFiBTryZN45LfCrGqPMAEU EQ== -----END CERTIFICATE-----Generated at Mon May 12 17:20:41 2025 by rpki-client