$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177.cer File: dc14ffca-b55f-4482-beb2-b5748b542177.cer (raw, json) Hash identifier: 3/ZdHyuqamhyQ6vHnUBsxZMa4YaoUflMn4am74Uq0+4= Subject key identifier: C0:9D:37:C3:68:54:43:73:86:52:DB:6B:80:9B:05:DB:C0:96:72:AD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849653BD24120971F4E1C3C9AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/dc14ffca-b55f-4482-beb2-b5748b542177.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Apr 2025 19:11:00 +0000 Certificate not after: Tue 06 Jul 2027 19:11:00 +0000 Subordinate resources: AS: 63414 IP: 45.43.112.0/20 IP: 2606:1680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:3b:d2:41:20:97:1f:4e:1c:3c:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 2 19:11:00 2025 GMT Not After : Jul 6 19:11:00 2027 GMT Subject: CN=dc14ffca-b55f-4482-beb2-b5748b542177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:d0:af:3f:5b:82:07:93:f1:b0:c5:9d:d3: 4a:ca:20:3c:6b:91:48:c6:a0:55:12:dc:54:80:06: 26:64:55:8b:1b:4b:13:36:7c:13:8c:c9:25:23:89: d0:32:0b:eb:2a:a2:be:f3:25:df:e3:59:0a:02:e3: 0d:f7:4d:03:76:4a:4d:0c:06:97:1b:9a:51:c0:c7: 3c:59:86:8d:32:5b:28:f6:2b:47:12:d0:60:9e:9a: ca:93:65:b3:4a:da:88:ac:b1:c3:db:e2:f2:27:2b: 51:9d:55:07:16:a5:fd:b4:32:6e:29:e2:21:3b:cb: 24:69:5f:07:04:36:1d:ca:b7:6a:d2:be:d8:b6:0d: 50:dc:67:09:3a:11:b0:81:64:a4:e7:21:ad:7b:6c: bd:20:05:e0:89:8f:e8:2e:a1:2e:74:60:e4:7b:8b: eb:45:32:63:a7:ab:92:9b:f2:e5:43:74:77:79:9b: c9:2b:90:ca:1d:19:f7:4e:90:0e:1c:17:0f:bd:af: ae:8c:11:7e:dc:63:df:94:43:e2:07:72:38:f8:48: 95:58:d3:6c:94:11:9a:2b:b7:d1:f6:86:10:e5:fd: 54:ef:35:47:43:bb:a2:df:54:3f:d7:10:98:72:48: 97:06:20:3c:24:ba:8b:38:41:5e:06:f4:e6:3b:b2: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9D:37:C3:68:54:43:73:86:52:DB:6B:80:9B:05:DB:C0:96:72:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/dc14ffca-b55f-4482-beb2-b5748b542177.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 45.43.112.0/20 IPv6: 2606:1680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63414 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:dd:37:8e:77:1b:8f:eb:21:8e:d8:95:85:0c:75:69:da:21: 86:04:95:85:64:b8:e9:df:aa:b1:fd:51:4c:c6:b8:4c:44:c7: 89:ea:c3:d4:a1:34:0d:05:4f:62:f2:e9:b1:a4:76:61:61:f9: ae:15:07:ba:28:39:40:d7:36:a9:2b:10:3d:09:a4:c9:3f:2d: 2e:f9:2f:8c:88:0d:85:38:bc:58:ce:c0:11:19:11:0a:4b:53: 88:5e:77:97:be:b1:c3:86:8e:2a:f3:fd:88:b5:9b:df:d8:cd: 53:0c:f7:db:4f:fd:4a:43:03:ee:00:8f:b9:3c:5d:85:04:34: 36:88:e0:b6:29:81:86:8c:05:6e:ca:61:a8:e9:12:81:57:01: 35:10:01:13:e2:93:b3:e6:77:50:dd:35:99:f5:c1:36:58:c2: 73:13:e6:d1:70:89:1e:22:1f:2a:b9:d9:b4:b7:c2:2a:74:89: c5:03:a5:f3:fb:a7:dc:29:75:52:f6:67:3c:f2:99:fa:0f:c8: c7:91:21:cc:95:ce:df:0d:4e:d4:45:e1:47:c7:1a:7c:9b:43: 4f:cd:9b:4c:14:23:9b:94:f7:76:87:ff:ad:44:cc:60:f4:f9: a5:8f:b1:7c:3e:da:bd:f7:ab:f2:16:f3:5c:53:d3:0f:7b:20: 17:37:17:76 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEllO9JBIJcfThw8msAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwMjE5MTEwMFoXDTI3MDcwNjE5MTEwMFowLzEtMCsGA1UEAxMk ZGMxNGZmY2EtYjU1Zi00NDgyLWJlYjItYjU3NDhiNTQyMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZXQrz9bggeT8bDFndNKyiA8a5FIxqBVEtxU gAYmZFWLG0sTNnwTjMklI4nQMgvrKqK+8yXf41kKAuMN900DdkpNDAaXG5pRwMc8 WYaNMlso9itHEtBgnprKk2WzStqIrLHD2+LyJytRnVUHFqX9tDJuKeIhO8skaV8H BDYdyrdq0r7Ytg1Q3GcJOhGwgWSk5yGte2y9IAXgiY/oLqEudGDke4vrRTJjp6uS m/LlQ3R3eZvJK5DKHRn3TpAOHBcPva+ujBF+3GPflEPiB3I4+EiVWNNslBGaK7fR 9oYQ5f1U7zVHQ7ui31Q/1xCYckiXBiA8JLqLOEFeBvTmO7Kg2wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMCdN8NoVENzhlLba4CbBdvAlnKtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k YzE0ZmZjYS1iNTVmLTQ0ODItYmViMi1iNTc0OGI1NDIxNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RjMTRmZmNhLWI1NWYtNDQ4Mi1i ZWIyLWI1NzQ4YjU0MjE3Ny9kYzE0ZmZjYS1iNTVmLTQ0ODItYmViMi1iNTc0OGI1 NDIxNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAQtK3AwDQQCAAIwBwMFACYGFoAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPe2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABvdN453G4/rIY7YlYUMdWnaIYYE lYVkuOnfqrH9UUzGuExEx4nqw9ShNA0FT2Ly6bGkdmFh+a4VB7ooOUDXNqkrED0J pMk/LS75L4yIDYU4vFjOwBEZEQpLU4hed5e+scOGjirz/Yi1m9/YzVMM99tP/UpD A+4Aj7k8XYUENDaI4LYpgYaMBW7KYajpEoFXATUQARPik7Pmd1DdNZn1wTZYwnMT 5tFwiR4iHyq52bS3wip0icUDpfP7p9wpdVL2ZzzymfoPyMeRIcyVzt8NTtRF4UfH GnybQ0/Nm0wUI5uU93aH/61EzGD0+aWPsXw+2r33q/IW81xT0w97IBc3F3Y= -----END CERTIFICATE-----Generated at Mon May 12 19:54:39 2025 by rpki-client