$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3.cer File: 192bda67-8a07-4f68-a34a-58d60df5acf3.cer (raw, json) Hash identifier: mpwwlD8oHymdGDems8Td7GIVpcB3FXhPUyBezq8E9nc= Subject key identifier: 6F:14:E7:07:8F:D3:2C:59:54:04:72:AF:80:B7:65:28:B1:C1:E2:FD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849752D591DEA012DF58E734290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 12:14:46 +0000 Certificate not after: Mon 12 Jul 2027 12:14:46 +0000 Subordinate resources: IP: 23.137.28.0/24 IP: 2602:f693::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:2d:59:1d:ea:01:2d:f5:8e:73:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 8 12:14:46 2025 GMT Not After : Jul 12 12:14:46 2027 GMT Subject: CN=192bda67-8a07-4f68-a34a-58d60df5acf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:99:ae:88:fd:dd:e5:9f:2b:8a:8e:4d:1a: 9c:d9:68:3f:8a:23:a2:b5:8b:96:31:8a:23:23:23: c2:00:85:2e:33:84:38:5b:c7:de:94:cb:ee:c9:98: 69:b1:36:49:52:6d:82:33:89:d1:4c:63:24:ff:21: 66:2b:57:65:03:84:00:d6:f7:4d:d3:e3:6e:7c:1d: e2:ec:61:5b:e2:c3:48:74:f7:25:83:65:83:83:a3: 67:c8:95:75:37:de:33:d2:84:c7:da:b9:3e:48:ac: 5c:4e:de:64:e7:1e:3c:49:1f:f2:0d:a6:11:77:da: c0:c8:56:e8:e1:79:1a:23:77:be:7d:22:bb:e9:65: e4:c4:30:63:f5:64:24:42:11:3e:3c:31:77:a3:25: 94:be:1b:c6:79:ba:89:0b:b3:97:9c:69:af:f6:85: 5a:ac:2f:ed:f2:17:33:53:55:6b:b3:d4:a1:84:82: c5:06:6d:ec:de:db:c1:3d:bd:43:95:e5:c7:64:ed: 09:f7:74:ce:6b:1d:53:28:04:15:ad:e7:31:62:29: bb:45:c7:18:b2:5a:13:da:79:dc:d2:d4:6b:e1:82: e1:bc:29:f0:d1:45:97:50:55:c0:4e:8d:f5:42:49: 2a:6e:1f:f6:28:f5:03:bd:5e:bc:72:8a:c9:b5:b5: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:14:E7:07:8F:D3:2C:59:54:04:72:AF:80:B7:65:28:B1:C1:E2:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.137.28.0/24 IPv6: 2602:f693::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9b:b1:c1:10:90:db:da:46:8e:de:a1:44:88:97:ed:34:03: d7:22:1f:b9:35:00:a9:64:3c:8e:e4:e2:6b:9e:ab:5e:51:28: 41:2d:e6:48:72:e4:6d:b2:d5:5f:be:36:ad:73:65:5d:e7:9c: ca:3f:e7:36:08:37:ea:b1:8a:fc:6b:b2:05:8c:c1:11:d4:f2: 61:1c:7e:28:ec:e0:09:47:95:54:15:3f:2b:ac:eb:8a:9a:16: f6:fe:c9:bd:6a:80:84:4f:40:c7:57:55:b9:9e:fd:67:ee:14: 63:65:7e:c1:d6:4a:e1:c7:a5:8a:49:ef:b9:e9:8f:9f:2f:cd: 08:dd:55:10:49:db:46:4d:61:bc:41:dd:57:5e:67:71:66:85: 73:8e:a4:fe:2b:71:ca:c6:1e:75:35:87:9e:b1:40:50:e2:1d: d4:90:ad:a6:53:91:f9:79:29:6c:a9:ea:fe:86:c9:05:0f:db: 19:cd:36:81:d2:f4:d2:9f:4f:bb:5f:77:06:28:16:90:31:4d: 1f:27:e5:a7:78:c9:26:fd:a1:5e:d0:e7:4b:dd:0c:30:af:51: 8f:44:63:50:de:53:e2:1a:2c:70:fe:54:25:10:30:e0:f6:52: 34:87:59:0b:05:bb:e2:87:4b:43:fd:e1:e5:7d:7c:70:00:69: ca:e8:97:57 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEl1LVkd6gEt9Y5zQpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQwODEyMTQ0NloXDTI3MDcxMjEyMTQ0NlowLzEtMCsGA1UEAxMk MTkyYmRhNjctOGEwNy00ZjY4LWEzNGEtNThkNjBkZjVhY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlmZroj93eWfK4qOTRqc2Wg/iiOitYuWMYoj IyPCAIUuM4Q4W8felMvuyZhpsTZJUm2CM4nRTGMk/yFmK1dlA4QA1vdN0+NufB3i 7GFb4sNIdPclg2WDg6NnyJV1N94z0oTH2rk+SKxcTt5k5x48SR/yDaYRd9rAyFbo 4XkaI3e+fSK76WXkxDBj9WQkQhE+PDF3oyWUvhvGebqJC7OXnGmv9oVarC/t8hcz U1Vrs9ShhILFBm3s3tvBPb1DleXHZO0J93TOax1TKAQVrecxYim7RccYsloT2nnc 0tRr4YLhvCnw0UWXUFXATo31Qkkqbh/2KPUDvV68corJtbXPIQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFG8U5weP0yxZVARyr4C3ZSixweL9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x OTJiZGE2Ny04YTA3LTRmNjgtYTM0YS01OGQ2MGRmNWFjZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE5MmJkYTY3LThhMDctNGY2OC1h MzRhLTU4ZDYwZGY1YWNmMy8xOTJiZGE2Ny04YTA3LTRmNjgtYTM0YS01OGQ2MGRm NWFjZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiRwwDgQCAAIwCAMGACYC9pMAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABabscEQkNvaRo7eoUSIl+00A9ciH7k1AKlkPI7k4mueq15RKEEt5khy5G2y1V++ Nq1zZV3nnMo/5zYIN+qxivxrsgWMwRHU8mEcfijs4AlHlVQVPyus64qaFvb+yb1q gIRPQMdXVbme/WfuFGNlfsHWSuHHpYpJ77npj58vzQjdVRBJ20ZNYbxB3VdeZ3Fm hXOOpP4rccrGHnU1h56xQFDiHdSQraZTkfl5KWyp6v6GyQUP2xnNNoHS9NKfT7tf dwYoFpAxTR8n5ad4ySb9oV7Q50vdDDCvUY9EY1DeU+IaLHD+VCUQMOD2UjSHWQsF u+KHS0P94eV9fHAAacrol1c= -----END CERTIFICATE-----Generated at Sun Apr 27 14:17:14 2025 by rpki-client