$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer File: 3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer (raw, json) Hash identifier: nEPwCrG6gZskKEvkRbzVOyYvlF5za1TWX7TEyi9KsDA= Subject key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858499557810A4178187C13DA3180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Apr 2025 00:45:34 +0000 Certificate not after: Sat 24 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 66.209.128.0/20 IP: 68.65.96.0/20 IP: 74.126.64.0/20 IP: 96.45.240.0/20 IP: 209.173.160.0/19 IP: 216.201.0.0/18 IP: 216.255.0.0/18 IP: 2607:fa10::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:57:81:0a:41:78:18:7c:13:da:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 20 00:45:34 2025 GMT Not After : Jul 24 00:45:34 2027 GMT Subject: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:2f:86:fb:17:a5:23:b1:20:b0:b7:6b:5d: 9a:00:93:da:2f:d9:97:e2:da:0c:bc:ce:b1:d8:f5: ad:4c:85:a5:78:26:13:0d:33:07:70:89:9b:fe:b9: 89:80:31:b3:e2:51:40:67:d6:9a:41:fb:52:d0:a1: 3d:6a:83:cf:03:8e:6b:50:da:3a:40:a8:95:8b:18: ee:04:ec:46:cd:80:06:ad:43:de:f0:3d:60:06:79: 8d:2c:91:d4:00:69:00:4c:71:32:6e:1d:0d:7d:85: f8:61:b1:fd:b0:16:a9:01:30:de:b4:ef:cd:1d:1d: 3a:40:5c:f5:93:2e:0e:63:ac:f8:d7:b2:c9:48:aa: 2b:1c:a7:29:16:12:7b:c5:76:2b:d8:1e:e2:70:ce: 38:84:71:8e:12:4f:4b:22:b1:21:11:03:18:a2:07: 27:57:30:b0:57:21:d0:30:63:e2:e3:66:9f:f2:35: 7e:9a:e9:8f:cf:25:32:b7:fb:f9:8e:fa:a1:8e:33: 5e:4b:57:da:4b:8d:c0:1b:ff:09:f0:24:d4:23:cf: 2f:9b:38:f1:e5:69:c8:f5:5e:e2:f8:99:85:e6:a6: 3a:57:25:2f:12:bc:84:d8:4d:82:d8:75:99:17:e5: 56:b4:77:7a:9f:dc:16:08:0c:3e:dc:6a:83:18:81: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.209.128.0/20 68.65.96.0/20 74.126.64.0/20 96.45.240.0/20 209.173.160.0/19 216.201.0.0/18 216.255.0.0/18 IPv6: 2607:fa10::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:dc:1e:15:d4:f9:e0:dd:42:ee:53:40:d7:61:7e:46:48:01: 70:ed:bf:f2:93:3e:64:03:bb:78:9d:0c:76:61:bc:73:09:df: 95:86:c8:4a:e1:a9:7a:29:94:ce:47:33:f2:f8:a8:6d:fd:88: 3a:44:4d:5a:90:0b:c8:60:2e:b2:89:22:28:36:54:3f:8d:fd: b5:41:18:e4:63:65:66:54:24:cc:17:49:26:9c:c8:e4:8e:05: 1e:a8:f8:2e:2a:ea:be:89:d5:cc:68:33:aa:34:bc:b5:36:f7: bf:01:99:5d:22:68:8f:f5:0f:8e:18:9c:37:f5:c2:53:03:e8: d4:de:0e:8b:53:de:f7:cf:20:7e:3b:e1:8c:90:a8:22:61:65: 43:cd:d4:2f:ce:ed:c8:45:d7:ff:98:cb:bc:d6:d3:24:b5:4c: e5:88:43:76:05:32:e4:67:09:93:f0:6e:bc:6c:ba:e1:86:c1: e2:03:0e:6f:6d:be:ab:01:42:80:6a:a4:4d:f3:d5:3e:82:10: 05:8a:c2:10:e2:c1:32:9e:bb:c5:19:a3:3b:ea:58:26:1e:30: 72:d9:d3:e1:56:28:0c:1e:3a:9d:51:b1:d6:60:2f:6c:30:ba: a3:b3:43:d4:fb:ca:ed:32:b8:fa:f3:66:36:fb:71:4f:89:2b: 08:bc:4c:28 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEmVV4EKQXgYfBPaMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMDAwNDUzNFoXDTI3MDcyNDAwNDUzNFowLzEtMCsGA1UEAxMk M2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVkN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTcvhvsXpSOxILC3a12aAJPaL9mX4toMvM6x 2PWtTIWleCYTDTMHcImb/rmJgDGz4lFAZ9aaQftS0KE9aoPPA45rUNo6QKiVixju BOxGzYAGrUPe8D1gBnmNLJHUAGkATHEybh0NfYX4YbH9sBapATDetO/NHR06QFz1 ky4OY6z417LJSKorHKcpFhJ7xXYr2B7icM44hHGOEk9LIrEhEQMYogcnVzCwVyHQ MGPi42af8jV+mumPzyUyt/v5jvqhjjNeS1faS43AG/8J8CTUI88vmzjx5WnI9V7i +JmF5qY6VyUvEryE2E2C2HWZF+VWtHd6n9wWCAw+3GqDGIFIXwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFM90qo8cxYiDcn4atDj/pSd2+JZFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z YWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNhYjZlMzhlLTQ4ZTQtNDM5MC04 ZWVjLTIxMzVhYzM1ZDdmYi8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMz NWQ3ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARC0YADBAREQWADBARKfkADBARgLfADBAXRraAD BAbYyQADBAbY/wAwDQQCAAIwBwMFACYH+hAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKNweFdT54N1C7lNA 12F+RkgBcO2/8pM+ZAO7eJ0MdmG8cwnflYbISuGpeimUzkcz8viobf2IOkRNWpAL yGAusokiKDZUP439tUEY5GNlZlQkzBdJJpzI5I4FHqj4LirqvonVzGgzqjS8tTb3 vwGZXSJoj/UPjhicN/XCUwPo1N4Oi1Pe988gfjvhjJCoImFlQ83UL87tyEXX/5jL vNbTJLVM5YhDdgUy5GcJk/BuvGy64YbB4gMOb22+qwFCgGqkTfPVPoIQBYrCEOLB Mp67xRmjO+pYJh4wctnT4VYoDB46nVGx1mAvbDC6o7ND1PvK7TK4+vNmNvtxT4kr CLxMKA== -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:24 2025 by rpki-client