$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer File: 1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer (raw, json) Hash identifier: pO3CN6JoZLsTryx+fXHqzBsSj0nl5yDt7S5iGG8TA8c= Subject key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Authority key identifier: 11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 Certificate issuer: /CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Certificate serial: 010D0C9F43285849998787DE07A37F3E258021C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 21 Apr 2025 12:45:35 +0000 Certificate not after: Sun 25 Jul 2027 12:45:35 +0000 Subordinate resources: AS: 23125 IP: 2602:f99e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:87:87:de:07:a3:7f:3e:25:80:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Validity Not Before: Apr 21 12:45:35 2025 GMT Not After : Jul 25 12:45:35 2027 GMT Subject: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:c8:ed:f2:ba:c0:bf:be:f0:90:f3:18:9a: c7:1c:9f:28:09:22:72:99:2c:47:62:8f:b8:1e:0b: 53:27:1f:f3:35:c2:1a:fd:3d:01:7d:9a:f6:be:57: c2:b2:09:be:d2:de:fd:c9:98:51:dc:b0:58:f0:f6: fd:c6:22:c0:98:10:a2:00:fc:70:e6:e4:a7:16:1a: 85:bb:47:c1:d1:35:9d:3a:2d:eb:02:5c:d0:95:91: 83:02:a5:26:e3:16:3a:d0:4c:0e:f6:24:cb:ae:01: 4e:23:76:51:c4:0b:f2:19:15:14:0c:44:2c:34:93: aa:19:15:c4:e0:d9:d2:0f:54:3a:81:4a:4f:a9:69: 4f:8b:56:db:c2:bf:b8:e8:03:ad:03:61:59:41:16: fb:73:a0:0a:f3:93:dd:4b:bb:5e:02:af:66:fd:28: 25:bb:f5:64:ef:a3:8a:19:33:12:8f:ee:4a:73:d6: db:9e:19:9a:f0:2b:ca:b3:c9:6f:1a:da:e6:bf:dd: c9:0a:cf:50:d7:31:7f:6e:0f:8e:6a:2a:48:9e:0b: ee:2b:ca:f0:27:87:c9:5f:1a:6c:76:eb:dc:aa:90: 37:d9:6d:55:db:6a:b7:88:82:59:ed:d5:3c:eb:13: 68:be:b3:fa:38:2c:55:a6:fe:36:af:d6:9a:3e:11: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl X509v3 Authority Key Identifier: keyid:11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fd:9d:98:21:e7:51:bb:b9:99:92:44:2d:22:32:61:28:e3: 63:05:3f:02:bf:8d:56:1d:d3:1e:f1:24:c0:00:a0:ce:e0:29: 85:a8:94:ca:28:26:22:73:41:b4:0f:fa:a8:82:32:6c:ab:1b: 87:fa:eb:ca:b4:bc:31:e3:bd:5e:da:fd:f5:a9:cf:55:c8:b6: 75:19:ee:32:43:2a:7f:7d:88:b4:82:75:cd:8a:65:56:ed:f0: ca:b7:6a:70:4b:cb:5e:4f:31:5f:d0:93:7c:be:ec:89:8f:0d: 9f:84:7b:20:44:f2:7b:bb:3c:11:16:69:e1:d0:9f:ae:a2:8b: 32:8d:eb:74:5a:2c:f7:40:7d:00:09:c6:33:8f:c6:19:10:50: 2f:dd:ef:e0:be:a3:15:0d:ba:93:48:82:e8:54:21:b6:05:4e: 96:76:e4:a9:2c:67:8a:3c:0e:3f:0b:dc:5e:f0:4c:97:b9:3c: 4b:83:3b:53:06:12:da:59:39:16:b0:bd:a5:7c:95:f9:47:cc: d8:48:c8:36:14:28:3f:be:af:bb:4f:01:ed:a9:ae:01:51:b6: 94:70:5b:13:3e:87:18:13:07:01:81:af:7c:2f:74:60:b7:25: 99:5e:94:cd:4d:3a:e5:64:8a:2e:59:5b:a2:03:f7:80:d4:7b: 07:d2:b0:e4 -----BEGIN CERTIFICATE----- MIIG2jCCBcKgAwIBAgIUAQ0Mn0MoWEmZh4feB6N/PiWAIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MmNiYzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4 OTVkMB4XDTI1MDQyMTEyNDUzNVoXDTI3MDcyNTEyNDUzNVowPTE7MDkGA1UEAxMy MWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgzNjMyYjliYmNhMzNl MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mcjt8rrAv77wkPMY msccnygJInKZLEdij7geC1MnH/M1whr9PQF9mva+V8KyCb7S3v3JmFHcsFjw9v3G IsCYEKIA/HDm5KcWGoW7R8HRNZ06LesCXNCVkYMCpSbjFjrQTA72JMuuAU4jdlHE C/IZFRQMRCw0k6oZFcTg2dIPVDqBSk+paU+LVtvCv7joA60DYVlBFvtzoArzk91L u14Cr2b9KCW79WTvo4oZMxKP7kpz1tueGZrwK8qzyW8a2ua/3ckKz1DXMX9uD45q KkieC+4ryvAnh8lfGmx269yqkDfZbVXbareIglnt1TzrE2i+s/o4LFWm/jav1po+ EatHAgMBAAGjggPeMIID2jAdBgNVHQ4EFgQUEPqte9gIeB4zDBf9bQqrHfHGntQw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYz NC1hYjE4LTNlZjlkMDk4MjM1Mi8zLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00 NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JEODA4NzgxRTMzMEMxN0ZE NkQwQUFCMURGMUM2OUVENC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4 MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1kMDA1NTYwOTg5NWQvNGI5MmNi YzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4OTVkLmNybDAfBgNVHSMEGDAWgBQR mY7rgNwydGbgeYIFuWJIknXNxTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRi OTJjYmM1LTQ4ZTYtNGU1OS1iOWU0LWQwMDU1NjA5ODk1ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvmeADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJaVTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCA/Z2YIedRu7mZkkQtIjJhKONjBT8Cv41WHdMe8STAAKDO 4CmFqJTKKCYic0G0D/qogjJsqxuH+uvKtLwx471e2v31qc9VyLZ1Ge4yQyp/fYi0 gnXNimVW7fDKt2pwS8teTzFf0JN8vuyJjw2fhHsgRPJ7uzwRFmnh0J+uoosyjet0 Wiz3QH0ACcYzj8YZEFAv3e/gvqMVDbqTSILoVCG2BU6WduSpLGeKPA4/C9xe8EyX uTxLgztTBhLaWTkWsL2lfJX5R8zYSMg2FCg/vq+7TwHtqa4BUbaUcFsTPocYEwcB ga98L3RgtyWZXpTNTTrlZIouWVuiA/eA1HsH0rDk -----END CERTIFICATE-----Generated at Tue Apr 29 12:45:38 2025 by rpki-client