$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer File: 6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer (raw, json) Hash identifier: posmjEGianlkJQrtPLPYBgE8acDyJVG58OG3QlwQsdg= Subject key identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849A77CF332C5AC20FF62EE71C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Apr 2025 12:45:34 +0000 Certificate not after: Fri 30 Jul 2027 12:45:34 +0000 Subordinate resources: AS: 22242 AS: 54563 AS: 395279 IP: 192.190.8.0/24 IP: 2620:10f:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:7c:f3:32:c5:ac:20:ff:62:ee:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 26 12:45:34 2025 GMT Not After : Jul 30 12:45:34 2027 GMT Subject: CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:f5:1b:22:5a:2d:3a:e1:ab:62:c1:62:d7: f4:12:52:de:cf:03:d8:13:11:fa:f3:44:0b:a3:c6: 14:bd:a5:94:83:a3:18:1f:8e:9d:94:0d:8b:92:b8: d5:34:7c:8c:e3:f4:dd:08:f6:2c:dc:ec:65:1a:73: 62:6a:ff:a2:a1:1a:29:c4:2e:b6:54:fe:75:56:71: 90:4a:9d:9c:8a:b6:2f:71:48:c1:e1:b1:16:87:d5: 1d:61:ce:19:9a:af:7a:f7:de:fc:0b:a9:56:7a:bd: 92:d2:dd:8b:c3:8e:98:40:46:9b:f6:07:89:d3:83: b0:ab:f3:32:da:09:78:4d:bb:11:0e:c2:47:39:76: 01:6c:73:77:1d:41:f4:94:b6:00:bc:9e:f7:17:99: 6d:98:d4:02:db:d9:7e:62:5e:25:45:4b:71:74:e8: 33:20:19:81:77:ed:77:74:24:28:dc:48:ff:bd:a9: 3a:0e:c1:7a:f4:11:5b:51:e9:44:9a:99:a0:21:af: ae:25:be:7e:12:30:1c:a5:4d:9e:2c:7b:97:5c:1e: 69:7b:b6:5d:f1:4d:f7:7a:8d:1f:90:b8:61:64:01: 64:87:1b:35:cf:3d:09:d0:4b:85:3b:0b:c0:8b:6d: 99:05:40:df:d9:13:27:dd:15:fd:b7:82:f1:f5:f7: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.190.8.0/24 IPv6: 2620:10f:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22242 54563 395279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6b:c0:5f:6f:1c:f8:2f:ab:39:e2:f7:2e:a3:d6:bf:d7:bb: ee:cd:e5:0e:07:a9:69:1b:cf:cb:a4:71:ff:8d:5b:16:2e:2a: a9:fb:bf:f6:b8:7c:e4:f7:ba:3e:4a:5d:3c:f6:f4:74:c5:5b: c5:99:3e:f8:35:48:f2:f2:cf:af:00:14:d3:a5:26:21:d5:4c: 8b:83:47:fb:af:5d:b8:30:49:18:da:73:80:a2:6c:3a:b4:91: f5:7c:e4:4e:ec:54:d7:80:12:ba:7a:a5:d6:0a:7a:12:56:a8: 06:3e:51:57:bd:7f:f9:c7:1a:2a:f2:7c:5c:e6:51:7b:d9:09: 18:1e:c5:9c:22:3f:e8:8e:ca:ca:0a:f9:12:6e:64:69:bc:dc: e7:ba:e4:d3:9d:d1:30:07:b4:cf:ce:43:10:be:6a:b5:26:b6: ed:13:0b:18:ae:fd:9b:13:4a:d5:e8:5a:49:fb:b1:f9:d8:ef: 42:dc:e7:41:f3:f1:c4:1c:6e:51:8a:63:f9:dd:1d:61:37:f0: 3f:c2:c5:84:89:fd:26:48:5f:4f:68:cb:47:25:a5:85:fc:e9: 6b:5f:00:96:32:70:65:f7:30:83:2d:36:1f:1f:f8:01:8d:3d: 06:78:23:d8:75:32:73:20:34:7a:5d:0a:eb:fa:2b:e7:e6:f0: 29:56:12:58 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEmnfPMyxawg/2LuccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyNjEyNDUzNFoXDTI3MDczMDEyNDUzNFowLzEtMCsGA1UEAxMk NmY0ZDhlNmItZTY2ZS00NmY5LThlZjItZjJkYTE5ODFjYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyT1GyJaLTrhq2LBYtf0ElLezwPYExH680QL o8YUvaWUg6MYH46dlA2LkrjVNHyM4/TdCPYs3OxlGnNiav+ioRopxC62VP51VnGQ Sp2cirYvcUjB4bEWh9UdYc4Zmq969978C6lWer2S0t2Lw46YQEab9geJ04Owq/My 2gl4TbsRDsJHOXYBbHN3HUH0lLYAvJ73F5ltmNQC29l+Yl4lRUtxdOgzIBmBd+13 dCQo3Ej/vak6DsF69BFbUelEmpmgIa+uJb5+EjAcpU2eLHuXXB5pe7Zd8U33eo0f kLhhZAFkhxs1zz0J0EuFOwvAi22ZBUDf2RMn3RX9t4Lx9fdw2QIDAQABo4IENDCC BDAwHQYDVR0OBBYEFLkf3BeioRdWVudQJ5YWnz+62hsoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4MWNiY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzZmNGQ4ZTZiLWU2NmUtNDZmOS04 ZWYyLWYyZGExOTgxY2JjYS82ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4 MWNiY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAvggwDgQCAAIwCAMGACYgAQ/gMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAlbiAgMA1SMCAwYIDzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQa8Bfbxz4L6s5 4vcuo9a/17vuzeUOB6lpG8/LpHH/jVsWLiqp+7/2uHzk97o+Sl089vR0xVvFmT74 NUjy8s+vABTTpSYh1UyLg0f7r124MEkY2nOAomw6tJH1fORO7FTXgBK6eqXWCnoS VqgGPlFXvX/5xxoq8nxc5lF72QkYHsWcIj/ojsrKCvkSbmRpvNznuuTTndEwB7TP zkMQvmq1JrbtEwsYrv2bE0rV6FpJ+7H52O9C3OdB8/HEHG5RimP53R1hN/A/wsWE if0mSF9PaMtHJaWF/OlrXwCWMnBl9zCDLTYfH/gBjT0GeCPYdTJzIDR6XQrr+ivn 5vApVhJY -----END CERTIFICATE-----Generated at Sun Apr 27 11:22:23 2025 by rpki-client