$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer File: cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer (raw, json) Hash identifier: HwyyQh0xd2MC4GirCpMv07qUEZ4I/iCFyjhCXHAIqzA= Subject key identifier: AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858499DB794BF304862581A783880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 14220 IP: 208.94.208.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:94:bf:30:48:62:58:1a:78:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:a3:ae:86:31:39:53:a5:a2:02:ba:8e:4c: 14:8b:78:00:0b:86:5e:44:63:a5:1a:c7:59:84:dc: 3c:30:e7:79:e4:93:e3:0c:9b:dd:aa:0b:02:25:30: 8c:d6:8b:d8:51:05:0f:0f:4e:91:44:00:b4:1e:f3: b0:bd:42:e4:a9:7d:59:e0:b0:7c:f6:96:9d:2d:3c: e0:07:15:cc:e4:9a:98:0c:e0:b2:fe:a5:1d:6a:b6: 37:52:51:e2:8b:54:bd:5c:86:56:c1:d4:d9:25:9e: 82:06:e6:5a:71:43:72:87:92:f2:fa:a4:00:1f:a4: d5:71:70:50:9a:e2:bf:6a:2a:af:c5:ba:28:a0:e2: de:74:f6:86:fa:90:47:a1:e1:23:a9:c0:cc:14:2f: 3f:21:c3:b9:00:8b:9e:5f:c1:ef:99:2e:47:b4:88: 61:b7:be:0a:cf:c2:fa:39:1e:57:0a:8c:2f:a0:39: fe:aa:cc:50:be:8d:53:21:0a:f4:eb:b5:f3:96:15: 4c:8c:28:14:67:31:a0:36:ee:48:d8:91:f8:d0:9e: 28:b6:9f:e3:f6:55:c0:2b:ba:6a:a2:1c:39:fc:87: 7c:60:c3:e1:02:11:02:57:3b:75:fb:1d:c4:6b:1f: 21:2b:82:e9:fc:05:20:3f:e4:da:29:5d:96:59:07: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.94.208.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14220 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:99:a6:5e:53:d0:16:ee:2f:38:d9:09:9c:ee:ca:0f:32:ea: 4b:59:3b:98:77:75:b9:c9:e4:4d:da:e8:17:ac:1f:b3:bb:61: 14:c2:6f:09:e8:90:96:d8:b8:e4:2f:47:04:93:5d:ad:c9:3b: 11:c3:0b:75:31:cf:ea:80:77:52:37:c3:84:93:8c:8a:9e:ab: 47:8a:95:e3:5d:20:ab:4c:a1:f8:b4:94:10:1d:8d:d4:68:36: 44:87:4f:55:0a:1b:31:ca:c4:2b:9a:ea:da:6a:8d:71:2a:26: b1:5a:0d:69:fa:ea:c7:64:81:89:1d:ff:77:52:8d:76:56:b6: ca:24:b8:5b:9d:d4:9b:c0:db:42:5c:26:d7:fe:2c:0f:81:d9: 54:a9:2e:a6:98:cd:3c:42:50:98:bc:0d:c2:d4:e0:57:39:6a: fd:af:77:a6:41:d1:b8:0c:97:74:9f:12:a2:10:76:76:e8:6c: fe:1a:c7:ae:99:f6:02:09:e4:b2:77:59:29:15:9c:e6:ad:8f: 8f:5a:20:67:ca:12:f5:57:9f:eb:70:d5:16:ec:c9:12:7f:f2: 1f:87:e4:85:9d:bd:8e:8e:62:a5:85:39:b3:82:b7:d7:77:63: 45:d2:dd:f8:92:5d:79:cd:b7:6c:32:4c:5f:a3:25:19:ea:9a: 9d:f4:e9:1d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmdt5S/MEhiWBp4OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk Y2Y2MGQzM2QtYWRiMC00YjZhLWExMmMtM2Q0YjIyZWE4NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKCjroYxOVOlogK6jkwUi3gAC4ZeRGOlGsdZ hNw8MOd55JPjDJvdqgsCJTCM1ovYUQUPD06RRAC0HvOwvULkqX1Z4LB89padLTzg BxXM5JqYDOCy/qUdarY3UlHii1S9XIZWwdTZJZ6CBuZacUNyh5Ly+qQAH6TVcXBQ muK/aiqvxboooOLedPaG+pBHoeEjqcDMFC8/IcO5AIueX8HvmS5HtIhht74Kz8L6 OR5XCowvoDn+qsxQvo1TIQr067XzlhVMjCgUZzGgNu5I2JH40J4otp/j9lXAK7pq ohw5/Id8YMPhAhECVzt1+x3Eax8hK4Lp/AUgP+TaKV2WWQfOvwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFK7+Px+T6jlYbkVQEOcAd2561inyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j ZjYwZDMzZC1hZGIwLTRiNmEtYTEyYy0zZDRiMjJlYTg0YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NmNjBkMzNkLWFkYjAtNGI2YS1h MTJjLTNkNGIyMmVhODRjMC9jZjYwZDMzZC1hZGIwLTRiNmEtYTEyYy0zZDRiMjJl YTg0YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQXtAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC N4wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhpmmXlPQFu4vONkJnO7KDzLqS1k7mHd1ucnkTdroF6wfs7th FMJvCeiQlti45C9HBJNdrck7EcMLdTHP6oB3UjfDhJOMip6rR4qV410gq0yh+LSU EB2N1Gg2RIdPVQobMcrEK5rq2mqNcSomsVoNafrqx2SBiR3/d1KNdla2yiS4W53U m8DbQlwm1/4sD4HZVKkuppjNPEJQmLwNwtTgVzlq/a93pkHRuAyXdJ8SohB2duhs /hrHrpn2AgnksndZKRWc5q2Pj1ogZ8oS9Vef63DVFuzJEn/yH4fkhZ29jo5ipYU5 s4K313djRdLd+JJdec23bDJMX6MlGeqanfTpHQ== -----END CERTIFICATE-----Generated at Sun Apr 27 07:40:41 2025 by rpki-client