$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer File: ebad5283-db04-4fcf-81a8-4a09a38eb203.cer (raw, json) Hash identifier: y69AZPC1isXy+g8P0YI0KTtAXuq15eo4KHZNOt8Dm9A= Subject key identifier: 61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A1F8862530BF0505B3F312B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Jun 2025 12:45:37 +0000 Certificate not after: Sat 11 Sep 2027 12:45:37 +0000 Subordinate resources: AS: 16840 IP: 206.183.153.0/24 IP: 2607:9b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:88:62:53:0b:f0:50:5b:3f:31:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 8 12:45:37 2025 GMT Not After : Sep 11 12:45:37 2027 GMT Subject: CN=ebad5283-db04-4fcf-81a8-4a09a38eb203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:4d:6e:82:e3:fa:e8:08:6f:9d:fe:84:26: 5e:0e:10:3e:07:e9:79:6c:23:05:1e:b7:46:65:8d: 68:d8:76:a8:63:50:8e:3c:b5:fb:81:8e:a2:8e:56: c1:f2:81:16:8f:b2:82:23:f3:51:43:ee:a7:29:cf: 24:93:09:9b:e7:a9:89:8e:8a:02:66:4b:a9:e0:89: 3d:94:7f:d8:67:18:38:0b:27:d5:a1:ac:c1:71:da: d9:e4:c8:a3:0f:16:3a:be:97:98:20:1b:74:29:b2: ba:a6:c5:5a:4b:93:d9:36:7c:e9:8c:78:e7:cb:3c: 7d:35:da:ae:d7:00:39:c4:ce:10:f5:40:d4:b3:2b: d0:fa:79:93:bf:69:00:00:3a:a6:ba:62:fd:96:b7: 06:64:c8:d9:59:7d:13:13:4c:a6:8a:62:86:b7:fb: 0b:2e:2e:b3:95:c1:d0:f8:78:66:ee:27:c2:68:d8: 88:a1:02:74:4f:fd:24:87:b2:d1:33:ed:eb:a6:f1: 24:88:bb:0e:5d:c0:47:35:bb:b6:fb:e7:fd:e3:59: c2:92:be:1d:4b:03:e4:4d:d7:7a:3c:bc:ad:4e:69: aa:47:70:38:78:be:71:3f:e5:58:5d:8d:f9:b9:d9: 9e:c1:d5:67:fd:a0:a1:e4:33:74:11:2f:de:85:df: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 206.183.153.0/24 IPv6: 2607:9b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16840 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d6:f9:2a:3a:6f:d1:a4:ee:c8:44:ec:14:92:62:cc:99:f9: 0f:d0:21:f1:c0:a8:4a:7c:51:de:c5:42:4d:47:64:ff:43:e9: 32:0e:d4:bc:15:d6:03:ec:5d:ca:e1:f8:5e:88:15:f4:ae:2a: 53:df:bf:52:43:96:62:e5:18:9d:6f:d6:52:d8:cf:f2:bc:c5: 24:ce:0e:17:25:df:8d:ab:f0:00:3c:a4:5c:ac:aa:05:cd:35: d1:ed:d2:38:5f:11:fa:86:d5:48:32:fd:90:33:b7:42:c5:7d: 68:69:35:43:00:a2:5e:66:f8:b9:fe:a7:f0:2d:36:ad:3c:1d: 57:60:6b:9d:f1:f4:5d:87:3f:91:ce:de:af:8f:78:05:99:58: c6:16:25:21:99:b3:51:5c:f7:aa:05:2a:16:11:65:61:ff:48: d5:a8:a1:ac:87:ff:db:a0:b4:86:aa:e4:08:04:fd:ae:6d:24: 1e:ef:7f:e7:86:48:00:09:d6:f9:45:6f:11:40:ab:02:65:26: 8b:11:d9:fb:2b:d1:ce:9d:5e:85:7d:9a:86:f6:de:8e:b1:9b: 97:0b:00:38:79:ef:25:60:04:7f:aa:0b:26:e6:68:8f:61:bc: aa:6b:fd:de:e1:ac:fc:96:90:d0:7f:f9:0a:31:0c:71:4a:2c: d5:54:ff:70 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEofiGJTC/BQWz8xKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwODEyNDUzN1oXDTI3MDkxMTEyNDUzN1owLzEtMCsGA1UEAxMk ZWJhZDUyODMtZGIwNC00ZmNmLTgxYTgtNGEwOWEzOGViMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAJNboLj+ugIb53+hCZeDhA+B+l5bCMFHrdG ZY1o2HaoY1COPLX7gY6ijlbB8oEWj7KCI/NRQ+6nKc8kkwmb56mJjooCZkup4Ik9 lH/YZxg4CyfVoazBcdrZ5MijDxY6vpeYIBt0KbK6psVaS5PZNnzpjHjnyzx9Ndqu 1wA5xM4Q9UDUsyvQ+nmTv2kAADqmumL9lrcGZMjZWX0TE0ymimKGt/sLLi6zlcHQ +Hhm7ifCaNiIoQJ0T/0kh7LRM+3rpvEkiLsOXcBHNbu2++f941nCkr4dSwPkTdd6 PLytTmmqR3A4eL5xP+VYXY35udmewdVn/aCh5DN0ES/ehd93gwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFGHeo473cDP+8Jv3WCvhqCn6R6VAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YmFkNTI4My1kYjA0LTRmY2YtODFhOC00YTA5YTM4ZWIyMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ViYWQ1MjgzLWRiMDQtNGZjZi04 MWE4LTRhMDlhMzhlYjIwMy9lYmFkNTI4My1kYjA0LTRmY2YtODFhOC00YTA5YTM4 ZWIyMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADOt5kwDQQCAAIwBwMFACYHm0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQcgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAndb5Kjpv0aTuyETsFJJizJn5D9Ah 8cCoSnxR3sVCTUdk/0PpMg7UvBXWA+xdyuH4XogV9K4qU9+/UkOWYuUYnW/WUtjP 8rzFJM4OFyXfjavwADykXKyqBc010e3SOF8R+obVSDL9kDO3QsV9aGk1QwCiXmb4 uf6n8C02rTwdV2BrnfH0XYc/kc7er494BZlYxhYlIZmzUVz3qgUqFhFlYf9I1aih rIf/26C0hqrkCAT9rm0kHu9/54ZIAAnW+UVvEUCrAmUmixHZ+yvRzp1ehX2ahvbe jrGblwsAOHnvJWAEf6oLJuZoj2G8qmv93uGs/JaQ0H/5CjEMcUos1VT/cA== -----END CERTIFICATE-----Generated at Sun Jun 15 21:08:13 2025 by rpki-client