$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer File: a678b84f-a615-4754-9dcb-e51b04125026.cer (raw, json) Hash identifier: OAgE37ZaR30rET7JmGR8n1yS0ih7CJmtTMPraCYKLj0= Subject key identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858497E406653A39C9DE726E2A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Apr 2025 18:15:26 +0000 Certificate not after: Tue 24 Nov 2026 19:36:52 +0000 Subordinate resources: AS: 16661 IP: 172.83.94.0/24 IP: 2602:f685::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:40:66:53:a3:9c:9d:e7:26:e2:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Apr 11 18:15:26 2025 GMT Not After : Nov 24 19:36:52 2026 GMT Subject: CN=a678b84f-a615-4754-9dcb-e51b04125026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:4f:70:bd:27:23:ec:bc:01:47:40:77:9b: eb:67:aa:3b:69:5c:f7:63:c1:c7:7b:31:d5:3c:12: ec:9b:d3:fe:38:a2:89:b9:e6:f1:9d:92:5b:0c:da: 31:66:b6:d1:f2:f8:fa:97:12:c6:c7:a3:a6:36:9f: 21:f6:46:12:f1:1b:fc:d0:36:2f:bd:24:7e:e3:8e: 46:26:5d:d2:09:b5:41:1a:1d:45:83:f9:35:6e:55: 25:b9:b6:c0:de:cb:7c:c2:81:01:b3:d2:16:d1:a5: 3f:b3:f8:8c:55:45:ac:c0:f2:78:07:de:18:c2:f5: 9d:0b:63:df:a8:4e:09:4c:6c:c6:a2:98:19:01:a7: 9e:a6:cb:5d:8b:28:19:32:a4:8c:32:5b:67:cc:d3: b2:ef:60:aa:05:03:de:a2:c6:57:dd:64:f5:6a:30: f6:08:65:0d:10:b3:85:b7:4b:88:ed:a9:b3:83:fc: dc:b0:14:71:a9:41:d4:8d:35:8f:05:53:99:ba:2a: 66:07:b1:04:69:e3:44:90:d7:7a:e1:cb:e4:a8:95: c3:f8:a1:60:24:c4:85:93:4c:85:38:d4:6b:d2:38: e2:78:26:cd:cf:ad:3e:50:4a:b7:aa:2e:9e:3a:ca: 32:1e:3d:42:28:28:c9:91:2d:9b:c3:53:83:10:40: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 172.83.94.0/24 IPv6: 2602:f685::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16661 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:59:1c:e7:d8:b2:23:1d:d5:f7:1d:ff:1b:f8:f1:70:cd:db: 05:f1:09:52:b5:9a:57:e9:a7:ee:8f:13:2c:cd:d8:22:75:b2: a7:74:e7:e4:d0:71:0b:7a:a6:df:e3:d0:84:e0:ce:3e:71:38: 76:15:66:ed:93:2e:0f:7a:61:bd:0b:40:99:91:68:82:75:96: fd:f6:96:34:a4:e7:1c:53:1f:2b:40:8d:4e:83:90:f4:19:18: a8:f6:ad:ef:9a:72:a0:ca:c9:3e:de:29:64:15:70:80:53:22: 98:04:cb:af:79:31:77:92:96:76:4c:55:bb:18:db:23:76:a7: a3:72:83:b8:48:4b:bd:12:90:a7:f1:75:f1:96:d2:f1:f4:49: 96:5d:9c:98:72:64:d7:00:17:f5:8a:5d:ec:60:b2:3e:b3:d6: c3:2d:63:c6:b1:ca:21:3f:66:26:e2:83:4e:35:6a:24:05:fb: ed:00:58:e0:ba:59:25:74:e4:5b:24:35:b9:7f:7a:cf:d5:06: 52:4b:56:1d:07:5f:19:91:06:ed:f3:8e:3d:69:ab:87:4f:24: 5e:66:f3:79:37:51:91:12:6c:71:af:73:68:e3:a8:08:54:0b: 34:e3:e1:fe:bb:b5:3c:4f:ec:7f:1d:15:fc:72:44:f0:0c:d4: 5e:b7:49:2e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEl+QGZTo5yd5ybiqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDQxMTE4MTUyNloXDTI2MTEyNDE5MzY1MlowLzEtMCsGA1UEAxMk YTY3OGI4NGYtYTYxNS00NzU0LTlkY2ItZTUxYjA0MTI1MDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDZPcL0nI+y8AUdAd5vrZ6o7aVz3Y8HHezHV PBLsm9P+OKKJuebxnZJbDNoxZrbR8vj6lxLGx6OmNp8h9kYS8Rv80DYvvSR+445G Jl3SCbVBGh1Fg/k1blUlubbA3st8woEBs9IW0aU/s/iMVUWswPJ4B94YwvWdC2Pf qE4JTGzGopgZAaeepstdiygZMqSMMltnzNOy72CqBQPeosZX3WT1ajD2CGUNELOF t0uI7amzg/zcsBRxqUHUjTWPBVOZuipmB7EEaeNEkNd64cvkqJXD+KFgJMSFk0yF ONRr0jjieCbNz60+UEq3qi6eOsoyHj1CKCjJkS2bw1ODEEB0qQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNOelEBeVQ9rGkK0/d1IPVyQ+eHhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h Njc4Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFiMDQxMjUwMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2E2NzhiODRmLWE2MTUtNDc1NC05 ZGNiLWU1MWIwNDEyNTAyNi9hNjc4Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFiMDQx MjUwMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACsU14wDgQCAAIwCAMGACYC9oUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkEVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEpZHOfYsiMd1fcd/xv48XDN2wXx CVK1mlfpp+6PEyzN2CJ1sqd05+TQcQt6pt/j0ITgzj5xOHYVZu2TLg96Yb0LQJmR aIJ1lv32ljSk5xxTHytAjU6DkPQZGKj2re+acqDKyT7eKWQVcIBTIpgEy695MXeS lnZMVbsY2yN2p6Nyg7hIS70SkKfxdfGW0vH0SZZdnJhyZNcAF/WKXexgsj6z1sMt Y8axyiE/Zibig041aiQF++0AWOC6WSV05FskNbl/es/VBlJLVh0HXxmRBu3zjj1p q4dPJF5m83k3UZESbHGvc2jjqAhUCzTj4f67tTxP7H8dFfxyRPAM1F63SS4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:36 2025 by rpki-client