$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer File: c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer (raw, json) Hash identifier: Uf7qqmpjI4GrSfcEt7YgPVgIrj7AmcwlFQqMBhIRRn0= Subject key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285849280120EBC15E57A38D2A221D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 20:48:26 +0000 Certificate not after: Tue 12 Jan 2027 19:15:43 +0000 Subordinate resources: AS: 54070 IP: 205.211.168.0/23 IP: 2620:dc:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:01:20:eb:c1:5e:57:a3:8d:2a:22:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Mar 11 20:48:26 2025 GMT Not After : Jan 12 19:15:43 2027 GMT Subject: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:2f:d2:a0:a2:b4:fa:26:23:d9:ab:f3:39: 94:c9:3e:48:13:cb:d5:9c:ff:74:c4:d7:e6:14:b7: 73:76:20:b9:12:2a:b1:44:b5:5f:6c:22:fa:7e:14: e9:99:6b:19:18:f8:0d:f8:b2:9b:9c:d6:8a:b9:9f: 7d:18:3b:83:a9:87:29:01:ab:04:44:52:9d:93:a3: fe:9d:8a:54:fb:f4:c5:52:7a:c7:2b:47:39:63:a3: 4a:6e:b7:2d:0e:3c:cf:a3:9e:d1:c9:df:74:a5:9e: 21:56:11:f5:e4:54:ba:6d:10:cc:c6:fa:6d:c1:cd: 91:37:68:8b:e9:00:9c:3e:cc:9e:0f:32:9e:5c:89: 62:32:b6:54:cb:1d:26:ea:02:75:cb:a2:e9:18:ee: a8:56:c3:be:60:7f:f5:f0:b1:ff:7d:33:55:2a:ad: c2:5a:4c:97:7a:9b:ba:12:c3:d0:3f:69:03:4b:e6: e9:89:6e:6d:db:c5:80:1a:85:8a:e3:14:a1:f0:38: 66:89:cf:2d:32:7f:86:ec:cb:0e:10:9b:49:63:2f: d1:96:71:4c:f3:3f:cf:4c:1a:7c:2f:0a:0e:f1:bc: 3f:f4:2e:5d:96:76:63:10:d8:59:68:6a:1d:cc:8d: b9:23:df:d2:47:d4:4a:42:78:1c:91:37:6d:ae:09: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 205.211.168.0/23 IPv6: 2620:dc:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54070 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1b:34:e4:1d:d7:68:c1:74:d3:79:36:a3:e2:6d:f3:00:24: d4:4f:93:0b:60:6e:94:3b:65:91:9a:26:30:54:34:b8:2e:1c: f0:a5:a1:66:f0:d5:b9:bd:09:63:71:56:05:21:de:67:68:af: a1:1e:9b:e0:68:04:26:9c:a1:19:ab:13:64:b0:60:ae:3f:70: c9:2a:bb:cd:34:92:6d:77:09:96:a9:c6:a5:49:53:a2:94:a0: 5e:88:c2:67:00:f6:c6:4a:50:b9:36:c0:32:ab:74:7b:7d:02: e7:ca:2d:c3:33:c0:ff:8d:bf:da:67:b6:90:94:0d:a7:19:81: b2:a2:26:d0:59:e9:5f:55:0e:74:e0:9f:32:ec:8b:67:e8:16: 58:91:a9:30:f3:2e:86:4c:be:18:55:12:5c:27:5f:3b:14:ce: cd:8c:a3:b1:97:0f:53:a2:7b:82:d3:c5:da:48:97:46:f1:e4: 53:04:ce:76:7e:7b:46:0b:97:20:48:4a:58:e7:91:03:2c:48: 58:d6:07:40:8e:4e:a7:8a:16:ef:c7:56:58:9e:1c:c9:9e:25: ac:e6:e6:56:d2:48:24:4a:86:90:4e:cd:16:a6:e3:47:93:50: 34:e9:5e:14:93:b0:e6:ea:f3:65:b4:1a:22:25:34:01:e0:cc: 44:58:29:07 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEkoASDrwV5Xo40qIh0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDMxMTIwNDgyNloXDTI3MDExMjE5MTU0M1owLzEtMCsGA1UEAxMk YzQ2MDhjYjgtYTFkMC00MGFhLThiMDUtYTU5NzE1N2JiMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPQv0qCitPomI9mr8zmUyT5IE8vVnP90xNfm FLdzdiC5EiqxRLVfbCL6fhTpmWsZGPgN+LKbnNaKuZ99GDuDqYcpAasERFKdk6P+ nYpU+/TFUnrHK0c5Y6NKbrctDjzPo57Ryd90pZ4hVhH15FS6bRDMxvptwc2RN2iL 6QCcPsyeDzKeXIliMrZUyx0m6gJ1y6LpGO6oVsO+YH/18LH/fTNVKq3CWkyXepu6 EsPQP2kDS+bpiW5t28WAGoWK4xSh8Dhmic8tMn+G7MsOEJtJYy/RlnFM8z/PTBp8 LwoO8bw/9C5dlnZjENhZaGodzI25I9/SR9RKQngckTdtrgk24wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFGcq4+ue7UY87nb/7sK7huwqpuLTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9j NDYwOGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3MTU3YmIxYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2M0NjA4Y2I4LWExZDAtNDBhYS04 YjA1LWE1OTcxNTdiYjFiZi9jNDYwOGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3MTU3 YmIxYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAHN06gwDwQCAAIwCQMHACYgANyAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA0zYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAihs05B3XaMF003k2o+Jt8wAk 1E+TC2BulDtlkZomMFQ0uC4c8KWhZvDVub0JY3FWBSHeZ2ivoR6b4GgEJpyhGasT ZLBgrj9wySq7zTSSbXcJlqnGpUlTopSgXojCZwD2xkpQuTbAMqt0e30C58otwzPA /42/2me2kJQNpxmBsqIm0FnpX1UOdOCfMuyLZ+gWWJGpMPMuhky+GFUSXCdfOxTO zYyjsZcPU6J7gtPF2kiXRvHkUwTOdn57RguXIEhKWOeRAyxIWNYHQI5Op4oW78dW WJ4cyZ4lrObmVtJIJEqGkE7NFqbjR5NQNOleFJOw5urzZbQaIiU0AeDMRFgpBw== -----END CERTIFICATE-----Generated at Sun Apr 27 11:33:29 2025 by rpki-client