$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer File: 6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer (raw, json) Hash identifier: 6Ecxr8FNKyW8y2VJ50T4FK8jN1M/ic9cAj9jLl15FIY= Subject key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584972959EAB740F658971E5F2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Apr 2025 13:57:27 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 6508 AS: 20148 AS: 30711 IP: 74.118.168.0/21 IP: 205.143.192.0/21 IP: 205.159.1.0/24 IP: 2001:5c8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:95:9e:ab:74:0f:65:89:71:e5:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 7 13:57:27 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:3d:45:1e:2e:c2:f1:3c:ee:39:50:48:ca: 48:05:45:92:5d:03:07:e4:30:a7:ab:0f:bf:cc:90: 59:31:bb:ff:d4:91:69:aa:0f:8a:5b:fb:aa:1a:5b: de:56:00:f9:fe:a8:d8:55:71:2c:eb:d0:83:31:be: 0c:2c:b7:a4:d6:1a:ee:b9:fc:1b:d0:d8:c8:41:74: e7:29:89:f1:af:33:af:c3:bd:fe:37:11:53:57:b2: 44:65:27:9d:4f:1c:7b:bc:3b:fd:90:d9:2d:ae:91: f3:09:dc:6e:a4:02:5d:a2:0f:94:9b:56:9c:47:0e: f5:dd:b4:f8:55:3f:0c:f4:6a:58:b3:43:25:b4:6d: 68:b0:7a:74:09:41:90:f5:bc:e4:c1:8d:9d:fd:ba: 21:c8:4f:c7:a4:9d:e2:c3:56:7c:ea:2e:48:43:3f: 18:ed:7c:cf:8d:0e:a6:ca:dd:7f:06:95:4f:bb:0b: 1e:4f:13:39:37:91:8e:54:f6:c0:4f:75:49:8a:96: 0c:0e:b7:98:82:41:81:32:ed:cb:9a:bd:59:d6:b5: 52:3d:e1:22:9e:04:64:5e:ef:16:e7:62:c3:e3:06: 50:71:2e:be:65:3a:ee:19:1f:e9:04:96:32:41:cd: 71:e2:27:af:20:81:66:82:b8:03:ca:ab:b7:0e:b6: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 74.118.168.0/21 205.143.192.0/21 205.159.1.0/24 IPv6: 2001:5c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6508 20148 30711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2b:0f:03:b5:80:2f:c4:65:c8:19:8e:ba:36:3c:92:5f:d6: 23:89:92:57:61:7f:da:4e:36:c7:20:a4:08:01:b7:f1:1f:82: d0:97:cf:36:04:77:c3:38:fa:43:ee:4b:61:fa:d7:59:d4:e0: e8:47:e2:e1:79:c2:d7:d1:80:0a:51:24:47:3c:66:4e:9d:1e: 6f:83:34:12:d0:f5:a1:d1:3c:26:da:20:eb:8f:05:03:15:4a: ad:61:8c:fe:c2:99:6f:de:3e:b6:8f:5f:18:fc:c0:15:03:38: 88:84:89:5b:b4:24:19:2a:34:0d:5e:8a:91:28:ea:ff:c4:00: 1a:e6:82:92:e3:da:b6:72:e0:a2:a2:a7:72:46:aa:1f:b0:18: 49:3d:4e:9f:26:6a:6b:4a:8a:09:e7:5d:f1:d1:80:16:1c:b3: 70:09:3c:ec:13:ae:b1:97:aa:1d:e1:5a:9b:bf:ef:b2:d1:2d: fd:62:1a:df:dd:43:75:a0:62:e1:d1:b0:26:08:5d:cf:92:81: ed:24:7d:4c:1e:11:48:e9:09:ec:42:93:5d:2f:b2:f4:30:12: 2b:63:1e:d6:39:e1:ea:10:81:0f:14:cc:39:51:3b:33:f9:f7: 74:90:e5:47:69:10:96:35:e0:12:2b:0c:75:a1:1c:28:f1:75: b0:ec:91:18 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWElylZ6rdA9liXHl8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwNzEzNTcyN1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk NmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMg9RR4uwvE87jlQSMpIBUWSXQMH5DCnqw+/ zJBZMbv/1JFpqg+KW/uqGlveVgD5/qjYVXEs69CDMb4MLLek1hruufwb0NjIQXTn KYnxrzOvw73+NxFTV7JEZSedTxx7vDv9kNktrpHzCdxupAJdog+Um1acRw713bT4 VT8M9GpYs0MltG1osHp0CUGQ9bzkwY2d/bohyE/HpJ3iw1Z86i5IQz8Y7XzPjQ6m yt1/BpVPuwseTxM5N5GOVPbAT3VJipYMDreYgkGBMu3Lmr1Z1rVSPeEingRkXu8W 52LD4wZQcS6+ZTruGR/pBJYyQc1x4ievIIFmgrgDyqu3DrZB8QIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFImez4yBYRnN9AnkZKC4ea1WV4E0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZiMWJmYjlkLTNjZTUtNGZhMC04 N2EyLTczNTNlZThjYzI5Yy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4 Y2MyOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANKdqgDBAPNj8ADBADNnwEwDQQCAAIwBwMFACAB BcgwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICGWwCAk60AgJ39zBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBY Kw8DtYAvxGXIGY66NjySX9YjiZJXYX/aTjbHIKQIAbfxH4LQl882BHfDOPpD7kth +tdZ1ODoR+LhecLX0YAKUSRHPGZOnR5vgzQS0PWh0Twm2iDrjwUDFUqtYYz+wplv 3j62j18Y/MAVAziIhIlbtCQZKjQNXoqRKOr/xAAa5oKS49q2cuCioqdyRqofsBhJ PU6fJmprSooJ513x0YAWHLNwCTzsE66xl6od4Vqbv++y0S39Yhrf3UN1oGLh0bAm CF3PkoHtJH1MHhFI6QnsQpNdL7L0MBIrYx7WOeHqEIEPFMw5UTsz+fd0kOVHaRCW NeASKwx1oRwo8XWw7JEY -----END CERTIFICATE-----Generated at Mon Apr 28 00:46:13 2025 by rpki-client