$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer File: 46c07e76-66d8-48d7-826a-85de29c66a22.cer (raw, json) Hash identifier: gYvNH8VDWmhew5eOQ2erPscx5CcI+JmP93i5lKnsLRw= Subject key identifier: DA:05:67:51:F0:7F:0E:4A:8C:98:73:1C:95:C9:7F:09:EA:0A:E5:34 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858497C3757CDF97F73E38B340E98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Apr 2025 00:45:34 +0000 Certificate not after: Thu 15 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 14651 IP: 140.235.196.0/22 IP: 2602:fa94::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:37:57:cd:f9:7f:73:e3:8b:34:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 11 00:45:34 2025 GMT Not After : Jul 15 00:45:34 2027 GMT Subject: CN=46c07e76-66d8-48d7-826a-85de29c66a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:c9:1c:46:fb:c7:e6:2d:f9:df:16:a1:96: 54:7d:a5:8a:76:67:cb:57:16:6b:e6:23:e0:ad:2e: f5:59:ee:f7:a6:a5:e5:fc:00:19:df:da:17:f0:65: f9:04:98:c1:c7:6d:49:e6:2a:06:c4:1d:7e:b8:96: a9:c2:d4:75:85:c5:68:93:c4:21:46:ef:52:c4:d4: c8:33:de:c4:e0:6e:43:74:48:a9:3e:ae:f0:f8:43: b0:d7:03:76:ad:e2:55:0b:0d:2e:aa:83:f9:40:27: 49:7b:84:33:97:13:19:18:e6:16:e5:9f:f4:0b:c5: 0d:d6:ca:73:64:3b:82:fa:8e:9e:4a:f9:f0:b4:25: 78:08:21:2f:f8:c5:1c:e9:64:32:4e:db:f2:87:d9: 4a:46:a2:f9:86:f7:6b:70:c9:ef:f1:61:c4:87:e5: 0e:76:f5:df:f3:1d:2c:24:f9:07:13:1c:83:cc:13: cf:3b:67:40:97:a6:ba:b1:37:84:26:a7:c7:1b:6d: b5:24:d5:ba:88:5b:0e:d9:d3:fc:49:a1:70:d2:98: 48:00:9c:c0:85:9c:4c:25:4e:98:69:b1:04:8a:9e: 57:40:01:89:b7:a5:db:33:f0:e5:7b:8c:80:e6:e0: f8:91:2e:5f:78:b9:a8:1c:55:d4:32:ef:28:ff:dd: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:05:67:51:F0:7F:0E:4A:8C:98:73:1C:95:C9:7F:09:EA:0A:E5:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.196.0/22 IPv6: 2602:fa94::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14651 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:04:41:9b:5f:9f:94:3d:63:f5:01:eb:9f:44:0b:e5:d4:32: b7:04:2e:70:d0:e0:81:0f:af:fa:03:06:2a:7e:4a:2e:35:95: 4e:62:90:ac:99:b0:a0:96:33:c2:ba:ec:ee:50:01:2f:e5:87: 31:dd:88:ce:47:67:88:1f:d5:1d:3e:7b:ad:81:f1:90:83:f8: 7f:75:13:ec:57:6c:63:87:d3:db:8e:d1:b4:7c:dd:3b:9e:05: c0:46:04:4b:5d:11:57:ba:33:38:34:9a:c0:1c:2d:b8:55:f3: 6c:61:d5:af:27:c6:cd:ec:8d:4d:fa:06:92:cb:d3:9e:68:35: e9:c3:25:5d:cb:b1:9c:0d:bd:10:b8:ba:60:fa:c3:88:1f:60: 8a:3b:03:6e:b3:1f:01:ff:77:41:39:58:e9:47:17:ea:17:29: b0:de:a1:03:89:68:74:1b:81:5e:fb:cc:18:b4:3e:49:ce:31: 0b:63:33:64:7a:9b:49:ec:5a:1d:b4:3c:0d:8d:c3:77:04:88: 8e:3a:c4:bb:dc:37:c2:1f:a0:55:43:71:10:c9:4e:3e:05:34: fb:c9:2b:ff:3a:9b:97:ad:26:95:d9:e6:d7:81:e9:49:b7:f8: 57:a5:a6:85:57:e1:40:1d:2e:f6:85:16:e6:85:56:6d:6c:4e: 25:c7:32:17 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEl8N1fN+X9z44s0DpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQxMTAwNDUzNFoXDTI3MDcxNTAwNDUzNFowLzEtMCsGA1UEAxMk NDZjMDdlNzYtNjZkOC00OGQ3LTgyNmEtODVkZTI5YzY2YTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH/JHEb7x+Yt+d8WoZZUfaWKdmfLVxZr5iPg rS71We73pqXl/AAZ39oX8GX5BJjBx21J5ioGxB1+uJapwtR1hcVok8QhRu9SxNTI M97E4G5DdEipPq7w+EOw1wN2reJVCw0uqoP5QCdJe4QzlxMZGOYW5Z/0C8UN1spz ZDuC+o6eSvnwtCV4CCEv+MUc6WQyTtvyh9lKRqL5hvdrcMnv8WHEh+UOdvXf8x0s JPkHExyDzBPPO2dAl6a6sTeEJqfHG221JNW6iFsO2dP8SaFw0phIAJzAhZxMJU6Y abEEip5XQAGJt6XbM/Dle4yA5uD4kS5feLmoHFXUMu8o/93OOwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNoFZ1Hwfw5KjJhzHJXJfwnqCuU0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 NmMwN2U3Ni02NmQ4LTQ4ZDctODI2YS04NWRlMjljNjZhMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YzA3ZTc2LTY2ZDgtNDhkNy04 MjZhLTg1ZGUyOWM2NmEyMi80NmMwN2U3Ni02NmQ4LTQ4ZDctODI2YS04NWRlMjlj NjZhMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKM68QwDgQCAAIwCAMGBCYC+pQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjk7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABoEQZtfn5Q9Y/UB659EC+XUMrcE LnDQ4IEPr/oDBip+Si41lU5ikKyZsKCWM8K67O5QAS/lhzHdiM5HZ4gf1R0+e62B 8ZCD+H91E+xXbGOH09uO0bR83TueBcBGBEtdEVe6Mzg0msAcLbhV82xh1a8nxs3s jU36BpLL055oNenDJV3LsZwNvRC4umD6w4gfYIo7A26zHwH/d0E5WOlHF+oXKbDe oQOJaHQbgV77zBi0PknOMQtjM2R6m0nsWh20PA2Nw3cEiI46xLvcN8IfoFVDcRDJ Tj4FNPvJK/86m5etJpXZ5teB6Um3+FelpoVX4UAdLvaFFuaFVm1sTiXHMhc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:47 2025 by rpki-client