$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.cer File: 071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.cer (raw, json) Hash identifier: 0VroWDdLhrq8RzpupIhkqQmdA/75r40avUWruGvEG9g= Subject key identifier: 2B:C3:C9:A1:10:E8:95:34:4F:73:C9:8A:0C:F9:D4:A5:ED:FD:0E:AE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496D152215BA5028694879BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Apr 2025 14:39:31 +0000 Certificate not after: Fri 09 Jul 2027 14:39:31 +0000 Subordinate resources: IP: 23.181.152.0/24 IP: 2602:f8af::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6d:15:22:15:ba:50:28:69:48:79:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 5 14:39:31 2025 GMT Not After : Jul 9 14:39:31 2027 GMT Subject: CN=071c82a2-4589-4ecd-a0dd-b0f45bfff7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:3e:81:49:d0:fa:17:86:88:f7:2f:be:90: 6b:c8:ac:30:46:96:a8:11:54:5d:9b:90:2b:75:5e: dd:1b:fe:2e:78:59:7a:f1:cc:b3:3b:cf:4b:0d:6b: e4:15:d5:96:ff:4b:ff:62:87:c1:ec:63:30:18:a2: f8:e3:85:ef:77:56:0b:4f:31:58:1f:c3:6a:69:cc: ec:a7:03:89:36:a6:18:6a:49:8d:be:eb:25:e9:80: d7:64:19:58:c5:3f:52:e0:e5:ed:b2:30:7f:8d:12: bd:e3:a5:74:b5:6c:80:1e:ab:00:27:b8:a8:7c:71: df:a9:8e:6c:99:52:cc:48:37:51:84:65:cb:f2:8f: 6a:77:57:7d:67:f1:73:0c:0c:af:72:a0:51:e7:03: bc:f2:6d:92:24:91:31:1d:39:69:05:e8:36:88:b3: 06:83:3d:d9:3f:e9:99:39:a5:b7:f8:35:4a:18:5b: 12:17:cb:9e:c2:43:e2:c1:c6:ef:e9:c2:d4:64:6c: 36:c1:45:69:b9:b1:ae:a9:89:c2:a8:7f:34:7e:b8: 49:8d:e5:15:f7:19:dc:ff:03:3e:d6:5d:0b:f3:c3: 54:57:91:ba:00:c1:ff:a2:b9:02:2b:94:c1:ea:06: 12:cb:c2:14:8f:c7:ec:36:ad:d1:56:02:30:5f:3b: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C3:C9:A1:10:E8:95:34:4F:73:C9:8A:0C:F9:D4:A5:ED:FD:0E:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1/071c82a2-4589-4ecd-a0dd-b0f45bfff7e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.181.152.0/24 IPv6: 2602:f8af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:27:a8:50:24:e5:f5:44:31:85:53:ab:13:cf:2a:08:49:a4: a6:47:12:42:86:4c:10:2f:bd:df:e6:c4:0d:55:28:2e:76:cb: 64:26:cf:4b:c9:32:f2:8a:a8:b5:55:01:16:3e:26:27:0b:d9: bc:89:52:b7:be:13:f8:d4:ef:1c:96:9a:55:09:f6:e9:da:2d: f1:63:86:85:d8:06:6c:67:50:ab:98:27:07:5b:e9:84:62:24: 4a:1c:dc:e8:30:ad:b2:ec:0b:08:2e:c5:17:71:3b:ad:8f:f8: 89:84:13:a5:6c:d3:22:09:57:d5:d0:e6:20:6e:bd:ea:e0:81: 6e:df:41:5d:cf:ab:30:26:44:34:f5:49:49:62:44:76:94:8b: b6:99:f2:43:5a:bf:44:42:01:31:69:42:b4:3c:68:9b:7a:22: b1:95:bc:ee:08:ec:32:e5:46:da:89:3a:3b:78:db:fc:20:14: 2a:a1:08:c5:f4:3f:4a:d8:6c:2f:e1:14:d4:a4:be:68:9a:2a: 9d:b4:6e:8b:7b:54:1e:37:de:d7:36:75:57:7b:44:f6:b1:5c: 35:fc:b4:11:19:08:b8:11:1e:a6:b4:a1:f5:6d:05:45:d2:b6: 6e:9e:ed:7c:94:ce:f1:5e:36:86:c8:67:89:f6:ac:c3:d2:48: 57:98:af:6e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEltFSIVulAoaUh5v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNTE0MzkzMVoXDTI3MDcwOTE0MzkzMVowLzEtMCsGA1UEAxMk MDcxYzgyYTItNDU4OS00ZWNkLWEwZGQtYjBmNDViZmZmN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApck+gUnQ+heGiPcvvpBryKwwRpaoEVRdm5Ar dV7dG/4ueFl68cyzO89LDWvkFdWW/0v/YofB7GMwGKL444Xvd1YLTzFYH8Nqaczs pwOJNqYYakmNvusl6YDXZBlYxT9S4OXtsjB/jRK946V0tWyAHqsAJ7iofHHfqY5s mVLMSDdRhGXL8o9qd1d9Z/FzDAyvcqBR5wO88m2SJJExHTlpBeg2iLMGgz3ZP+mZ OaW3+DVKGFsSF8uewkPiwcbv6cLUZGw2wUVpubGuqYnCqH80frhJjeUV9xnc/wM+ 1l0L88NUV5G6AMH/orkCK5TB6gYSy8IUj8fsNq3RVgIwXztpBwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCvDyaEQ6JU0T3PJigz51KXt/Q6uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NzFjODJhMi00NTg5LTRlY2QtYTBkZC1iMGY0NWJmZmY3ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA3MWM4MmEyLTQ1ODktNGVjZC1h MGRkLWIwZjQ1YmZmZjdlMS8wNzFjODJhMi00NTg5LTRlY2QtYTBkZC1iMGY0NWJm ZmY3ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtZgwDgQCAAIwCAMGACYC+K8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AA0nqFAk5fVEMYVTqxPPKghJpKZHEkKGTBAvvd/mxA1VKC52y2Qmz0vJMvKKqLVV ARY+JicL2byJUre+E/jU7xyWmlUJ9unaLfFjhoXYBmxnUKuYJwdb6YRiJEoc3Ogw rbLsCwguxRdxO62P+ImEE6Vs0yIJV9XQ5iBuverggW7fQV3PqzAmRDT1SUliRHaU i7aZ8kNav0RCATFpQrQ8aJt6IrGVvO4I7DLlRtqJOjt42/wgFCqhCMX0P0rYbC/h FNSkvmiaKp20bot7VB433tc2dVd7RPaxXDX8tBEZCLgRHqa0ofVtBUXStm6e7XyU zvFeNobIZ4n2rMPSSFeYr24= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:03 2025 by rpki-client