$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44254674-0ab7-45b1-b8ba-6674d8bb041e.cer File: 44254674-0ab7-45b1-b8ba-6674d8bb041e.cer (raw, json) Hash identifier: 4oCU1rE1/Oay3rpWA2yxT8h0Mpmmkmg2YWNeW0GyUd8= Subject key identifier: 4A:32:B2:1A:EB:BB:7F:EC:AF:90:49:5E:46:B8:4D:76:F2:DB:70:D4 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584986ACDF9A6BC20B687EF641D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44254674-0ab7-45b1-b8ba-6674d8bb041e/44254674-0ab7-45b1-b8ba-6674d8bb041e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44254674-0ab7-45b1-b8ba-6674d8bb041e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 18:40:28 +0000 Certificate not after: Sun 18 Jul 2027 18:40:28 +0000 Subordinate resources: AS: 46411 IP: 198.100.22.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:ac:df:9a:6b:c2:0b:68:7e:f6:41:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 14 18:40:28 2025 GMT Not After : Jul 18 18:40:28 2027 GMT Subject: CN=44254674-0ab7-45b1-b8ba-6674d8bb041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:79:3f:f1:b3:b7:94:8b:c2:42:73:66:d3: 78:77:30:83:c4:a3:21:6d:fc:4f:2a:dc:f6:58:fc: c7:ca:d6:36:36:69:78:a0:41:5f:9a:8d:32:bd:e5: 02:f0:5b:b8:1d:66:03:1f:4e:bd:de:f8:51:f2:90: a6:14:69:a6:67:db:cc:d5:45:d8:54:c9:32:f3:47: 4b:bb:27:6a:d6:cb:de:72:72:77:80:01:eb:d4:b7: d9:d0:a8:dc:a0:6a:d8:35:18:9b:78:f0:8b:9f:c6: d3:c2:84:b6:e4:69:84:16:d6:5b:45:e4:ff:ba:8f: b6:69:b6:54:39:9d:0c:59:f9:1a:d0:e4:60:8f:c8: 8e:8b:dc:fd:36:47:dd:ba:cb:2d:b9:fd:76:6a:74: 2c:0c:0d:f0:6d:32:c0:9d:49:cf:5f:4b:7c:9e:b3: 15:e0:2c:91:fd:dc:4d:cf:5e:ed:cb:6f:70:65:b7: e6:fc:60:f1:a8:16:1a:6d:a6:f2:8f:51:bc:75:f4: ca:6d:00:b5:0a:07:e6:ee:40:3a:1b:cf:dd:f2:90: 1d:0d:07:39:42:eb:dc:bf:12:65:22:ae:e5:53:c7: 10:d4:76:00:06:bb:c1:9f:d9:40:49:7e:75:71:fa: aa:12:1c:c6:a1:c7:63:31:ca:9d:61:8a:d9:dd:9e: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:32:B2:1A:EB:BB:7F:EC:AF:90:49:5E:46:B8:4D:76:F2:DB:70:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44254674-0ab7-45b1-b8ba-6674d8bb041e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44254674-0ab7-45b1-b8ba-6674d8bb041e/44254674-0ab7-45b1-b8ba-6674d8bb041e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 198.100.22.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46411 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9f:9e:24:43:95:d0:05:b5:67:91:9a:5d:17:e2:4a:8e:81: bc:b1:da:8f:34:51:12:35:6f:1b:86:90:d3:65:21:00:7b:41: 37:55:d6:9d:c0:a6:2d:11:4a:3d:5a:dd:3f:24:67:12:9b:8d: 6c:e6:48:ab:6c:a1:0d:ea:08:91:38:f5:d6:9f:31:1f:a9:ac: 0d:0f:db:18:9f:0b:75:76:2c:59:86:81:43:38:56:16:30:a9: 31:f5:b2:00:f0:7e:c7:31:07:6b:e1:d0:e7:4d:6c:c5:4d:fa: 8b:0c:6b:ff:b4:91:a2:6c:af:f3:f3:02:7e:25:79:09:bb:d7: df:7d:de:02:cf:76:bc:54:c7:2d:25:e6:94:e5:86:63:00:ff: 6c:0e:94:2c:a4:5a:8f:bd:9b:35:3c:52:10:0b:6a:43:9e:4d: b4:5a:ff:e0:3c:c0:2d:76:26:af:18:7c:28:26:47:79:58:bc: a6:d3:4a:a4:2e:48:af:56:b0:13:88:b5:36:8e:05:d6:64:bb: f0:dd:9b:96:f3:f4:66:b5:83:33:ba:5c:ab:c3:dd:b5:19:06: 23:88:59:0c:1d:28:ae:3e:e6:c0:de:31:37:9e:19:7e:39:5f: 2b:a5:52:51:50:95:68:ac:90:46:38:d0:de:a8:d3:7d:4d:e4: 0a:52:cd:c2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmGrN+aa8ILaH72QdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNDE4NDAyOFoXDTI3MDcxODE4NDAyOFowLzEtMCsGA1UEAxMk NDQyNTQ2NzQtMGFiNy00NWIxLWI4YmEtNjY3NGQ4YmIwNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl795P/Gzt5SLwkJzZtN4dzCDxKMhbfxPKtz2 WPzHytY2Nml4oEFfmo0yveUC8Fu4HWYDH0693vhR8pCmFGmmZ9vM1UXYVMky80dL uydq1svecnJ3gAHr1LfZ0KjcoGrYNRibePCLn8bTwoS25GmEFtZbReT/uo+2abZU OZ0MWfka0ORgj8iOi9z9Nkfdusstuf12anQsDA3wbTLAnUnPX0t8nrMV4CyR/dxN z17ty29wZbfm/GDxqBYababyj1G8dfTKbQC1Cgfm7kA6G8/d8pAdDQc5QuvcvxJl Iq7lU8cQ1HYABrvBn9lASX51cfqqEhzGocdjMcqdYYrZ3Z4J8wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEoyshrru3/sr5BJXka4TXby23DUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 NDI1NDY3NC0wYWI3LTQ1YjEtYjhiYS02Njc0ZDhiYjA0MWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ0MjU0Njc0LTBhYjctNDViMS1i OGJhLTY2NzRkOGJiMDQxZS80NDI1NDY3NC0wYWI3LTQ1YjEtYjhiYS02Njc0ZDhi YjA0MWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHGZBYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALVLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFufniRDldAFtWeRml0X4kqOgbyx2o80URI1bxuGkNNlIQB7 QTdV1p3Api0RSj1a3T8kZxKbjWzmSKtsoQ3qCJE49dafMR+prA0P2xifC3V2LFmG gUM4VhYwqTH1sgDwfscxB2vh0OdNbMVN+osMa/+0kaJsr/PzAn4leQm719993gLP drxUxy0l5pTlhmMA/2wOlCykWo+9mzU8UhALakOeTbRa/+A8wC12Jq8YfCgmR3lY vKbTSqQuSK9WsBOItTaOBdZku/Ddm5bz9Ga1gzO6XKvD3bUZBiOIWQwdKK4+5sDe MTeeGX45XyulUlFQlWiskEY40N6o031N5ApSzcI= -----END CERTIFICATE-----Generated at Mon Apr 28 05:42:49 2025 by rpki-client