$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer File: 6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer (raw, json) Hash identifier: sg7393pz8D7hDteMAA/kb+6wZoPnixczHb/60fHqFkA= Subject key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584943E3F0017826646A46EC3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 20:32:15 +0000 Certificate not after: Thu 24 Jun 2027 20:32:15 +0000 Subordinate resources: IP: 199.244.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:e3:f0:01:78:26:64:6a:46:ec:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 21 20:32:15 2025 GMT Not After : Jun 24 20:32:15 2027 GMT Subject: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:44:47:93:8b:f8:91:e6:b4:a0:a5:e1:44: 9b:73:44:f2:2d:27:c9:44:6a:78:02:05:83:85:3e: 14:9e:d2:18:8d:5a:c9:27:08:29:2f:a9:11:a1:c7: 5f:c6:6b:24:24:4b:cf:4d:b0:62:ef:42:ed:6d:27: 7a:56:33:1d:cc:c0:4a:53:5c:d6:bf:12:0a:55:3e: 86:9f:f8:83:ae:23:6a:22:a1:cf:8f:1a:b5:63:ca: db:0d:e9:da:b5:e4:6f:9b:13:c6:24:cc:95:10:e6: d6:11:7a:8f:8d:d4:a6:cb:e0:9a:6d:8b:cf:db:31: 3c:9a:07:72:41:6b:4c:35:d1:7b:cd:b4:c1:67:67: a5:1e:86:4d:eb:f0:cd:26:e8:de:46:a5:18:26:43: 8b:55:d8:67:76:9c:14:7e:84:a7:be:4d:a0:4d:b6: 24:12:2c:9f:0d:bf:8b:b9:77:58:43:dd:dd:bc:a9: 09:06:4b:8e:ac:72:a6:b7:43:e6:49:92:42:96:39: 97:cb:78:a0:0a:ee:81:73:c8:3c:8c:31:15:b7:29: cd:4c:8d:bb:d3:14:41:54:94:8b:2a:cf:71:3f:ee: a0:e0:af:e2:99:01:47:7f:71:11:cc:75:1d:b9:d9: 32:8c:14:a6:56:cc:bf:ad:41:81:21:cd:8b:48:3b: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.244.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2a:f8:25:c0:32:38:00:41:cf:60:21:7c:9d:00:ac:df:45: b3:50:ba:fb:93:8c:be:00:c9:2e:6b:5a:68:8b:0f:8c:4d:59: 29:c5:d9:cb:16:d3:0b:c3:fe:8c:cf:1d:01:31:e5:09:67:ff: 60:13:94:61:25:8e:53:8e:2d:1d:23:8e:46:ba:43:45:a3:8d: dd:20:fd:70:bf:5e:d9:16:8d:6e:46:75:cc:d5:78:4d:05:04: a7:ee:28:0e:ec:8f:e6:58:58:88:a3:b3:f9:0a:24:5d:81:ef: 79:27:5e:08:fe:5b:61:ad:af:1d:f7:18:6c:6a:28:f5:9a:f0: 95:91:bc:a0:c2:53:28:6f:32:d3:98:7d:ff:98:eb:6d:de:01: 41:1f:bc:35:43:16:d5:94:82:a2:4c:55:57:14:d6:07:0a:72: 8e:70:8e:9f:0b:20:b4:d3:78:48:7c:62:2f:56:64:d0:01:0e: 7e:05:27:ab:8c:f2:47:8a:93:5a:30:79:84:96:b3:03:5c:c4: 11:48:de:52:61:3d:de:f1:d7:cf:19:08:b4:0c:f2:db:6a:1f: fd:a1:5a:4d:d6:95:5c:45:38:83:de:aa:38:49:c8:8e:f9:8e: 22:ce:83:51:a0:19:fb:35:8c:36:c9:b9:75:6a:0e:fb:d0:01: 13:e9:02:e2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElD4/ABeCZkakbsPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyMTIwMzIxNVoXDTI3MDYyNDIwMzIxNVowLzEtMCsGA1UEAxMk NmIwN2NhMTQtMTRhYS00YjU2LWI5Y2UtNDZjOTc2OGE4ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYxER5OL+JHmtKCl4USbc0TyLSfJRGp4AgWD hT4UntIYjVrJJwgpL6kRocdfxmskJEvPTbBi70LtbSd6VjMdzMBKU1zWvxIKVT6G n/iDriNqIqHPjxq1Y8rbDenateRvmxPGJMyVEObWEXqPjdSmy+CabYvP2zE8mgdy QWtMNdF7zbTBZ2elHoZN6/DNJujeRqUYJkOLVdhndpwUfoSnvk2gTbYkEiyfDb+L uXdYQ93dvKkJBkuOrHKmt0PmSZJCljmXy3igCu6Bc8g8jDEVtynNTI270xRBVJSL Ks9xP+6g4K/imQFHf3ERzHUdudkyjBSmVsy/rUGBIc2LSDul4wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAXbqEU8AT9haA1uUzEDqYCVfl7TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4YThmOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZiMDdjYTE0LTE0YWEtNGI1Ni1i OWNlLTQ2Yzk3NjhhOGY5My82YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4 YThmOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATH9CAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWyr4JcAyOABBz2AhfJ0A rN9Fs1C6+5OMvgDJLmtaaIsPjE1ZKcXZyxbTC8P+jM8dATHlCWf/YBOUYSWOU44t HSOORrpDRaON3SD9cL9e2RaNbkZ1zNV4TQUEp+4oDuyP5lhYiKOz+QokXYHveSde CP5bYa2vHfcYbGoo9ZrwlZG8oMJTKG8y05h9/5jrbd4BQR+8NUMW1ZSCokxVVxTW BwpyjnCOnwsgtNN4SHxiL1Zk0AEOfgUnq4zyR4qTWjB5hJazA1zEEUjeUmE93vHX zxkItAzy22of/aFaTdaVXEU4g96qOEnIjvmOIs6DUaAZ+zWMNsm5dWoO+9ABE+kC 4g== -----END CERTIFICATE-----Generated at Sat Apr 26 23:23:59 2025 by rpki-client