$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.cer File: 6c141b17-8c2d-4240-9e2a-ab1a5e19d007.cer (raw, json) Hash identifier: eoZdmE6cmArzZBpFbymshCNTNkOZcwvr7hfYHn4gREg= Subject key identifier: 47:8E:68:12:14:E5:EC:DF:FC:1E:97:B8:3C:62:58:C3:6F:00:6E:CC Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858498E5E7B8BED023694A4FE7F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Apr 2025 12:48:59 +0000 Certificate not after: Wed 21 Jul 2027 12:48:59 +0000 Subordinate resources: AS: 394656 IP: 23.184.0.0/24 IP: 66.85.11.0/24 IP: 2620:e5:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:5e:7b:8b:ed:02:36:94:a4:fe:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 17 12:48:59 2025 GMT Not After : Jul 21 12:48:59 2027 GMT Subject: CN=6c141b17-8c2d-4240-9e2a-ab1a5e19d007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:df:66:a6:bc:0d:fa:f8:ce:03:a2:1d:c6: a0:56:fd:4b:c5:cc:8c:96:20:f2:49:7d:cd:c6:81: af:b8:07:c5:3f:6c:51:0f:5c:41:ec:e2:d9:d0:2c: 29:f6:07:de:39:6a:25:5a:2a:16:de:22:3a:69:4d: b1:dc:86:11:9e:91:52:eb:fd:5a:51:5a:98:4d:ad: 7e:78:c8:b0:98:ae:db:f6:7a:0e:48:5d:7d:83:e3: ca:f2:b1:e2:ae:1c:e0:8a:69:73:16:01:3d:41:7b: 6a:d6:55:ab:1b:ec:52:0f:f5:06:1b:95:23:6b:c4: 99:c5:1b:f6:5b:64:89:21:8f:04:c0:62:8c:73:6e: f1:92:f4:9a:1b:f2:de:16:27:98:4a:f3:7d:f1:7c: 61:0e:78:3a:f8:a7:29:02:ae:5c:93:c1:bc:ed:3c: 87:0e:6c:60:e0:17:ed:24:f7:19:b4:b8:ba:66:72: 85:3e:ee:f9:29:cc:60:3c:53:7f:cb:94:6a:fe:23: f2:48:b2:02:e6:ad:63:32:d3:79:13:d2:77:96:7c: 5b:f6:e6:cf:53:f7:21:5a:9d:57:5d:74:d4:70:31: 0e:df:89:e0:6a:85:e1:eb:fc:7f:09:68:18:b3:e3: 5c:c9:e9:95:ba:1c:2a:b1:d3:be:4d:28:6c:c8:2e: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:68:12:14:E5:EC:DF:FC:1E:97:B8:3C:62:58:C3:6F:00:6E:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.184.0.0/24 66.85.11.0/24 IPv6: 2620:e5:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394656 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:c6:8c:e0:53:b7:d0:ca:8a:98:57:ae:a1:07:1d:e1:53: 92:90:f1:63:28:c6:13:8c:f3:ba:28:13:50:67:7e:d9:cd:0d: f7:5a:02:84:10:59:f5:0b:8c:30:1d:bf:36:d6:c9:91:c6:f0: ac:e3:a3:d5:d4:de:40:73:7d:0d:6c:2e:48:33:5a:b7:6a:2f: 89:39:54:5c:4a:7b:99:78:dc:a4:38:54:15:ae:75:f5:49:f8: e2:15:e7:1f:65:72:5b:ad:bd:2d:1e:27:33:90:f6:f1:c5:c4: 6f:9a:a8:54:cd:48:aa:4c:7f:0b:bd:0c:98:d2:fe:63:a2:c3: 52:2d:ad:53:97:4d:ec:f7:a0:72:de:7c:82:f6:c2:e7:13:4d: 35:52:4b:a2:27:7d:22:cc:bd:8e:82:3b:4e:8a:24:df:df:4f: 00:3a:97:d8:ad:5f:53:8a:30:bd:1f:16:0b:7d:ee:29:a9:00: c4:5c:ee:8e:23:f8:c7:e2:90:04:63:c0:2c:85:ec:11:d8:bb: 60:aa:d9:e3:71:a4:3f:d6:88:01:14:b8:af:a4:46:c1:ca:3c: c5:9b:2a:7b:92:2a:ca:23:e0:42:c9:c6:a9:02:91:4e:5e:0b: 67:51:99:f5:64:26:4f:df:97:72:66:23:66:cf:4e:61:25:43: 35:20:d9:71 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEmOXnuL7QI2lKT+fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNzEyNDg1OVoXDTI3MDcyMTEyNDg1OVowLzEtMCsGA1UEAxMk NmMxNDFiMTctOGMyZC00MjQwLTllMmEtYWIxYTVlMTlkMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGzfZqa8Dfr4zgOiHcagVv1LxcyMliDySX3N xoGvuAfFP2xRD1xB7OLZ0Cwp9gfeOWolWioW3iI6aU2x3IYRnpFS6/1aUVqYTa1+ eMiwmK7b9noOSF19g+PK8rHirhzgimlzFgE9QXtq1lWrG+xSD/UGG5Uja8SZxRv2 W2SJIY8EwGKMc27xkvSaG/LeFieYSvN98XxhDng6+KcpAq5ck8G87TyHDmxg4Bft JPcZtLi6ZnKFPu75KcxgPFN/y5Rq/iPySLIC5q1jMtN5E9J3lnxb9ubPU/chWp1X XXTUcDEO34ngaoXh6/x/CWgYs+NcyemVuhwqsdO+TShsyC7AXQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFEeOaBIU5ezf/B6XuDxiWMNvAG7MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 YzE0MWIxNy04YzJkLTQyNDAtOWUyYS1hYjFhNWUxOWQwMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZjMTQxYjE3LThjMmQtNDI0MC05 ZTJhLWFiMWE1ZTE5ZDAwNy82YzE0MWIxNy04YzJkLTQyNDAtOWUyYS1hYjFhNWUx OWQwMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXuAADBABCVQswDwQCAAIwCQMHACYgAOXAADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBaAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgUXGjOBTt9DKiphX rqEHHeFTkpDxYyjGE4zzuigTUGd+2c0N91oChBBZ9QuMMB2/NtbJkcbwrOOj1dTe QHN9DWwuSDNat2oviTlUXEp7mXjcpDhUFa519Un44hXnH2VyW629LR4nM5D28cXE b5qoVM1Iqkx/C70MmNL+Y6LDUi2tU5dN7Pegct58gvbC5xNNNVJLoid9Isy9joI7 Took399PADqX2K1fU4owvR8WC33uKakAxFzujiP4x+KQBGPALIXsEdi7YKrZ43Gk P9aIARS4r6RGwco8xZsqe5IqyiPgQsnGqQKRTl4LZ1GZ9WQmT9+XcmYjZs9OYSVD NSDZcQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:03 2025 by rpki-client