$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e96ae7a-d418-4b93-aa2a-c2fc71932fda.cer File: 6e96ae7a-d418-4b93-aa2a-c2fc71932fda.cer (raw, json) Hash identifier: fgCpMcXL7nT8Hv2eSQoVqGdmoZVLDLKuV4L9sujv95w= Subject key identifier: 5A:16:79:BE:A4:79:B8:6C:24:2D:3C:E7:D0:C3:0C:4F:50:38:CE:6E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494E7E01E4DDAE3BFDDEE333C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e96ae7a-d418-4b93-aa2a-c2fc71932fda/6e96ae7a-d418-4b93-aa2a-c2fc71932fda.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e96ae7a-d418-4b93-aa2a-c2fc71932fda/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 15:40:46 +0000 Certificate not after: Mon 28 Jun 2027 15:40:46 +0000 Subordinate resources: AS: 395189 IP: 199.167.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:7e:01:e4:dd:ae:3b:fd:de:e3:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 25 15:40:46 2025 GMT Not After : Jun 28 15:40:46 2027 GMT Subject: CN=6e96ae7a-d418-4b93-aa2a-c2fc71932fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:09:8f:59:fd:a1:cc:2f:57:53:17:77:28: de:ec:4b:47:66:43:ee:b3:aa:b1:17:2b:ac:01:11: 0a:79:99:1e:72:b7:0b:cd:b8:8c:d3:ac:8c:01:f9: 18:6d:40:ec:27:82:61:41:f7:b4:5a:b3:93:29:1b: c5:b3:b7:ea:84:b4:8f:4c:16:fb:10:16:90:53:34: 94:05:ec:9d:2a:11:b8:21:5e:0b:be:7f:da:b0:f7: fd:04:e4:0b:9d:01:ba:6a:03:6f:7e:da:83:6a:81: 0d:f7:d8:34:4b:d5:87:fa:0c:21:bc:43:75:8a:41: e7:72:ab:0b:66:88:04:8d:20:61:65:c1:78:41:4a: 29:36:6b:de:9f:cd:7f:28:de:d4:b1:3e:b3:ac:3e: 09:57:0e:19:76:e8:b9:ef:b0:44:1e:af:c0:85:df: 1d:40:56:4e:dd:27:11:23:79:f1:c4:01:b4:17:3f: de:ae:10:87:2d:fe:5f:0e:be:62:e6:88:84:6e:93: 1e:41:26:14:f4:f2:8c:20:c2:cc:b6:ab:5d:32:11: cf:12:9b:89:1f:dd:3a:05:35:30:a0:6f:71:1c:6f: 9b:b0:7a:4b:93:75:e0:40:e5:7a:53:98:01:03:a2: f0:37:4f:20:85:5e:63:0f:41:86:9d:a2:3e:09:37: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:79:BE:A4:79:B8:6C:24:2D:3C:E7:D0:C3:0C:4F:50:38:CE:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e96ae7a-d418-4b93-aa2a-c2fc71932fda/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e96ae7a-d418-4b93-aa2a-c2fc71932fda/6e96ae7a-d418-4b93-aa2a-c2fc71932fda.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.167.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395189 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d7:da:66:94:e4:ee:9c:01:d4:86:bb:d1:d1:b1:e7:69:31: aa:c9:ac:c7:de:f5:a6:13:1c:89:6b:b9:b7:a6:65:7c:61:65: f5:7e:47:ed:1c:f0:67:c3:52:35:67:99:d5:7d:cf:56:c1:bb: 3d:f2:b0:c4:90:83:2b:00:55:13:63:d2:dd:10:dd:26:ba:2f: e1:e1:9d:28:db:ba:c3:51:77:c4:0e:c0:de:61:61:00:8e:bc: a1:57:ee:bf:15:91:a1:7c:6d:85:33:45:e6:e1:a8:17:e2:58: e8:4d:29:20:b3:e8:f6:08:0b:04:84:71:3f:41:d9:c7:c7:45: c1:eb:7d:83:e0:84:c8:09:d1:94:9f:60:5d:37:92:9a:2c:2a: be:33:ed:2c:d4:56:0d:40:66:c5:2a:3a:1a:f8:49:b2:83:ed: 59:18:04:aa:19:4a:de:d3:53:0b:51:5d:af:83:c0:3a:90:37: cf:4a:82:b7:ca:de:ae:e9:bd:0e:cc:ac:5b:34:81:b9:15:7b: 88:c7:29:cd:47:a1:24:66:87:4f:41:8b:79:18:96:aa:a9:ba: 71:2f:76:ca:9a:b9:ef:db:08:fd:7a:81:82:9f:91:35:0d:52: 66:ca:1a:85:88:78:1a:3b:2a:0d:b6:e7:a7:04:8d:85:4e:93: 09:9c:af:f5 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWElOfgHk3a47/d7jM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNTE1NDA0NloXDTI3MDYyODE1NDA0NlowLzEtMCsGA1UEAxMk NmU5NmFlN2EtZDQxOC00YjkzLWFhMmEtYzJmYzcxOTMyZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthEJj1n9ocwvV1MXdyje7EtHZkPus6qxFyus AREKeZkecrcLzbiM06yMAfkYbUDsJ4JhQfe0WrOTKRvFs7fqhLSPTBb7EBaQUzSU BeydKhG4IV4Lvn/asPf9BOQLnQG6agNvftqDaoEN99g0S9WH+gwhvEN1ikHncqsL ZogEjSBhZcF4QUopNmven81/KN7UsT6zrD4JVw4Zdui577BEHq/Ahd8dQFZO3ScR I3nxxAG0Fz/erhCHLf5fDr5i5oiEbpMeQSYU9PKMIMLMtqtdMhHPEpuJH906BTUw oG9xHG+bsHpLk3XgQOV6U5gBA6LwN08ghV5jD0GGnaI+CTeBwQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFoWeb6kebhsJC0859DDDE9QOM5uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ZTk2YWU3YS1kNDE4LTRiOTMtYWEyYS1jMmZjNzE5MzJmZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZlOTZhZTdhLWQ0MTgtNGI5My1h YTJhLWMyZmM3MTkzMmZkYS82ZTk2YWU3YS1kNDE4LTRiOTMtYWEyYS1jMmZjNzE5 MzJmZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHp/gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bge1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABPX2maU5O6cAdSGu9HRsedpMarJrMfe9aYTHIlrubemZXxh ZfV+R+0c8GfDUjVnmdV9z1bBuz3ysMSQgysAVRNj0t0Q3Sa6L+HhnSjbusNRd8QO wN5hYQCOvKFX7r8VkaF8bYUzRebhqBfiWOhNKSCz6PYICwSEcT9B2cfHRcHrfYPg hMgJ0ZSfYF03kposKr4z7SzUVg1AZsUqOhr4SbKD7VkYBKoZSt7TUwtRXa+DwDqQ N89KgrfK3q7pvQ7MrFs0gbkVe4jHKc1HoSRmh09Bi3kYlqqpunEvdsqaue/bCP16 gYKfkTUNUmbKGoWIeBo7Kg2256cEjYVOkwmcr/U= -----END CERTIFICATE-----Generated at Sun Apr 27 04:25:23 2025 by rpki-client