$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer File: 8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer (raw, json) Hash identifier: NZlOQOi4ElktOCJOT/sRJ5kLADVS5xv8qjhkwUpTjY4= Subject key identifier: 0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584990F64D05C14340DDBECCE600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 11:06:30 +0000 Certificate not after: Sat 17 Jul 2027 06:23:02 +0000 Subordinate resources: AS: 63046 IP: 209.135.180.0/22 IP: 2602:f677::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:90:f6:4d:05:c1:43:40:dd:be:cc:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 11:06:30 2025 GMT Not After : Jul 17 06:23:02 2027 GMT Subject: CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:29:6c:cf:54:f7:2a:99:4e:53:b9:fd:7b: 56:ac:f9:a8:6b:2d:d3:65:59:d7:24:76:43:de:d7: 6f:0e:3e:c1:03:67:cc:06:30:68:7c:78:be:c6:86: 25:63:8c:9c:6b:52:be:5f:c0:af:de:8b:ac:f9:23: 89:e7:78:3e:41:9f:e0:25:5a:62:5a:28:42:bf:65: 61:81:16:cc:b1:e0:12:18:c0:9f:1a:89:d2:c5:a9: ff:ad:fc:70:33:f0:45:75:c2:14:9a:d4:62:52:35: 79:dc:f5:53:09:93:a4:a0:11:36:78:0e:26:6b:90: 90:41:f3:35:0d:d5:36:be:df:81:9f:d5:d5:04:3b: dd:aa:d0:1d:5a:0d:d5:bc:e4:0e:2a:70:33:ca:81: b4:67:25:6f:22:9d:eb:9b:35:3d:8f:98:a1:7d:67: d4:93:66:7f:8a:93:d2:a9:50:9d:90:51:d5:59:e2: 2e:ef:20:f6:0a:64:19:96:2a:0a:76:67:ff:53:03: d5:1e:2d:a3:32:08:81:58:d8:5e:aa:72:da:89:46: c9:82:94:fd:ad:ce:4a:e2:fe:10:e3:72:87:ed:67: a6:b8:db:26:eb:79:ce:99:ac:2d:72:c5:a9:d2:ea: c9:5f:5a:16:03:90:7f:45:82:76:8f:df:ea:c8:79: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 209.135.180.0/22 IPv6: 2602:f677::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63046 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7e:fd:5f:90:9c:16:f5:11:79:0a:0c:b8:73:e2:7b:8d:fe: 61:35:55:8c:b5:b8:91:ee:b2:1a:6a:ea:35:2b:b6:65:8d:fd: c2:d2:f2:8c:43:79:96:05:7a:e6:80:e0:a4:e7:3b:9d:5e:cd: 7e:71:16:9c:e3:99:93:50:59:b3:b0:13:36:59:3a:16:15:88: 43:ce:a2:51:7d:e8:5e:16:65:02:4c:15:b6:64:74:9e:74:1b: f6:73:e2:44:47:c3:ed:fd:05:8b:bb:32:db:3c:94:69:82:51: 0e:bc:f1:43:08:d1:ec:a5:23:93:b8:89:df:49:09:59:56:84: 76:6a:0f:0f:e4:20:95:a3:95:2a:f2:6c:5a:5c:a7:dd:02:fb: 3f:30:c0:49:e2:b4:9b:de:e6:06:29:46:f3:6d:df:ad:ec:ef: 99:0b:7a:dc:ee:01:eb:08:33:9e:82:41:2f:a3:41:df:de:da: 42:c7:18:ea:54:0c:f2:a3:c8:e0:bb:01:0e:a6:00:5e:ca:73: af:75:40:2f:9d:ca:0a:1e:1c:a1:d3:74:22:b9:a2:0a:49:d5: 99:bb:12:21:29:10:f5:bf:4f:ae:45:00:71:e3:04:a5:94:9e: e8:b3:e5:4d:59:12:74:1e:00:ea:ae:43:74:ec:56:95:41:b1: 0b:0c:e7:50 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmQ9k0FwUNA3b7M5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODExMDYzMFoXDTI3MDcxNzA2MjMwMlowLzEtMCsGA1UEAxMk OGVhZGZmZWEtN2FlMy00NmE1LWFmYjYtM2FlZTMxOTBhNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqscpbM9U9yqZTlO5/XtWrPmoay3TZVnXJHZD 3tdvDj7BA2fMBjBofHi+xoYlY4yca1K+X8Cv3ous+SOJ53g+QZ/gJVpiWihCv2Vh gRbMseASGMCfGonSxan/rfxwM/BFdcIUmtRiUjV53PVTCZOkoBE2eA4ma5CQQfM1 DdU2vt+Bn9XVBDvdqtAdWg3VvOQOKnAzyoG0ZyVvIp3rmzU9j5ihfWfUk2Z/ipPS qVCdkFHVWeIu7yD2CmQZlioKdmf/UwPVHi2jMgiBWNheqnLaiUbJgpT9rc5K4v4Q 43KH7WemuNsm63nOmawtcsWp0urJX1oWA5B/RYJ2j9/qyHnbAQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA77Chv5b2/13Xp3mClAUWPB6QmhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 ZWFkZmZlYS03YWUzLTQ2YTUtYWZiNi0zYWVlMzE5MGE3NmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzhlYWRmZmVhLTdhZTMtNDZhNS1h ZmI2LTNhZWUzMTkwYTc2ZC84ZWFkZmZlYS03YWUzLTQ2YTUtYWZiNi0zYWVlMzE5 MGE3NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALRh7QwDgQCAAIwCAMGBCYC9ncAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD2RjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATfv1fkJwW9RF5Cgy4c+J7jf5h NVWMtbiR7rIaauo1K7Zljf3C0vKMQ3mWBXrmgOCk5zudXs1+cRac45mTUFmzsBM2 WToWFYhDzqJRfeheFmUCTBW2ZHSedBv2c+JER8Pt/QWLuzLbPJRpglEOvPFDCNHs pSOTuInfSQlZVoR2ag8P5CCVo5Uq8mxaXKfdAvs/MMBJ4rSb3uYGKUbzbd+t7O+Z C3rc7gHrCDOegkEvo0Hf3tpCxxjqVAzyo8jguwEOpgBeynOvdUAvncoKHhyh03Qi uaIKSdWZuxIhKRD1v0+uRQBx4wSllJ7os+VNWRJ0HgDqrkN07FaVQbELDOdQ -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:47 2025 by rpki-client