$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer File: ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer (raw, json) Hash identifier: NiC1WuGDks9kiCm2myxDnA6sViojXDcg9q7E8GI5iHs= Subject key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499CDBB89CBCD5714F94FE89E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 17:22:38 +0000 Certificate not after: Mon 26 Jul 2027 17:22:38 +0000 Subordinate resources: AS: 54223 IP: 192.12.18.0/24 IP: 204.145.210.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:db:b8:9c:bc:d5:71:4f:94:fe:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 22 17:22:38 2025 GMT Not After : Jul 26 17:22:38 2027 GMT Subject: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:ca:0e:d9:91:92:9c:07:9c:76:32:04:a5: 13:c4:c6:0b:81:cb:8c:56:42:d2:43:3a:1f:1f:6a: 23:0c:0f:81:09:fc:23:72:97:53:f3:af:b0:11:30: d2:c0:7f:03:6b:1e:83:6c:49:c7:ee:e9:8a:d9:ca: 53:92:35:5f:23:79:91:3c:83:de:03:90:49:6e:bf: 15:d0:b9:dc:44:17:02:ff:f5:14:68:d5:2e:c1:bf: e1:87:eb:22:40:d0:e1:86:6d:42:16:32:e1:fd:7b: 65:d3:9b:2f:61:dc:f6:a3:e2:a5:0c:2b:ad:54:73: 68:3a:f7:c3:13:5c:61:46:b4:bc:0d:94:65:0c:a6: c9:d7:a6:36:49:3b:be:0a:3c:56:a0:2b:d7:66:94: 52:cd:05:d3:8d:9d:d3:ae:68:84:0c:c6:81:be:5a: 4e:84:d1:6c:a7:40:97:24:fd:62:92:4c:f1:5b:bb: f2:ce:10:ed:d8:65:c4:f5:a2:dc:c6:bc:81:a3:b4: 85:ee:18:78:57:20:e2:64:0d:68:c0:5f:8f:54:70: 23:a1:2a:14:df:c4:69:c6:24:a1:7c:8f:63:3d:3d: b9:da:b0:04:ac:71:a0:b3:03:ab:f7:9d:ef:36:48: 3f:8c:ed:ec:2c:3a:81:6c:d9:07:d9:e9:cc:b0:51: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.12.18.0/24 204.145.210.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54223 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7b:25:44:1c:79:a8:e5:25:d2:ba:27:b2:14:28:62:25:37: 4e:9b:c5:71:25:fa:60:ce:07:c6:67:c1:14:51:93:5c:54:f3: d0:2b:78:a1:b5:18:15:05:41:67:d2:30:88:f9:a4:06:1f:c7: 36:60:29:6f:72:ea:6f:76:df:51:1f:61:97:a2:04:22:4b:56: 25:c1:23:80:ca:d0:58:b5:bd:56:8d:45:4c:17:e3:4f:64:4d: c9:17:75:9c:08:38:64:23:3b:c8:8a:01:50:08:ed:d2:57:9f: 08:b6:f4:d2:01:c8:14:87:f1:73:43:bb:9f:0f:93:4a:c0:f8: 2c:73:6f:d4:11:d1:e1:ec:5c:42:56:d1:e3:6c:d9:6a:7b:08: 80:66:12:c9:4d:c1:e8:70:bd:b6:62:88:3e:f9:a1:8c:c0:e1: ff:30:0d:93:d3:09:f6:47:b6:57:89:43:dc:c8:8e:d8:c0:ee: fb:4b:f8:02:57:c1:ef:09:fb:29:de:a7:e2:30:e3:ca:f9:77: c9:02:73:6c:0c:6e:f5:5d:fa:c8:ed:f6:7a:c6:1d:d1:e8:a3: 55:df:06:ef:2b:1c:1f:64:c0:8d:32:d7:30:15:e6:1c:5b:32: 7b:6f:67:dc:71:15:4a:a3:0d:ea:d4:06:99:6f:9d:74:f8:f2: 57:26:af:a3 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEmc27icvNVxT5T+ieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMjE3MjIzOFoXDTI3MDcyNjE3MjIzOFowLzEtMCsGA1UEAxMk Y2U2NjBiY2MtNWYwNi00MzAyLWJkMDQtNzZhNmFmZjhiNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngnKDtmRkpwHnHYyBKUTxMYLgcuMVkLSQzof H2ojDA+BCfwjcpdT86+wETDSwH8Dax6DbEnH7umK2cpTkjVfI3mRPIPeA5BJbr8V 0LncRBcC//UUaNUuwb/hh+siQNDhhm1CFjLh/Xtl05svYdz2o+KlDCutVHNoOvfD E1xhRrS8DZRlDKbJ16Y2STu+CjxWoCvXZpRSzQXTjZ3TrmiEDMaBvlpOhNFsp0CX JP1ikkzxW7vyzhDt2GXE9aLcxryBo7SF7hh4VyDiZA1owF+PVHAjoSoU38RpxiSh fI9jPT252rAErHGgswOr953vNkg/jO3sLDqBbNkH2enMsFFmUQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNp1e6Rxloz49c0EzD+4GqX+F92YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j ZTY2MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2YWZmOGI0MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NlNjYwYmNjLTVmMDYtNDMwMi1i ZDA0LTc2YTZhZmY4YjQwYy9jZTY2MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2YWZm OGI0MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADADBIDBADMkdIwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANPPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEF7JUQceajlJdK6J7IUKGIlN06bxXEl+mDOB8Zn wRRRk1xU89AreKG1GBUFQWfSMIj5pAYfxzZgKW9y6m9231EfYZeiBCJLViXBI4DK 0Fi1vVaNRUwX409kTckXdZwIOGQjO8iKAVAI7dJXnwi29NIByBSH8XNDu58Pk0rA +Cxzb9QR0eHsXEJW0eNs2Wp7CIBmEslNwehwvbZiiD75oYzA4f8wDZPTCfZHtleJ Q9zIjtjA7vtL+AJXwe8J+ynep+Iw48r5d8kCc2wMbvVd+sjt9nrGHdHoo1XfBu8r HB9kwI0y1zAV5hxbMntvZ9xxFUqjDerUBplvnXT48lcmr6M= -----END CERTIFICATE-----Generated at Mon Apr 28 01:28:26 2025 by rpki-client