$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer File: fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer (raw, json) Hash identifier: IV96RtsU8nCZ1cMJis7y+1l3GwT2otUPf9q2yovkf/M= Subject key identifier: 11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496201738A656185BFC37733D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 15:25:58 +0000 Certificate not after: Mon 05 Jul 2027 15:25:58 +0000 Subordinate resources: AS: 54760 IP: 199.124.3.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:01:73:8a:65:61:85:bf:c3:77:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 1 15:25:58 2025 GMT Not After : Jul 5 15:25:58 2027 GMT Subject: CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:81:e2:b0:83:32:06:e8:67:b0:7c:de:90: cc:cf:ab:63:ed:bc:81:ae:be:5a:2d:53:a2:6a:27: 38:29:eb:ce:3b:99:52:f2:24:8d:4a:39:e7:84:fa: 6e:c9:a0:3a:1c:5e:6c:fe:5b:15:aa:bd:b4:15:a9: fa:c4:bb:1f:d6:c1:55:fd:1d:b6:2d:0e:b1:56:e7: 1c:0e:a8:59:26:78:ef:e7:12:77:19:fa:96:49:c6: 2a:09:68:ef:7a:45:56:55:69:a0:87:35:1e:60:29: ca:9d:af:c2:e9:d8:a4:05:1e:aa:99:de:7c:e2:8c: 33:e2:47:37:d1:b7:81:a5:91:dc:6c:46:f4:35:cb: 0b:6a:40:e1:18:e3:c2:f4:88:75:e4:5e:d6:52:f6: d8:6d:86:bb:a3:13:50:a4:a5:5c:67:84:21:29:1e: 63:95:6d:a6:57:8e:c6:9d:9b:3b:e9:2d:fc:8d:b7: 49:c8:a5:38:66:b8:4e:30:2b:c5:ad:81:bb:96:e1: cf:25:8e:0c:c0:9f:e2:1b:93:c7:dd:07:92:92:5e: e2:a5:d5:67:ca:00:d0:e3:79:9d:1b:a3:6e:1f:10: 5f:cc:fb:7e:5b:fa:b0:94:c7:41:dd:f8:8b:75:30: 19:26:e0:67:00:45:1d:15:42:d0:cd:75:33:8c:58: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.124.3.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ea:97:58:fb:7b:96:85:c6:49:4b:08:ee:ec:47:19:65:7a: 5d:25:7e:70:ec:33:eb:2a:2c:c7:a2:fa:12:d2:84:e7:b1:da: 4b:a4:6d:eb:9c:2d:58:03:5e:30:41:25:3a:f6:05:13:d5:a4: 53:d3:76:fb:ac:9c:34:7a:59:97:32:ba:c5:62:a9:5c:af:ef: 91:cb:54:1d:da:f6:e1:5f:5d:b8:a7:29:c4:15:1e:9f:e6:c5: 5f:dd:79:50:2f:fc:36:6a:03:64:c5:4a:cd:05:a8:45:84:2a: c1:5d:87:e0:4e:18:81:ca:de:a7:2f:8f:b7:48:67:b9:6d:89: 66:a9:d9:b6:a3:af:80:8b:97:8f:a9:c8:ce:64:52:69:61:01: e1:3d:19:05:14:ce:d5:cb:c6:79:f1:bf:41:e8:31:1b:a3:e3: 7f:1d:cd:ba:de:d2:d2:a9:e7:12:d4:6c:ec:eb:90:f2:b7:99: 78:00:93:d8:fc:e2:f4:da:56:7e:76:d8:14:c2:31:a6:24:70: 62:f7:ae:fc:4c:16:e5:0a:a2:6a:39:4a:20:7c:33:46:1a:3b: e9:db:b4:1d:8f:6c:fe:19:2b:93:a2:99:cf:e4:a0:2d:c3:b4: 28:4a:64:3a:fe:64:c3:9b:70:49:57:0e:19:5d:ac:31:b0:a8: 60:fd:38:30 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEliAXOKZWGFv8N3M9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwMTE1MjU1OFoXDTI3MDcwNTE1MjU1OFowLzEtMCsGA1UEAxMk ZmQ4MmQ2YWMtM2E4Ny00ZTg4LWFjODQtZTJkYTY3NDVkNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0biB4rCDMgboZ7B83pDMz6tj7byBrr5aLVOi aic4KevOO5lS8iSNSjnnhPpuyaA6HF5s/lsVqr20Fan6xLsf1sFV/R22LQ6xVucc DqhZJnjv5xJ3GfqWScYqCWjvekVWVWmghzUeYCnKna/C6dikBR6qmd584owz4kc3 0beBpZHcbEb0NcsLakDhGOPC9Ih15F7WUvbYbYa7oxNQpKVcZ4QhKR5jlW2mV47G nZs76S38jbdJyKU4ZrhOMCvFrYG7luHPJY4MwJ/iG5PH3QeSkl7ipdVnygDQ43md G6NuHxBfzPt+W/qwlMdB3fiLdTAZJuBnAEUdFULQzXUzjFihkwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBGditB01Qyhm06WuIZPswww2oBmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m ZDgyZDZhYy0zYTg3LTRlODgtYWM4NC1lMmRhNjc0NWQ1M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZkODJkNmFjLTNhODctNGU4OC1h Yzg0LWUyZGE2NzQ1ZDUzZC9mZDgyZDZhYy0zYTg3LTRlODgtYWM4NC1lMmRhNjc0 NWQ1M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHfAMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANXoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEXql1j7e5aFxklLCO7sRxllel0lfnDsM+sqLMei+hLShOex 2kukbeucLVgDXjBBJTr2BRPVpFPTdvusnDR6WZcyusViqVyv75HLVB3a9uFfXbin KcQVHp/mxV/deVAv/DZqA2TFSs0FqEWEKsFdh+BOGIHK3qcvj7dIZ7ltiWap2baj r4CLl4+pyM5kUmlhAeE9GQUUztXLxnnxv0HoMRuj438dzbre0tKp5xLUbOzrkPK3 mXgAk9j84vTaVn522BTCMaYkcGL3rvxMFuUKomo5SiB8M0YaO+nbtB2PbP4ZK5Oi mc/koC3DtChKZDr+ZMObcElXDhldrDGwqGD9ODA= -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:58 2025 by rpki-client