$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer File: ab8eafa4-f71f-4bae-9825-e56948a2f523.cer (raw, json) Hash identifier: pn/4q/GkwEeWsPBNHvm4RoZ3hq04LH49epBxK1rwF98= Subject key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858489F2126003B4E9FC2E34EE7A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jan 2025 20:07:12 +0000 Certificate not after: Mon 26 Apr 2027 19:07:12 +0000 Subordinate resources: AS: 2615 IP: 147.1.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:21:26:00:3b:4e:9f:c2:e3:4e:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 21 20:07:12 2025 GMT Not After : Apr 26 19:07:12 2027 GMT Subject: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:77:25:88:f1:e4:39:2b:36:9e:82:74:ea: d6:79:4c:2a:7f:21:3a:23:ed:62:36:1c:da:6f:85: 8d:ef:a6:8b:7c:9a:c1:76:4d:d5:e3:3a:80:8e:3e: b5:77:cc:f4:fc:f8:d4:6a:cc:23:b7:75:c8:a8:95: ec:4a:83:1a:83:d9:5c:4d:3c:61:bc:89:1f:6e:b0: b1:18:70:99:86:e0:46:37:7d:e0:73:a4:5e:c2:89: 7c:a0:85:03:a5:52:43:c3:6d:86:da:6e:d3:93:78: b6:f6:18:d6:8d:ff:a8:b6:8c:09:44:e6:be:9c:4a: ac:ac:c9:b4:06:c2:9f:01:64:ba:de:a2:4c:b3:14: e5:05:83:ed:4b:85:42:8d:a1:0a:5d:e3:32:b3:ff: 5f:4f:ed:c4:ae:e4:8b:2f:b8:aa:4c:ce:24:93:56: 28:bd:ea:3a:e9:dd:fa:4e:78:8b:c5:b4:f7:54:14: 24:0c:f7:b5:fa:12:23:5d:62:0b:fd:32:57:6e:24: 80:b0:6c:03:cf:9c:92:f2:70:e0:99:4c:f0:1a:85: 57:ca:c9:de:ef:0f:24:10:98:47:6e:45:ec:ae:be: 22:62:70:60:48:9c:c1:2f:5f:e0:43:44:52:14:de: de:c4:43:ff:ec:80:08:f8:83:c5:e8:cb:af:d6:11: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 147.1.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2615 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5c:10:62:fc:69:9a:08:69:7e:b1:a7:42:b7:7b:d1:af:40: 3d:e9:99:e0:53:08:7e:db:63:70:ab:be:1a:2f:0f:7f:a5:3e: 63:95:10:98:5d:31:34:d9:c4:d7:74:8e:e2:a1:e0:b6:0d:8b: 91:6a:af:0d:7d:b0:4c:f9:61:d6:12:4f:45:76:ec:2f:e4:d5: d3:16:45:e5:12:57:94:57:33:48:83:6e:60:72:c1:fa:49:bf: c1:47:58:a4:5a:03:4e:84:a9:9a:ba:55:61:ab:cf:98:f4:9e: 59:c5:30:c9:3c:d3:da:fb:3d:43:5e:b0:5b:ae:1c:32:fc:0d: 8a:d8:05:f7:29:48:d5:b6:39:ee:c8:93:1e:40:66:28:93:7c: 52:76:31:ed:b8:93:46:f3:9d:af:d0:df:a6:12:7d:93:ad:de: 75:75:f1:07:64:0e:f3:3d:97:83:e4:6b:4e:bf:59:82:ec:62: 0d:6c:39:5a:58:03:78:29:32:a0:4f:61:dd:5c:ad:78:b1:ee: 65:0d:f9:cb:f5:95:19:3a:d9:35:8e:13:24:db:12:ec:78:1c: e3:1c:34:e9:dc:64:56:25:39:25:10:7e:12:ac:75:9d:3c:7f: d9:07:93:76:8f:26:52:d6:25:0e:b9:7a:f2:31:84:8d:19:63: 39:87:e1:ba -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEifISYAO06fwuNO56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMTIwMDcxMloXDTI3MDQyNjE5MDcxMlowLzEtMCsGA1UEAxMk YWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJmNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrl3JYjx5DkrNp6CdOrWeUwqfyE6I+1iNhza b4WN76aLfJrBdk3V4zqAjj61d8z0/PjUaswjt3XIqJXsSoMag9lcTTxhvIkfbrCx GHCZhuBGN33gc6Rewol8oIUDpVJDw22G2m7Tk3i29hjWjf+otowJROa+nEqsrMm0 BsKfAWS63qJMsxTlBYPtS4VCjaEKXeMys/9fT+3EruSLL7iqTM4kk1Yoveo66d36 TniLxbT3VBQkDPe1+hIjXWIL/TJXbiSAsGwDz5yS8nDgmUzwGoVXysne7w8kEJhH bkXsrr4iYnBgSJzBL1/gQ0RSFN7exEP/7IAI+IPF6Muv1hHJwQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFLc/LvGrLFLNQSk2zs1ktXl67xHgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h YjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FiOGVhZmE0LWY3MWYtNGJhZS05 ODI1LWU1Njk0OGEyZjUyMy9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhh MmY1MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCTATAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIK NzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQARXBBi/GmaCGl+sadCt3vRr0A96ZngUwh+22Nwq74aLw9/pT5j lRCYXTE02cTXdI7ioeC2DYuRaq8NfbBM+WHWEk9Fduwv5NXTFkXlEleUVzNIg25g csH6Sb/BR1ikWgNOhKmaulVhq8+Y9J5ZxTDJPNPa+z1DXrBbrhwy/A2K2AX3KUjV tjnuyJMeQGYok3xSdjHtuJNG852v0N+mEn2Trd51dfEHZA7zPZeD5GtOv1mC7GIN bDlaWAN4KTKgT2HdXK14se5lDfnL9ZUZOtk1jhMk2xLseBzjHDTp3GRWJTklEH4S rHWdPH/ZB5N2jyZS1iUOuXryMYSNGWM5h+G6 -----END CERTIFICATE-----Generated at Sun Jun 15 04:53:18 2025 by rpki-client