$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer File: da61f786-99c2-4468-90f7-0b35abd168e5.cer (raw, json) Hash identifier: c/x4r+wphP9THxIGUIZPRvufIIGdKX8Er/nHqTuth+E= Subject key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A48034CCB8EBBDDAE04CB8A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Jun 2025 00:45:36 +0000 Certificate not after: Sun 26 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 54650 IP: 206.166.208.0/22 IP: 206.188.200.0/23 IP: 209.172.14.0/23 IP: 2604:bb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:03:4c:cb:8e:bb:dd:ae:04:cb:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 23 00:45:36 2025 GMT Not After : Sep 26 00:45:36 2027 GMT Subject: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:b0:da:63:a4:eb:39:67:d1:d6:4e:6a:72: a7:45:c8:64:df:bf:73:b7:72:85:0e:24:6e:58:76: 6f:14:14:de:8c:b9:b9:d4:be:9c:9a:09:e9:7a:d0: 1a:21:04:c9:72:fc:78:87:06:4a:61:b7:9c:8b:cb: a4:b4:58:53:93:e8:bc:2a:e1:41:a6:3c:e5:4a:7b: 48:03:8b:4a:84:5f:e8:d3:e9:31:6c:6a:7b:d9:e5: 33:98:8a:7a:3f:f6:8b:cb:a5:f5:89:18:43:2e:17: c5:57:3c:06:3f:4c:ec:d7:9a:eb:67:9e:ac:c2:9a: 97:9c:b4:36:db:c3:37:77:b9:01:f7:d0:04:30:27: 78:85:4a:29:29:82:fa:d4:28:ac:90:84:59:c0:76: 3d:77:b8:36:69:35:02:c6:d8:e5:bf:0d:26:b7:d1: 9a:0f:40:0d:ba:fb:26:4e:8e:cd:b4:a4:b9:da:35: f2:f3:45:7e:43:f8:f5:cb:40:86:3a:13:e3:4c:10: 5e:bb:30:bd:45:af:33:b7:a5:3f:53:6d:d3:c1:da: 46:90:c7:b7:bc:ff:82:52:42:6e:57:aa:2d:7e:a6: 4a:10:2d:5e:ab:5b:95:0c:4b:f6:d8:11:c7:26:d4: 38:9d:98:7f:be:25:92:2b:4f:32:a3:1d:e9:c3:9d: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 206.166.208.0/22 206.188.200.0/23 209.172.14.0/23 IPv6: 2604:bb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54650 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:48:ba:88:51:85:f2:41:d0:86:f7:9b:1b:48:53:59:6e:fe: 63:ce:e8:40:a7:21:a8:f5:33:c0:dc:f7:17:c0:74:12:b3:3c: 74:cf:00:70:b9:64:b8:00:36:c2:0f:71:a2:26:03:73:5c:89: 29:fa:28:cf:fb:95:c8:79:75:75:aa:b6:13:1b:8f:ee:ab:61: 96:c9:9b:96:69:28:eb:4c:c1:d6:63:d0:dd:91:db:73:e4:04: e2:c5:70:c2:60:b9:0d:0e:04:87:2f:b4:f2:9f:93:88:35:57: 3f:14:bc:39:62:26:b3:55:da:d7:b0:ec:72:e0:29:e4:cb:fc: 9d:e9:df:a1:06:9a:f0:19:c3:74:b8:d0:99:79:8f:ea:4e:a1: 94:57:21:b7:26:d9:82:a2:0b:ba:70:b9:e4:eb:75:98:28:ec: ba:ea:e2:ab:85:65:a1:97:c4:cb:f7:c2:08:60:c7:00:eb:73: 52:43:f4:97:ac:59:6d:d6:83:07:d1:0b:46:49:0a:25:a1:a7: f9:f6:4d:a6:c8:65:a0:f2:1d:8f:bb:63:35:ee:a4:18:60:85: 83:a4:08:6d:1b:53:9d:9f:47:40:06:7e:d5:c7:2f:6a:7b:fe: 34:1a:79:4d:86:e4:2f:0f:fd:1b:49:7f:e3:1c:db:df:b8:e4: b9:29:50:38 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEpIA0zLjrvdrgTLigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYyMzAwNDUzNloXDTI3MDkyNjAwNDUzNlowLzEtMCsGA1UEAxMk ZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc6w2mOk6zln0dZOanKnRchk379zt3KFDiRu WHZvFBTejLm51L6cmgnpetAaIQTJcvx4hwZKYbeci8uktFhTk+i8KuFBpjzlSntI A4tKhF/o0+kxbGp72eUzmIp6P/aLy6X1iRhDLhfFVzwGP0zs15rrZ56swpqXnLQ2 28M3d7kB99AEMCd4hUopKYL61CiskIRZwHY9d7g2aTUCxtjlvw0mt9GaD0ANuvsm To7NtKS52jXy80V+Q/j1y0CGOhPjTBBeuzC9Ra8zt6U/U23TwdpGkMe3vP+CUkJu V6otfqZKEC1eq1uVDEv22BHHJtQ4nZh/viWSK08yox3pw51lsQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJuyVt2OjOQTAh+suk3rwFKi5QVZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k YTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2RhNjFmNzg2LTk5YzItNDQ2OC05 MGY3LTBiMzVhYmQxNjhlNS9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJk MTY4ZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBALOptADBAHOvMgDBAHRrA4wDQQCAAIwBwMFACYE u0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANV6MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADBIuohRhfJB 0Ib3mxtIU1lu/mPO6ECnIaj1M8Dc9xfAdBKzPHTPAHC5ZLgANsIPcaImA3NciSn6 KM/7lch5dXWqthMbj+6rYZbJm5ZpKOtMwdZj0N2R23PkBOLFcMJguQ0OBIcvtPKf k4g1Vz8UvDliJrNV2tew7HLgKeTL/J3p36EGmvAZw3S40Jl5j+pOoZRXIbcm2YKi C7pwueTrdZgo7Lrq4quFZaGXxMv3wghgxwDrc1JD9JesWW3WgwfRC0ZJCiWhp/n2 TabIZaDyHY+7YzXupBhghYOkCG0bU52fR0AGftXHL2p7/jQaeU2G5C8P/RtJf+Mc 29+45LkpUDg= -----END CERTIFICATE-----Generated at Wed Jul 2 07:29:37 2025 by rpki-client