$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer File: dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer (raw, json) Hash identifier: Ri+TG3GIPXaVCRUn4Un8y4yQlJYDUvU96hgnNd2xvrE= Subject key identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A3CD88EBD9A3F90C3EEF95000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Jun 2025 00:45:35 +0000 Certificate not after: Wed 22 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 2701 IP: 129.130.0.0/16 IP: 192.31.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:d8:8e:bd:9a:3f:90:c3:ee:f9:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 19 00:45:35 2025 GMT Not After : Sep 22 00:45:35 2027 GMT Subject: CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:8c:38:23:9c:fb:23:25:75:63:e5:f4:3d: 3c:5e:79:67:8a:6d:08:da:3d:aa:8c:3f:c2:b6:16: 31:61:17:08:78:f7:8f:a9:8e:e2:47:e6:de:0c:13: 07:35:06:29:d3:7b:ea:96:71:67:9f:e2:48:71:13: 73:03:12:9d:71:52:f5:ea:83:f9:9c:1f:a0:ac:52: ec:6d:a7:4a:28:00:a6:92:56:fd:b0:aa:3b:c9:2b: ba:be:8c:c7:b1:9b:4b:3c:25:08:c6:ed:bf:9c:a9: 4b:86:99:55:b1:c7:93:d5:62:ac:4d:af:cc:46:17: 41:f3:76:9d:f2:2b:06:38:ae:bc:10:1c:c7:74:e3: 2c:27:d3:2c:d0:ea:3b:ea:fe:de:12:c5:53:5d:8b: 43:90:3a:5e:8b:67:1e:91:7f:b7:2f:e7:b0:75:61: 45:bc:ad:98:60:34:44:3d:e4:9c:73:ec:13:bd:91: 5a:5d:96:57:6e:73:bd:b7:50:2d:77:85:9c:09:eb: a8:1a:22:bf:21:9b:21:f8:8e:86:53:35:5c:15:34: bc:7a:05:12:a2:75:44:ec:2f:ff:94:8a:4e:ef:05: 8c:d5:fe:40:d9:b6:b8:fa:43:49:be:ba:7a:0f:ca: bc:48:e8:a5:97:91:ac:fd:79:ac:2d:24:d0:2c:65: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 129.130.0.0/16 192.31.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1c:b7:08:86:ac:57:33:a2:33:fe:d0:06:26:bb:10:27:68: 89:9b:07:be:8f:6d:59:75:d0:da:99:dd:67:93:8f:7b:68:88: 68:34:6a:1b:11:00:3f:af:8a:b7:54:1c:3b:70:eb:f3:ca:a5: 6f:79:e3:2b:ac:76:c8:5e:bc:02:4a:8e:b3:3f:18:44:09:13: f9:58:e0:63:c3:5d:a5:ee:91:8b:ab:38:8a:07:df:30:fb:ed: 0a:e6:08:a0:83:5d:9e:dd:08:10:bf:a3:3a:ee:48:5f:89:3e: 3f:45:67:45:df:b3:24:89:3a:82:13:da:f4:ba:02:d3:a7:ce: 3b:a4:4b:c7:21:7b:74:4b:3e:40:1f:5d:06:d0:94:81:17:18: 2e:12:74:22:28:f6:5b:2c:ca:6c:fc:81:68:27:69:59:66:d7: b1:58:52:59:d0:2d:7b:98:ea:69:1e:d8:7c:47:e2:d3:ae:a7: b9:e8:2a:6c:a7:55:66:0b:06:d4:f2:e2:11:ed:fd:74:43:9a: 2d:f6:5c:83:4b:6c:9e:da:3b:f5:ce:e4:c2:9c:f6:b7:34:d3: 7c:e1:7c:dc:e6:47:82:3e:d3:7c:0a:ad:24:80:6d:c7:32:89: d0:dc:e5:30:c2:ef:3a:04:41:71:07:d3:06:0d:8c:7a:74:af: 36:f7:3f:7a -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEo82I69mj+Qw+75UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYxOTAwNDUzNVoXDTI3MDkyMjAwNDUzNVowLzEtMCsGA1UEAxMk ZGM0Y2M2YzgtNDdhYS00YjBlLWIwYjAtMDQ0MDBmN2Y5OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGMOCOc+yMldWPl9D08Xnlnim0I2j2qjD/C thYxYRcIePePqY7iR+beDBMHNQYp03vqlnFnn+JIcRNzAxKdcVL16oP5nB+grFLs badKKACmklb9sKo7ySu6vozHsZtLPCUIxu2/nKlLhplVsceT1WKsTa/MRhdB83ad 8isGOK68EBzHdOMsJ9Ms0Oo76v7eEsVTXYtDkDpei2cekX+3L+ewdWFFvK2YYDRE PeScc+wTvZFaXZZXbnO9t1Atd4WcCeuoGiK/IZsh+I6GUzVcFTS8egUSonVE7C// lIpO7wWM1f5A2ba4+kNJvrp6D8q8SOill5Gs/XmsLSTQLGUB+wIDAQABo4IEHzCC BBswHQYDVR0OBBYEFGxV0aQye5bTZ+5cTYnW0jycdieeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k YzRjYzZjOC00N2FhLTRiMGUtYjBiMC0wNDQwMGY3Zjk5YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2RjNGNjNmM4LTQ3YWEtNGIwZS1i MGIwLTA0NDAwZjdmOTliMC9kYzRjYzZjOC00N2FhLTRiMGUtYjBiMC0wNDQwMGY3 Zjk5YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCBggMEAMAfYTAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIKjTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBnHLcIhqxXM6Iz/tAGJrsQJ2iJmwe+j21ZddDamd1n k497aIhoNGobEQA/r4q3VBw7cOvzyqVveeMrrHbIXrwCSo6zPxhECRP5WOBjw12l 7pGLqziKB98w++0K5gigg12e3QgQv6M67khfiT4/RWdF37MkiTqCE9r0ugLTp847 pEvHIXt0Sz5AH10G0JSBFxguEnQiKPZbLMps/IFoJ2lZZtexWFJZ0C17mOppHth8 R+LTrqe56Cpsp1VmCwbU8uIR7f10Q5ot9lyDS2ye2jv1zuTCnPa3NNN84Xzc5keC PtN8Cq0kgG3HMonQ3OUwwu86BEFxB9MGDYx6dK829z96 -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:36 2025 by rpki-client