$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer File: 1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer (raw, json) Hash identifier: sQw1xSWlbW++qrTackAZpI7cvWvTe+speJhyjGk1qUs= Subject key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A5E084BD64554E8B9A75F7E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Jun 2025 22:03:28 +0000 Certificate not after: Fri 10 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 15.195.0.0/16 IP: 15.208.0.0/16 IP: 98.143.64.0/20 IP: 104.254.8.0/22 IP: 216.8.128.0/18 IP: 216.174.64.0/18 IP: 216.252.208.0/22 IP: 2600:dc00::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:08:4b:d6:45:54:e8:b9:a7:5f:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 30 22:03:28 2025 GMT Not After : Sep 10 00:45:36 2027 GMT Subject: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:91:ac:e2:08:9e:0c:9f:e7:13:77:f1:df: 0d:5d:7d:17:68:d6:cd:62:c9:c5:11:59:45:e2:9c: f5:a5:89:41:54:5d:dd:a5:73:18:1a:f9:d5:3d:0f: 6b:fa:40:ea:b8:c9:97:f8:53:bd:d1:03:3c:64:4f: af:c0:69:b0:1e:c6:62:da:bb:f6:6c:b9:75:cd:71: 58:80:c2:96:2c:3f:ba:56:ea:51:c8:71:92:9d:47: 99:c2:25:e5:b4:de:64:86:14:b4:a2:32:99:e7:bc: c1:ae:72:a4:e9:75:6e:ec:4a:da:eb:c0:16:67:cc: e7:6d:5d:0e:0b:74:ff:3a:ca:bb:b7:69:1c:b8:b0: 19:4e:da:11:36:0c:4e:0a:46:03:d5:19:ef:3f:18: de:46:f1:bb:d3:e9:f5:22:ea:fd:58:0d:54:f5:65: 69:28:93:38:ca:d2:e0:70:95:73:e6:f6:bb:1f:04: 47:c0:bd:ec:06:8d:21:3b:6d:2e:44:ff:29:33:fa: 58:5b:a3:de:ce:2c:c3:1b:bf:e3:36:67:d0:37:d5: 24:67:f1:8d:85:93:26:ab:80:ef:54:11:87:bc:34: d1:85:7f:8c:9a:09:13:51:2e:27:80:6b:03:27:d4: 36:b9:d6:66:3c:a2:31:22:58:96:4f:71:48:43:64: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 15.195.0.0/16 15.208.0.0/16 98.143.64.0/20 104.254.8.0/22 216.8.128.0/18 216.174.64.0/18 216.252.208.0/22 IPv6: 2600:dc00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0c:ba:ac:86:91:a8:18:26:08:d6:58:81:b2:6e:8f:b9:dc: e0:86:b8:31:de:04:59:22:fa:81:66:65:e5:5a:c0:f6:a1:8c: bf:bb:af:de:3e:91:62:36:d5:05:8a:30:7a:05:a4:83:ff:23: 67:ae:d3:7b:ff:b4:53:b4:99:eb:ae:97:2c:8f:8b:b5:ca:06: dd:82:4c:cf:41:3e:71:2b:71:f1:bc:81:bf:28:8f:5a:69:d2: b6:7b:25:cc:ca:36:a7:6a:ac:e2:05:c3:7a:04:66:44:42:4a: c3:07:20:1b:14:21:ba:3c:c6:7a:0b:58:ef:6e:4a:7e:f9:95: 05:f7:5f:fc:6d:d9:ae:96:68:8a:75:f1:16:0c:61:ea:a0:c0: f7:7a:7b:d2:12:c1:a2:06:b1:8d:4e:90:99:b1:c5:c0:c2:11: 4e:7a:27:3f:30:49:5d:89:e9:a7:2e:d1:a1:ea:b6:24:92:76: 2b:16:24:02:6b:1d:12:a7:d6:7c:69:36:28:12:8c:ac:f9:db: ff:86:1f:73:32:24:08:5c:e1:36:f6:b1:aa:21:31:b9:0a:5e: 32:7e:09:34:92:63:41:b3:b5:2e:ab:ea:d9:10:4a:45:5c:46: f6:4c:3b:38:35:76:b7:41:3d:11:e3:8d:8c:9a:b8:d0:1e:3d: 6b:26:51:a4 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEpeCEvWRVTouadffgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYzMDIyMDMyOFoXDTI3MDkxMDAwNDUzNlowLzEtMCsGA1UEAxMk MWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIzOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmKRrOIIngyf5xN38d8NXX0XaNbNYsnFEVlF 4pz1pYlBVF3dpXMYGvnVPQ9r+kDquMmX+FO90QM8ZE+vwGmwHsZi2rv2bLl1zXFY gMKWLD+6VupRyHGSnUeZwiXltN5khhS0ojKZ57zBrnKk6XVu7Era68AWZ8znbV0O C3T/Osq7t2kcuLAZTtoRNgxOCkYD1RnvPxjeRvG70+n1Iur9WA1U9WVpKJM4ytLg cJVz5va7HwRHwL3sBo0hO20uRP8pM/pYW6PezizDG7/jNmfQN9UkZ/GNhZMmq4Dv VBGHvDTRhX+MmgkTUS4ngGsDJ9Q2udZmPKIxIliWT3FIQ2RU0wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFE9oRgjswPw1nF1NcXfrydDKgRtUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x ZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFlN2JjMjhkLTM3ZTQtNGM3Ni04 NGQ0LTg0MzFkYzkyMzljOC8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5 MjM5YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MC4EAgABMCgDAwAPwwMDAA/QAwQEYo9AAwQCaP4IAwQG2AiAAwQG 2K5AAwQC2PzQMA0EAgACMAcDBQQmANwAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKAMuqyGkagYJgjWWIGy bo+53OCGuDHeBFki+oFmZeVawPahjL+7r94+kWI21QWKMHoFpIP/I2eu03v/tFO0 meuulyyPi7XKBt2CTM9BPnErcfG8gb8oj1pp0rZ7JczKNqdqrOIFw3oEZkRCSsMH IBsUIbo8xnoLWO9uSn75lQX3X/xt2a6WaIp18RYMYeqgwPd6e9ISwaIGsY1OkJmx xcDCEU56Jz8wSV2J6acu0aHqtiSSdisWJAJrHRKn1nxpNigSjKz52/+GH3MyJAhc 4Tb2saohMbkKXjJ+CTSSY0GztS6r6tkQSkVcRvZMOzg1drdBPRHjjYyauNAePWsm UaQ= -----END CERTIFICATE-----Generated at Tue Jul 1 06:59:07 2025 by rpki-client