$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer File: 34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer (raw, json) Hash identifier: YIO4aPsf8ajruX4sXgJwkLIGAQbAY3AjokYAynjfiBc= Subject key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A55F8B8AE5A21591B7AD48200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Jun 2025 00:45:37 +0000 Certificate not after: Fri 01 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 55079 IP: 162.208.108.0/22 IP: 2604:ab80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:55:f8:b8:ae:5a:21:59:1b:7a:d4:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 28 00:45:37 2025 GMT Not After : Oct 1 00:45:37 2027 GMT Subject: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:b3:43:84:32:7d:57:87:97:a3:e5:63:e2: 4f:f8:f3:77:82:88:98:f5:7f:66:18:c7:1c:ba:15: b3:05:0a:3b:a9:f5:b2:6a:a2:10:60:19:fb:84:b8: 76:36:23:da:54:2b:0b:a6:db:19:30:b9:9e:8f:b0: 67:40:ca:8a:ad:c2:2e:b4:de:25:b7:7a:37:8f:2a: 43:2b:9a:9a:01:15:20:22:7f:fc:b6:76:22:8b:09: 95:4c:8b:4e:87:5e:52:1b:a9:8f:02:e2:ac:76:94: a8:dd:c3:93:af:33:53:d8:e9:4e:76:e2:0e:df:4e: 65:53:c2:21:a2:14:a0:6f:79:27:9d:44:97:e9:ce: bd:54:83:7d:5c:d1:22:94:25:1f:e3:bf:db:da:2f: 25:50:32:fc:34:64:dd:aa:67:2c:73:90:39:95:6d: 96:21:b9:f2:30:23:75:1a:5a:f1:94:38:ec:c5:9f: 61:0f:4e:d4:9e:7b:5d:07:1a:c1:df:93:cb:0f:c8: e5:22:95:42:04:e8:b6:f7:1a:03:2f:cc:8a:c8:71: d2:75:30:f9:42:cd:de:66:6c:b3:2b:70:83:17:0c: c2:45:19:44:93:f7:fb:e5:84:69:ee:4f:70:07:ed: 2b:2d:18:3f:c7:58:c2:ab:cf:4a:5a:3b:60:6a:38: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.208.108.0/22 IPv6: 2604:ab80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55079 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5f:7e:85:3d:87:17:7a:a7:f9:fa:be:a3:0e:37:56:62:ae: df:39:98:18:63:fa:9d:a0:b8:93:bb:1e:a8:71:5f:4b:12:35: b3:85:c0:ad:09:12:2a:c1:ca:66:aa:20:bf:7a:3a:e9:75:13: 8b:cb:5c:c2:ae:5a:47:a2:cd:cd:b5:83:83:5a:d6:7c:4e:2c: ad:18:9e:a4:ee:16:8b:61:48:3f:83:8b:b5:5b:2a:91:95:60: ef:f2:03:e5:f4:10:b8:8e:f6:ce:ce:42:88:78:24:7f:b2:b1: f8:ee:e3:3c:76:53:4d:9a:d3:99:7d:70:cf:29:95:51:45:db: 2e:a2:d7:b6:71:4d:06:d8:83:f5:db:82:1b:d3:7f:c2:32:17: ac:e2:18:19:10:c6:86:64:97:39:52:1e:13:8d:36:c9:f8:0c: c3:ac:5d:45:06:08:bd:72:74:92:96:b6:82:c3:2e:0a:2d:6f: 83:14:bf:a9:c7:aa:b5:a6:f5:b8:1a:fe:3f:17:5b:ee:5b:45: 8f:82:ce:db:39:10:33:ee:96:d6:b5:40:98:3d:a4:b6:6b:60: dc:e9:ab:04:6b:e2:03:49:b0:92:5e:4e:cd:79:34:c9:2b:98: 40:8e:80:a8:e9:b6:33:47:4d:fe:44:70:10:fe:31:0e:ab:86: c3:03:20:6b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpV+LiuWiFZG3rUggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYyODAwNDUzN1oXDTI3MTAwMTAwNDUzN1owLzEtMCsGA1UEAxMk MzRlMjgzM2QtYTllYS00MjJkLWE1YjUtYmEyYjlhYTk0ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhCzQ4QyfVeHl6PlY+JP+PN3goiY9X9mGMcc uhWzBQo7qfWyaqIQYBn7hLh2NiPaVCsLptsZMLmej7BnQMqKrcIutN4lt3o3jypD K5qaARUgIn/8tnYiiwmVTItOh15SG6mPAuKsdpSo3cOTrzNT2OlOduIO305lU8Ih ohSgb3knnUSX6c69VIN9XNEilCUf47/b2i8lUDL8NGTdqmcsc5A5lW2WIbnyMCN1 GlrxlDjsxZ9hD07UnntdBxrB35PLD8jlIpVCBOi29xoDL8yKyHHSdTD5Qs3eZmyz K3CDFwzCRRlEk/f75YRp7k9wB+0rLRg/x1jCq89KWjtgajhWFQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFgazRovog630HA8IJtZSv6pacShMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z NGUyODMzZC1hOWVhLTQyMmQtYTViNS1iYTJiOWFhOTQ4NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM0ZTI4MzNkLWE5ZWEtNDIyZC1h NWI1LWJhMmI5YWE5NDg2YS8zNGUyODMzZC1hOWVhLTQyMmQtYTViNS1iYTJiOWFh OTQ4NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKi0GwwDQQCAAIwBwMFACYEq4AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANcnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKdffoU9hxd6p/n6vqMON1Zirt85 mBhj+p2guJO7HqhxX0sSNbOFwK0JEirBymaqIL96Oul1E4vLXMKuWkeizc21g4Na 1nxOLK0YnqTuFothSD+Di7VbKpGVYO/yA+X0ELiO9s7OQoh4JH+ysfju4zx2U02a 05l9cM8plVFF2y6i17ZxTQbYg/XbghvTf8IyF6ziGBkQxoZklzlSHhONNsn4DMOs XUUGCL1ydJKWtoLDLgotb4MUv6nHqrWm9bga/j8XW+5bRY+Czts5EDPulta1QJg9 pLZrYNzpqwRr4gNJsJJeTs15NMkrmECOgKjptjNHTf5EcBD+MQ6rhsMDIGs= -----END CERTIFICATE-----Generated at Sun Jun 29 08:58:41 2025 by rpki-client