$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer File: 9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer (raw, json) Hash identifier: J0fSPbylvnqDweXWlWstM2jzvjKQ//Et+LoANG1dyDU= Subject key identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A347881171181003BF47A1280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 00:45:35 +0000 Certificate not after: Sun 19 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 394485 IP: 185.212.72.0 -- 185.212.74.255 IP: 206.130.228.0/24 IP: 2620:122:a000::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:78:81:17:11:81:00:3b:f4:7a:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 16 00:45:35 2025 GMT Not After : Sep 19 00:45:35 2027 GMT Subject: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:47:b2:7b:b1:f1:b0:b8:6e:df:6d:2b:ef: 70:05:d4:54:d7:f1:13:a6:41:79:19:d6:d4:c3:31: ca:95:34:c2:ab:d4:74:69:58:f3:4b:37:2e:96:eb: c8:9e:0a:83:65:dc:04:ba:21:59:58:fb:69:c4:7c: b9:73:ac:51:00:1a:80:93:c5:8a:ea:f2:fe:19:1d: 56:72:1c:c5:67:88:b6:77:17:bb:f8:2d:8f:29:4c: 38:a9:7c:82:db:41:df:82:54:26:99:aa:c5:db:1f: f0:01:93:55:31:78:b5:af:25:01:97:9b:aa:2f:61: cf:84:32:fb:79:7e:52:ca:d6:c0:17:da:9e:c5:84: 4d:af:25:85:10:b2:f1:45:37:96:a4:7b:73:77:88: 00:ab:e6:a9:8f:cf:f2:63:37:cd:dd:ea:8b:a3:df: fa:2f:f6:c1:15:0f:9d:02:c5:e8:60:67:e8:53:15: 5a:7b:9c:ac:07:72:39:69:48:7b:f2:8b:9b:2a:a0: 51:2b:47:10:60:bc:43:fa:c1:0b:bd:3a:c2:d6:f2: 3c:5e:9e:0d:d6:24:7a:47:60:3b:b2:54:a2:c1:dc: b7:b5:03:90:2f:d0:8b:db:bd:1d:22:e1:7e:94:25: a7:e8:3c:94:9c:01:57:0d:a9:ab:3e:86:f7:9d:e0: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 185.212.72.0-185.212.74.255 206.130.228.0/24 IPv6: 2620:122:a000::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394485 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c1:92:8a:6e:3b:c4:2f:db:92:2a:9d:69:07:97:f3:ef:5c: 52:0d:66:6d:f0:d7:05:a7:f1:1f:5c:e7:50:a5:3e:2a:90:b6: ec:a2:f1:7c:02:81:f9:9f:72:0c:c3:ea:18:f8:1d:89:46:fb: 14:d8:cf:ef:ce:48:77:ef:0a:e3:95:e2:a9:04:25:e0:e9:9b: 27:5d:7e:de:25:a7:4a:b4:91:14:fc:c7:2d:c0:50:cf:42:66: f5:0b:fe:fa:52:c0:d7:c6:77:56:68:ab:f8:9f:08:ec:78:47: 9e:7c:20:4f:89:af:f5:98:a8:d9:2a:49:d5:d4:e0:76:72:3a: a1:cc:f6:b7:a6:6e:58:d5:84:fe:ee:f0:ed:45:5b:b7:dc:0d: a5:5c:c4:46:bd:08:dc:00:da:a7:01:68:6b:ee:98:59:3e:57: f8:54:27:3e:62:f5:4e:e5:70:77:71:59:fd:6f:31:7b:07:95: 01:1c:3a:13:75:ac:a9:66:22:ba:e3:70:b1:94:7f:bf:c5:f8: 72:b7:b8:dd:9d:03:9f:d6:f4:ac:31:4d:95:1e:c2:05:5e:02: 21:22:d6:3b:9d:58:f6:0d:35:d5:cd:ac:88:10:d1:45:79:77: 1e:94:11:d5:a5:db:77:83:d7:ac:da:d0:f3:42:1a:21:b8:10: 95:c5:ed:9a -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEo0eIEXEYEAO/R6EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYxNjAwNDUzNVoXDTI3MDkxOTAwNDUzNVowLzEtMCsGA1UEAxMk OWI4ZTkxOTgtNDRkZi00MjRkLWJmZDQtOWE5MWM5ZmJjN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiZHsnux8bC4bt9tK+9wBdRU1/ETpkF5GdbU wzHKlTTCq9R0aVjzSzculuvIngqDZdwEuiFZWPtpxHy5c6xRABqAk8WK6vL+GR1W chzFZ4i2dxe7+C2PKUw4qXyC20HfglQmmarF2x/wAZNVMXi1ryUBl5uqL2HPhDL7 eX5SytbAF9qexYRNryWFELLxRTeWpHtzd4gAq+apj8/yYzfN3eqLo9/6L/bBFQ+d AsXoYGfoUxVae5ysB3I5aUh78oubKqBRK0cQYLxD+sELvTrC1vI8Xp4N1iR6R2A7 slSiwdy3tQOQL9CL270dIuF+lCWn6DyUnAFXDamrPob3neA2ewIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFDMxPqdTt/I4HuHHGpZTRSVJeM+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 YjhlOTE5OC00NGRmLTQyNGQtYmZkNC05YTkxYzlmYmM3ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzliOGU5MTk4LTQ0ZGYtNDI0ZC1i ZmQ0LTlhOTFjOWZiYzdkZS85YjhlOTE5OC00NGRmLTQyNGQtYmZkNC05YTkxYzlm YmM3ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBoEAgABMBQwDAMEA7nUSAMEALnUSgMEAM6C5DAOBAIAAjAIAwYE JiABIqAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgT1MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGfBkopu O8Qv25IqnWkHl/PvXFINZm3w1wWn8R9c51ClPiqQtuyi8XwCgfmfcgzD6hj4HYlG +xTYz+/OSHfvCuOV4qkEJeDpmyddft4lp0q0kRT8xy3AUM9CZvUL/vpSwNfGd1Zo q/ifCOx4R558IE+Jr/WYqNkqSdXU4HZyOqHM9rembljVhP7u8O1FW7fcDaVcxEa9 CNwA2qcBaGvumFk+V/hUJz5i9U7lcHdxWf1vMXsHlQEcOhN1rKlmIrrjcLGUf7/F +HK3uN2dA5/W9KwxTZUewgVeAiEi1judWPYNNdXNrIgQ0UV5dx6UEdWl23eD16za 0PNCGiG4EJXF7Zo= -----END CERTIFICATE-----Generated at Tue Jul 1 03:55:22 2025 by rpki-client