$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer File: b84ab52d-915e-4d8a-b37b-496ea49c6798.cer (raw, json) Hash identifier: aNSSoQX7jOLMRYnK/PZNo47H3pIhJa6xpbn49PzZhKc= Subject key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849DDED46C05CE2784FCCA17C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 May 2025 00:45:33 +0000 Certificate not after: Thu 19 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 1403 IP: 64.58.32.0/20 IP: 67.221.48.0/20 IP: 74.116.184.0/21 IP: 96.127.192.0/18 IP: 104.163.128.0/17 IP: 107.159.0.0/16 IP: 107.161.56.0/21 IP: 107.167.248.0/21 IP: 146.71.8.0/21 IP: 172.93.16.0/20 IP: 173.246.0.0/19 IP: 185.146.32.0/22 IP: 192.222.128.0/17 IP: 198.16.128.0/17 IP: 198.58.128.0/17 IP: 199.58.248.0/22 IP: 216.25.240.0/20 IP: 2600:d400::/28 IP: 2606:6d00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:ed:46:c0:5c:e2:78:4f:cc:a1:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 16 00:45:33 2025 GMT Not After : Aug 19 00:45:33 2027 GMT Subject: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:b0:53:8f:0d:47:7a:ff:96:fa:06:b4:ab: 00:64:40:31:e3:40:39:f1:e4:03:92:42:c0:49:5b: 85:1d:72:5a:9d:2f:15:cd:e1:2f:af:f5:7f:34:2e: e3:9c:ee:48:46:18:83:82:fd:49:4c:84:3e:bf:09: ba:65:4e:35:6b:5c:0f:4d:07:db:11:36:9d:7f:fe: d7:ab:4c:ab:29:4f:47:5f:6b:41:81:b5:3a:a2:95: 95:47:6c:ff:0e:99:6a:46:e0:66:8d:c4:59:94:58: d0:e2:06:ac:ab:b3:c9:8a:25:43:e8:97:c5:15:21: f9:6d:95:42:81:ba:d6:18:e9:0b:75:4b:d7:9f:d4: e3:fe:ff:57:b7:05:03:16:09:1a:d3:2e:13:d7:40: 7c:a8:71:18:f6:94:10:18:60:6f:10:c3:11:cc:95: d7:71:e3:0e:28:a1:f2:1e:8f:0e:b0:2a:ca:6d:cd: af:ce:27:87:83:22:42:a7:9c:22:01:fe:c1:38:a0: 5a:1a:5e:b6:60:8a:e6:c5:34:8c:c7:10:56:70:6d: ff:d4:8c:b3:60:ee:42:06:65:8c:63:a6:48:90:da: 4c:f4:3e:3b:7c:b2:ab:41:51:d7:e6:db:df:05:db: 2f:5a:4d:17:75:8b:f8:20:6a:9b:bd:b4:15:f6:6f: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.58.32.0/20 67.221.48.0/20 74.116.184.0/21 96.127.192.0/18 104.163.128.0/17 107.159.0.0/16 107.161.56.0/21 107.167.248.0/21 146.71.8.0/21 172.93.16.0/20 173.246.0.0/19 185.146.32.0/22 192.222.128.0/17 198.16.128.0/17 198.58.128.0/17 199.58.248.0/22 216.25.240.0/20 IPv6: 2600:d400::/28 2606:6d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1403 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:16:16:03:eb:79:cf:cb:2e:f2:6a:4d:77:29:ab:ea:06:cc: f9:de:8b:c0:d3:c1:43:e6:ba:db:18:19:22:ec:64:f3:78:e9: 6d:ea:0a:60:6b:d0:29:3f:e7:38:df:64:b9:38:f8:22:39:fa: ac:ef:55:12:10:8b:26:25:71:9b:df:6b:6c:0a:ad:c2:c6:36: 18:0f:69:cb:ec:20:84:42:82:1f:aa:51:3a:b0:5f:81:1f:0f: ef:2f:01:8b:86:90:9d:34:76:50:5c:c9:3d:32:f2:f1:12:ae: 53:69:a7:65:15:52:55:09:05:ce:bd:90:30:32:5d:1a:5e:5b: d4:17:01:85:d8:e5:ad:76:95:bd:6d:a2:8d:0b:eb:12:f1:d3: f7:70:37:f6:a9:2d:9d:3d:d9:96:30:f9:7f:32:7f:67:63:4c: 9c:86:64:40:29:d6:87:38:ed:dc:49:d9:95:d5:bf:48:41:69: 01:0a:d3:f5:7d:74:a4:b9:d5:16:21:ee:07:10:3c:6e:33:4b: 33:e2:c5:d6:c8:0c:a7:34:d8:9b:73:a5:b3:3d:24:db:4b:db: cc:fd:d0:40:99:43:16:c4:23:c6:6d:67:a7:20:8a:11:1b:64: 18:c3:ae:31:5c:72:eb:cc:62:78:95:75:2c:2a:c9:21:5a:30: 94:4c:24:ae -----BEGIN CERTIFICATE----- MIIHgDCCBmigAwIBAgIUAQ0Mn0MoWEnd7UbAXOJ4T8yhfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUxNjAwNDUzM1oXDTI3MDgxOTAwNDUzM1owLzEtMCsGA1UEAxMk Yjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RywU48NR3r/lvoGtKsAZEAx40A58eQDkkLA SVuFHXJanS8VzeEvr/V/NC7jnO5IRhiDgv1JTIQ+vwm6ZU41a1wPTQfbETadf/7X q0yrKU9HX2tBgbU6opWVR2z/DplqRuBmjcRZlFjQ4gasq7PJiiVD6JfFFSH5bZVC gbrWGOkLdUvXn9Tj/v9XtwUDFgka0y4T10B8qHEY9pQQGGBvEMMRzJXXceMOKKHy Ho8OsCrKbc2vzieHgyJCp5wiAf7BOKBaGl62YIrmxTSMxxBWcG3/1IyzYO5CBmWM Y6ZIkNpM9D47fLKrQVHX5tvfBdsvWk0XdYv4IGqbvbQV9m9zYQIDAQABo4IEkjCC BI4wHQYDVR0OBBYEFN21Mu9TELtZ3YErVejb9+YQAyR8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i ODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4NGFiNTJkLTkxNWUtNGQ4YS1i MzdiLTQ5NmVhNDljNjc5OC9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5 YzY3OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgZYGCCsGAQUF BwEHAQH/BIGGMIGDMGsEAgABMGUDBARAOiADBARD3TADBANKdLgDBAZgf8ADBAdo o4ADAwBrnwMEA2uhOAMEA2un+AMEA5JHCAMEBKxdEAMEBa32AAMEArmSIAMEB8De gAMEB8YQgAMEB8Y6gAMEAsc6+AMEBNgZ8DAUBAIAAjAOAwUEJgDUAAMFACYGbQAw GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICBXswVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADxYWA+t5z8su8mpN dymr6gbM+d6LwNPBQ+a62xgZIuxk83jpbeoKYGvQKT/nON9kuTj4Ijn6rO9VEhCL JiVxm99rbAqtwsY2GA9py+wghEKCH6pROrBfgR8P7y8Bi4aQnTR2UFzJPTLy8RKu U2mnZRVSVQkFzr2QMDJdGl5b1BcBhdjlrXaVvW2ijQvrEvHT93A39qktnT3ZljD5 fzJ/Z2NMnIZkQCnWhzjt3EnZldW/SEFpAQrT9X10pLnVFiHuBxA8bjNLM+LF1sgM pzTYm3Olsz0k20vbzP3QQJlDFsQjxm1npyCKERtkGMOuMVxy68xieJV1LCrJIVow lEwkrg== -----END CERTIFICATE-----Generated at Mon Jun 30 20:48:58 2025 by rpki-client