$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer File: e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer (raw, json) Hash identifier: tMU3pL3XHJtaOHEWoVhazf2yIJL6n0oujgZViPFktU4= Subject key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A3FA33E4F702343C1622A7280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 00:45:36 +0000 Certificate not after: Thu 23 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 64245 IP: 104.145.224.0/20 IP: 104.250.96.0/19 IP: 2602:ffb0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:a3:3e:4f:70:23:43:c1:62:2a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 20 00:45:36 2025 GMT Not After : Sep 23 00:45:36 2027 GMT Subject: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:21:9e:16:3d:1e:76:e7:4a:fc:7d:51:1b: 3e:29:d9:b2:a4:6c:af:12:5a:09:83:e3:d6:23:17: 10:3f:f4:9f:9c:5f:70:a3:43:83:71:37:cd:e1:22: 5b:13:2f:ef:7f:64:6b:b2:8d:bb:9c:1b:9e:59:23: 50:8c:8c:59:8b:5d:b7:3f:24:e7:74:c5:de:57:46: cc:f0:1c:df:68:09:38:72:db:1d:9d:af:55:30:71: 72:cf:a3:c8:48:0d:3e:04:a4:10:a0:40:ae:0c:26: d8:c6:c5:56:70:97:ea:69:e7:13:cf:32:87:f3:ee: ca:74:1e:f0:71:d3:5b:8f:c2:25:05:ce:f3:ae:bd: 31:9e:a6:02:1c:35:d3:5d:41:02:c8:44:5b:73:60: 73:97:b2:37:39:ae:e2:36:98:f6:98:86:42:24:71: 32:da:30:92:a9:de:e5:cd:ac:9c:a7:f5:fe:a1:f6: 65:70:6d:ea:7d:e3:b5:19:45:65:77:ba:3d:8c:58: 04:c8:08:a6:06:ec:61:3b:6e:7e:f8:eb:81:e8:e6: 49:db:2b:e3:7f:1e:20:32:ba:68:51:a3:bd:87:30: d6:ab:81:df:cf:b8:75:5c:c5:29:78:45:65:3c:40: c1:c3:e5:94:17:12:20:15:b2:aa:be:b7:76:c2:33: bc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.145.224.0/20 104.250.96.0/19 IPv6: 2602:ffb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:70:e4:cb:db:55:09:5c:29:5c:32:fe:59:f4:d7:b3:8d:d2: 05:06:14:c2:4f:7c:a5:14:98:83:2e:8a:5b:6a:a9:3f:d3:48: cd:6d:4b:1e:a3:07:0b:0d:3a:cb:44:6e:9a:f7:29:0e:de:04: af:4f:71:da:8d:53:ff:5c:c6:cd:dc:3c:23:77:03:24:9a:c7: dd:c0:4b:43:3e:bd:ed:15:c1:10:43:b9:25:a3:87:3e:24:d2: fb:1a:b5:5f:95:78:6a:16:f4:bd:79:ec:73:9e:55:af:87:c2: 71:2f:9b:5a:2d:82:68:95:5d:81:55:b7:6a:5b:75:76:53:08: 33:5c:f2:55:29:1e:b4:67:c4:3b:50:78:cc:97:2b:fc:b8:18: e7:fd:d2:16:b4:4d:98:6d:28:64:b7:e8:c8:99:b2:2a:07:59: 0a:3f:70:79:b1:98:43:f9:7e:ae:b0:1f:85:13:a9:ce:ba:8d: 70:a7:f0:8c:6d:e2:1e:d3:0a:1b:b1:d1:50:92:3c:19:f3:7d: af:39:a5:0f:c4:76:37:db:5a:38:ea:bd:d4:25:41:08:ee:c8: 12:58:c0:5a:11:bd:38:e9:62:e1:5f:f6:fa:de:fb:54:63:b0: b1:c5:10:c4:d4:9f:bd:05:67:45:22:b5:02:f8:0a:b7:9d:28: 53:81:4e:45 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEo/oz5PcCNDwWIqcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYyMDAwNDUzNloXDTI3MDkyMzAwNDUzNlowLzEtMCsGA1UEAxMk ZTRlNmQzMWQtMzhmMS00YTlmLTkwYTUtNzhhZDMzZjJmYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf4hnhY9HnbnSvx9URs+KdmypGyvEloJg+PW IxcQP/SfnF9wo0ODcTfN4SJbEy/vf2Rrso27nBueWSNQjIxZi123PyTndMXeV0bM 8BzfaAk4ctsdna9VMHFyz6PISA0+BKQQoECuDCbYxsVWcJfqaecTzzKH8+7KdB7w cdNbj8IlBc7zrr0xnqYCHDXTXUECyERbc2Bzl7I3Oa7iNpj2mIZCJHEy2jCSqd7l zaycp/X+ofZlcG3qfeO1GUVld7o9jFgEyAimBuxhO25++OuB6OZJ2yvjfx4gMrpo UaO9hzDWq4Hfz7h1XMUpeEVlPEDBw+WUFxIgFbKqvrd2wjO81wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFn1tPWuIJ13w358v6X5TSS203gqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l NGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNmMmZjODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U0ZTZkMzFkLTM4ZjEtNGE5Zi05 MGE1LTc4YWQzM2YyZmM4Ny9lNGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNm MmZjODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARokeADBAVo+mAwDQQCAAIwBwMFACYC/7AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPr1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGhw5MvbVQlcKVwy/ln0 17ON0gUGFMJPfKUUmIMuiltqqT/TSM1tSx6jBwsNOstEbpr3KQ7eBK9PcdqNU/9c xs3cPCN3AySax93AS0M+ve0VwRBDuSWjhz4k0vsatV+VeGoW9L157HOeVa+HwnEv m1otgmiVXYFVt2pbdXZTCDNc8lUpHrRnxDtQeMyXK/y4GOf90ha0TZhtKGS36MiZ sioHWQo/cHmxmEP5fq6wH4UTqc66jXCn8Ixt4h7TChux0VCSPBnzfa85pQ/Edjfb WjjqvdQlQQjuyBJYwFoRvTjpYuFf9vre+1RjsLHFEMTUn70FZ0UitQL4CredKFOB TkU= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:36 2025 by rpki-client