$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer File: f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer (raw, json) Hash identifier: oU42NA7dItwgrLWGTwprwLxJKyWKqpgzdlPzSA/+hPg= Subject key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A15C2FDF0755BC4FBD34C5300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 00:45:37 +0000 Certificate not after: Wed 08 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 40501 AS: 58722 IP: 66.85.88.0/23 IP: 103.21.81.0/24 IP: 103.226.246.0/24 IP: 216.235.80.0/20 IP: 2602:ff40::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:c2:fd:f0:75:5b:c4:fb:d3:4c:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 5 00:45:37 2025 GMT Not After : Sep 8 00:45:37 2027 GMT Subject: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:63:d6:5e:40:5d:9d:1b:4b:19:5d:b3:35: 5b:ff:ab:33:e1:bf:54:db:64:63:7f:e2:1d:b0:53: 23:74:de:0a:dc:9b:bf:e2:aa:6a:64:47:c0:3b:ef: e9:3f:f5:70:e2:4d:fa:fa:f7:e2:06:1b:5d:c4:02: 8f:12:94:31:eb:12:37:56:5c:bd:f3:13:7f:a1:e4: 4c:4c:e1:fb:79:42:e3:2b:62:1b:e0:a6:f6:bf:d6: 14:7e:49:a6:5f:74:e9:12:92:d0:50:44:17:9f:4c: e9:d3:f6:66:d7:01:95:35:55:85:f1:74:85:02:ae: 6d:78:d5:24:92:0d:48:38:c7:55:51:58:87:1e:81: 72:59:ae:f6:03:83:ac:a9:24:9d:e5:2e:5a:91:86: 3f:19:ad:b5:ec:99:b9:dc:4d:e0:00:ef:55:5c:6c: 34:d7:10:11:11:d9:e4:c0:7f:21:d2:fb:67:64:5b: 0f:67:64:4c:7e:af:0c:12:b5:61:c8:9b:5c:7c:35: 2f:c8:3b:f2:f1:05:fb:6f:91:6f:37:10:bb:21:bd: 9f:cd:36:28:d3:a2:e8:5d:d2:ca:aa:a0:8f:6d:c4: b0:28:f0:e7:59:cf:fd:97:41:f7:36:78:d3:8e:db: d0:e4:31:b0:82:41:7a:71:89:5e:e8:57:cc:9b:23: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.85.88.0/23 103.21.81.0/24 103.226.246.0/24 216.235.80.0/20 IPv6: 2602:ff40::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40501 58722 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:56:9c:ab:6f:f0:23:1b:a9:38:f5:40:2e:57:78:a9:e7:b3: 2e:f3:6d:5e:11:f4:e8:c3:1b:87:ff:e0:03:0a:55:96:96:9d: 18:b2:db:ba:45:37:05:fc:ac:0e:f4:05:05:af:5f:09:13:c5: 95:e0:69:7b:02:9a:eb:9d:23:5a:01:1f:ce:35:f7:88:4b:dd: 4f:a8:90:6d:a1:1e:32:c2:18:f4:8b:04:32:b8:1c:70:33:84: 41:23:7a:94:14:9b:f4:79:1b:1d:b3:30:97:da:a2:78:be:e7: 9f:b5:c0:5c:13:36:59:aa:f2:43:88:12:fc:ba:fc:05:50:c6: a3:de:1b:9a:cf:48:89:f2:45:cf:f7:be:d5:2c:67:12:e6:1e: 1d:b8:16:32:84:ac:45:12:cc:c3:17:e4:21:2b:dc:56:a4:e2: ef:30:07:72:27:47:8e:dc:92:d0:1e:b4:5c:f1:e2:38:b4:c9: aa:e5:d8:26:09:a9:12:79:11:00:08:ef:e8:ae:c2:d6:26:78: 85:a6:8b:ea:c3:9b:5f:c2:07:a8:9b:c0:4c:82:e0:39:fc:1b: ba:df:1e:89:7a:b1:c8:76:d1:45:fc:26:9a:85:6a:92:d8:ee: 85:d1:cd:46:ab:72:ca:cf:62:15:2f:e9:11:51:19:7b:4a:4b: 6a:89:59:df -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEoVwv3wdVvE+9NMUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYwNTAwNDUzN1oXDTI3MDkwODAwNDUzN1owLzEtMCsGA1UEAxMk ZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhZj1l5AXZ0bSxldszVb/6sz4b9U22Rjf+Id sFMjdN4K3Ju/4qpqZEfAO+/pP/Vw4k36+vfiBhtdxAKPEpQx6xI3Vly98xN/oeRM TOH7eULjK2Ib4Kb2v9YUfkmmX3TpEpLQUEQXn0zp0/Zm1wGVNVWF8XSFAq5teNUk kg1IOMdVUViHHoFyWa72A4OsqSSd5S5akYY/Ga217Jm53E3gAO9VXGw01xAREdnk wH8h0vtnZFsPZ2RMfq8MErVhyJtcfDUvyDvy8QX7b5FvNxC7Ib2fzTYo06LoXdLK qqCPbcSwKPDnWc/9l0H3NnjTjtvQ5DGwgkF6cYle6FfMmyM0rwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFNYJMvQSlfiElwvubsqvvHJHrN0KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m NGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Y0ZDM0NDExLTIzNWQtNGRiZS04 YTljLWYyZGMxMWQ3NTU2Ni9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFk NzU1NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAFCVVgDBABnFVEDBABn4vYDBATY61AwDgQCAAIw CAMGBCYC/0AAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCeNQIDAOViMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAE9WnKtv8CMbqTj1QC5XeKnnsy7zbV4R9OjDG4f/4AMKVZaWnRiy27pFNwX8 rA70BQWvXwkTxZXgaXsCmuudI1oBH84194hL3U+okG2hHjLCGPSLBDK4HHAzhEEj epQUm/R5Gx2zMJfaoni+55+1wFwTNlmq8kOIEvy6/AVQxqPeG5rPSInyRc/3vtUs ZxLmHh24FjKErEUSzMMX5CEr3Fak4u8wB3InR47cktAetFzx4ji0yarl2CYJqRJ5 EQAI7+iuwtYmeIWmi+rDm1/CB6ibwEyC4Dn8G7rfHol6sch20UX8JpqFapLY7oXR zUarcsrPYhUv6RFRGXtKS2qJWd8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:48:22 2025 by rpki-client