$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c.cer File: 5b076036-1f3e-4d42-8131-88102906b87c.cer (raw, json) Hash identifier: b1z8CmEisnKTLgZSk6GXWc08ktaP89N9KoGGR9Zi0p0= Subject key identifier: B6:ED:18:34:F6:79:F5:63:3A:3A:39:2C:17:E2:67:12:27:F9:A9:E7 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3CD88E287DEBF9D4E3C34F60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/5b076036-1f3e-4d42-8131-88102906b87c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Jun 2025 00:45:35 +0000 Certificate not after: Wed 22 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 16889 IP: 155.246.0.0/16 IP: 192.12.216.0/24 IP: 2620:10f::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:d8:8e:28:7d:eb:f9:d4:e3:c3:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 19 00:45:35 2025 GMT Not After : Sep 22 00:45:35 2027 GMT Subject: CN=5b076036-1f3e-4d42-8131-88102906b87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:96:f7:c3:48:c3:2a:95:7b:cf:4f:b0:0e: 38:47:45:73:02:59:1a:84:93:f3:82:05:b8:06:70: 7a:dd:09:ca:d9:d3:24:5a:ec:cb:92:fd:b7:ab:63: c0:2e:2e:31:3f:0c:40:3c:e8:67:6f:f7:88:68:6a: 09:f2:1d:b8:7a:5a:5b:ad:67:68:69:da:f2:49:fa: 5f:31:84:93:eb:38:ac:24:a9:0b:bc:94:47:fb:08: b5:7e:98:e9:6e:05:d5:92:d3:33:88:81:48:e0:53: a9:c7:9a:e8:96:89:43:ef:4d:18:fa:b3:ec:e2:2d: 55:fb:d9:55:00:d9:e0:8a:6f:66:b2:2b:8b:0c:8b: 46:d2:80:71:a9:ea:d4:0c:44:68:c8:cc:ad:81:c3: 54:b4:57:e4:b6:39:72:05:a9:1b:a1:2b:d7:ed:9b: 29:43:2c:9b:83:fa:50:9e:51:7a:7a:8e:29:e7:4e: be:06:73:30:63:95:49:5e:dd:7e:e5:ad:18:31:92: c1:31:e7:8b:94:f5:da:df:d2:89:a6:87:b2:fa:f5: 83:5d:83:07:c7:44:aa:09:89:77:85:d0:76:4d:9f: 9d:83:69:95:4e:c6:ad:ff:6a:18:11:53:74:44:3f: c7:6f:2b:2a:1d:24:0d:ab:03:1c:1f:1a:aa:58:a1: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:ED:18:34:F6:79:F5:63:3A:3A:39:2C:17:E2:67:12:27:F9:A9:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/5b076036-1f3e-4d42-8131-88102906b87c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 155.246.0.0/16 192.12.216.0/24 IPv6: 2620:10f::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16889 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0a:80:c9:fe:03:78:d9:ed:9f:8e:bf:11:b0:70:a2:33:1c: 4f:a8:18:af:36:fd:c8:d6:70:c5:a4:9e:24:dd:90:28:80:dc: 91:95:7c:3c:9d:8b:7e:96:e4:df:49:d2:37:f5:9e:7a:53:60: d4:8b:3a:71:4c:69:8e:4f:c4:d4:57:e5:3e:28:0e:ba:3e:d8: 81:b7:d7:28:d5:45:52:73:c9:a9:b1:87:8f:88:bd:ad:0d:80: 74:79:48:34:ad:23:5f:28:d0:e4:ff:eb:9c:01:a5:5f:49:05: 19:a5:0a:6f:ed:8f:b6:57:e3:a6:3b:35:ec:a2:83:aa:00:65: 61:9b:e4:11:43:0c:7a:7a:b5:69:74:7e:9f:6c:a2:a4:80:22: cc:66:6b:c7:e6:86:70:2b:d1:b7:8e:a4:30:d3:40:95:5a:cf: 93:e3:b3:9b:09:0a:6b:69:51:e8:ea:35:ba:a6:ba:57:c8:4a: cc:02:65:3f:53:e3:f9:25:a7:98:df:29:15:f6:e5:25:26:0d: c2:8d:f3:88:e8:42:c9:10:57:cb:71:67:9e:63:28:da:5a:ec: 02:1b:1e:80:ef:09:4f:d1:d6:a4:9f:60:19:2a:5f:07:84:3e: ae:65:a3:2e:a6:82:d1:62:26:b8:ec:29:6d:74:b8:d4:53:68: 28:b6:09:3c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEo82I4ofev51OPDT2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxOTAwNDUzNVoXDTI3MDkyMjAwNDUzNVowLzEtMCsGA1UEAxMk NWIwNzYwMzYtMWYzZS00ZDQyLTgxMzEtODgxMDI5MDZiODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ+W98NIwyqVe89PsA44R0VzAlkahJPzggW4 BnB63QnK2dMkWuzLkv23q2PALi4xPwxAPOhnb/eIaGoJ8h24elpbrWdoadrySfpf MYST6zisJKkLvJRH+wi1fpjpbgXVktMziIFI4FOpx5rololD700Y+rPs4i1V+9lV ANngim9msiuLDItG0oBxqerUDERoyMytgcNUtFfktjlyBakboSvX7ZspQyybg/pQ nlF6eo4p506+BnMwY5VJXt1+5a0YMZLBMeeLlPXa39KJpoey+vWDXYMHx0SqCYl3 hdB2TZ+dg2mVTsat/2oYEVN0RD/HbysqHSQNqwMcHxqqWKGz7QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFLbtGDT2efVjOjo5LBfiZxIn+annMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 YjA3NjAzNi0xZjNlLTRkNDItODEzMS04ODEwMjkwNmI4N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzViMDc2MDM2LTFmM2UtNGQ0Mi04 MTMxLTg4MTAyOTA2Yjg3Yy81YjA3NjAzNi0xZjNlLTRkNDItODEzMS04ODEwMjkw NmI4N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBEEAgABMAsDAwCb9gMEAMAM2DAPBAIAAjAJAwcEJiABDwAAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkH5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGoKgMn+A3jZ7Z+OvxGw cKIzHE+oGK82/cjWcMWkniTdkCiA3JGVfDydi36W5N9J0jf1nnpTYNSLOnFMaY5P xNRX5T4oDro+2IG31yjVRVJzyamxh4+Iva0NgHR5SDStI18o0OT/65wBpV9JBRml Cm/tj7ZX46Y7Neyig6oAZWGb5BFDDHp6tWl0fp9soqSAIsxma8fmhnAr0beOpDDT QJVaz5Pjs5sJCmtpUejqNbqmulfISswCZT9T4/klp5jfKRX25SUmDcKN84joQskQ V8txZ55jKNpa7AIbHoDvCU/R1qSfYBkqXweEPq5loy6mgtFiJrjsKW10uNRTaCi2 CTw= -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:36 2025 by rpki-client