$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer File: 5f4c623c-0d0c-4995-9560-0507df4828e8.cer (raw, json) Hash identifier: OlJmAXtNPmpvYYBaRiOLpICGOwUjxmNjaHNXztORYDk= Subject key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285849ADA8A13B64D9A1648C551B90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 17:48:26 +0000 Certificate not after: Wed 16 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 54900 IP: 65.75.218.0/23 IP: 65.181.96.0/21 IP: 198.204.62.0/23 IP: 208.93.8.0/23 IP: 2620:91:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:a8:a1:3b:64:d9:a1:64:8c:55:1b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 28 17:48:26 2025 GMT Not After : Dec 16 01:45:26 2026 GMT Subject: CN=5f4c623c-0d0c-4995-9560-0507df4828e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:1c:fe:ed:3a:16:42:94:5c:73:e8:11:84: e9:40:f3:d1:66:96:c7:02:17:0a:61:84:bb:9d:ba: 05:24:27:ef:30:3c:77:2e:c1:d2:8c:62:a2:87:2b: ca:b3:d9:43:36:b6:70:02:9a:7a:21:14:94:6b:d8: 39:af:03:49:3e:c8:48:e3:63:c8:b2:d4:ca:20:a0: 16:b4:e4:2b:b4:50:de:a8:1a:64:d6:e5:b9:bb:9c: a7:91:82:d3:c6:f1:df:22:16:16:f9:4f:d0:98:14: 6e:b6:77:62:f3:7d:d3:49:3f:54:c6:f1:ba:7b:6a: 94:00:25:3e:53:a5:18:a7:46:4a:c0:1a:ac:0b:20: bf:1c:94:82:b3:f4:e0:dc:af:97:ee:57:22:f8:6b: 04:27:a7:46:8f:fc:e1:6c:f7:0b:58:57:9e:06:0d: 7b:a4:73:e0:dc:d8:27:48:2a:9c:0a:d8:64:c0:25: 29:85:9f:b5:e6:81:6c:a6:48:16:05:e9:f0:75:ef: de:c3:fd:1e:8a:18:55:8d:ef:d6:15:07:53:07:68: 29:80:cb:50:50:86:57:14:19:6b:79:51:ce:f8:b8: 6a:9d:7a:58:05:ab:5d:d0:7a:66:ab:21:09:5b:cd: d7:c6:9e:05:0e:75:53:c6:3e:2b:48:13:62:96:7f: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 65.75.218.0/23 65.181.96.0/21 198.204.62.0/23 208.93.8.0/23 IPv6: 2620:91:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54900 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:55:02:d1:83:65:42:60:62:2b:22:72:93:21:f4:65:e4:c3: d7:57:88:15:cd:c5:08:d1:78:e1:54:08:0a:91:44:0d:a2:0a: c4:cb:8c:3d:cb:b3:f5:0f:3e:98:92:14:83:9f:b6:3e:07:d2: 25:be:dd:72:58:69:34:a4:ba:e3:14:93:72:a2:df:c0:72:db: 11:1b:a7:5b:38:db:0b:ae:12:8d:39:72:ee:95:00:4e:2c:eb: 44:5f:e4:ff:65:36:fa:07:2d:ed:26:3d:ae:6a:a8:89:cd:2d: 5b:b2:58:e7:76:26:b8:18:de:a8:72:a7:f7:52:e3:81:ce:93: a0:2c:0c:9c:00:6b:74:51:b9:ba:c5:d4:2e:a3:83:7e:c2:28: 02:12:34:97:86:21:70:28:9b:df:8d:c8:ac:50:e9:bd:18:68: 9a:15:68:48:06:01:7f:d2:84:4d:be:b1:7a:20:0e:48:63:90: d2:cd:9c:3c:6d:7f:96:6d:bf:c2:75:3a:d1:cc:fe:24:82:90: 65:05:4e:f0:66:80:e5:47:e4:51:72:2a:a3:5e:82:29:5e:df: 28:8b:3e:cc:74:7a:91:87:a6:e5:39:1c:f9:0b:e5:99:f6:b6: 8b:ee:37:87:15:9f:d1:1c:ad:7f:e0:91:dc:49:b5:82:23:6f: a5:fb:b1:bb -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEmtqKE7ZNmhZIxVG5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDQyODE3NDgyNloXDTI2MTIxNjAxNDUyNlowLzEtMCsGA1UEAxMk NWY0YzYyM2MtMGQwYy00OTk1LTk1NjAtMDUwN2RmNDgyOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmUc/u06FkKUXHPoEYTpQPPRZpbHAhcKYYS7 nboFJCfvMDx3LsHSjGKihyvKs9lDNrZwApp6IRSUa9g5rwNJPshI42PIstTKIKAW tOQrtFDeqBpk1uW5u5ynkYLTxvHfIhYW+U/QmBRutndi833TST9UxvG6e2qUACU+ U6UYp0ZKwBqsCyC/HJSCs/Tg3K+X7lci+GsEJ6dGj/zhbPcLWFeeBg17pHPg3Ngn SCqcCthkwCUphZ+15oFspkgWBenwde/ew/0eihhVje/WFQdTB2gpgMtQUIZXFBlr eVHO+LhqnXpYBatd0HpmqyEJW83Xxp4FDnVTxj4rSBNiln90tQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFAoHIVVVrcMGNA/rHyDtsr80E2d2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0ODI4ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVmNGM2MjNjLTBkMGMtNDk5NS05 NTYwLTA1MDdkZjQ4MjhlOC81ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0 ODI4ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMB4EAgABMBgDBAFBS9oDBANBtWADBAHGzD4DBAHQXQgwDwQCAAIw CQMHBCYgAJHAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA1nQwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA ClUC0YNlQmBiKyJykyH0ZeTD11eIFc3FCNF44VQICpFEDaIKxMuMPcuz9Q8+mJIU g5+2PgfSJb7dclhpNKS64xSTcqLfwHLbERunWzjbC64SjTly7pUATizrRF/k/2U2 +gct7SY9rmqoic0tW7JY53YmuBjeqHKn91Ljgc6ToCwMnABrdFG5usXULqODfsIo AhI0l4YhcCib343IrFDpvRhomhVoSAYBf9KETb6xeiAOSGOQ0s2cPG1/lm2/wnU6 0cz+JIKQZQVO8GaA5UfkUXIqo16CKV7fKIs+zHR6kYem5Tkc+Qvlmfa2i+43hxWf 0Rytf+CR3Em1giNvpfuxuw== -----END CERTIFICATE-----Generated at Mon May 5 09:43:48 2025 by rpki-client