$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer File: f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer (raw, json) Hash identifier: fqc/iP3g7+bKaBpj4aJMdUI21PGh+DJWWDtKq2gvN+Q= Subject key identifier: A7:DE:15:60:B1:CB:BA:40:6B:DA:E9:4E:F4:ED:B0:81:3C:51:7C:33 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584A4F486501EDBE13348A1F4500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 15:15:29 +0000 Certificate not after: Wed 24 Mar 2027 13:13:47 +0000 Subordinate resources: AS: 16909 AS: 396968 AS: 401507 IP: 23.129.212.0/24 IP: 2602:f78a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:48:65:01:ed:be:13:34:8a:1f:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jun 25 15:15:29 2025 GMT Not After : Mar 24 13:13:47 2027 GMT Subject: CN=f914ac1a-b017-4cf4-9c3d-349dd19000d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:8d:c9:99:66:b0:50:a8:69:5f:23:79:e3: 95:27:4b:5d:29:a1:01:0b:d7:98:de:96:7b:2e:b3: 7e:6d:35:7e:ab:af:38:3c:2c:ed:c9:a5:07:f9:fc: d9:de:85:8c:e9:48:1e:22:8c:a2:c4:f7:70:37:91: 9b:7b:4e:f4:09:49:63:ff:8e:16:63:6c:55:e9:48: f1:21:33:e2:ea:41:c3:f7:e9:7c:5e:e7:0d:e0:2e: b1:99:db:16:6a:3a:46:9c:4a:15:1a:90:78:07:53: df:c2:50:d9:a9:a0:4b:5f:68:7f:7c:68:db:6f:ae: 85:1b:05:a6:45:d4:69:2f:78:72:bc:78:4f:b7:eb: 54:c6:93:1c:a1:9a:d9:60:52:c3:0d:37:6f:c5:c1: 5a:29:61:9b:50:2c:9c:66:54:ec:57:e3:6c:a2:5a: bd:9d:30:cf:95:60:8e:3d:b9:55:17:96:77:d0:94: 53:f9:10:87:a7:27:96:6c:ed:5f:57:84:24:49:d8: b0:ac:e2:43:9d:c9:01:03:61:5e:1a:f2:7a:aa:b3: f9:8d:70:9f:4e:0c:2a:26:06:51:1c:44:0f:95:f3: 38:ba:bb:ba:74:1b:ad:a7:ab:f1:1c:87:4a:cb:10: 04:7f:7b:15:67:18:ee:8e:d0:9a:cd:84:f0:e2:27: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DE:15:60:B1:CB:BA:40:6B:DA:E9:4E:F4:ED:B0:81:3C:51:7C:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.129.212.0/24 IPv6: 2602:f78a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16909 396968 401507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:63:16:e4:8c:48:1f:e8:94:89:7d:cd:6a:ea:c3:c2:5f:14: 99:56:16:d5:9e:d8:00:14:16:17:43:24:39:cc:f0:be:96:03: de:e2:fe:62:47:0e:be:e7:da:f0:e4:6d:76:45:ea:c1:29:e5: fd:55:c8:10:06:ee:b7:d3:26:bd:a1:75:7e:2d:f6:e1:7e:bc: bf:71:67:59:42:0d:97:ee:46:af:73:8f:21:98:00:9f:c2:f7: eb:6f:be:37:30:27:ed:84:c2:a0:3c:b1:d6:54:04:8b:d5:e8: 08:1b:27:c8:e5:21:78:7f:54:45:6f:4d:ed:e4:1d:3f:d6:92: 79:63:1c:dc:7a:d2:05:e0:40:1a:18:88:ef:25:f5:81:05:47: 84:56:b9:ca:dd:11:b4:0a:43:6c:23:52:64:41:98:9d:7e:0b: 8b:5d:37:e6:61:3a:ff:f6:bf:41:a7:d3:bc:c9:18:71:72:ae: 7c:97:55:48:94:be:a0:18:95:35:be:df:aa:59:56:d1:a0:ce: 7c:30:42:b1:0a:5c:4a:d2:80:c8:73:2e:e5:e7:e1:40:9b:c9: ed:5c:f0:45:64:a8:9e:e1:9f:aa:22:ae:d8:fa:14:dc:c5:45: 94:1c:b6:16:7a:2e:f6:58:4f:3d:e4:b9:bb:ad:58:1f:7e:f7: 4e:ac:83:03 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEpPSGUB7b4TNIofRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDYyNTE1MTUyOVoXDTI3MDMyNDEzMTM0N1owLzEtMCsGA1UEAxMk ZjkxNGFjMWEtYjAxNy00Y2Y0LTljM2QtMzQ5ZGQxOTAwMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH+NyZlmsFCoaV8jeeOVJ0tdKaEBC9eY3pZ7 LrN+bTV+q684PCztyaUH+fzZ3oWM6UgeIoyixPdwN5Gbe070CUlj/44WY2xV6Ujx ITPi6kHD9+l8XucN4C6xmdsWajpGnEoVGpB4B1PfwlDZqaBLX2h/fGjbb66FGwWm RdRpL3hyvHhPt+tUxpMcoZrZYFLDDTdvxcFaKWGbUCycZlTsV+Nsolq9nTDPlWCO PblVF5Z30JRT+RCHpyeWbO1fV4QkSdiwrOJDnckBA2FeGvJ6qrP5jXCfTgwqJgZR HEQPlfM4uru6dButp6vxHIdKyxAEf3sVZxjujtCazYTw4ieSrwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFKfeFWCxy7pAa9rpTvTtsIE8UXwzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m OTE0YWMxYS1iMDE3LTRjZjQtOWMzZC0zNDlkZDE5MDAwZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05 YzNkLTM0OWRkMTkwMDBkMy9mOTE0YWMxYS1iMDE3LTRjZjQtOWMzZC0zNDlkZDE5 MDAwZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgdQwDgQCAAIwCAMGACYC94oAMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAkINAgMGDqgCAwYgYzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNYxbkjEgf6JSJ fc1q6sPCXxSZVhbVntgAFBYXQyQ5zPC+lgPe4v5iRw6+59rw5G12RerBKeX9VcgQ Bu630ya9oXV+Lfbhfry/cWdZQg2X7kavc48hmACfwvfrb743MCfthMKgPLHWVASL 1egIGyfI5SF4f1RFb03t5B0/1pJ5YxzcetIF4EAaGIjvJfWBBUeEVrnK3RG0CkNs I1JkQZidfguLXTfmYTr/9r9Bp9O8yRhxcq58l1VIlL6gGJU1vt+qWVbRoM58MEKx ClxK0oDIcy7l5+FAm8ntXPBFZKie4Z+qIq7Y+hTcxUWUHLYWei72WE895Lm7rVgf fvdOrIMD -----END CERTIFICATE-----Generated at Mon Jun 30 23:46:11 2025 by rpki-client