$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer File: 96aa12fd-20f6-4f37-aab7-a27391ae096e.cer (raw, json) Hash identifier: +OLLsIk+z641axALSPLjAe3XOt2CWqpXWh8bGLflZmc= Subject key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC5A3FB74B13B1CF3169DE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Aug 2025 00:45:24 +0000 Certificate not after: Wed 10 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 33675 AS: 53869 IP: 64.201.224.0/21 IP: 198.62.120.0/23 IP: 199.47.104.0/21 IP: 2620:32:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:a3:fb:74:b1:3b:1c:f3:16:9d:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 7 00:45:24 2025 GMT Not After : Nov 10 01:45:24 2027 GMT Subject: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:f4:ae:b5:3f:a5:ac:7c:2f:24:43:ef:89: 6c:ce:c2:cd:7b:bd:25:02:b6:92:91:65:02:b0:19: 57:09:85:50:ef:c7:10:30:7f:d2:a1:d6:15:91:cd: 2e:77:4c:21:d5:55:8d:c0:e2:b7:3d:4b:f6:9b:60: 73:c4:95:61:cb:ab:e8:3c:0a:11:98:3e:8e:ab:55: 97:8d:cb:d6:6c:d8:24:b6:40:a4:4b:93:9a:70:22: 90:77:a3:1d:eb:ac:26:93:5a:24:d2:27:c4:9d:c2: 7b:a5:b2:33:1e:14:01:22:63:d6:10:bf:72:9e:d6: c3:48:46:ab:2e:e5:01:82:05:2f:cc:2a:95:e8:04: ee:db:a2:17:95:03:ea:ff:2b:16:38:6e:c6:57:33: f2:2d:1c:b1:ec:cb:f7:72:54:47:c7:4b:45:f2:8b: 46:41:d2:63:fd:02:39:b6:3e:58:27:8d:4b:00:26: 11:f4:a8:47:87:ab:4d:c0:a5:3f:1b:0d:39:19:0a: 44:4c:af:74:f3:55:15:9d:ab:3e:ce:4e:9d:8e:6c: 63:20:2f:09:33:5b:03:95:44:31:54:e7:b7:9c:22: 6c:cc:52:a5:bb:df:f6:18:59:ee:ab:6d:c3:72:a1: 48:45:f5:5b:bd:ee:b4:62:eb:c8:70:17:5e:36:0f: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.201.224.0/21 198.62.120.0/23 199.47.104.0/21 IPv6: 2620:32:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33675 53869 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7d:24:2e:7f:c5:30:a1:3d:e7:e6:3f:0a:26:f9:5a:44:17: 54:f2:02:51:25:d3:c6:9b:ae:be:78:17:39:4f:ac:2e:42:d6: bd:fb:4d:b9:da:1d:50:dd:52:a2:c3:4f:fc:bf:5d:03:e1:b8: 1b:45:a4:f5:54:52:e7:21:e0:17:87:c4:94:61:49:21:e6:8a: 2a:9a:5f:98:a6:c5:73:06:2b:0f:d0:20:c6:b2:08:22:2b:68: 90:16:b9:aa:78:67:90:2f:74:20:5b:1b:44:7e:6f:38:b6:52: 91:2f:d0:93:c8:e6:df:16:1a:84:94:6f:20:ff:fe:b0:76:47: 1b:59:19:6f:84:50:5b:79:ea:02:9e:b6:ff:78:79:a4:63:2a: 12:f1:fa:9d:d1:1d:f3:3e:30:23:d5:62:7a:6c:66:4d:f6:b1: 66:1c:81:59:20:6b:00:85:ec:a0:70:ff:f2:f4:a9:84:22:5f: 7f:85:fc:49:3f:3e:54:31:4a:f2:65:e6:fb:3c:c7:65:21:27: 4f:61:8e:63:21:10:32:6a:a2:12:78:56:69:af:61:ad:a6:8a: a1:cb:ae:25:b5:6c:d5:45:bf:02:20:45:df:0c:db:51:d5:ae: ab:53:21:0a:a4:36:ec:d1:2d:ac:15:5d:6c:d4:df:a1:ff:e7: 4d:bf:67:f6 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWErFo/t0sTsc8xad5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNzAwNDUyNFoXDTI3MTExMDAxNDUyNFowLzEtMCsGA1UEAxMk OTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUwOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkr0rrU/pax8LyRD74lszsLNe70lAraSkWUC sBlXCYVQ78cQMH/SodYVkc0ud0wh1VWNwOK3PUv2m2BzxJVhy6voPAoRmD6Oq1WX jcvWbNgktkCkS5OacCKQd6Md66wmk1ok0ifEncJ7pbIzHhQBImPWEL9yntbDSEar LuUBggUvzCqV6ATu26IXlQPq/ysWOG7GVzPyLRyx7Mv3clRHx0tF8otGQdJj/QI5 tj5YJ41LACYR9KhHh6tNwKU/Gw05GQpETK9081UVnas+zk6djmxjIC8JM1sDlUQx VOe3nCJszFKlu9/2GFnuq23DcqFIRfVbve60YuvIcBdeNg+UwwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFGQuMZ3FFxvg9s0wlFHYEJmxHa5fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85 NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzk2YWExMmZkLTIwZjYtNGYzNy1h YWI3LWEyNzM5MWFlMDk2ZS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFh ZTA5NmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBANAyeADBAHGPngDBAPHL2gwDwQCAAIwCQMHBCYg ADLAADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAg4sCAwDSbTBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw fSQuf8UwoT3n5j8KJvlaRBdU8gJRJdPGm66+eBc5T6wuQta9+0252h1Q3VKiw0/8 v10D4bgbRaT1VFLnIeAXh8SUYUkh5ooqml+YpsVzBisP0CDGsggiK2iQFrmqeGeQ L3QgWxtEfm84tlKRL9CTyObfFhqElG8g//6wdkcbWRlvhFBbeeoCnrb/eHmkYyoS 8fqd0R3zPjAj1WJ6bGZN9rFmHIFZIGsAheygcP/y9KmEIl9/hfxJPz5UMUryZeb7 PMdlISdPYY5jIRAyaqISeFZpr2Gtpoqhy64ltWzVRb8CIEXfDNtR1a6rUyEKpDbs 0S2sFV1s1N+h/+dNv2f2 -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:10 2025 by rpki-client