$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer File: 0e527a59-f1c7-4664-a1be-8a0911a07432.cer (raw, json) Hash identifier: inpVbZGFKFqeCDg459dbgQ0Fmnls9+COA6pIsrasj2Q= Subject key identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584A1E230B0279DD7AA55962E600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Jun 2025 00:45:37 +0000 Certificate not after: Sat 11 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 40864 IP: 23.159.240.0/24 IP: 96.125.192.0/20 IP: 104.245.64.0 -- 104.245.66.255 IP: 2606:1b80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:23:0b:02:79:dd:7a:a5:59:62:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 8 00:45:37 2025 GMT Not After : Sep 11 00:45:37 2027 GMT Subject: CN=0e527a59-f1c7-4664-a1be-8a0911a07432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:f3:f1:84:04:4b:d8:a2:a2:72:09:47:df: 66:82:0a:61:b8:a7:6f:bb:50:63:0e:cf:a8:a3:db: 90:51:49:80:d3:3f:9e:4a:a0:cc:e9:86:ab:78:7e: 5b:ab:c0:01:5a:c2:a8:f8:e1:df:f4:9f:15:6e:18: 01:c2:02:cd:28:02:9f:b3:bd:a5:4c:03:43:d8:a1: c2:ef:0d:ff:ae:16:bc:d7:f9:93:ca:d6:eb:e9:89: 6e:2e:6f:b2:ea:6f:92:43:80:04:43:af:b3:c1:0c: 3d:df:bb:78:2b:10:84:27:d3:87:e9:5c:91:2f:0a: c7:15:88:6f:12:ed:6f:c5:7c:b1:2d:f4:dc:bc:5a: 69:a0:60:8d:34:75:30:05:10:ce:92:c4:c4:7f:27: 5a:cf:40:9f:6c:fd:d1:4f:b4:4f:a6:d4:48:31:ad: 06:50:8a:0c:47:07:7e:ae:2f:0b:55:a2:81:7e:6b: 55:6a:48:df:a9:60:67:61:80:73:af:fc:ce:3c:00: f2:0d:00:9b:ad:11:9f:9b:56:0b:84:7b:cb:c0:5b: 18:34:65:7c:3f:44:41:70:f8:f4:4b:a1:41:0f:55: 5d:30:c0:84:e2:ad:41:a1:61:44:49:4e:22:f1:93: 61:4c:26:05:11:27:cd:0a:79:61:27:21:5e:1a:3f: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.159.240.0/24 96.125.192.0/20 104.245.64.0-104.245.66.255 IPv6: 2606:1b80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40864 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3b:fe:94:bd:21:01:29:52:89:65:64:5a:eb:16:31:13:40: 54:3c:0b:56:70:62:63:f3:46:47:8c:62:bc:f1:2a:16:bd:ff: e1:fc:77:82:11:dd:65:5a:cc:4c:e0:32:e5:d0:df:1c:86:e0: 87:c7:cc:5d:18:e6:0a:fd:14:c4:f4:f6:2b:10:43:4c:cf:46: 43:1a:70:73:15:b9:a1:cd:b1:d4:fb:bb:37:9f:73:d5:26:49: 59:74:ab:7e:94:71:0b:44:58:0f:cc:73:51:73:6d:90:87:43: 33:91:5f:81:2a:a2:93:36:40:c0:82:1d:eb:28:cc:55:b1:9d: c0:a5:53:c8:4a:32:2b:26:e7:09:4f:82:c5:4e:da:6c:f9:00: ee:4f:54:5d:68:5e:dc:7f:b3:3d:fd:76:82:d5:bd:db:f4:be: 57:a0:ed:ce:48:cf:a1:08:58:21:f9:a5:92:aa:64:da:53:c1: d7:a8:cf:5e:9b:99:fb:b0:c3:f8:3d:e4:bf:50:42:c2:5b:08: f5:9b:4c:76:48:6e:5d:0b:fa:60:74:55:70:fe:0f:8a:f4:b1: 3a:69:b2:b6:49:26:b3:c3:0c:37:25:e3:be:a1:84:02:3e:86: ef:9a:b7:39:b6:fa:af:62:a2:c7:b1:b7:03:5b:83:ea:98:16: 05:67:df:ea -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEoeIwsCed16pVli5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDYwODAwNDUzN1oXDTI3MDkxMTAwNDUzN1owLzEtMCsGA1UEAxMk MGU1MjdhNTktZjFjNy00NjY0LWExYmUtOGEwOTExYTA3NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF/z8YQES9iionIJR99mggphuKdvu1BjDs+o o9uQUUmA0z+eSqDM6YareH5bq8ABWsKo+OHf9J8VbhgBwgLNKAKfs72lTAND2KHC 7w3/rha81/mTytbr6YluLm+y6m+SQ4AEQ6+zwQw937t4KxCEJ9OH6VyRLwrHFYhv Eu1vxXyxLfTcvFppoGCNNHUwBRDOksTEfydaz0CfbP3RT7RPptRIMa0GUIoMRwd+ ri8LVaKBfmtVakjfqWBnYYBzr/zOPADyDQCbrRGfm1YLhHvLwFsYNGV8P0RBcPj0 S6FBD1VdMMCE4q1BoWFESU4i8ZNhTCYFESfNCnlhJyFeGj/Q7QIDAQABo4IEPjCC BDowHQYDVR0OBBYEFGopc4bnJ3VTxXxZdlaBojfuTN3KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8w ZTUyN2E1OS1mMWM3LTQ2NjQtYTFiZS04YTA5MTFhMDc0MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzBlNTI3YTU5LWYxYzctNDY2NC1h MWJlLThhMDkxMWEwNzQzMi8wZTUyN2E1OS1mMWM3LTQ2NjQtYTFiZS04YTA5MTFh MDc0MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBoDBAAXn/ADBARgfcAwDAMEBmj1QAMEAGj1QjANBAIA AjAHAwUAJgYbgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAn6AwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Rzv+lL0hASlSiWVkWusWMRNAVDwLVnBiY/NGR4xivPEqFr3/4fx3ghHdZVrMTOAy 5dDfHIbgh8fMXRjmCv0UxPT2KxBDTM9GQxpwcxW5oc2x1Pu7N59z1SZJWXSrfpRx C0RYD8xzUXNtkIdDM5FfgSqikzZAwIId6yjMVbGdwKVTyEoyKybnCU+CxU7abPkA 7k9UXWhe3H+zPf12gtW92/S+V6DtzkjPoQhYIfmlkqpk2lPB16jPXpuZ+7DD+D3k v1BCwlsI9ZtMdkhuXQv6YHRVcP4PivSxOmmytkkms8MMNyXjvqGEAj6G75q3Obb6 r2Kix7G3A1uD6pgWBWff6g== -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:48 2025 by rpki-client