$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer File: f84ea5c3-3226-48ac-838b-0fdf69176854.cer (raw, json) Hash identifier: k6hglxLKIDIFR/+hT/dM+GjnlPWqvU33VA7Kwpf8GSw= Subject key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A45389BA9A02EB5A329FF2500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Jun 2025 00:45:36 +0000 Certificate not after: Sat 25 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 14362 AS: 22540 IP: 192.101.77.0/24 IP: 199.33.72.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:38:9b:a9:a0:2e:b5:a3:29:ff:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 22 00:45:36 2025 GMT Not After : Sep 25 00:45:36 2027 GMT Subject: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:95:8b:71:9a:65:b2:25:f6:60:7b:8d:70: 18:f7:c9:3e:96:4d:c4:a7:cc:16:de:a5:97:44:67: 65:d0:9d:91:9d:9b:bc:14:ae:89:70:29:54:45:10: 7d:1b:96:74:2b:b8:95:04:5c:6e:47:16:d4:37:a9: e7:00:86:32:ef:49:fc:3f:54:ce:e7:d9:6e:7b:57: 98:8c:18:da:3d:eb:70:b2:5f:24:fb:ae:3e:5f:e9: 99:26:09:63:a0:0e:47:bb:da:60:95:af:64:6c:89: c5:74:d1:49:d0:13:df:53:be:2d:26:ed:2a:44:4f: 9e:09:e3:34:0f:ef:8e:dc:1e:bc:9e:11:04:53:1e: 4d:85:67:ea:24:be:98:d9:93:94:1e:6c:19:ef:7b: c6:e7:61:f9:b1:c8:5d:cc:19:f3:d8:a0:12:1b:c8: 42:2a:66:42:3e:00:33:c4:d3:61:e2:90:2d:01:05: 65:fa:45:01:37:2d:bf:76:4e:51:03:48:4f:f1:9d: 52:7c:1d:c8:e4:ba:cc:fe:a5:32:5c:6e:48:87:81: 4d:b5:a3:22:89:74:4f:9a:b0:8a:37:be:f1:8b:33: db:4b:7e:e1:2a:b8:67:2b:f3:e7:8d:ec:a7:d3:19: 74:f7:39:49:41:ef:a6:ef:cd:0d:f5:78:68:ab:d0: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.101.77.0/24 199.33.72.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14362 22540 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e3:46:3f:e2:a4:78:98:79:9d:f8:8e:7d:8c:30:7d:80:d5: 3b:13:d4:26:e0:fb:6a:68:b3:73:f2:51:32:e1:14:ce:56:30: 42:c6:0b:1c:15:d2:46:4e:8c:3a:2d:4a:83:0b:98:26:26:2a: 17:51:6d:84:e3:da:c0:e8:2f:39:d9:14:b6:c7:49:fa:9d:ea: 00:6e:8d:28:a9:c2:0a:31:1c:82:a9:91:8c:cb:90:69:6d:a5: c9:bd:1e:47:de:9a:96:47:d3:fa:1e:70:28:c7:50:77:f3:c3: c7:30:46:c5:02:26:ec:0e:69:a7:c7:8d:10:ca:d8:b3:79:38: 20:6d:5d:48:27:a3:4b:5c:4c:99:a7:53:a2:be:d8:79:2f:50: 85:2a:2f:ac:98:e7:a8:45:9c:b3:de:9b:21:8c:97:25:38:d3: 14:c4:49:03:68:7b:80:8a:56:7a:e7:da:32:85:37:30:16:15: 4d:05:5b:3e:53:99:f1:5c:30:2f:11:e9:f8:b1:bb:1c:31:80: 28:6d:90:af:5c:c8:81:3d:7f:a8:3c:d9:80:ff:f4:95:7f:19: 4f:ab:4a:73:5c:87:70:85:9e:f3:2a:ef:17:c8:a9:5a:35:12: d0:c0:3a:9a:2e:de:20:ff:06:6a:20:b4:57:c7:44:c6:39:6c: a5:73:9f:d2 -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWEpFOJupoC61oyn/JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYyMjAwNDUzNloXDTI3MDkyNTAwNDUzNlowLzEtMCsGA1UEAxMk Zjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2ODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZaVi3GaZbIl9mB7jXAY98k+lk3Ep8wW3qWX RGdl0J2RnZu8FK6JcClURRB9G5Z0K7iVBFxuRxbUN6nnAIYy70n8P1TO59lue1eY jBjaPetwsl8k+64+X+mZJgljoA5Hu9pgla9kbInFdNFJ0BPfU74tJu0qRE+eCeM0 D++O3B68nhEEUx5NhWfqJL6Y2ZOUHmwZ73vG52H5schdzBnz2KASG8hCKmZCPgAz xNNh4pAtAQVl+kUBNy2/dk5RA0hP8Z1SfB3I5LrM/qUyXG5Ih4FNtaMiiXRPmrCK N77xizPbS37hKrhnK/Pnjeyn0xl09zlJQe+m780N9Xhoq9ASUwIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFIJxnmTu+2xa6UH97h1VqDIWO+5CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m ODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Y4NGVhNWMzLTMyMjYtNDhhYy04 MzhiLTBmZGY2OTE3Njg1NC9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkx NzY4NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAZU0DBALHIUgwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICOBoCAlgMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADXjRj/ipHiYeZ34jn2MMH2A1TsT1Cbg+2po s3PyUTLhFM5WMELGCxwV0kZOjDotSoMLmCYmKhdRbYTj2sDoLznZFLbHSfqd6gBu jSipwgoxHIKpkYzLkGltpcm9HkfempZH0/oecCjHUHfzw8cwRsUCJuwOaafHjRDK 2LN5OCBtXUgno0tcTJmnU6K+2HkvUIUqL6yY56hFnLPemyGMlyU40xTESQNoe4CK Vnrn2jKFNzAWFU0FWz5TmfFcMC8R6fixuxwxgChtkK9cyIE9f6g82YD/9JV/GU+r SnNch3CFnvMq7xfIqVo1EtDAOpou3iD/BmogtFfHRMY5bKVzn9I= -----END CERTIFICATE-----Generated at Tue Jul 1 14:56:58 2025 by rpki-client