$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer File: 0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer (raw, json) Hash identifier: hi3ls1EnF8RicQ5hhqWqyTDdui0vfAYQUvB7CsUkPXs= Subject key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849BB947ED9456A9E3EE58C1900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 May 2025 17:29:11 +0000 Certificate not after: Fri 06 Aug 2027 17:29:11 +0000 Subordinate resources: AS: 32095 IP: 67.217.254.0/23 IP: 74.205.240.0/23 IP: 142.79.48.0/21 IP: 157.120.200.0/21 IP: 161.115.224.0/19 IP: 168.235.144.0/20 IP: 173.209.232.0/23 IP: 199.115.176.0/22 IP: 209.46.2.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:94:7e:d9:45:6a:9e:3e:e5:8c:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 3 17:29:11 2025 GMT Not After : Aug 6 17:29:11 2027 GMT Subject: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:97:b7:2d:16:22:07:69:9b:52:23:63:9c: b6:2c:cd:50:94:ac:ea:b7:45:f6:5b:ad:4c:91:81: db:22:ac:0c:bf:1d:fb:7f:69:4b:b7:9c:ae:71:f2: 35:20:70:99:fa:d1:37:25:37:6b:47:a7:88:50:72: d4:c7:ec:ce:8c:a5:c7:21:93:9b:d2:a8:24:7e:fd: a3:89:2e:e1:b1:db:27:b3:73:9f:4f:24:8f:b6:fb: a1:5b:e6:2f:df:41:a1:64:b8:7d:af:dc:c3:18:db: 8f:57:b8:29:e8:53:35:6a:d6:d2:4f:1a:fb:e5:28: a0:8b:80:04:ff:80:0a:c2:43:68:4c:d7:d6:de:04: 3d:70:66:e6:fe:59:4b:45:0e:2d:f1:cb:a5:4e:cc: 94:b4:5c:bf:e2:5a:b0:cb:f7:da:7e:4e:31:f9:2d: 5e:1a:a0:8f:fd:9a:2b:ce:5b:5a:2f:91:90:66:94: b3:c3:83:b2:a1:58:b2:97:3d:0e:a9:fa:73:92:df: d0:89:95:dd:78:58:37:69:01:a5:45:62:b8:5c:c3: 98:d9:6f:48:32:31:cd:9d:9d:8c:38:1d:87:97:97: de:93:49:fb:60:8c:30:a6:e3:0a:8d:09:c9:36:00: 37:23:50:bc:56:01:1a:ee:f8:a6:45:89:04:56:32: 42:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.254.0/23 74.205.240.0/23 142.79.48.0/21 157.120.200.0/21 161.115.224.0/19 168.235.144.0/20 173.209.232.0/23 199.115.176.0/22 209.46.2.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32095 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:73:88:00:5b:62:39:b8:f1:e2:f2:ce:bb:33:a7:d1:d2:55: a4:20:ad:d0:47:49:76:32:cb:2a:d9:75:ef:c1:b2:42:f4:4d: e8:e6:36:bd:53:eb:6d:21:50:01:2b:10:df:c0:df:e1:4b:86: 38:cf:8f:ce:77:63:23:70:50:3e:1d:12:3f:3a:af:56:c6:13: 3b:cc:c3:0a:d1:37:02:15:b7:40:34:43:fc:98:96:24:48:3c: d4:96:2b:70:63:f6:c9:83:34:22:0b:db:37:c1:1c:28:09:71: 9a:37:77:04:9a:e4:43:35:6b:2d:6b:ab:35:e3:df:15:38:ae: be:b7:fa:b0:5d:25:89:8b:a2:10:f3:08:60:5a:d7:ef:2f:54: 10:d3:58:cc:8a:8c:95:7a:b9:54:b8:26:ed:88:94:61:29:f5: 95:af:b2:9f:28:12:53:08:02:30:a2:c2:4f:1d:93:64:24:48: 1c:ad:ec:85:fb:dc:c1:35:7d:82:0c:4f:f3:70:b6:d3:3b:f8: 84:8a:f8:ac:69:2e:a7:d3:95:08:fd:4b:7d:69:9a:4e:3f:16: 4b:a7:3b:0b:ac:ab:74:b2:e2:95:41:41:f4:57:b4:5f:38:c4: da:f8:39:59:93:c7:f9:9e:91:fa:fb:ee:93:21:15:13:47:53: c0:ed:e4:7a -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEm7lH7ZRWqePuWMGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwMzE3MjkxMVoXDTI3MDgwNjE3MjkxMVowLzEtMCsGA1UEAxMk MGIyZTY0ZGEtMGNmMS00YmFmLWJlOTQtYzIxNmIyYjgxZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+eXty0WIgdpm1IjY5y2LM1QlKzqt0X2W61M kYHbIqwMvx37f2lLt5yucfI1IHCZ+tE3JTdrR6eIUHLUx+zOjKXHIZOb0qgkfv2j iS7hsdsns3OfTySPtvuhW+Yv30GhZLh9r9zDGNuPV7gp6FM1atbSTxr75Sigi4AE /4AKwkNoTNfW3gQ9cGbm/llLRQ4t8culTsyUtFy/4lqwy/fafk4x+S1eGqCP/Zor zltaL5GQZpSzw4OyoViylz0Oqfpzkt/QiZXdeFg3aQGlRWK4XMOY2W9IMjHNnZ2M OB2Hl5fek0n7YIwwpuMKjQnJNgA3I1C8VgEa7vimRYkEVjJC2wIDAQABo4IESjCC BEYwHQYDVR0OBBYEFMpXsVk2wv5xTa+QUcrutL3ECKuXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w YjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJiODFkMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBiMmU2NGRhLTBjZjEtNGJhZi1i ZTk0LWMyMTZiMmI4MWQxYi8wYjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJi ODFkMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MDwEAgABMDYDBAFD2f4DBAFKzfADBAOOTzADBAOdeMgDBAWhc+AD BASo65ADBAGt0egDBALHc7ADBAHRLgIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fV8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAinOIAFtiObjx4vLOuzOn0dJVpCCt0EdJdjLLKtl178GyQvRN 6OY2vVPrbSFQASsQ38Df4UuGOM+PzndjI3BQPh0SPzqvVsYTO8zDCtE3AhW3QDRD /JiWJEg81JYrcGP2yYM0IgvbN8EcKAlxmjd3BJrkQzVrLWurNePfFTiuvrf6sF0l iYuiEPMIYFrX7y9UENNYzIqMlXq5VLgm7YiUYSn1la+ynygSUwgCMKLCTx2TZCRI HK3shfvcwTV9ggxP83C20zv4hIr4rGkup9OVCP1LfWmaTj8WS6c7C6yrdLLilUFB 9Fe0XzjE2vg5WZPH+Z6R+vvukyEVE0dTwO3keg== -----END CERTIFICATE-----Generated at Sun May 11 09:30:27 2025 by rpki-client