$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer File: 2123fd68-596c-4806-bd9e-91167a6dc6d4.cer (raw, json) Hash identifier: 6LI5rqZA5iRLw1x2EwTgoxA0hMw7xeO1a3VX0FMA1kc= Subject key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4223318AD7DC065D138A3458 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 22:15:01 +0000 Certificate not after: Thu 23 Sep 2027 22:15:01 +0000 Subordinate resources: AS: 401442 IP: 23.137.196.0/24 IP: 2604:ba0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:23:31:8a:d7:dc:06:5d:13:8a:34:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 20 22:15:01 2025 GMT Not After : Sep 23 22:15:01 2027 GMT Subject: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:71:13:ee:8f:8c:8e:15:2d:ef:c0:e5:fa: 5d:9e:6b:60:29:00:f3:57:29:94:cc:59:8d:9f:b4: c5:04:58:3b:63:65:23:9f:ae:55:0c:44:36:68:28: f2:08:f8:ab:a2:09:cd:6b:dc:8d:f0:e9:cc:01:3b: a5:8a:b4:cc:cc:26:2c:2c:72:0e:85:f3:fb:a8:c3: ca:4e:fb:a4:e6:89:c7:45:14:95:27:37:af:08:2e: 67:75:45:a4:b2:bd:e0:7b:8f:56:1c:8d:f8:f3:61: 05:8a:57:7d:c5:c3:1d:ad:ec:af:ba:29:90:2b:11: 9a:55:b2:e8:b4:45:f1:78:2e:52:93:90:b2:1d:a9: 64:2e:f3:be:f0:67:39:fd:ea:10:48:72:6e:2d:f4: 1b:75:5a:24:54:44:20:ad:77:c4:0e:67:61:cb:e8: c9:a6:91:ab:59:ad:48:2d:60:7c:26:31:49:df:21: fd:bf:ec:5e:32:f7:6f:fd:bb:38:bd:3c:ca:37:46: eb:d6:0a:12:cc:b3:a5:06:95:25:af:cf:d7:2f:81: 69:01:3f:51:45:7a:90:48:85:d7:41:1f:bd:45:1c: 94:ac:b6:1c:e2:96:fa:f3:ac:3b:36:34:c4:22:1a: 20:4f:65:cc:8a:3a:6c:d1:4e:46:97:57:02:19:ff: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.196.0/24 IPv6: 2604:ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401442 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ad:23:06:fb:57:2d:9c:ca:57:e8:a1:9f:59:af:bb:5b:05: c7:4b:be:27:f2:bf:98:06:c8:d2:8d:28:e8:bc:48:2a:0c:c8: 25:8c:46:bf:ab:16:01:e7:7c:4c:e2:a6:6a:a6:0f:47:ca:87: 63:6f:5a:61:a1:8d:12:61:56:5d:4c:52:84:11:a6:64:e9:ff: 5c:3f:ea:9a:57:55:b2:c3:dc:8b:a0:e9:7b:0d:02:27:06:1f: 2b:03:71:56:5b:48:19:5f:cf:eb:33:e6:3f:97:b4:2b:34:e9: ff:c1:84:4d:32:d7:39:3b:3e:96:ec:08:08:ee:f8:37:f5:1c: b2:23:34:ba:f0:ec:10:da:d9:00:2a:8c:4e:3a:4c:ac:ee:a3: 2d:11:76:4f:17:31:af:d3:40:bc:54:ae:45:b9:7f:5b:ad:6d: 2a:f2:f5:2e:02:9b:f1:d8:bd:5d:94:3e:6d:db:a4:14:25:d1: 0d:a9:38:fb:d9:c3:d3:88:7a:7b:d5:da:11:b7:fe:c7:40:40: 7c:8e:bf:57:92:a2:ce:c2:18:7c:eb:cc:63:0f:61:8e:7c:e5: ae:8e:13:cb:e6:a4:3c:73:21:ff:2a:47:70:35:bd:55:f0:90: 6b:24:ab:53:b5:6e:a5:26:64:aa:3c:f5:df:ca:ca:f2:3c:d5: e3:6a:08:de -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpCIzGK19wGXROKNFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyMDIyMTUwMVoXDTI3MDkyMzIyMTUwMVowLzEtMCsGA1UEAxMk MjEyM2ZkNjgtNTk2Yy00ODA2LWJkOWUtOTExNjdhNmRjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE9xE+6PjI4VLe/A5fpdnmtgKQDzVymUzFmN n7TFBFg7Y2Ujn65VDEQ2aCjyCPirognNa9yN8OnMATulirTMzCYsLHIOhfP7qMPK Tvuk5onHRRSVJzevCC5ndUWksr3ge49WHI3482EFild9xcMdreyvuimQKxGaVbLo tEXxeC5Sk5CyHalkLvO+8Gc5/eoQSHJuLfQbdVokVEQgrXfEDmdhy+jJppGrWa1I LWB8JjFJ3yH9v+xeMvdv/bs4vTzKN0br1goSzLOlBpUlr8/XL4FpAT9RRXqQSIXX QR+9RRyUrLYc4pb686w7NjTEIhogT2XMijps0U5Gl1cCGf8LIwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJhO/PsdEeRQgSrH6TWsxhpJ9oGLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2ZGM2ZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIxMjNmZDY4LTU5NmMtNDgwNi1i ZDllLTkxMTY3YTZkYzZkNC8yMTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2 ZGM2ZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXicQwDQQCAAIwBwMFACYEC6AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiAiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEatIwb7Vy2cylfooZ9Zr7tbBcdL vifyv5gGyNKNKOi8SCoMyCWMRr+rFgHnfEzipmqmD0fKh2NvWmGhjRJhVl1MUoQR pmTp/1w/6ppXVbLD3Iug6XsNAicGHysDcVZbSBlfz+sz5j+XtCs06f/BhE0y1zk7 PpbsCAju+Df1HLIjNLrw7BDa2QAqjE46TKzuoy0Rdk8XMa/TQLxUrkW5f1utbSry 9S4Cm/HYvV2UPm3bpBQl0Q2pOPvZw9OIenvV2hG3/sdAQHyOv1eSos7CGHzrzGMP YY585a6OE8vmpDxzIf8qR3A1vVXwkGskq1O1bqUmZKo89d/KyvI81eNqCN4= -----END CERTIFICATE-----Generated at Thu Jul 3 06:55:02 2025 by rpki-client