$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer File: 21bc3777-de7d-4aed-88bc-9c652ed17843.cer (raw, json) Hash identifier: CKcR7dnXFSfrCF6774CPKlSiZXb1oCaW9JjovUv6ADg= Subject key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A3C5CFA0D2CD544740DD89380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 20:36:36 +0000 Certificate not after: Tue 21 Sep 2027 20:36:36 +0000 Subordinate resources: AS: 46188 IP: 199.21.176.0/22 IP: 199.45.28.0/22 IP: 208.93.12.0/22 IP: 2604:5300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:5c:fa:0d:2c:d5:44:74:0d:d8:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 18 20:36:36 2025 GMT Not After : Sep 21 20:36:36 2027 GMT Subject: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:62:e4:ff:f7:c8:67:81:45:d9:35:9d:c4: 45:ee:3c:f7:00:69:ea:99:4a:f9:fd:c4:b0:d7:b9: 2e:97:bc:d2:fe:8d:42:55:68:5d:41:20:6d:50:19: 0a:53:e6:85:ac:73:16:39:38:60:06:64:1e:c5:fc: d4:9b:e8:7a:b7:2c:40:bc:96:91:d5:c0:10:9c:11: f6:1a:c2:b7:74:1f:0a:b4:ef:a9:33:b6:6d:fb:24: 3c:b4:a1:e0:b6:bf:de:3e:37:3f:ca:43:4f:6b:1c: 74:e4:52:45:ad:c9:0f:ad:b3:41:07:5f:a2:8a:06: aa:c3:64:c9:b6:00:40:58:a1:f3:45:9b:0b:2f:cf: a9:9a:56:01:16:05:75:d8:c8:2d:8d:49:48:5d:0d: 60:ba:a4:99:65:05:66:80:65:ff:61:a2:a7:64:ff: d3:bc:57:f1:52:35:35:03:0d:40:5b:b0:42:65:05: bc:8d:da:73:1a:be:00:3d:2d:02:a4:c9:c6:7c:a7: 5e:3a:f5:90:7d:15:f8:de:a1:9b:1a:28:65:b1:78: 4c:3c:cd:c8:73:51:33:81:d3:78:e7:77:5c:ed:91: 8e:bc:3a:c3:d7:6a:d7:93:4a:d2:8e:6e:7e:77:3b: 4e:32:3f:25:05:d6:f4:b8:00:4a:27:fe:3c:51:8a: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 IPv6: 2604:5300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46188 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:44:db:b5:6f:46:14:04:91:fc:0a:34:90:6c:74:6b:9e:37: 73:92:1f:e1:bd:a1:6e:0d:08:06:4d:46:d5:19:f7:2c:d9:7e: 62:65:f6:88:ea:45:d9:e5:04:8a:81:51:46:19:3f:d3:d5:dc: 75:44:28:03:0f:24:c7:ff:49:75:2e:12:21:79:be:f6:31:f8: 4b:55:d4:92:3f:b4:92:61:8d:4e:e8:e4:87:6c:b8:92:dc:37: 10:68:d0:70:6d:77:f2:44:ed:3c:d9:ad:f5:ca:05:0d:dd:8b: 10:50:2f:a7:f6:e8:c2:b4:ef:ce:3a:5d:ae:fd:7a:1a:28:1e: 52:5a:4d:99:0a:3e:81:37:77:fe:27:2d:2f:af:8e:9e:de:86: c6:59:d4:e3:af:92:08:41:eb:5f:76:9c:38:d3:b4:f0:81:45: 98:1b:c1:25:52:2e:0c:88:74:5c:7a:a4:e5:c0:a2:b1:d4:45: e8:42:2c:97:98:f9:22:96:8c:f2:03:db:54:6d:65:18:d0:1b: 37:fa:46:bb:11:35:5b:85:b8:43:86:79:39:0d:58:7b:a0:d6: f2:76:85:f3:96:e1:d7:15:e7:7f:58:50:a9:e5:76:8e:c7:d9: ad:98:7c:af:c2:9a:43:1c:5b:e9:a9:cc:45:a3:21:db:7a:86: 58:85:0b:ac -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEo8XPoNLNVEdA3Yk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxODIwMzYzNloXDTI3MDkyMTIwMzYzNlowLzEtMCsGA1UEAxMk MjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQJi5P/3yGeBRdk1ncRF7jz3AGnqmUr5/cSw 17kul7zS/o1CVWhdQSBtUBkKU+aFrHMWOThgBmQexfzUm+h6tyxAvJaR1cAQnBH2 GsK3dB8KtO+pM7Zt+yQ8tKHgtr/ePjc/ykNPaxx05FJFrckPrbNBB1+iigaqw2TJ tgBAWKHzRZsLL8+pmlYBFgV12MgtjUlIXQ1guqSZZQVmgGX/YaKnZP/TvFfxUjU1 Aw1AW7BCZQW8jdpzGr4APS0CpMnGfKdeOvWQfRX43qGbGihlsXhMPM3Ic1EzgdN4 53dc7ZGOvDrD12rXk0rSjm5+dztOMj8lBdb0uABKJ/48UYozPQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFFHRTKVQ0NByAEa/nF/nRQh+tFhRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIxYmMzNzc3LWRlN2QtNGFlZC04 OGJjLTljNjUyZWQxNzg0My8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVk MTc4NDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBALHFbADBALHLRwDBALQXQwwDQQCAAIwBwMFACYE UwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALRsMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADVE27VvRhQE kfwKNJBsdGueN3OSH+G9oW4NCAZNRtUZ9yzZfmJl9ojqRdnlBIqBUUYZP9PV3HVE KAMPJMf/SXUuEiF5vvYx+EtV1JI/tJJhjU7o5IdsuJLcNxBo0HBtd/JE7TzZrfXK BQ3dixBQL6f26MK07846Xa79ehooHlJaTZkKPoE3d/4nLS+vjp7ehsZZ1OOvkghB 6192nDjTtPCBRZgbwSVSLgyIdFx6pOXAorHURehCLJeY+SKWjPID21RtZRjQGzf6 RrsRNVuFuEOGeTkNWHug1vJ2hfOW4dcV539YUKnldo7H2a2YfK/CmkMcW+mpzEWj Idt6hliFC6w= -----END CERTIFICATE-----Generated at Thu Jul 3 07:04:25 2025 by rpki-client