$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer File: 381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer (raw, json) Hash identifier: X5mMg/hf/z9hH6ubm43Ai1fF8TfZcSuIuKS/86CoYys= Subject key identifier: A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849ABDC6D5F31092AF4ADE9B200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 02:21:11 +0000 Certificate not after: Sun 01 Aug 2027 02:21:11 +0000 Subordinate resources: AS: 394281 IP: 66.212.56.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:dc:6d:5f:31:09:2a:f4:ad:e9:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 02:21:11 2025 GMT Not After : Aug 1 02:21:11 2027 GMT Subject: CN=381d91d1-0a3a-48b2-aca2-5a6f28e3b324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ee:ad:99:e7:10:41:0d:64:f2:52:93:ba:67: 31:8b:a7:da:f5:d1:ec:43:f3:e2:60:44:a7:58:56: 72:d5:6e:c4:08:80:01:34:a1:6f:74:76:c8:3a:ca: 23:55:d4:93:dc:ab:13:f1:8d:65:c4:e3:f5:66:b6: 90:23:c3:4f:2f:1c:66:a2:da:22:2c:ee:7a:3a:e5: 06:78:41:2d:19:d6:0a:f3:c8:87:f1:bd:11:ea:bf: e6:af:3d:c6:5c:09:ff:8e:1d:db:ac:de:df:cc:40: 8b:f1:6b:40:ae:ce:0f:c7:c9:11:36:0c:17:db:b6: 08:8c:52:ef:a7:15:54:fd:fc:38:83:2b:53:a4:7a: fe:61:e9:9d:38:39:42:2a:16:aa:f4:39:69:20:97: 3d:df:04:58:8f:45:a7:4b:49:45:96:c2:05:6e:50: 07:12:93:31:55:8e:88:fa:39:0e:0d:05:fb:3c:12: 88:d2:a7:4b:21:1d:c5:01:c0:62:d0:96:8a:33:3e: cb:30:79:ca:25:76:80:f3:02:fd:f6:6d:08:28:7d: d4:8f:95:00:aa:47:e0:1c:aa:ca:a4:24:a8:6a:37: 45:d0:ac:6b:4f:6a:a2:5f:d9:01:aa:c1:95:2d:c5: a6:c1:1a:c9:d2:2d:05:ae:0b:33:4b:35:74:c7:bd: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.212.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394281 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:6e:f8:93:cb:9e:ce:11:3f:f5:22:54:23:9f:f7:11:94:9d: be:43:7a:53:35:4e:69:aa:54:a3:a4:e0:c5:83:b5:6e:b6:d2: ce:91:13:e0:24:5e:47:7c:12:1d:15:8a:b9:e6:25:11:8d:cf: 4f:f6:b2:16:ef:cc:b8:b8:a4:b2:02:24:fb:47:19:fd:f2:0f: e2:45:97:b9:40:fa:26:7a:f2:31:1d:64:1c:02:46:72:67:a2: d4:50:4a:37:c9:48:14:c9:94:8c:bd:2c:24:d2:dd:29:5c:f1: 71:ad:a0:e7:8d:d8:85:37:d1:90:9c:0d:c9:89:ab:13:fb:07: 5f:0e:13:aa:3a:dc:e9:c1:84:0f:51:26:20:9d:be:e7:7c:91: 14:74:25:66:4f:10:55:b1:b3:22:2e:84:88:24:fb:c1:c3:8f: 0f:32:c6:e9:66:ee:a7:2a:60:9d:8a:b0:de:8a:56:0d:e3:88: 88:88:2f:68:52:0e:c2:ce:24:17:08:b5:84:da:46:13:f2:53: ac:ab:66:d6:29:87:5b:df:8f:5e:52:59:3f:e4:98:13:4c:a6: bd:bb:3f:21:d1:55:21:80:34:e9:fd:66:10:45:6f:63:3c:52: 4e:6c:96:13:51:6b:55:f7:86:59:da:61:e4:4a:ff:d4:84:47: e2:56:b8:b7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmr3G1fMQkq9K3psgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODAyMjExMVoXDTI3MDgwMTAyMjExMVowLzEtMCsGA1UEAxMk MzgxZDkxZDEtMGEzYS00OGIyLWFjYTItNWE2ZjI4ZTNiMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge6tmecQQQ1k8lKTumcxi6fa9dHsQ/PiYESn WFZy1W7ECIABNKFvdHbIOsojVdST3KsT8Y1lxOP1ZraQI8NPLxxmotoiLO56OuUG eEEtGdYK88iH8b0R6r/mrz3GXAn/jh3brN7fzECL8WtArs4Px8kRNgwX27YIjFLv pxVU/fw4gytTpHr+YemdODlCKhaq9DlpIJc93wRYj0WnS0lFlsIFblAHEpMxVY6I +jkODQX7PBKI0qdLIR3FAcBi0JaKMz7LMHnKJXaA8wL99m0IKH3Uj5UAqkfgHKrK pCSoajdF0KxrT2qiX9kBqsGVLcWmwRrJ0i0FrgszSzV0x72nuwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKZRDh+fMZli50KlDLuQk9BGZpL3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ODFkOTFkMS0wYTNhLTQ4YjItYWNhMi01YTZmMjhlM2IzMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM4MWQ5MWQxLTBhM2EtNDhiMi1h Y2EyLTVhNmYyOGUzYjMyNC8zODFkOTFkMS0wYTNhLTQ4YjItYWNhMi01YTZmMjhl M2IzMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJC1DgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgQpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJJu+JPLns4RP/UiVCOf9xGUnb5DelM1TmmqVKOk4MWDtW62 0s6RE+AkXkd8Eh0VirnmJRGNz0/2shbvzLi4pLICJPtHGf3yD+JFl7lA+iZ68jEd ZBwCRnJnotRQSjfJSBTJlIy9LCTS3Slc8XGtoOeN2IU30ZCcDcmJqxP7B18OE6o6 3OnBhA9RJiCdvud8kRR0JWZPEFWxsyIuhIgk+8HDjw8yxulm7qcqYJ2KsN6KVg3j iIiIL2hSDsLOJBcItYTaRhPyU6yrZtYph1vfj15SWT/kmBNMpr27PyHRVSGANOn9 ZhBFb2M8Uk5slhNRa1X3hlnaYeRK/9SER+JWuLc= -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:16 2025 by rpki-client