$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer File: 3b78e0f0-5f02-4f2e-a084-899096441110.cer (raw, json) Hash identifier: 8VC3OS52sx1ZTo406uPL82sr/dLnDK7I7w/9iu6H8qc= Subject key identifier: 02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A44A192E293E438CC9717A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Jun 2025 19:41:17 +0000 Certificate not after: Fri 24 Sep 2027 19:41:17 +0000 Subordinate resources: AS: 401778 IP: 23.140.76.0/24 IP: 2602:f615::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:44:a1:92:e2:93:e4:38:cc:97:17:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 21 19:41:17 2025 GMT Not After : Sep 24 19:41:17 2027 GMT Subject: CN=3b78e0f0-5f02-4f2e-a084-899096441110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:e9:04:bd:15:46:66:58:4d:79:22:fd:b9: ec:c6:ed:72:a8:be:e7:cf:40:1a:10:0c:82:a0:c5: 6a:e4:ed:a3:26:cd:c4:11:3b:ce:72:c8:ce:ab:d1: 74:c7:21:eb:54:e0:58:22:ad:d2:db:ba:72:63:06: 5f:6e:4e:77:25:22:15:20:f4:be:bc:94:2e:b0:7a: 8d:1e:f8:39:54:87:b4:c4:08:b0:88:3a:a2:b8:9e: e9:84:74:3f:2a:91:71:b8:fb:7a:02:a3:d7:c6:24: 32:b6:17:8a:36:7d:83:08:4a:c0:b2:c9:b2:cf:d4: 94:86:e8:ee:7b:d0:e2:80:e4:18:80:df:90:8c:f3: 83:ea:a1:bf:48:ac:66:1d:70:45:fe:53:64:b7:89: cd:76:23:b6:43:8a:31:34:9c:2b:14:24:58:7e:73: b6:52:f3:ba:74:82:b8:0d:b2:19:0b:c9:d7:0a:8f: a3:c4:35:9f:d8:8e:88:07:12:b4:1e:73:56:5a:62: fb:f7:5a:40:19:d0:28:16:d8:f6:8d:33:c7:46:1f: 15:06:23:01:c5:c7:75:cc:70:6e:33:9e:45:2f:c3: 98:58:c1:eb:60:73:5f:12:08:85:79:95:6e:98:8a: 63:4e:c0:c1:8d:8a:9b:a5:73:06:d1:2c:30:70:e1: 7b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.140.76.0/24 IPv6: 2602:f615::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401778 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:54:45:23:69:1e:41:08:c2:ea:07:35:03:bf:11:73:cf:bf: 6a:da:8f:21:e7:98:cc:f4:41:9a:74:a3:3b:b7:0f:1b:b2:d6: b4:31:74:48:9c:90:de:bd:2c:b3:d8:04:33:68:af:b6:52:37: 9b:b0:57:27:96:f8:ea:da:64:9b:de:75:4f:84:72:ab:f1:c3: 3b:85:fb:73:ae:94:e7:a7:e8:7b:70:b9:c6:06:0f:a7:90:67: 85:ec:fb:e0:5a:62:ae:c9:3f:0a:76:07:a3:5b:df:44:32:96: ac:91:78:0d:48:68:e8:e7:2e:d3:1f:d0:2e:e5:08:68:a0:5e: f3:e8:13:2b:31:a0:bb:27:08:85:37:3b:c7:3d:f9:07:c0:2a: da:7b:1b:3f:a9:92:ba:b8:3c:a8:57:46:cd:c0:53:38:66:bc: 4f:c7:7a:14:a8:d8:95:c8:3a:42:b7:aa:65:de:28:47:1b:75: 35:bc:09:c7:f3:3a:bf:9b:94:0e:ad:19:a0:80:07:ac:cb:db: 09:01:f1:05:24:75:10:b1:27:b3:06:f3:49:66:de:a7:b5:3b: 36:a3:ff:42:2b:ce:57:47:be:49:4c:df:8f:f9:51:a9:95:ec: b2:81:d4:9d:1f:d6:3d:06:5d:bf:3c:99:91:20:4e:f0:13:b5: 34:a7:ca:0f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpEoZLik+Q4zJcXqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyMTE5NDExN1oXDTI3MDkyNDE5NDExN1owLzEtMCsGA1UEAxMk M2I3OGUwZjAtNWYwMi00ZjJlLWEwODQtODk5MDk2NDQxMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRPpBL0VRmZYTXki/bnsxu1yqL7nz0AaEAyC oMVq5O2jJs3EETvOcsjOq9F0xyHrVOBYIq3S27pyYwZfbk53JSIVIPS+vJQusHqN Hvg5VIe0xAiwiDqiuJ7phHQ/KpFxuPt6AqPXxiQytheKNn2DCErAssmyz9SUhuju e9DigOQYgN+QjPOD6qG/SKxmHXBF/lNkt4nNdiO2Q4oxNJwrFCRYfnO2UvO6dIK4 DbIZC8nXCo+jxDWf2I6IBxK0HnNWWmL791pAGdAoFtj2jTPHRh8VBiMBxcd1zHBu M55FL8OYWMHrYHNfEgiFeZVumIpjTsDBjYqbpXMG0SwwcOF7owIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAItE6gtVKpa2rRrO32Do6H6cyrtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z Yjc4ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkwOTY0NDExMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNiNzhlMGYwLTVmMDItNGYyZS1h MDg0LTg5OTA5NjQ0MTExMC8zYjc4ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkwOTY0 NDExMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjEwwDgQCAAIwCAMGACYC9hUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhcjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCVEUjaR5BCMLqBzUDvxFzz79q 2o8h55jM9EGadKM7tw8bsta0MXRInJDevSyz2AQzaK+2UjebsFcnlvjq2mSb3nVP hHKr8cM7hftzrpTnp+h7cLnGBg+nkGeF7PvgWmKuyT8KdgejW99EMpaskXgNSGjo 5y7TH9Au5QhooF7z6BMrMaC7JwiFNzvHPfkHwCraexs/qZK6uDyoV0bNwFM4ZrxP x3oUqNiVyDpCt6pl3ihHG3U1vAnH8zq/m5QOrRmggAesy9sJAfEFJHUQsSezBvNJ Zt6ntTs2o/9CK85XR75JTN+P+VGpleyygdSdH9Y9Bl2/PJmRIE7wE7U0p8oP -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:49 2025 by rpki-client