$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer File: 3f190b80-0d25-47ff-904c-8479d592f576.cer (raw, json) Hash identifier: B1YOx2BWQzUyFeJOAEAhel5O43qHO/BlUsBwjRFAUz0= Subject key identifier: DC:35:ED:75:89:12:98:B7:A2:3E:F1:34:D4:67:BC:30:0E:76:BD:19 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4F6E7A69F682B21EEDD57580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 16:32:13 +0000 Certificate not after: Tue 28 Sep 2027 16:32:13 +0000 Subordinate resources: AS: 397322 IP: 192.203.241.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:6e:7a:69:f6:82:b2:1e:ed:d5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 25 16:32:13 2025 GMT Not After : Sep 28 16:32:13 2027 GMT Subject: CN=3f190b80-0d25-47ff-904c-8479d592f576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:6f:1e:15:fb:ad:8e:cb:45:25:26:d0:82: bf:e5:ad:4a:45:27:14:c8:e9:90:da:06:7f:a9:21: 55:64:b5:b7:8a:c9:19:b2:72:fd:3c:c8:0f:3a:5e: f4:27:f1:a4:db:65:fd:a6:31:e4:20:aa:4f:69:95: 0f:12:0e:b9:47:00:8c:11:b2:1e:c6:dd:bc:21:0b: 16:0b:a3:b5:1f:26:de:b1:b3:70:d3:9e:bc:bd:a6: ed:69:03:e6:17:a4:45:b7:12:c9:58:ac:ef:2f:cc: 33:18:a4:d5:ae:af:55:9e:67:00:10:d6:3b:14:86: 69:b9:d5:36:9a:ea:51:37:7f:d0:0e:da:dd:16:6a: f0:18:45:b3:4c:30:55:90:fc:03:3f:24:a0:05:8e: 8b:c0:cb:2b:b4:36:bb:19:b3:a5:4e:2c:63:57:85: 74:81:88:60:0d:06:b1:e1:6a:3f:8f:40:d2:28:a2: 16:be:3f:04:7b:ab:ef:48:84:1c:46:60:04:6a:74: 0d:6a:17:0d:9d:2d:b3:cf:89:68:00:ed:6f:3b:02: e6:c6:87:08:c0:f0:cb:11:c9:b3:ef:80:31:ea:ac: e3:03:f2:40:ed:e0:1a:3d:5e:e3:d7:5e:ca:6a:63: 38:28:c4:a8:b3:e0:35:ac:cf:5f:34:54:6d:6b:e0: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:35:ED:75:89:12:98:B7:A2:3E:F1:34:D4:67:BC:30:0E:76:BD:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.203.241.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397322 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a3:5f:b2:87:ab:25:c3:7c:bd:4e:4a:c5:2d:77:93:37:a6: 4c:74:5f:c4:e7:7d:17:c7:54:ae:d9:65:5b:2c:30:dc:ee:a9: 18:33:39:b7:db:c1:8c:af:1e:a6:b4:4f:7b:06:89:79:7e:d9: d6:b0:2f:77:b9:c9:29:75:59:3a:88:ff:82:b7:2f:8e:65:40: 64:8f:6f:63:67:0c:d9:2f:53:ea:f7:3d:1f:23:40:52:a1:09: 34:dc:f4:76:f4:c9:c5:65:da:8a:ad:f0:ed:11:29:79:f1:c3: 45:0a:0a:9e:2a:ae:75:7d:ae:fd:17:a2:b8:ea:e3:85:00:bd: 46:5e:46:9b:12:bf:9b:ef:d2:be:ae:55:08:6e:cb:63:57:01: 36:49:f4:05:cd:df:60:d6:5e:ec:0a:57:f3:87:82:75:53:e7: bc:c8:21:6e:85:94:67:02:20:0e:11:28:48:36:f4:47:b9:e3: c1:ee:42:71:da:de:fa:c4:04:b1:ed:b1:33:7d:f3:15:b3:3f: d8:4a:b0:f7:54:ac:20:15:32:c6:80:ee:40:12:61:f7:da:04: 44:36:9a:1b:8c:68:f4:a2:9c:3b:8a:5b:00:13:a8:76:9a:af: 2e:41:da:51:62:d5:e5:72:46:ab:51:e5:54:25:12:43:69:a8: 0a:87:b0:46 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpPbnpp9oKyHu3VdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNTE2MzIxM1oXDTI3MDkyODE2MzIxM1owLzEtMCsGA1UEAxMk M2YxOTBiODAtMGQyNS00N2ZmLTkwNGMtODQ3OWQ1OTJmNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0idvHhX7rY7LRSUm0IK/5a1KRScUyOmQ2gZ/ qSFVZLW3iskZsnL9PMgPOl70J/Gk22X9pjHkIKpPaZUPEg65RwCMEbIext28IQsW C6O1HybesbNw0568vabtaQPmF6RFtxLJWKzvL8wzGKTVrq9VnmcAENY7FIZpudU2 mupRN3/QDtrdFmrwGEWzTDBVkPwDPySgBY6LwMsrtDa7GbOlTixjV4V0gYhgDQax 4Wo/j0DSKKIWvj8Ee6vvSIQcRmAEanQNahcNnS2zz4loAO1vOwLmxocIwPDLEcmz 74Ax6qzjA/JA7eAaPV7j117KamM4KMSos+A1rM9fNFRta+CXywIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNw17XWJEpi3oj7xNNRnvDAOdr0ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ZjE5MGI4MC0wZDI1LTQ3ZmYtOTA0Yy04NDc5ZDU5MmY1NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNmMTkwYjgwLTBkMjUtNDdmZi05 MDRjLTg0NzlkNTkyZjU3Ni8zZjE5MGI4MC0wZDI1LTQ3ZmYtOTA0Yy04NDc5ZDU5 MmY1NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAy/EwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhAKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADijX7KHqyXDfL1OSsUtd5M3pkx0X8TnfRfHVK7ZZVssMNzu qRgzObfbwYyvHqa0T3sGiXl+2dawL3e5ySl1WTqI/4K3L45lQGSPb2NnDNkvU+r3 PR8jQFKhCTTc9Hb0ycVl2oqt8O0RKXnxw0UKCp4qrnV9rv0Xorjq44UAvUZeRpsS v5vv0r6uVQhuy2NXATZJ9AXN32DWXuwKV/OHgnVT57zIIW6FlGcCIA4RKEg29Ee5 48HuQnHa3vrEBLHtsTN98xWzP9hKsPdUrCAVMsaA7kASYffaBEQ2mhuMaPSinDuK WwATqHaary5B2lFi1eVyRqtR5VQlEkNpqAqHsEY= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:04 2025 by rpki-client