$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer File: 48a8571f-1cf3-4341-b350-3e442e19e11b.cer (raw, json) Hash identifier: OWKTfDDJAh0jS3jsdimUcWZ2vWrZYOzSbxQCuw1YqK4= Subject key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A5DD2B36BEDDC8E0FF0549780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Jun 2025 20:15:29 +0000 Certificate not after: Sun 03 Oct 2027 19:47:26 +0000 Subordinate resources: AS: 398770 IP: 163.123.191.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:d2:b3:6b:ed:dc:8e:0f:f0:54:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 30 20:15:29 2025 GMT Not After : Oct 3 19:47:26 2027 GMT Subject: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:13:3e:b8:f1:91:32:16:51:af:b7:db:03: 06:7c:0f:ef:3b:8a:e4:66:54:ed:7f:6c:6c:aa:c1: c1:8c:be:8c:2c:23:3a:07:71:fe:27:41:b4:e9:91: 9f:48:7c:36:25:aa:e3:eb:44:de:cd:8c:33:37:65: 31:6d:9c:a5:12:75:8c:e9:3a:54:94:53:40:e7:29: 5f:01:fc:01:79:d6:7a:00:fa:07:ef:01:ee:12:dd: 61:17:4d:7b:fc:f1:2d:be:c3:c0:61:a9:4e:89:fa: 3c:d5:2a:5a:b7:52:f0:a8:03:e2:b2:d2:94:14:a9: d8:17:52:6b:4b:b4:86:e9:d6:a5:76:47:7b:66:35: 01:e2:21:f5:8b:6b:f7:ea:86:9e:be:a5:74:0a:02: 13:4d:43:5d:84:ac:08:26:cf:4f:13:91:46:8b:0d: 2a:4a:44:5d:fb:e3:b2:c7:d2:27:af:b5:c4:7f:68: c0:9d:a9:26:b6:e4:c3:39:f4:9b:c2:9a:dc:59:02: c8:dc:93:ea:c9:d8:a1:ba:25:38:2d:21:b3:03:65: 3b:39:37:a9:3e:a7:a0:b2:9d:0d:a8:0f:df:53:fc: 9c:6e:64:43:fc:1c:23:fe:86:5a:9c:d6:2a:23:94: cf:7e:6f:83:24:9a:58:92:75:d9:b1:a9:71:3a:12: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 163.123.191.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398770 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:65:1d:cc:49:db:52:3f:72:59:66:8a:4c:1e:f7:24:e1:7f: 2c:b2:70:aa:ae:c4:60:f1:59:9d:9f:7f:ca:30:33:a6:97:2f: 11:ea:2e:09:ca:18:15:8c:74:98:52:4a:15:44:ce:ba:8f:d7: ae:97:73:db:61:6e:db:86:17:b3:14:6f:2a:86:8c:85:88:8b: 90:93:f8:43:55:28:5e:20:cf:ca:f1:ac:b1:70:e8:71:02:6d: 45:19:73:82:c8:45:41:e2:64:cd:af:0b:9e:f2:cc:80:c1:95: 78:46:a5:a3:04:f4:36:a3:8f:1d:14:0e:68:5d:f9:25:03:9a: 58:38:08:27:6a:e5:54:84:7b:01:d6:cb:9a:1e:df:db:e7:35: 23:02:b3:df:0a:d4:c9:56:e7:67:7c:70:e4:56:4a:cf:b8:b5: d0:10:91:03:b3:dc:24:30:f4:46:d5:18:45:54:28:01:9c:ff: 19:e6:d1:d1:a4:d8:97:87:2d:bd:be:c4:14:90:1f:8d:e5:a6: b7:d2:a9:6f:29:f8:02:18:a5:bb:b2:ee:33:4f:19:33:46:25: 57:98:16:94:24:cf:df:46:e8:72:b6:17:cf:e8:cb:2a:79:0c: fa:c6:44:37:b3:6e:27:76:b2:f2:bc:a1:bc:95:2c:f9:32:95: 07:3d:6c:b7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpd0rNr7dyOD/BUl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYzMDIwMTUyOVoXDTI3MTAwMzE5NDcyNlowLzEtMCsGA1UEAxMk NDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTllMTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkMTPrjxkTIWUa+32wMGfA/vO4rkZlTtf2xs qsHBjL6MLCM6B3H+J0G06ZGfSHw2Jarj60TezYwzN2UxbZylEnWM6TpUlFNA5ylf AfwBedZ6APoH7wHuEt1hF017/PEtvsPAYalOifo81Spat1LwqAPistKUFKnYF1Jr S7SG6daldkd7ZjUB4iH1i2v36oaevqV0CgITTUNdhKwIJs9PE5FGiw0qSkRd++Oy x9Inr7XEf2jAnakmtuTDOfSbwprcWQLI3JPqydihuiU4LSGzA2U7OTepPqegsp0N qA/fU/ycbmRD/Bwj/oZanNYqI5TPfm+DJJpYknXZsalxOhL/1QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEuLKycWN57DAe3ADWfQmDmNYxPtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ4YTg1NzFmLTFjZjMtNDM0MS1i MzUwLTNlNDQyZTE5ZTExYi80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUx OWUxMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACje78wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhWyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA5lHcxJ21I/cllmikwe9yThfyyycKquxGDxWZ2ff8owM6aX LxHqLgnKGBWMdJhSShVEzrqP166Xc9thbtuGF7MUbyqGjIWIi5CT+ENVKF4gz8rx rLFw6HECbUUZc4LIRUHiZM2vC57yzIDBlXhGpaME9Dajjx0UDmhd+SUDmlg4CCdq 5VSEewHWy5oe39vnNSMCs98K1MlW52d8cORWSs+4tdAQkQOz3CQw9EbVGEVUKAGc /xnm0dGk2JeHLb2+xBSQH43lprfSqW8p+AIYpbuy7jNPGTNGJVeYFpQkz99G6HK2 F8/oyyp5DPrGRDezbid2svK8obyVLPkylQc9bLc= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:02 2025 by rpki-client