$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer File: 63991382-256c-41c7-9e97-783d23a22bf2.cer (raw, json) Hash identifier: AZ20Gh9lZ0UcoHGUb5B/8b6U/4R1TlDW2IQtYYzEduQ= Subject key identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A5D7E90D5231E6F65592F18B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Jun 2025 17:25:57 +0000 Certificate not after: Sun 03 Oct 2027 17:25:57 +0000 Subordinate resources: IP: 23.140.120.0/24 IP: 2620:ae:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:7e:90:d5:23:1e:6f:65:59:2f:18:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 30 17:25:57 2025 GMT Not After : Oct 3 17:25:57 2027 GMT Subject: CN=63991382-256c-41c7-9e97-783d23a22bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:d2:a0:f7:6e:4b:75:8e:de:a0:14:45:0b: 4c:cc:7c:04:de:00:76:9a:05:d0:f8:c2:22:96:2d: 1e:24:84:82:c1:a0:92:c3:98:69:11:8e:a1:3e:47: c1:58:76:4f:0e:9f:3d:1f:1e:c1:f8:07:6b:8f:0a: 7e:c4:35:87:62:3c:86:ef:38:f4:a3:4b:a4:19:4e: a9:83:7d:1a:3b:7f:ae:54:b5:14:88:60:96:3b:2b: 1f:f1:d3:0c:cf:c7:8b:6a:fa:cc:fb:f9:2b:d8:8c: 4e:98:7c:3e:ca:dc:21:23:95:73:52:44:86:12:10: 16:10:e4:72:e0:85:2f:37:4e:11:ca:84:11:e8:e6: f2:ad:ca:9d:e6:1c:a8:68:49:da:b3:cd:ca:9f:57: 6b:5f:8b:94:2a:06:19:65:40:c8:30:84:5d:11:46: f8:6e:23:53:ff:a8:60:87:f0:ec:4f:a4:fc:2f:47: 16:04:c9:95:e0:56:a4:31:c4:2b:6a:7b:3c:35:4d: a6:9c:7d:c1:d5:35:7f:9c:aa:a6:2f:e4:72:a9:0b: 56:54:e5:83:fb:6d:a4:66:5d:dd:d7:34:51:d5:85: 89:3a:15:fa:cf:d7:2b:b4:48:34:86:5e:e8:db:03: 9b:a8:ea:f7:ec:af:bf:1a:b9:4a:77:8a:4f:06:56: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.140.120.0/24 IPv6: 2620:ae:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7d:a1:b5:ce:52:9f:84:d0:86:82:9e:e0:a7:6a:0b:8c:bb: 96:12:92:31:89:5f:78:c1:f8:e1:a2:90:5a:a2:cc:21:b4:0e: ed:d7:f2:06:0a:2c:c1:0d:63:64:c5:de:18:b4:9f:30:63:24: 1d:44:16:9d:fc:1a:26:e5:bc:d9:78:27:4f:80:10:3b:99:e9: 50:a3:7f:78:95:8a:90:0f:16:2c:a6:51:18:f9:ae:e1:19:fb: 6e:1b:32:54:8a:ef:cc:01:ef:66:27:4e:0d:2b:13:83:13:75: d6:df:7c:54:10:f9:04:9f:b0:65:14:87:82:ff:91:d4:a2:7f: 79:fb:8d:d9:40:5a:31:2f:9a:db:c1:0f:f4:fe:c3:bb:ec:b6: fd:d7:a5:51:a0:d8:b1:7e:70:64:e1:d5:56:d4:0f:31:fb:08: 8f:b4:af:12:d4:c3:02:74:07:96:1a:1f:fb:1b:96:69:d6:2f: 81:4a:66:cf:48:6b:60:dc:d4:81:5e:6e:8c:f7:ce:81:fb:8e: 5c:82:a8:0a:7f:ae:07:ff:da:ca:83:08:55:00:e5:91:cd:04: 8e:fc:66:7d:86:cb:05:0e:59:d2:b9:24:70:04:28:5e:8c:d5: d1:39:91:73:81:20:7e:e6:de:98:29:83:f6:ab:92:c3:ee:e9: 0e:38:ff:e1 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEpdfpDVIx5vZVkvGLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYzMDE3MjU1N1oXDTI3MTAwMzE3MjU1N1owLzEtMCsGA1UEAxMk NjM5OTEzODItMjU2Yy00MWM3LTllOTctNzgzZDIzYTIyYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApufSoPduS3WO3qAURQtMzHwE3gB2mgXQ+MIi li0eJISCwaCSw5hpEY6hPkfBWHZPDp89Hx7B+Adrjwp+xDWHYjyG7zj0o0ukGU6p g30aO3+uVLUUiGCWOysf8dMMz8eLavrM+/kr2IxOmHw+ytwhI5VzUkSGEhAWEORy 4IUvN04RyoQR6Obyrcqd5hyoaEnas83Kn1drX4uUKgYZZUDIMIRdEUb4biNT/6hg h/DsT6T8L0cWBMmV4FakMcQrans8NU2mnH3B1TV/nKqmL+RyqQtWVOWD+22kZl3d 1zRR1YWJOhX6z9crtEg0hl7o2wObqOr37K+/GrlKd4pPBlYMrQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFHfYOxLYzd313aQRQqPI52T0IRhdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 Mzk5MTM4Mi0yNTZjLTQxYzctOWU5Ny03ODNkMjNhMjJiZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzYzOTkxMzgyLTI1NmMtNDFjNy05 ZTk3LTc4M2QyM2EyMmJmMi82Mzk5MTM4Mi0yNTZjLTQxYzctOWU5Ny03ODNkMjNh MjJiZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXjHgwDwQCAAIwCQMHACYgAK4gADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBzfaG1zlKfhNCGgp7gp2oLjLuWEpIxiV94wfjhopBaoswhtA7t1/IGCizBDWNk xd4YtJ8wYyQdRBad/Bom5bzZeCdPgBA7melQo394lYqQDxYsplEY+a7hGftuGzJU iu/MAe9mJ04NKxODE3XW33xUEPkEn7BlFIeC/5HUon95+43ZQFoxL5rbwQ/0/sO7 7Lb916VRoNixfnBk4dVW1A8x+wiPtK8S1MMCdAeWGh/7G5Zp1i+BSmbPSGtg3NSB Xm6M986B+45cgqgKf64H/9rKgwhVAOWRzQSO/GZ9hssFDlnSuSRwBChejNXROZFz gSB+5t6YKYP2q5LD7ukOOP/h -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:57 2025 by rpki-client