$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer File: 6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer (raw, json) Hash identifier: 10d5xzcgnAjdaDAVfAKBhefOBTd94DyBcHVT54UEOlU= Subject key identifier: 39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A14A3D0612E7E9AA8477C7E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Jun 2025 15:07:00 +0000 Certificate not after: Tue 07 Sep 2027 15:07:00 +0000 Subordinate resources: AS: 394962 IP: 172.110.142.0/24 IP: 192.82.49.0/24 IP: 199.87.1.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:a3:d0:61:2e:7e:9a:a8:47:7c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 4 15:07:00 2025 GMT Not After : Sep 7 15:07:00 2027 GMT Subject: CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:e5:05:53:b2:6a:c6:4a:a1:87:77:57:27: 8a:12:16:2e:fc:c0:ef:8a:e7:8e:1b:af:2e:6a:49: a3:38:37:10:8a:21:3b:58:d0:86:28:d2:2c:e2:71: d4:e5:6b:30:6f:c5:1c:3f:95:ba:a0:da:44:fa:f7: 8a:c6:ad:1c:6a:08:c6:3e:d2:77:21:54:26:18:03: 72:99:1f:12:ca:a0:fe:32:21:a1:f1:8b:8e:fe:c9: 24:e7:b6:9b:4e:71:74:c0:4b:a0:f4:05:c1:53:2a: 4f:50:fc:9c:fd:42:ba:be:a6:ae:f6:ae:32:27:b1: fb:14:7c:e0:8b:92:a1:0d:01:b0:0d:9f:7b:32:a2: a8:68:f8:d2:51:a0:d7:94:7d:ff:0a:df:12:a4:51: 5a:46:f6:af:6f:59:09:16:26:7b:8b:06:70:08:df: b0:ab:e7:27:59:46:dd:da:7a:51:16:ee:cc:32:26: 62:d4:0d:70:ba:cc:a1:6b:f3:03:8c:3a:ff:09:1c: 0c:bd:ce:c9:7f:0d:61:fb:d5:8e:76:d7:96:d7:72: 94:37:05:5b:0e:0a:7f:bd:95:99:aa:f4:b2:55:e8: 35:97:57:2e:ac:76:f2:94:a5:96:57:83:4b:73:ab: e3:5e:f3:c7:f5:35:1c:7f:84:f4:23:13:3f:56:a8: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 172.110.142.0/24 192.82.49.0/24 199.87.1.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394962 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b4:b5:71:1e:f7:4b:1a:2f:61:8f:fa:5d:c5:fc:3e:ef:c0: be:9b:16:fb:61:fd:37:c9:e3:df:d5:ce:d6:57:4c:9c:8c:6c: ce:c4:c6:80:26:5d:71:67:ee:cd:65:b9:1c:ae:2b:36:d2:49: 32:04:8a:55:b7:49:d2:53:0c:50:d7:53:1a:95:7a:37:f2:db: a6:87:0e:bd:4b:d0:3d:1b:32:7a:2d:b4:b8:40:96:52:46:06: 11:cf:91:56:90:0b:9f:9c:d2:ed:d8:82:0d:b0:06:81:08:fc: 2c:93:6c:c6:f1:34:21:eb:0e:7b:9f:e8:13:a3:ee:15:eb:69: 66:89:65:c8:2d:b5:3d:8f:09:59:4c:f2:a4:16:e6:7e:6b:3c: 80:9a:ed:da:43:0b:24:32:33:06:b3:56:ed:d2:a9:14:c9:33: e5:cf:88:06:8a:d9:41:ac:5e:f7:ea:8e:52:f8:a8:d3:13:d9: b4:a5:96:59:ee:de:22:0e:18:11:ac:88:58:d1:d8:f7:cd:55: bc:5b:c8:d4:93:86:67:6f:af:d2:50:8f:b2:39:5b:58:84:f3: b7:af:f2:5e:7a:58:cc:25:f1:01:23:30:2b:3a:ab:e9:af:27: 18:09:8f:20:11:8f:3a:9c:2f:97:10:b7:63:bf:bd:e1:a9:bf: 24:20:2e:b2 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEoUo9BhLn6aqEd8foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNDE1MDcwMFoXDTI3MDkwNzE1MDcwMFowLzEtMCsGA1UEAxMk NmJiZDlmNGItNGE5NC00ZjMzLThmN2ItNDM3MmY3ZTQzNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDnlBVOyasZKoYd3VyeKEhYu/MDviueOG68u akmjODcQiiE7WNCGKNIs4nHU5Wswb8UcP5W6oNpE+veKxq0cagjGPtJ3IVQmGANy mR8SyqD+MiGh8YuO/skk57abTnF0wEug9AXBUypPUPyc/UK6vqau9q4yJ7H7FHzg i5KhDQGwDZ97MqKoaPjSUaDXlH3/Ct8SpFFaRvavb1kJFiZ7iwZwCN+wq+cnWUbd 2npRFu7MMiZi1A1wusyha/MDjDr/CRwMvc7Jfw1h+9WOdteW13KUNwVbDgp/vZWZ qvSyVeg1l1curHbylKWWV4NLc6vjXvPH9TUcf4T0IxM/Vqh+fQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFDlBkXC8dq0V7ybypHKbE8Qp2qwGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 YmJkOWY0Yi00YTk0LTRmMzMtOGY3Yi00MzcyZjdlNDM0NDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZiYmQ5ZjRiLTRhOTQtNGYzMy04 ZjdiLTQzNzJmN2U0MzQ0My82YmJkOWY0Yi00YTk0LTRmMzMtOGY3Yi00MzcyZjdl NDM0NDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBACsbo4DBADAUjEDBADHVwEwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBgbSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGG0tXEe90saL2GP+l3F/D7vwL6bFvth /TfJ49/VztZXTJyMbM7ExoAmXXFn7s1luRyuKzbSSTIEilW3SdJTDFDXUxqVejfy 26aHDr1L0D0bMnottLhAllJGBhHPkVaQC5+c0u3Ygg2wBoEI/CyTbMbxNCHrDnuf 6BOj7hXraWaJZcgttT2PCVlM8qQW5n5rPICa7dpDCyQyMwazVu3SqRTJM+XPiAaK 2UGsXvfqjlL4qNMT2bSlllnu3iIOGBGsiFjR2PfNVbxbyNSThmdvr9JQj7I5W1iE 87ev8l56WMwl8QEjMCs6q+mvJxgJjyARjzqcL5cQt2O/veGpvyQgLrI= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:13 2025 by rpki-client