$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c.cer File: a147e187-b8c3-49c2-a3ce-43f40332387c.cer (raw, json) Hash identifier: WK4N3NsPcKTCPqoXWbXo7wAB5a3A3QAsi23xf/92GOM= Subject key identifier: B0:3D:57:00:7F:9B:A4:9C:5E:51:E1:65:84:DD:B3:A8:B8:F0:34:CE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849E8934612A1A04294C8A83D18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/a147e187-b8c3-49c2-a3ce-43f40332387c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 20:18:06 +0000 Certificate not after: Sun 22 Aug 2027 20:18:06 +0000 Subordinate resources: AS: 13717 IP: 23.170.152.0/24 IP: 2602:f996::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e8:93:46:12:a1:a0:42:94:c8:a8:3d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 19 20:18:06 2025 GMT Not After : Aug 22 20:18:06 2027 GMT Subject: CN=a147e187-b8c3-49c2-a3ce-43f40332387c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:c5:b2:eb:c7:4f:38:06:4d:38:02:55:3c: dc:fd:43:5b:cb:6c:31:be:61:83:ca:ba:03:f9:03: 9b:0f:1f:d6:95:a1:32:44:b8:c8:92:26:65:ca:97: 64:0f:b6:dc:60:00:ff:f1:73:00:a0:a5:9e:a1:00: ed:b4:52:e7:0a:30:3e:04:1b:c6:9b:0d:d2:15:1e: 73:72:5b:2a:ea:c7:4f:45:b2:33:0f:27:0b:a1:79: 98:da:63:c3:2d:b9:e6:44:14:5e:2f:cf:88:91:e2: 17:d4:e2:4b:96:d5:f6:b2:81:d1:0b:78:1d:ce:55: d5:da:65:cf:8b:63:0e:2f:42:41:6c:79:e7:7f:9a: 72:db:7c:3b:8a:80:8a:cf:f1:a9:38:ad:51:df:ee: c9:75:36:a2:3a:b9:d5:a2:b8:f6:0b:2f:c2:93:2e: e7:78:76:75:eb:f5:2e:8e:4f:0b:b6:43:2e:45:dd: 5b:af:00:f8:e6:71:e9:37:a1:cc:45:d8:b4:9c:8f: e9:cd:46:b6:fd:3c:53:b1:90:ff:16:32:a3:a5:d7: 0a:e9:a3:e1:18:58:28:aa:bc:df:7b:ab:f7:6e:8a: e8:ae:54:7e:30:43:68:d2:ba:d3:19:db:77:79:56: d3:fe:fe:82:5c:d1:0a:36:d2:0d:fd:28:9f:4f:7e: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3D:57:00:7F:9B:A4:9C:5E:51:E1:65:84:DD:B3:A8:B8:F0:34:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/a147e187-b8c3-49c2-a3ce-43f40332387c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.170.152.0/24 IPv6: 2602:f996::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13717 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6e:91:a0:f5:37:13:a6:0c:7b:e2:aa:2b:ee:bb:33:26:3f: c5:9a:70:a5:5f:5e:d9:18:d3:02:42:cd:0b:3b:fb:21:5b:6b: 1a:9a:9b:16:3a:9f:8d:a1:3f:00:37:87:3d:11:a9:6e:1e:4c: be:46:d8:f2:7b:e6:dc:6a:8b:60:a5:e9:f2:8c:89:f4:81:bf: 39:55:9b:fd:14:08:40:9d:13:1b:af:ad:80:e9:c5:a2:e7:b6: cf:9c:99:21:e4:b1:95:d9:a5:3f:99:8a:81:2e:7c:87:78:70: a4:f6:f5:46:4a:5c:22:1c:fc:3a:46:fc:50:7a:a2:72:d6:e6: 82:9a:89:44:9a:51:7b:22:74:64:1c:5d:eb:fc:bd:0e:72:7e: e8:b9:55:20:c5:02:87:2f:b5:77:e8:74:91:de:5a:ad:cf:ee: b4:ad:5f:ef:2c:ab:9f:cd:12:8d:41:e8:57:7d:0f:9b:91:95: a0:bf:0c:ce:e9:cb:31:78:63:54:01:6a:b1:31:a0:64:4e:de: 69:9b:79:65:ca:fa:1f:bd:9d:94:84:ba:33:af:c9:f7:c5:87: 14:2e:5d:d6:6d:53:e8:cb:f7:03:5e:15:e3:59:56:2d:e5:26: 1b:0f:b2:35:bc:84:3e:ae:c3:8e:62:b3:4e:bd:1a:0f:25:2f: df:1b:c5:7a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEnok0YSoaBClMioPRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxOTIwMTgwNloXDTI3MDgyMjIwMTgwNlowLzEtMCsGA1UEAxMk YTE0N2UxODctYjhjMy00OWMyLWEzY2UtNDNmNDAzMzIzODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa3FsuvHTzgGTTgCVTzc/UNby2wxvmGDyroD +QObDx/WlaEyRLjIkiZlypdkD7bcYAD/8XMAoKWeoQDttFLnCjA+BBvGmw3SFR5z clsq6sdPRbIzDycLoXmY2mPDLbnmRBReL8+IkeIX1OJLltX2soHRC3gdzlXV2mXP i2MOL0JBbHnnf5py23w7ioCKz/GpOK1R3+7JdTaiOrnVorj2Cy/Cky7neHZ16/Uu jk8LtkMuRd1brwD45nHpN6HMRdi0nI/pzUa2/TxTsZD/FjKjpdcK6aPhGFgoqrzf e6v3bororlR+MENo0rrTGdt3eVbT/v6CXNEKNtIN/SifT37VnQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLA9VwB/m6ScXlHhZYTds6i48DTOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h MTQ3ZTE4Ny1iOGMzLTQ5YzItYTNjZS00M2Y0MDMzMjM4N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ExNDdlMTg3LWI4YzMtNDljMi1h M2NlLTQzZjQwMzMyMzg3Yy9hMTQ3ZTE4Ny1iOGMzLTQ5YzItYTNjZS00M2Y0MDMz MjM4N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqpgwDgQCAAIwCAMGACYC+ZYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjWVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADxukaD1NxOmDHviqivuuzMmP8Wa cKVfXtkY0wJCzQs7+yFbaxqamxY6n42hPwA3hz0RqW4eTL5G2PJ75txqi2Cl6fKM ifSBvzlVm/0UCECdExuvrYDpxaLnts+cmSHksZXZpT+ZioEufId4cKT29UZKXCIc /DpG/FB6onLW5oKaiUSaUXsidGQcXev8vQ5yfui5VSDFAocvtXfodJHeWq3P7rSt X+8sq5/NEo1B6Fd9D5uRlaC/DM7pyzF4Y1QBarExoGRO3mmbeWXK+h+9nZSEujOv yffFhxQuXdZtU+jL9wNeFeNZVi3lJhsPsjW8hD6uw45is069Gg8lL98bxXo= -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:13 2025 by rpki-client