$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer File: a4ae31f6-760c-4fae-baac-05fd22f7432d.cer (raw, json) Hash identifier: /XMFTdNxOYd2Z2NADd3Oc2YQhWtjjb9ReKW4bdM7mJk= Subject key identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A55043404C3D87F72C3CD80B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Jun 2025 16:32:56 +0000 Certificate not after: Thu 30 Sep 2027 16:32:56 +0000 Subordinate resources: AS: 20273 IP: 67.208.48.0/22 IP: 104.204.236.0/22 IP: 128.254.244.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:55:04:34:04:c3:d8:7f:72:c3:cd:80:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 27 16:32:56 2025 GMT Not After : Sep 30 16:32:56 2027 GMT Subject: CN=a4ae31f6-760c-4fae-baac-05fd22f7432d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:60:fd:f3:23:d1:50:a1:e4:9e:0c:f1:eb: 76:b5:0b:d0:cf:ed:5b:65:35:3e:ea:89:b4:6c:bd: 84:cd:6f:07:e4:13:77:03:9b:ae:7b:07:2e:4a:9e: 20:48:5b:0a:7e:0a:95:66:28:8d:84:4d:24:60:9f: 4e:0f:5a:4a:4d:fa:3e:d2:3a:d9:20:44:b2:77:82: 17:8c:3e:02:25:43:41:10:39:15:9b:67:20:b7:39: 24:b8:2b:fa:fe:50:ab:dc:db:9f:d8:b8:67:81:20: ae:57:e5:ef:3d:a6:b0:ed:cf:94:68:63:21:0c:8a: a0:fb:98:54:b1:c8:09:b3:4d:5e:10:35:64:fc:b4: b1:67:05:eb:d4:c2:99:5d:4d:db:c2:2a:b4:88:2a: 75:cd:e9:7c:f3:fd:51:74:60:3d:61:e4:cc:b0:87: 84:bc:c4:14:88:cd:ae:0f:01:6a:27:c3:9e:09:d6: 52:ac:4e:2e:d3:61:51:05:81:c6:88:8e:06:7f:98: 35:f5:27:6d:79:d8:24:67:fb:2c:97:67:29:f6:0d: e2:bd:21:d6:3d:a7:e6:fd:15:00:c5:12:bc:a7:f3: 52:a1:b1:27:a6:09:82:4f:84:d3:e3:9d:77:0f:9d: c7:73:f6:a6:01:4e:b8:76:a5:70:20:7a:6c:99:8e: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 67.208.48.0/22 104.204.236.0/22 128.254.244.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9f:e8:e8:ea:6a:15:19:17:94:bc:d8:83:d1:8f:cd:16:57: 84:eb:a4:b0:7e:94:d2:f0:7f:3a:7a:52:78:a2:c1:6e:94:74: f3:d6:f4:e0:18:79:86:b0:af:21:21:ba:49:25:0e:4d:ba:45: 0c:55:53:82:8c:98:5c:0d:42:4d:79:83:60:cd:98:0e:5f:28: d6:23:77:1b:6d:c5:0f:20:7c:8c:0d:8f:58:0d:16:d6:7d:79: be:94:da:36:0c:03:e3:71:26:bc:5e:f6:a0:e7:d8:61:a3:a2: b8:a1:e9:13:5a:af:36:3d:d8:63:ea:8c:31:ed:1a:3c:6d:92: f8:ed:0a:7e:45:9a:89:24:46:01:eb:8e:3b:e7:7a:35:47:bf: 19:03:fa:b4:bd:8b:01:15:87:0a:d5:67:d7:7c:08:01:69:c9: aa:4b:f1:9a:6a:3b:3c:49:c0:8f:2b:d0:cb:f9:ff:1b:d5:60: fc:f8:e6:31:90:4a:6b:c0:7f:90:41:01:f3:00:53:81:7a:b8: 7e:fe:6e:fa:e8:6e:e5:6b:d0:b9:6d:9f:6b:56:61:99:50:a7: af:b7:d8:a4:d6:a8:d3:4f:c3:c8:58:e3:b7:b5:e6:ec:ad:65: 4c:5b:1c:7c:82:d2:f6:99:77:77:aa:00:ba:8e:38:98:f7:ba: b1:26:2f:8f -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEpVBDQEw9h/csPNgLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNzE2MzI1NloXDTI3MDkzMDE2MzI1NlowLzEtMCsGA1UEAxMk YTRhZTMxZjYtNzYwYy00ZmFlLWJhYWMtMDVmZDIyZjc0MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJg/fMj0VCh5J4M8et2tQvQz+1bZTU+6om0 bL2EzW8H5BN3A5uuewcuSp4gSFsKfgqVZiiNhE0kYJ9OD1pKTfo+0jrZIESyd4IX jD4CJUNBEDkVm2cgtzkkuCv6/lCr3Nuf2LhngSCuV+XvPaaw7c+UaGMhDIqg+5hU scgJs01eEDVk/LSxZwXr1MKZXU3bwiq0iCp1zel88/1RdGA9YeTMsIeEvMQUiM2u DwFqJ8OeCdZSrE4u02FRBYHGiI4Gf5g19SdtedgkZ/ssl2cp9g3ivSHWPafm/RUA xRK8p/NSobEnpgmCT4TT4513D53Hc/amAU64dqVwIHpsmY4tAwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFINHWk5Lno00AvwwkEqT/P3RalxmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h NGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJmNzQzMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E0YWUzMWY2LTc2MGMtNGZhZS1i YWFjLTA1ZmQyMmY3NDMyZC9hNGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJm NzQzMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJD0DADBAJozOwDBAKA/vQwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICTzEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbJ/o6OpqFRkXlLzYg9GPzRZXhOuksH6U 0vB/OnpSeKLBbpR089b04Bh5hrCvISG6SSUOTbpFDFVTgoyYXA1CTXmDYM2YDl8o 1iN3G23FDyB8jA2PWA0W1n15vpTaNgwD43EmvF72oOfYYaOiuKHpE1qvNj3YY+qM Me0aPG2S+O0KfkWaiSRGAeuOO+d6NUe/GQP6tL2LARWHCtVn13wIAWnJqkvxmmo7 PEnAjyvQy/n/G9Vg/PjmMZBKa8B/kEEB8wBTgXq4fv5u+uhu5WvQuW2fa1ZhmVCn r7fYpNao00/DyFjjt7Xm7K1lTFscfILS9pl3d6oAuo44mPe6sSYvjw== -----END CERTIFICATE-----Generated at Thu Jul 3 07:04:36 2025 by rpki-client