$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer File: c3a944cd-51a8-4d10-ae57-724de26a1d62.cer (raw, json) Hash identifier: ct8T0eb6Uxd4c1/i1JJhRjZos732i1gIibfLkg85i98= Subject key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849ADC158191D9CC41053169340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 18:38:14 +0000 Certificate not after: Sun 01 Aug 2027 18:38:14 +0000 Subordinate resources: AS: 25655 IP: 173.241.144.0/20 IP: 2620:103:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:c1:58:19:1d:9c:c4:10:53:16:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 28 18:38:14 2025 GMT Not After : Aug 1 18:38:14 2027 GMT Subject: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:9e:8b:21:48:28:13:52:e4:7d:43:d8:1e: 1a:2b:97:93:e1:cc:03:16:1a:2c:a3:b8:b4:56:dd: cb:ac:e6:fd:72:c9:0e:81:a3:be:5a:cc:79:2e:22: 38:d4:e9:b0:0e:53:ba:ac:47:9f:f6:ae:71:c1:eb: 51:c7:ab:eb:1d:a9:91:b8:ce:1c:41:0c:22:7f:89: ae:b0:91:31:3b:9f:86:e7:5d:b8:6b:be:47:8a:ae: 70:4f:66:2f:58:57:30:7a:c2:53:75:ea:96:b9:be: 0d:90:67:b1:f2:c4:76:74:7e:76:e0:45:97:bd:6a: 42:05:27:2e:1a:03:cf:a3:74:e5:33:de:14:42:4d: 2f:47:09:61:86:66:b5:52:08:74:3d:f8:53:3b:70: 2f:5d:f4:9f:8c:94:b3:b1:0d:10:85:62:24:9e:3a: 89:83:0a:47:a5:e6:9d:96:67:7b:29:9f:7e:19:0c: e0:df:0c:f8:5b:14:83:26:c0:df:98:22:70:cd:cb: 31:f0:61:4c:33:68:fb:3d:96:99:dc:92:55:ba:cd: ac:a3:6e:5f:f0:f7:07:a1:34:2f:ef:97:4e:51:dd: 3d:2c:ab:df:d8:55:d3:2d:e8:9f:66:bd:14:20:49: 74:f8:0c:55:ad:5e:18:79:c6:86:32:54:d7:15:d3: c0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 173.241.144.0/20 IPv6: 2620:103:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25655 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:50:d3:37:99:42:0c:14:68:dc:11:07:a3:b3:d3:1a:fd:f7: 3d:1f:00:69:8b:eb:89:6e:01:dd:d9:b3:33:39:a2:ed:46:bc: fe:2a:c1:fe:73:5e:5f:f0:8b:7c:35:d0:c0:1e:ec:24:00:cc: e6:04:8e:0b:7b:d2:21:96:74:5d:86:79:02:40:f0:9f:e1:e6: 6b:cb:2f:1a:08:f8:70:95:65:23:fe:4f:4e:13:aa:1c:54:3b: 09:39:c7:da:af:1b:db:a5:c1:b7:99:6b:30:78:42:f1:9f:d9: 46:55:00:fd:8a:37:48:37:71:6c:37:c9:ba:7f:80:3f:1f:34: 57:69:78:11:f9:18:50:a4:fa:a9:a5:47:56:4f:6f:0c:23:47: 32:7f:a6:10:2b:68:9c:40:71:9b:ed:a7:10:ec:bb:18:ce:c4: e1:1f:3c:43:df:c1:42:1c:5a:b0:52:05:7a:ef:9c:82:9d:ec: 97:2e:a1:2a:6c:24:32:33:3c:ab:24:e7:75:9c:75:f6:5d:fc: 23:54:06:6e:6f:db:59:50:3b:69:2b:1d:be:0d:14:a4:bb:ff: 20:a9:f4:53:ba:54:ba:77:1f:b4:40:74:5e:9f:b0:04:78:3a: 89:d2:61:09:42:69:c7:08:6d:a5:74:84:22:2a:73:46:76:f2: 7b:dd:49:4d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmtwVgZHZzEEFMWk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyODE4MzgxNFoXDTI3MDgwMTE4MzgxNFowLzEtMCsGA1UEAxMk YzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmExZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbmeiyFIKBNS5H1D2B4aK5eT4cwDFhoso7i0 Vt3LrOb9cskOgaO+Wsx5LiI41OmwDlO6rEef9q5xwetRx6vrHamRuM4cQQwif4mu sJExO5+G5124a75Hiq5wT2YvWFcwesJTdeqWub4NkGex8sR2dH524EWXvWpCBScu GgPPo3TlM94UQk0vRwlhhma1Ugh0PfhTO3AvXfSfjJSzsQ0QhWIknjqJgwpHpead lmd7KZ9+GQzg3wz4WxSDJsDfmCJwzcsx8GFMM2j7PZaZ3JJVus2so25f8PcHoTQv 75dOUd09LKvf2FXTLeifZr0UIEl0+AxVrV4YecaGMlTXFdPAKwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKhgn7kXxeouzP4vW0NT0cJfrX21MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j M2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2MzYTk0NGNkLTUxYTgtNGQxMC1h ZTU3LTcyNGRlMjZhMWQ2Mi9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2 YTFkNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBASt8ZAwDwQCAAIwCQMHBCYgAQMQADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJkNzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiUNM3mUIMFGjcEQejs9Ma/fc9 HwBpi+uJbgHd2bMzOaLtRrz+KsH+c15f8It8NdDAHuwkAMzmBI4Le9IhlnRdhnkC QPCf4eZryy8aCPhwlWUj/k9OE6ocVDsJOcfarxvbpcG3mWsweELxn9lGVQD9ijdI N3FsN8m6f4A/HzRXaXgR+RhQpPqppUdWT28MI0cyf6YQK2icQHGb7acQ7LsYzsTh HzxD38FCHFqwUgV675yCneyXLqEqbCQyMzyrJOd1nHX2XfwjVAZub9tZUDtpKx2+ DRSku/8gqfRTulS6dx+0QHRen7AEeDqJ0mEJQmnHCG2ldIQiKnNGdvJ73UlN -----END CERTIFICATE-----Generated at Mon May 12 20:35:58 2025 by rpki-client