$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer File: 5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer (raw, json) Hash identifier: 8pdAdKTdxZ8oMQdMLBsimLiK9upe2/KPVQbSa/IjsIU= Subject key identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A38657A15517B83BE79485080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 10:30:30 +0000 Certificate not after: Wed 28 Apr 2027 17:20:17 +0000 Subordinate resources: AS: 11276 IP: 104.238.196.0/24 IP: 199.182.205.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:65:7a:15:51:7b:83:be:79:48:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 17 10:30:30 2025 GMT Not After : Apr 28 17:20:17 2027 GMT Subject: CN=5c76d4a1-73e2-4f34-9886-0c16d4b02008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:12:7e:98:96:25:c2:4e:88:32:14:7d:86: 6c:89:ba:da:e0:5c:6b:25:65:86:a0:6e:da:b5:fc: eb:c5:62:d0:af:15:f3:40:89:29:d4:08:3f:e9:7b: 37:3b:8a:b9:5c:9e:fd:88:e4:f3:38:5e:7c:44:83: 60:14:67:9b:13:4a:ef:32:16:30:c6:36:ac:8e:8e: 7d:db:d2:bf:46:37:2b:91:be:ed:8b:d3:74:19:a8: 8f:b2:f8:b7:6e:1a:32:0f:68:2c:98:28:cc:29:22: 13:1f:fa:06:32:85:44:d0:f8:28:a0:be:60:2a:94: ce:e2:ec:57:4f:d0:58:f0:4f:da:51:c9:ab:e8:70: 1f:90:20:98:a8:2a:b4:3e:59:f0:18:cf:90:12:6e: c0:e2:4a:ef:9c:f6:4b:b2:b5:bd:f0:5b:68:2d:b0: 88:92:9e:69:85:b4:ce:d5:cd:6a:18:d1:d3:e6:cf: 2b:90:5d:ae:f9:3e:2c:e7:da:be:80:62:08:cc:42: 7f:aa:89:68:35:3a:5e:1a:35:1e:c4:5b:c5:76:90: af:07:67:f3:23:54:94:ee:50:ca:34:68:93:2b:de: 1c:e4:fc:a9:cd:c5:b4:b1:e7:00:08:59:8c:b6:b9: 11:7c:82:af:c3:9d:02:e0:f8:ae:fb:b5:53:b2:f1: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.238.196.0/24 199.182.205.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11276 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b5:e5:3e:6c:78:c6:c6:fa:58:05:24:03:b7:e9:3d:ba:16: 15:b2:f4:0a:59:0d:04:e3:ab:2e:01:23:4d:ae:1e:67:a0:f4: dc:3b:67:2d:76:fa:8a:75:20:0f:95:83:83:c6:13:ba:32:c2: 2a:bc:a1:34:52:d0:77:6c:76:49:f6:8b:1f:0b:ed:5f:51:e5: fa:c0:f6:1a:7e:e0:9e:d8:6c:b3:14:c0:26:44:d1:bb:27:e6: f4:ac:24:36:a5:ce:fe:cc:46:0d:d6:44:7e:5e:c4:ac:76:fa: e3:18:66:f9:fb:4a:c5:2e:46:af:b6:60:78:96:96:6f:71:07: 5c:0c:18:be:a9:1d:65:3a:d3:3f:0f:17:16:e1:f2:4b:45:a4: 2f:17:74:b9:e9:1d:c8:38:4b:33:0e:f3:ac:31:88:ca:51:29: a5:8a:00:e1:ed:8f:38:63:b7:0a:cc:15:3a:af:ef:c7:8e:9f: ad:f9:16:41:29:6c:07:52:f3:5b:0c:8f:47:e2:b5:b6:9e:94: 03:70:62:72:92:45:3b:c5:51:9f:2b:c2:05:fc:57:5e:8d:12: 2d:a5:3d:43:92:3d:d7:e2:dd:f5:65:51:fc:48:06:c9:53:b6: 7c:75:ef:63:b1:f0:2b:dc:72:04:0c:da:b4:a6:3e:40:48:ed: 05:f3:17:0c -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEo4ZXoVUXuDvnlIUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDYxNzEwMzAzMFoXDTI3MDQyODE3MjAxN1owLzEtMCsGA1UEAxMk NWM3NmQ0YTEtNzNlMi00ZjM0LTk4ODYtMGMxNmQ0YjAyMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqASfpiWJcJOiDIUfYZsibra4FxrJWWGoG7a tfzrxWLQrxXzQIkp1Ag/6Xs3O4q5XJ79iOTzOF58RINgFGebE0rvMhYwxjasjo59 29K/Rjcrkb7ti9N0GaiPsvi3bhoyD2gsmCjMKSITH/oGMoVE0PgooL5gKpTO4uxX T9BY8E/aUcmr6HAfkCCYqCq0PlnwGM+QEm7A4krvnPZLsrW98FtoLbCIkp5phbTO 1c1qGNHT5s8rkF2u+T4s59q+gGIIzEJ/qoloNTpeGjUexFvFdpCvB2fzI1SU7lDK NGiTK94c5PypzcW0secACFmMtrkRfIKvw50C4Piu+7VTsvHUUQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLDoHBlLPpu70cjZuKhwzY5Kw3fSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRiMDIwMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjNzZkNGExLTczZTItNGYzNC05 ODg2LTBjMTZkNGIwMjAwOC81Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRi MDIwMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo7sQDBADHts0wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLAwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEADbXlPmx4xsb6WAUkA7fpPboWFbL0ClkNBOOrLgEj Ta4eZ6D03DtnLXb6inUgD5WDg8YTujLCKryhNFLQd2x2SfaLHwvtX1Hl+sD2Gn7g nthssxTAJkTRuyfm9KwkNqXO/sxGDdZEfl7ErHb64xhm+ftKxS5Gr7ZgeJaWb3EH XAwYvqkdZTrTPw8XFuHyS0WkLxd0uekdyDhLMw7zrDGIylEppYoA4e2POGO3CswV Oq/vx46frfkWQSlsB1LzWwyPR+K1tp6UA3BicpJFO8VRnyvCBfxXXo0SLaU9Q5I9 1+Ld9WVR/EgGyVO2fHXvY7HwK9xyBAzatKY+QEjtBfMXDA== -----END CERTIFICATE-----Generated at Mon Jun 30 00:24:43 2025 by rpki-client