$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e153d8fd-9a04-4be3-a4e1-810205b09e98.cer File: e153d8fd-9a04-4be3-a4e1-810205b09e98.cer (raw, json) Hash identifier: QV6gUMPG7h+hKg7AaMgrgjlZAeu52lmtGEiK6Mrm6Ug= Subject key identifier: 86:2B:AC:60:D7:4C:D7:00:1C:AA:F9:DB:56:D6:CF:08:CC:F4:FE:72 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A3FA33E26428F3A664A007E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e153d8fd-9a04-4be3-a4e1-810205b09e98/e153d8fd-9a04-4be3-a4e1-810205b09e98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e153d8fd-9a04-4be3-a4e1-810205b09e98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 00:45:36 +0000 Certificate not after: Thu 23 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 29701 IP: 198.203.222.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:a3:3e:26:42:8f:3a:66:4a:00:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 20 00:45:36 2025 GMT Not After : Sep 23 00:45:36 2027 GMT Subject: CN=e153d8fd-9a04-4be3-a4e1-810205b09e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:26:d7:4a:5b:e2:66:76:bc:bc:ff:cf:12: 0e:ad:a9:35:90:1f:42:48:ee:9c:86:bb:ba:a2:11: 69:e8:ab:81:22:a9:a4:5e:d5:43:6b:83:10:5a:2b: 26:32:9b:c8:52:4f:37:55:cd:7d:8a:12:bd:66:36: 0d:e4:58:b3:da:85:04:86:e1:ad:1a:af:90:6c:22: 85:ed:3b:aa:1a:65:91:ff:9b:48:d6:08:7f:45:bc: 04:4c:b9:ba:8f:e3:d0:37:66:c4:99:4e:0f:e9:bf: 52:83:e3:a4:aa:85:90:23:f6:2a:0a:e7:01:8c:42: 17:d2:32:b1:34:5c:f6:b8:f3:ae:86:bb:84:59:42: 4a:2d:85:51:4a:88:18:69:69:ef:19:23:73:b7:92: 4a:39:30:58:cc:93:ee:b9:42:59:d4:58:82:0b:2c: 29:68:bf:ce:41:5d:d4:4e:81:da:7b:05:5e:c4:89: c2:74:be:34:04:bd:a5:20:0f:2b:c9:ed:ee:34:39: d9:53:05:e3:f7:85:88:14:af:ff:d6:fd:a4:c2:9a: 60:5e:0a:18:b7:2f:bb:2d:cc:62:11:2f:99:fb:4f: 98:07:c3:0a:3e:90:50:96:4b:46:28:0d:a2:9c:99: a7:ec:ae:2f:a0:04:f1:55:ca:d1:97:fe:43:5f:f4: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:AC:60:D7:4C:D7:00:1C:AA:F9:DB:56:D6:CF:08:CC:F4:FE:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e153d8fd-9a04-4be3-a4e1-810205b09e98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e153d8fd-9a04-4be3-a4e1-810205b09e98/e153d8fd-9a04-4be3-a4e1-810205b09e98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.203.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:94:91:22:cd:79:14:e0:6b:0c:ee:32:50:ae:da:eb:6e:4f: 67:a5:4e:22:2e:65:f1:f0:98:5b:04:39:70:e9:5e:f7:1e:be: 9e:85:13:aa:2a:81:f0:b2:e0:7c:e0:91:ee:67:11:a8:e0:5f: db:92:77:df:cc:6d:17:76:71:6c:ec:e3:c2:94:c6:a0:d9:be: d1:0a:58:39:27:7b:89:46:d6:77:63:ca:44:04:01:14:f6:45: b4:ab:19:68:55:64:10:8d:72:fe:93:d5:45:8b:cc:c6:16:5f: bf:bf:a7:0d:f9:5d:78:0a:69:fc:41:e6:42:3d:0a:97:1b:c2: bc:9a:c4:ec:0d:44:38:10:f5:1f:8c:67:27:f9:f6:95:37:20: 28:ea:4b:90:cf:f0:32:50:c2:8b:97:af:a6:c0:96:e0:8f:43: 3d:23:b7:a7:4d:e5:42:c3:2d:bd:c4:39:a4:75:ff:d9:61:c9: 88:c2:01:dc:a7:fd:b9:7d:d0:d5:5e:90:51:eb:11:d8:0e:ef: 17:f1:68:ed:9d:fb:55:1e:bf:20:85:ca:15:b8:54:40:f6:70: 70:dc:5a:58:bc:3e:f1:47:42:79:df:b6:23:a4:32:ab:8e:17: 10:2a:a7:ae:56:25:6d:bc:53:25:1a:6b:72:73:91:9d:14:44: d4:8a:1a:ca -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEo/oz4mQo86ZkoAfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYyMDAwNDUzNloXDTI3MDkyMzAwNDUzNlowLzEtMCsGA1UEAxMk ZTE1M2Q4ZmQtOWEwNC00YmUzLWE0ZTEtODEwMjA1YjA5ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcMm10pb4mZ2vLz/zxIOrak1kB9CSO6chru6 ohFp6KuBIqmkXtVDa4MQWismMpvIUk83Vc19ihK9ZjYN5Fiz2oUEhuGtGq+QbCKF 7TuqGmWR/5tI1gh/RbwETLm6j+PQN2bEmU4P6b9Sg+OkqoWQI/YqCucBjEIX0jKx NFz2uPOuhruEWUJKLYVRSogYaWnvGSNzt5JKOTBYzJPuuUJZ1FiCCywpaL/OQV3U ToHaewVexInCdL40BL2lIA8rye3uNDnZUwXj94WIFK//1v2kwppgXgoYty+7Lcxi ES+Z+0+YB8MKPpBQlktGKA2inJmn7K4voATxVcrRl/5DX/QHBwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIYrrGDXTNcAHKr521bWzwjM9P5yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l MTUzZDhmZC05YTA0LTRiZTMtYTRlMS04MTAyMDViMDllOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2UxNTNkOGZkLTlhMDQtNGJlMy1h NGUxLTgxMDIwNWIwOWU5OC9lMTUzZDhmZC05YTA0LTRiZTMtYTRlMS04MTAyMDVi MDllOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGy94wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dAUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAT5SRIs15FOBrDO4yUK7a625PZ6VOIi5l8fCYWwQ5cOle9x6+ noUTqiqB8LLgfOCR7mcRqOBf25J338xtF3ZxbOzjwpTGoNm+0QpYOSd7iUbWd2PK RAQBFPZFtKsZaFVkEI1y/pPVRYvMxhZfv7+nDfldeApp/EHmQj0KlxvCvJrE7A1E OBD1H4xnJ/n2lTcgKOpLkM/wMlDCi5evpsCW4I9DPSO3p03lQsMtvcQ5pHX/2WHJ iMIB3Kf9uX3Q1V6QUesR2A7vF/Fo7Z37VR6/IIXKFbhUQPZwcNxaWLw+8UdCed+2 I6Qyq44XECqnrlYlbbxTJRprcnORnRRE1Ioayg== -----END CERTIFICATE-----Generated at Sun Jun 29 15:56:39 2025 by rpki-client