$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer File: 70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer (raw, json) Hash identifier: QxSg/5+lIHQoHmksrGDeUs1RkgfMjyw1bdSKAGF9zog= Subject key identifier: FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849D2C28CA92B9E0F1C89540290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 00:45:34 +0000 Certificate not after: Sun 15 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 26329 IP: 64.207.192.0/22 IP: 2604:6b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:c2:8c:a9:2b:9e:0f:1c:89:54:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 12 00:45:34 2025 GMT Not After : Aug 15 00:45:34 2027 GMT Subject: CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:31:62:7d:a4:52:61:52:56:f2:99:fe:ab: 81:99:90:64:6b:04:19:93:ae:ba:92:c3:f8:86:1c: ae:c8:c2:62:26:d8:3e:ea:fb:3b:c6:60:01:83:38: 76:f8:17:31:7c:a7:1f:41:76:98:ec:7a:8e:77:c1: c7:c3:47:dd:c2:aa:e0:0b:04:cc:82:d0:18:3c:44: e6:9e:90:c1:1d:c4:1c:10:20:43:b3:51:20:96:26: 55:bc:b6:59:7d:ac:74:e1:de:72:b6:ac:a6:f4:db: bb:84:39:45:74:21:75:9e:e6:ad:26:09:81:0b:da: 9c:5f:4c:06:f5:24:11:3a:94:09:dd:72:24:01:95: 66:a2:58:58:80:5d:f3:91:fa:6c:90:93:bc:df:80: ef:4b:27:dd:f4:6f:51:de:c4:34:20:bd:2a:e3:d2: f3:d5:b6:bc:4d:9d:34:75:02:54:d7:da:3a:3f:cb: a0:93:01:03:0c:eb:45:ab:f5:a6:e5:ae:16:b2:81: d3:e9:e3:21:48:c8:fd:97:d2:81:e3:35:de:40:54: fc:c2:42:90:24:bb:44:86:1c:8a:e9:fa:48:43:81: a9:20:63:b0:fa:38:86:28:f9:6d:97:e6:13:37:cb: ec:9f:4d:f5:52:54:cb:84:12:18:bf:3a:44:51:e9: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.207.192.0/22 IPv6: 2604:6b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26329 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:96:8b:8f:49:a1:c8:b9:46:f7:d7:2f:a3:25:69:92:04:93: 6c:99:d6:79:37:a2:dd:8c:c9:b7:76:2f:96:d5:cd:40:69:4f: 49:aa:e3:1a:0d:bc:60:d7:df:b2:99:c1:b0:c8:fc:92:04:fb: 24:29:27:55:0a:15:cb:4a:8b:c0:f6:d4:5c:f0:49:98:bc:7f: c0:1f:7e:f1:12:ce:e3:53:63:09:a6:7f:b4:67:37:7b:c6:1b: be:67:b0:a4:8d:fb:42:ec:b3:a5:df:65:dd:8b:1e:52:b9:76: c3:2d:ad:9e:25:40:4a:e5:37:03:29:26:10:cb:af:18:e1:04: 22:55:1a:59:f8:71:2d:b5:cd:19:9f:86:c5:53:c9:26:fe:76: be:f4:1e:2d:d1:99:17:84:ee:39:b9:5f:0d:36:bc:f2:a5:7b: 11:f0:d1:ab:33:ca:be:a4:c3:5a:a9:4b:32:57:31:06:76:2c: 4c:a8:e4:ec:f0:ba:b9:f9:6c:6d:0a:f2:1d:0f:43:a1:ce:1c: b8:29:00:54:d2:b4:c3:15:5e:be:f4:4f:75:b1:2e:54:37:13: 13:06:68:5f:7d:70:36:fd:24:9b:48:8a:d4:42:7b:fc:6b:44: e9:0b:f2:8b:2e:0a:66:8e:91:c6:5a:75:2d:12:97:fa:5b:20: ce:04:61:60 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEnSwoypK54PHIlUApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUxMjAwNDUzNFoXDTI3MDgxNTAwNDUzNFowLzEtMCsGA1UEAxMk NzBiZmE3YjUtYzEyZC00NGI5LTg0ZGUtZmUzM2E0ODM4ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIoxYn2kUmFSVvKZ/quBmZBkawQZk666ksP4 hhyuyMJiJtg+6vs7xmABgzh2+BcxfKcfQXaY7HqOd8HHw0fdwqrgCwTMgtAYPETm npDBHcQcECBDs1EgliZVvLZZfax04d5ytqym9Nu7hDlFdCF1nuatJgmBC9qcX0wG 9SQROpQJ3XIkAZVmolhYgF3zkfpskJO834DvSyfd9G9R3sQ0IL0q49Lz1ba8TZ00 dQJU19o6P8ugkwEDDOtFq/Wm5a4WsoHT6eMhSMj9l9KB4zXeQFT8wkKQJLtEhhyK 6fpIQ4GpIGOw+jiGKPltl+YTN8vsn031UlTLhBIYvzpEUenx0QIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFP19f3GvCFIBUyM/2ghyZ5T82VvtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 MGJmYTdiNS1jMTJkLTQ0YjktODRkZS1mZTMzYTQ4MzhmYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzcwYmZhN2I1LWMxMmQtNDRiOS04 NGRlLWZlMzNhNDgzOGZhOC83MGJmYTdiNS1jMTJkLTQ0YjktODRkZS1mZTMzYTQ4 MzhmYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJAz8AwDQQCAAIwBwMFACYEawAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZtkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjpaLj0mhyLlG99cvoyVpkgSTbJnW eTei3YzJt3YvltXNQGlPSarjGg28YNffspnBsMj8kgT7JCknVQoVy0qLwPbUXPBJ mLx/wB9+8RLO41NjCaZ/tGc3e8YbvmewpI37Quyzpd9l3YseUrl2wy2tniVASuU3 AykmEMuvGOEEIlUaWfhxLbXNGZ+GxVPJJv52vvQeLdGZF4TuOblfDTa88qV7EfDR qzPKvqTDWqlLMlcxBnYsTKjk7PC6uflsbQryHQ9Doc4cuCkAVNK0wxVevvRPdbEu VDcTEwZoX31wNv0km0iK1EJ7/GtE6Qvyiy4KZo6Rxlp1LRKX+lsgzgRhYA== -----END CERTIFICATE-----Generated at Sat Jun 14 20:41:13 2025 by rpki-client