$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer File: 91b93de6-6446-4623-a181-5425af4f85cb.cer (raw, json) Hash identifier: OwX1lA2+4sRTA805OjnGoQeKRTP521OwvfvDyab5Hyk= Subject key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849DB22987704E1F294867AB180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 36459 IP: 140.82.112.0/20 IP: 143.55.64.0/20 IP: 192.30.252.0/22 IP: 2606:50c0::/32 IP: 2620:112:3000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:98:77:04:e1:f2:94:86:7a:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=91b93de6-6446-4623-a181-5425af4f85cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:62:c0:82:10:dd:9b:d7:8c:12:3b:12:f2: c8:4e:26:90:48:48:b8:cb:bc:c0:b0:b1:6e:9b:c6: cc:87:34:1f:f5:41:3a:0b:ba:b7:0a:ce:11:23:b2: fa:ea:e4:cf:0e:6c:22:27:7d:28:ae:0e:62:fc:a1: 4a:db:14:14:8c:88:bd:f5:78:c3:e0:79:e7:f1:9c: 23:88:1c:6f:d0:ca:f8:7b:6b:1d:0b:8d:26:ee:f1: 6f:79:24:dd:4d:68:23:2b:1e:11:7a:31:4c:a0:06: ab:46:26:7a:0e:e8:12:9e:e6:4f:0a:8b:1f:40:48: 45:e5:6b:0f:93:90:49:bd:5e:2a:d4:b0:eb:fb:59: c8:3d:39:d4:2b:9e:36:bf:50:8a:4f:22:83:7e:75: be:44:d9:99:14:4d:43:23:0d:45:c6:5a:e4:fa:ca: 1b:a0:fd:35:c2:22:24:d2:e8:5e:e3:35:a0:4a:a1: 9f:ee:a8:4f:ac:3d:5c:c9:da:9c:ec:0e:46:29:e7: 9d:e6:e2:a8:87:3a:ef:79:b7:f6:c7:d6:67:57:24: d3:71:11:e4:75:ae:f9:85:cc:d2:92:2b:6e:b8:d6: 77:37:65:24:a1:0d:0c:57:c1:a5:39:2e:ca:7f:75: 95:45:40:8c:7b:a3:d3:c1:96:cd:ee:ca:ab:31:d4: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 140.82.112.0/20 143.55.64.0/20 192.30.252.0/22 IPv6: 2606:50c0::/32 2620:112:3000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36459 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e0:ab:2c:9d:b0:6b:19:cc:13:a0:ff:9c:3c:5e:2a:ac:10: e3:cd:51:85:dc:c3:09:f1:11:6e:d1:94:93:d1:ec:55:b7:74: db:8e:1c:53:df:2d:ee:a5:b3:c3:ed:18:31:19:21:a9:59:8f: b5:2f:fd:5c:2f:6e:e9:4b:df:59:d5:ef:c0:fa:d1:dd:aa:f2: fc:18:18:93:da:bc:db:8d:d7:ba:17:3d:ee:09:1f:68:82:c0: a2:02:77:b6:46:a7:aa:28:fd:30:60:10:70:31:65:1e:91:77: c2:f2:bb:60:33:6b:05:1d:b4:96:37:7d:41:2f:3d:d8:84:57: 7f:55:d6:04:b3:df:8f:a3:aa:ce:ea:1f:fa:26:7e:50:da:25: 20:b8:7c:41:3c:5f:0d:21:36:ce:07:c2:74:88:9d:d7:ea:a2: 5e:ff:0c:0c:9b:24:a5:de:1a:7b:03:ff:37:10:ed:9b:f8:18: 92:87:c2:d8:69:ce:6c:c6:8c:6b:45:db:a5:fc:2e:1f:b2:d6: 80:ab:77:c7:f9:21:f6:c4:b3:6d:f5:f3:88:3d:1a:5d:f8:ed: 42:61:7f:ce:f8:5a:cc:cb:37:0e:e2:ba:02:85:df:5e:b8:00: 61:3e:14:96:25:db:f8:c6:28:6f:d3:63:e4:3c:f0:a4:be:6f: 08:a0:d6:fc -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEnbIph3BOHylIZ6sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk OTFiOTNkZTYtNjQ0Ni00NjIzLWExODEtNTQyNWFmNGY4NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj9iwIIQ3ZvXjBI7EvLITiaQSEi4y7zAsLFu m8bMhzQf9UE6C7q3Cs4RI7L66uTPDmwiJ30org5i/KFK2xQUjIi99XjD4Hnn8Zwj iBxv0Mr4e2sdC40m7vFveSTdTWgjKx4RejFMoAarRiZ6DugSnuZPCosfQEhF5WsP k5BJvV4q1LDr+1nIPTnUK542v1CKTyKDfnW+RNmZFE1DIw1Fxlrk+soboP01wiIk 0uhe4zWgSqGf7qhPrD1cydqc7A5GKeed5uKohzrvebf2x9ZnVyTTcRHkda75hczS kituuNZ3N2UkoQ0MV8GlOS7Kf3WVRUCMe6PTwZbN7sqrMdQb0QIDAQABo4IEPzCC BDswHQYDVR0OBBYEFP8XxOkGWkUC5XLAqX49WQjGJNPXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 MWI5M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1YWY0Zjg1Y2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkxYjkzZGU2LTY0NDYtNDYyMy1h MTgxLTU0MjVhZjRmODVjYi85MWI5M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1YWY0 Zjg1Y2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMBgEAgABMBIDBASMUnADBASPN0ADBALAHvwwFgQCAAIwEAMFACYG UMADBwQmIAESMAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAI5rMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGngqyydsGsZzBOg/5w8XiqsEOPNUYXcwwnxEW7RlJPR7FW3dNuOHFPfLe6ls8Pt GDEZIalZj7Uv/VwvbulL31nV78D60d2q8vwYGJPavNuN17oXPe4JH2iCwKICd7ZG p6oo/TBgEHAxZR6Rd8Lyu2AzawUdtJY3fUEvPdiEV39V1gSz34+jqs7qH/omflDa JSC4fEE8Xw0hNs4HwnSIndfqol7/DAybJKXeGnsD/zcQ7Zv4GJKHwthpzmzGjGtF 26X8Lh+y1oCrd8f5IfbEs23184g9Gl347UJhf874WszLNw7iugKF3164AGE+FJYl 2/jGKG/TY+Q88KS+bwig1vw= -----END CERTIFICATE-----Generated at Wed Jun 18 06:43:13 2025 by rpki-client