$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer File: 1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer (raw, json) Hash identifier: yH7+aKDP+NZMgJ+dCpOGCAZO5JwoJKBxyDATa5Rg49k= Subject key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Authority key identifier: 11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 Certificate issuer: /CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Certificate serial: 010D0C9F43285849DC160A3422C3858EAA6D8D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 15 May 2025 08:56:04 +0000 Certificate not after: Wed 18 Aug 2027 08:56:04 +0000 Subordinate resources: AS: 23125 IP: 23.138.220.0/24 IP: 2602:f99e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:16:0a:34:22:c3:85:8e:aa:6d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Validity Not Before: May 15 08:56:04 2025 GMT Not After : Aug 18 08:56:04 2027 GMT Subject: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:c8:ed:f2:ba:c0:bf:be:f0:90:f3:18:9a: c7:1c:9f:28:09:22:72:99:2c:47:62:8f:b8:1e:0b: 53:27:1f:f3:35:c2:1a:fd:3d:01:7d:9a:f6:be:57: c2:b2:09:be:d2:de:fd:c9:98:51:dc:b0:58:f0:f6: fd:c6:22:c0:98:10:a2:00:fc:70:e6:e4:a7:16:1a: 85:bb:47:c1:d1:35:9d:3a:2d:eb:02:5c:d0:95:91: 83:02:a5:26:e3:16:3a:d0:4c:0e:f6:24:cb:ae:01: 4e:23:76:51:c4:0b:f2:19:15:14:0c:44:2c:34:93: aa:19:15:c4:e0:d9:d2:0f:54:3a:81:4a:4f:a9:69: 4f:8b:56:db:c2:bf:b8:e8:03:ad:03:61:59:41:16: fb:73:a0:0a:f3:93:dd:4b:bb:5e:02:af:66:fd:28: 25:bb:f5:64:ef:a3:8a:19:33:12:8f:ee:4a:73:d6: db:9e:19:9a:f0:2b:ca:b3:c9:6f:1a:da:e6:bf:dd: c9:0a:cf:50:d7:31:7f:6e:0f:8e:6a:2a:48:9e:0b: ee:2b:ca:f0:27:87:c9:5f:1a:6c:76:eb:dc:aa:90: 37:d9:6d:55:db:6a:b7:88:82:59:ed:d5:3c:eb:13: 68:be:b3:fa:38:2c:55:a6:fe:36:af:d6:9a:3e:11: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl X509v3 Authority Key Identifier: keyid:11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer sbgp-ipAddrBlock: critical IPv4: 23.138.220.0/24 IPv6: 2602:f99e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:eb:d6:48:c2:45:73:9d:3e:4c:37:cc:86:0f:10:2c:31:42: 1a:97:8f:7b:04:e3:37:00:3e:b3:f7:b1:94:b5:62:d5:8a:15: e3:d4:68:aa:3b:65:6c:67:d2:78:46:8f:bf:cf:36:12:a0:08: 77:7b:8a:de:1d:d2:ad:82:a5:0d:2b:bd:f3:f2:bb:e1:f6:3a: 18:c4:85:29:14:11:54:42:c2:08:9d:3e:39:b7:9d:3c:45:4d: 13:36:64:3b:8c:94:ac:d5:cd:b2:d1:f3:64:5a:55:a5:2f:91: c0:8b:a7:dc:2b:b8:fc:cb:90:6f:16:b3:ba:8d:d6:ae:a1:2d: 22:dc:e1:16:74:b2:70:89:bf:51:fc:24:57:c4:74:1a:3d:87: db:71:17:bd:b5:a2:96:ca:96:33:94:f2:b2:7f:6c:65:c5:1a: fa:c3:79:87:f2:0a:51:e0:f6:11:4d:94:34:ba:f8:e6:71:f3: c1:44:5c:dc:3b:08:78:78:74:f2:9d:a3:68:64:ef:8a:06:b2: f4:ec:cc:1f:a8:23:5b:b9:0b:48:57:b3:8d:42:18:69:ce:cd: 72:7f:e5:9e:2c:bd:93:4a:93:ed:0c:17:43:9f:4e:5d:f4:63: 33:56:07:d4:af:db:f0:e8:44:42:61:82:5c:2d:4a:25:ad:13: 6d:89:a0:c2 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEncFgo0IsOFjqptjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MmNiYzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4 OTVkMB4XDTI1MDUxNTA4NTYwNFoXDTI3MDgxODA4NTYwNFowPTE7MDkGA1UEAxMy MWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgzNjMyYjliYmNhMzNl MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mcjt8rrAv77wkPMY msccnygJInKZLEdij7geC1MnH/M1whr9PQF9mva+V8KyCb7S3v3JmFHcsFjw9v3G IsCYEKIA/HDm5KcWGoW7R8HRNZ06LesCXNCVkYMCpSbjFjrQTA72JMuuAU4jdlHE C/IZFRQMRCw0k6oZFcTg2dIPVDqBSk+paU+LVtvCv7joA60DYVlBFvtzoArzk91L u14Cr2b9KCW79WTvo4oZMxKP7kpz1tueGZrwK8qzyW8a2ua/3ckKz1DXMX9uD45q KkieC+4ryvAnh8lfGmx269yqkDfZbVXbareIglnt1TzrE2i+s/o4LFWm/jav1po+ EatHAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUEPqte9gIeB4zDBf9bQqrHfHGntQw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYz NC1hYjE4LTNlZjlkMDk4MjM1Mi8zLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00 NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JEODA4NzgxRTMzMEMxN0ZE NkQwQUFCMURGMUM2OUVENC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4 MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1kMDA1NTYwOTg5NWQvNGI5MmNi YzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4OTVkLmNybDAfBgNVHSMEGDAWgBQR mY7rgNwydGbgeYIFuWJIknXNxTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRi OTJjYmM1LTQ4ZTYtNGU1OS1iOWU0LWQwMDU1NjA5ODk1ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXitwwDgQCAAIwCAMGBCYC+Z4AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlpVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABTr1kjCRXOdPkw3zIYPECwxQhqX j3sE4zcAPrP3sZS1YtWKFePUaKo7ZWxn0nhGj7/PNhKgCHd7it4d0q2CpQ0rvfPy u+H2OhjEhSkUEVRCwgidPjm3nTxFTRM2ZDuMlKzVzbLR82RaVaUvkcCLp9wruPzL kG8Ws7qN1q6hLSLc4RZ0snCJv1H8JFfEdBo9h9txF721opbKljOU8rJ/bGXFGvrD eYfyClHg9hFNlDS6+OZx88FEXNw7CHh4dPKdo2hk74oGsvTszB+oI1u5C0hXs41C GGnOzXJ/5Z4svZNKk+0MF0OfTl30YzNWB9Sv2/DoREJhglwtSiWtE22JoMI= -----END CERTIFICATE-----Generated at Sun Jun 15 14:07:38 2025 by rpki-client