$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer File: 03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer (raw, json) Hash identifier: 6ypPeuuMM6tMliXeyt2GzmpDf9zV2GSxhDprMQrLhww= Subject key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A603535553ED8C3437E576A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 16:45:34 +0000 Certificate not after: Tue 16 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 54816 IP: 74.118.228.0/22 IP: 158.51.56.0/22 IP: 192.30.192.0/21 IP: 2607:67c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:35:35:55:3e:d8:c3:43:7e:57:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 1 16:45:34 2025 GMT Not After : Mar 16 00:45:33 2027 GMT Subject: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:07:8b:c9:02:4d:ff:5e:e2:e6:91:1e:10: f2:de:49:2e:72:7f:8d:65:f7:12:30:49:2d:18:91: e8:a0:85:97:9b:78:10:ac:cb:e8:62:d7:ad:2d:c1: 95:f8:8c:86:c4:e9:c1:f7:d9:26:ec:a0:d7:24:5f: e3:4f:6b:aa:e5:f6:c2:f1:27:a6:ac:3f:67:96:b1: 09:84:c0:36:c4:f3:64:84:e3:01:a5:5f:37:a5:41: c3:ec:39:17:7b:ae:54:2f:f3:f4:9d:ca:27:61:19: 96:a7:7d:2b:be:be:7f:50:f2:53:a8:a5:90:bf:1a: 1f:8f:a5:69:e4:47:5a:14:0c:f4:b7:d8:ee:a2:8e: 04:12:a3:48:d5:a2:70:ce:d2:b0:ad:a7:7e:cd:97: 53:b0:84:f7:77:b9:b3:76:b5:fb:bc:6c:1b:ef:b6: bd:16:cd:91:e6:ff:e0:48:b6:9f:76:89:c8:52:58: 90:b6:72:97:49:c5:31:d1:c8:04:78:46:04:df:e7: c4:40:35:79:db:a6:c3:33:c5:25:78:fb:1d:8a:a0: 99:b3:79:12:8e:72:16:72:3c:b8:c6:09:17:36:f0: e3:03:e0:09:08:bb:af:76:a9:da:b7:82:b2:c2:eb: ea:27:cd:96:2e:74:66:5e:f3:a3:46:2b:79:67:08: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 74.118.228.0/22 158.51.56.0/22 192.30.192.0/21 IPv6: 2607:67c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54816 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2c:5a:ee:ca:c9:1b:13:3e:c7:b6:8a:a9:cf:e7:ca:99:ca: 3a:d4:bc:65:a6:b9:10:99:8b:6f:b7:06:11:c1:ce:31:2b:ee: c3:c1:dd:fd:08:d5:55:f3:7d:0b:46:5c:ed:ec:72:d0:cf:15: 1f:19:68:18:a3:00:a2:e6:53:80:7e:55:51:cf:f2:54:40:66: 19:94:f6:58:c8:c4:de:da:63:6d:40:f2:0b:70:7a:bb:d8:1b: 0f:eb:7f:59:ef:a5:3d:4f:e4:e8:9f:ad:c6:68:0b:c9:68:18: 37:e2:3a:be:bb:a3:c9:0e:56:c7:f8:d8:d8:a7:d0:c2:c6:1b: 8f:cc:05:d1:df:cb:31:8d:ab:37:4a:21:bd:6c:fd:e5:25:4f: f2:fc:2d:8a:43:c1:32:1b:84:62:54:89:64:d2:3c:cd:15:12: fd:a8:7c:da:98:77:83:62:ea:35:eb:8c:48:4b:91:a6:6b:66: 47:60:42:fb:c7:96:9a:c0:6b:17:ed:5e:00:4c:5e:24:17:d6: 33:0a:a2:f1:3b:9b:f1:8e:41:a3:4f:f7:90:b1:b1:28:de:ba: 43:c7:b9:1a:6b:96:12:7a:bc:ad:70:91:43:b7:7f:d0:de:33: cc:f1:6f:a2:7c:51:5f:19:67:93:ea:88:6e:8b:e5:d5:d2:99: 3f:b8:82:ac -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEpgNTVVPtjDQ35XaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcwMTE2NDUzNFoXDTI3MDMxNjAwNDUzM1owLzEtMCsGA1UEAxMk MDNmMDVlYTItZWE1Yi00ZTJiLWFiOWYtYzk1YjQ1OTBlYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMQHi8kCTf9e4uaRHhDy3kkucn+NZfcSMEkt GJHooIWXm3gQrMvoYtetLcGV+IyGxOnB99km7KDXJF/jT2uq5fbC8SemrD9nlrEJ hMA2xPNkhOMBpV83pUHD7DkXe65UL/P0nconYRmWp30rvr5/UPJTqKWQvxofj6Vp 5EdaFAz0t9juoo4EEqNI1aJwztKwrad+zZdTsIT3d7mzdrX7vGwb77a9Fs2R5v/g SLafdonIUliQtnKXScUx0cgEeEYE3+fEQDV526bDM8UlePsdiqCZs3kSjnIWcjy4 xgkXNvDjA+AJCLuvdqnat4KywuvqJ82WLnRmXvOjRit5ZwjFWwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFK5bmU2z9ridoVGUfsHf5pAQpcupMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w M2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5MGVhMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzAzZjA1ZWEyLWVhNWItNGUyYi1h YjlmLWM5NWI0NTkwZWExMS8wM2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5 MGVhMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJKduQDBAKeMzgDBAPAHsAwDQQCAAIwBwMFACYH Z8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANYgMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKAsWu7KyRsT Pse2iqnP58qZyjrUvGWmuRCZi2+3BhHBzjEr7sPB3f0I1VXzfQtGXO3sctDPFR8Z aBijAKLmU4B+VVHP8lRAZhmU9ljIxN7aY21A8gtwervYGw/rf1nvpT1P5OifrcZo C8loGDfiOr67o8kOVsf42Nin0MLGG4/MBdHfyzGNqzdKIb1s/eUlT/L8LYpDwTIb hGJUiWTSPM0VEv2ofNqYd4Ni6jXrjEhLkaZrZkdgQvvHlprAaxftXgBMXiQX1jMK ovE7m/GOQaNP95CxsSjeukPHuRprlhJ6vK1wkUO3f9DeM8zxb6J8UV8ZZ5PqiG6L 5dXSmT+4gqw= -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:00 2025 by rpki-client