$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer File: aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer (raw, json) Hash identifier: gknDJhE9xrJ00aBssibtBGTscwGdtUwyve4AzPZa2TM= Subject key identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285849F2BC99A5F02CA573BC552B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 May 2025 11:39:27 +0000 Certificate not after: Tue 16 Feb 2027 13:45:33 +0000 Subordinate resources: AS: 64264 IP: 167.253.110.0/24 IP: 2602:fb6b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:bc:99:a5:f0:2c:a5:73:bc:55:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 23 11:39:27 2025 GMT Not After : Feb 16 13:45:33 2027 GMT Subject: CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:c4:a3:68:fa:38:07:08:a9:05:19:92:50: 03:0b:83:1a:9a:38:12:4a:d5:57:2f:d2:b8:3a:62: 60:dc:12:89:8a:77:6b:df:95:4a:f0:6d:41:9e:33: b3:63:09:fe:02:c6:85:03:99:2a:db:34:ad:82:85: 89:d2:92:b6:63:82:e2:c6:90:4b:2f:7b:02:3f:8d: e1:85:1e:fc:f9:cf:c1:fd:e8:09:e3:d8:8a:4f:0f: 65:e8:ff:1f:f1:d5:ed:39:3e:94:ae:36:56:e7:35: 28:4a:59:89:4e:ab:5c:32:74:15:1d:3b:26:e2:aa: 98:c5:fa:df:02:08:17:e1:66:2b:0f:23:16:6d:75: a8:f3:09:70:56:58:0e:89:ea:a6:27:82:25:14:be: 66:1a:26:b6:91:d9:f6:46:94:2a:52:ff:96:a3:0b: 3b:2b:0a:a2:eb:94:76:69:0c:51:57:b7:77:1c:d7: 04:7b:10:a5:88:d5:98:b5:7a:12:6a:d6:4b:6d:43: 2b:09:c9:42:61:cf:ca:a2:c7:80:ce:ea:91:c8:02: 6b:72:eb:ed:5c:bb:87:71:d9:ab:fa:26:1b:cb:89: 5e:74:e1:9b:42:b3:d9:6c:05:2b:8d:23:9d:5b:c5: c4:c1:9b:67:90:e9:e1:e6:60:00:09:90:54:6b:3e: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 167.253.110.0/24 IPv6: 2602:fb6b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64264 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:07:17:a1:9f:af:54:60:88:c1:af:d2:74:3a:91:a8:22:ec: 21:7c:89:6e:9b:c5:d1:1f:c0:11:5c:43:83:de:2c:3b:7a:72: 42:a8:a7:0b:05:f5:fc:5c:85:da:5a:c9:3f:1a:ce:94:52:9f: 2e:f0:6d:c2:bb:0a:d4:56:03:66:8f:81:6a:0e:16:7e:32:e9: 8a:9c:ea:29:55:f7:ec:5d:0d:62:aa:11:50:3c:80:45:3f:6c: 61:57:ad:33:75:3e:17:e6:9c:c4:b5:7e:37:08:60:94:17:dc: c6:80:ff:ce:85:a3:81:0f:52:12:09:e8:9a:91:cf:01:4b:68: a0:e5:92:7e:22:49:3a:5b:2c:1d:dc:fd:f4:2f:89:8f:cd:10: 4b:bc:ee:75:10:43:8b:19:72:bf:c8:fb:33:96:22:99:26:f9: 67:52:1a:67:07:01:ba:c3:93:42:5f:49:9b:ea:19:8f:67:c5: 74:b8:a3:49:a4:de:be:f4:3f:2a:6f:9e:76:8c:12:d7:78:8a: 2c:af:d2:66:47:cf:03:e6:92:27:38:a3:7c:75:6e:b5:27:b3: 94:b6:e4:9e:9f:e7:17:e7:80:aa:20:d2:2a:53:67:29:b3:1d: 19:93:3f:48:8c:9b:91:ed:5f:49:05:9d:9a:50:78:dc:21:b2: 5d:c7:90:73 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnyvJml8Cylc7xVK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDUyMzExMzkyN1oXDTI3MDIxNjEzNDUzM1owLzEtMCsGA1UEAxMk YWE3NTBmOGUtYTZjZS00YTNmLTgyNTctYmMxMjQ3OWE3MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8TEo2j6OAcIqQUZklADC4MamjgSStVXL9K4 OmJg3BKJindr35VK8G1BnjOzYwn+AsaFA5kq2zStgoWJ0pK2Y4LixpBLL3sCP43h hR78+c/B/egJ49iKTw9l6P8f8dXtOT6UrjZW5zUoSlmJTqtcMnQVHTsm4qqYxfrf AggX4WYrDyMWbXWo8wlwVlgOieqmJ4IlFL5mGia2kdn2RpQqUv+Wows7Kwqi65R2 aQxRV7d3HNcEexCliNWYtXoSatZLbUMrCclCYc/KoseAzuqRyAJrcuvtXLuHcdmr +iYby4ledOGbQrPZbAUrjSOdW8XEwZtnkOnh5mAACZBUaz6vgQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNcWsTxF30Ga3CjK2LEwwMu6n8TRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YTc1MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEyNDc5YTcyYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FhNzUwZjhlLWE2Y2UtNGEzZi04 MjU3LWJjMTI0NzlhNzJiMS9hYTc1MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEyNDc5 YTcyYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACn/W4wDgQCAAIwCAMGBCYC+2sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD7CDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBBxehn69UYIjBr9J0OpGoIuwh fIlum8XRH8ARXEOD3iw7enJCqKcLBfX8XIXaWsk/Gs6UUp8u8G3CuwrUVgNmj4Fq DhZ+MumKnOopVffsXQ1iqhFQPIBFP2xhV60zdT4X5pzEtX43CGCUF9zGgP/OhaOB D1ISCeiakc8BS2ig5ZJ+Ikk6Wywd3P30L4mPzRBLvO51EEOLGXK/yPszliKZJvln UhpnBwG6w5NCX0mb6hmPZ8V0uKNJpN6+9D8qb552jBLXeIosr9JmR88D5pInOKN8 dW61J7OUtuSen+cX54CqINIqU2cpsx0Zkz9IjJuR7V9JBZ2aUHjcIbJdx5Bz -----END CERTIFICATE-----Generated at Sun Jun 15 02:45:43 2025 by rpki-client