$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer File: d51efe24-e752-4f95-a889-f158e2563630.cer (raw, json) Hash identifier: VEeaNVB82rnLMhdFAnwS44ZhfI1S5OXLw5+HX30bo78= Subject key identifier: CB:7B:23:3A:34:67:4D:2C:CC:6A:68:89:99:C0:87:D9:75:59:0C:3B Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A8D21FCC863C10CF2C5E86080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 18:58:13 +0000 Certificate not after: Wed 20 Oct 2027 18:58:13 +0000 Subordinate resources: AS: 26340 AS: 399970 IP: 149.112.152.0/22 IP: 205.196.98.0/24 IP: 2602:fc3b::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:21:fc:c8:63:c1:0c:f2:c5:e8:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 17 18:58:13 2025 GMT Not After : Oct 20 18:58:13 2027 GMT Subject: CN=d51efe24-e752-4f95-a889-f158e2563630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9c:c8:2b:e8:da:70:b4:cb:7b:bd:9b:a3:17: b0:8d:69:ad:fb:0f:28:4a:82:99:c5:ea:73:48:8d: d0:3b:22:d4:9a:89:33:c3:28:33:0b:75:88:c8:ff: dc:ec:a1:d9:c8:55:3e:d7:82:14:85:b2:29:38:4d: de:71:42:91:47:8d:e2:8f:16:20:ac:05:c4:f1:1d: bc:36:a7:af:08:a6:7e:0e:a6:c0:e3:84:92:f1:4f: 43:6d:32:4f:25:a8:10:2c:36:ca:14:b9:6d:08:7e: 07:23:51:a1:55:18:6b:66:0e:fb:40:5e:d4:ce:17: 01:05:0e:3b:e2:db:fd:b6:b5:55:64:1a:85:4a:ba: da:49:47:30:19:72:57:a1:7c:94:df:81:b9:60:75: 08:cd:39:fc:2a:e8:47:67:a2:b4:d5:87:2c:c4:87: 78:48:72:f1:2e:d5:13:03:f7:33:44:bb:3e:6e:0a: b3:a2:28:c3:d8:49:5a:e9:77:c0:b4:1e:c1:fc:38: 16:da:c9:1c:ff:8c:34:14:e0:7d:16:fa:65:03:2d: b7:13:49:b7:92:93:46:46:19:bc:1e:04:62:fb:1b: 2e:35:a5:85:d3:51:e3:42:03:38:38:c0:bd:b7:de: 08:69:6f:e0:0f:25:58:86:de:4a:36:72:cf:d2:06: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7B:23:3A:34:67:4D:2C:CC:6A:68:89:99:C0:87:D9:75:59:0C:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.112.152.0/22 205.196.98.0/24 IPv6: 2602:fc3b::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26340 399970 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:84:51:4a:44:dc:d0:65:6c:92:0a:a5:29:b2:b2:c7:ac:93: 07:94:75:f3:c1:ae:6e:75:ed:66:4b:e5:db:c9:81:89:82:0e: 71:27:97:25:d8:01:37:d1:56:21:d4:44:56:bd:b1:f8:9b:78: b4:ea:cb:1d:8d:d3:83:42:80:9f:35:6f:62:0f:27:4d:3c:04: 6a:2b:3b:b3:6f:86:44:b6:35:ed:72:d2:88:1b:67:58:e5:f8: 94:eb:4a:f7:b3:21:f2:f5:2f:9b:7a:16:b7:a7:c5:07:12:50: e6:26:8a:b4:66:ac:3e:89:dc:21:0d:cb:21:39:3c:35:69:96: 21:d3:0d:d3:88:af:4c:f9:ac:93:46:c7:e4:b3:62:79:4c:52: dd:89:94:47:e1:ea:cb:a0:35:a0:1e:bd:a0:79:39:ce:a3:8a: 35:bf:f3:60:03:8b:ad:cd:65:d4:69:61:b7:a7:6c:05:a2:e9: 42:60:22:b5:ca:b0:26:b1:c8:48:b9:d6:b6:8b:b7:74:d9:cf: e5:08:fd:12:63:4a:79:97:de:10:a1:40:a9:85:54:de:56:be: d8:56:1f:b6:15:f8:34:7c:60:e8:74:80:75:d9:b5:29:6d:59: a7:38:f3:14:ee:a6:2c:8c:2b:2d:34:c2:ef:85:11:c9:4c:47: 4e:2d:c6:ba -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEqNIfzIY8EM8sXoYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcxNzE4NTgxM1oXDTI3MTAyMDE4NTgxM1owLzEtMCsGA1UEAxMk ZDUxZWZlMjQtZTc1Mi00Zjk1LWE4ODktZjE1OGUyNTYzNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JzIK+jacLTLe72boxewjWmt+w8oSoKZxepz SI3QOyLUmokzwygzC3WIyP/c7KHZyFU+14IUhbIpOE3ecUKRR43ijxYgrAXE8R28 NqevCKZ+DqbA44SS8U9DbTJPJagQLDbKFLltCH4HI1GhVRhrZg77QF7UzhcBBQ47 4tv9trVVZBqFSrraSUcwGXJXoXyU34G5YHUIzTn8KuhHZ6K01YcsxId4SHLxLtUT A/czRLs+bgqzoijD2Ela6XfAtB7B/DgW2skc/4w0FOB9FvplAy23E0m3kpNGRhm8 HgRi+xsuNaWF01HjQgM4OMC9t94IaW/gDyVYht5KNnLP0gagiQIDAQABo4IENDCC BDAwHQYDVR0OBBYEFMt7Izo0Z00szGpoiZnAh9l1WQw7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k NTFlZmUyNC1lNzUyLTRmOTUtYTg4OS1mMTU4ZTI1NjM2MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q1MWVmZTI0LWU3NTItNGY5NS1h ODg5LWYxNThlMjU2MzYzMC9kNTFlZmUyNC1lNzUyLTRmOTUtYTg4OS1mMTU4ZTI1 NjM2MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKVcJgDBADNxGIwDQQCAAIwBwMFACYC/DswHgYI KwYBBQUHAQgBAf8EDzANoAswCQICZuQCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLhFFKRNzQZWyS CqUpsrLHrJMHlHXzwa5ude1mS+XbyYGJgg5xJ5cl2AE30VYh1ERWvbH4m3i06ssd jdODQoCfNW9iDydNPARqKzuzb4ZEtjXtctKIG2dY5fiU60r3syHy9S+beha3p8UH ElDmJoq0Zqw+idwhDcshOTw1aZYh0w3TiK9M+ayTRsfks2J5TFLdiZRH4erLoDWg Hr2geTnOo4o1v/NgA4utzWXUaWG3p2wFoulCYCK1yrAmschIuda2i7d02c/lCP0S Y0p5l94QoUCphVTeVr7YVh+2Ffg0fGDodIB12bUpbVmnOPMU7qYsjCstNMLvhRHJ TEdOLca6 -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:21 2025 by rpki-client