$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer File: 01fc1815-34ef-424d-8258-506f8b486e35.cer (raw, json) Hash identifier: /sKjyJTkX31ZzY7NZfLIoThvoRHRKgLRU7xPsokvI8g= Subject key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ABA793AE221F6787EE9B613C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Aug 2025 00:45:23 +0000 Certificate not after: Sat 06 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 10835 AS: 12078 AS: 12111 AS: 20151 AS: 25757 AS: 33635 AS: 46193 AS: 63188 IP: 64.35.128.0/20 IP: 64.184.224.0/19 IP: 65.38.128.0/19 IP: 66.36.112.0/20 IP: 66.117.64.0/19 IP: 66.198.192.0/19 IP: 66.201.128.0/19 IP: 66.225.0.0/19 IP: 68.170.32.0/19 IP: 69.71.160.0/19 IP: 72.55.192.0/19 IP: 74.118.88.0/22 IP: 162.212.224.0/22 IP: 162.255.156.0/22 IP: 184.164.96.0/19 IP: 199.7.96.0/21 IP: 199.114.228.0/22 IP: 199.180.88.0/21 IP: 204.10.248.0/21 IP: 208.38.192.0/19 IP: 209.193.64.0 -- 209.193.111.255 IP: 216.229.160.0/19 IP: 2001:5f0::/32 IP: 2601:c000::/24 IP: 2604:d000::/32 IP: 2607:f498::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:79:3a:e2:21:f6:78:7e:e9:b6:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 3 00:45:23 2025 GMT Not After : Nov 6 00:45:23 2027 GMT Subject: CN=01fc1815-34ef-424d-8258-506f8b486e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:d6:1e:ac:79:c7:68:2e:ab:8d:c2:41:ed: 19:00:71:ca:54:3a:64:23:9c:b0:d6:74:b9:19:ab: e4:ba:78:e4:d1:a0:d8:5c:65:f6:9a:11:0f:9e:07: b2:39:7e:e5:23:b9:3f:ed:69:c5:fb:c4:f7:ff:b4: 5a:fe:90:04:cb:d5:55:d8:ec:3f:4a:8e:72:9e:e7: c8:c7:57:d8:40:90:22:fa:4a:85:77:ff:56:e9:0e: 35:ed:c0:71:bf:99:3f:7f:5e:20:05:f7:e4:b9:27: 10:18:9a:63:ac:ae:79:20:08:92:8f:8d:69:fc:4a: d5:ff:eb:f8:ee:a1:0a:8a:c7:c6:14:e6:fb:5f:91: ba:69:af:de:2c:d4:51:4a:17:61:da:38:28:ea:be: bd:a5:d8:57:73:74:00:e9:d7:87:3e:c8:9a:25:b0: ce:68:1a:59:03:a4:35:2a:c0:8f:34:15:b6:b9:cc: 81:a5:5b:1e:b7:6a:b8:f2:35:ff:c0:a3:a7:1f:4e: bf:d2:39:3d:8e:8d:e7:04:7c:c6:15:d5:48:7b:79: d4:f2:24:40:f2:de:0b:59:cc:ad:26:2a:ec:5c:62: e5:ce:bb:e6:cf:ea:36:2a:68:c4:af:21:a9:00:bf: eb:10:c3:57:23:b3:e2:b5:59:17:35:ae:6f:cd:a3: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.35.128.0/20 64.184.224.0/19 65.38.128.0/19 66.36.112.0/20 66.117.64.0/19 66.198.192.0/19 66.201.128.0/19 66.225.0.0/19 68.170.32.0/19 69.71.160.0/19 72.55.192.0/19 74.118.88.0/22 162.212.224.0/22 162.255.156.0/22 184.164.96.0/19 199.7.96.0/21 199.114.228.0/22 199.180.88.0/21 204.10.248.0/21 208.38.192.0/19 209.193.64.0-209.193.111.255 216.229.160.0/19 IPv6: 2001:5f0::/32 2601:c000::/24 2604:d000::/32 2607:f498::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10835 12078 12111 20151 25757 33635 46193 63188 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:15:a0:5f:e0:8d:8d:5e:63:a1:4d:a6:be:60:4e:22:f3:c6: 20:0b:5c:da:01:99:05:37:94:58:fc:a4:cd:eb:a5:81:82:85: b1:a2:2c:10:53:f7:da:06:d4:a4:55:f4:df:e8:26:89:f0:83: 75:35:24:ec:f5:1c:e6:dd:6f:d3:03:d0:04:a9:09:36:03:d9: ec:ba:62:78:c5:81:49:8d:56:e6:82:fe:9a:52:0a:40:a0:e4: 80:03:ae:39:5f:4a:63:44:46:96:64:8b:3a:c2:5b:8d:91:15: 21:5f:e9:3b:63:ad:b2:6f:9e:fd:86:39:ee:6b:4c:ed:55:e4: f2:55:15:e0:ca:dd:ce:ff:08:c1:49:48:d3:24:8f:61:04:d9: 3c:ca:6c:3c:13:38:35:e1:76:ac:44:33:57:ca:29:ac:f6:6a: ad:f2:68:66:b5:88:6b:f1:2b:49:68:29:59:1f:01:03:b2:a1: ab:77:ba:fd:f4:d0:92:8f:f4:2f:64:3e:ca:26:40:84:57:38: 92:35:3c:3a:cb:8d:a2:d8:e7:27:14:58:98:7d:43:ab:08:f0: b4:5d:9f:35:d7:1e:d0:b6:5c:b0:c6:c3:16:54:9f:e2:23:6f: 71:64:99:95:cd:5a:48:ab:8c:37:a1:16:2f:19:b9:fc:45:ba: 12:7d:10:e6 -----BEGIN CERTIFICATE----- MIIH1TCCBr2gAwIBAgIUAQ0Mn0MoWEq6eTriIfZ4fum2E8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwMzAwNDUyM1oXDTI3MTEwNjAwNDUyM1owLzEtMCsGA1UEAxMk MDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSnWHqx5x2guq43CQe0ZAHHKVDpkI5yw1nS5 Gavkunjk0aDYXGX2mhEPngeyOX7lI7k/7WnF+8T3/7Ra/pAEy9VV2Ow/So5ynufI x1fYQJAi+kqFd/9W6Q417cBxv5k/f14gBffkuScQGJpjrK55IAiSj41p/ErV/+v4 7qEKisfGFOb7X5G6aa/eLNRRShdh2jgo6r69pdhXc3QA6deHPsiaJbDOaBpZA6Q1 KsCPNBW2ucyBpVset2q48jX/wKOnH06/0jk9jo3nBHzGFdVIe3nU8iRA8t4LWcyt JirsXGLlzrvmz+o2KmjEryGpAL/rEMNXI7PitVkXNa5vzaOHvQIDAQABo4IE5zCC BOMwHQYDVR0OBBYEFFGie6nXTpsEX2XbP8MIZoGEzECVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w MWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzAxZmMxODE1LTM0ZWYtNDI0ZC04 MjU4LTUwNmY4YjQ4NmUzNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0 ODZlMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwgcwGCCsGAQUF BwEHAQH/BIG8MIG5MIGTBAIAATCBjAMEBEAjgAMEBUC44AMEBUEmgAMEBEIkcAME BUJ1QAMEBULGwAMEBULJgAMEBULhAAMEBUSqIAMEBUVHoAMEBUg3wAMEAkp2WAME AqLU4AMEAqL/nAMEBbikYAMEA8cHYAMEAsdy5AMEA8e0WAMEA8wK+AMEBdAmwDAM AwQG0cFAAwQE0cFgAwQF2OWgMCEEAgACMBsDBQAgAQXwAwQAJgHAAwUAJgTQAAMF ACYH9JgwOAYIKwYBBQUHAQgBAf8EKTAnoCUwIwICKlMCAi8uAgIvTwICTrcCAmSd AgMAg2MCAwC0cQIDAPbUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIEVoF/gjY1eY6FNpr5gTiLzxiALXNoB mQU3lFj8pM3rpYGChbGiLBBT99oG1KRV9N/oJonwg3U1JOz1HObdb9MD0ASpCTYD 2ey6YnjFgUmNVuaC/ppSCkCg5IADrjlfSmNERpZkizrCW42RFSFf6TtjrbJvnv2G Oe5rTO1V5PJVFeDK3c7/CMFJSNMkj2EE2TzKbDwTODXhdqxEM1fKKaz2aq3yaGa1 iGvxK0loKVkfAQOyoat3uv300JKP9C9kPsomQIRXOJI1PDrLjaLY5ycUWJh9Q6sI 8LRdnzXXHtC2XLDGwxZUn+Ijb3FkmZXNWkirjDehFi8ZufxFuhJ9EOY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:40 2025 by rpki-client