$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer File: 12e1088c-ebe4-47cb-a051-5344b3551a83.cer (raw, json) Hash identifier: +vSCKRr2OsdCKnGpOv0W8ksqHzd616IBpJmnt7wdrgE= Subject key identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A14B8676551C74B5830A27780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Jun 2025 15:48:29 +0000 Certificate not after: Sun 06 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 13621 IP: 104.128.78.0/23 IP: 104.204.232.0/22 IP: 198.190.171.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:b8:67:65:51:c7:4b:58:30:a2:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 4 15:48:29 2025 GMT Not After : Dec 6 01:45:27 2026 GMT Subject: CN=12e1088c-ebe4-47cb-a051-5344b3551a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:88:e8:86:18:52:4e:35:4a:01:df:79:da: b6:ed:f7:b9:ec:9d:0d:d8:85:e0:f1:6c:1d:44:ea: 09:c6:28:3a:c8:3c:56:c8:00:87:c2:f4:33:19:98: a2:9f:ed:0a:d2:d2:2b:91:2a:88:9a:32:a5:d5:cd: a9:0a:d4:e9:a3:73:d4:f6:cc:59:34:81:8e:b8:e3: f9:19:1d:4e:28:a8:31:ca:23:dc:37:c0:48:bb:ed: e0:10:ea:2c:d9:df:e0:70:e7:ef:53:af:f4:cc:fb: 73:4c:5a:56:70:74:26:23:8f:8a:2a:bd:6b:9c:15: e1:6e:f7:48:00:8a:ef:9a:3d:cc:83:d2:4c:49:c2: 4f:f5:36:2c:49:e9:cf:9a:d6:b0:e4:89:5e:d6:ec: 1d:9a:f9:65:72:b9:84:f5:2f:cb:7e:77:f5:c5:38: 97:a0:2f:33:a1:e4:18:56:59:9d:48:6d:55:e2:96: 2b:19:ee:44:9c:f3:e2:a1:3f:d0:08:f9:5b:a6:52: 7b:b3:a7:d0:73:33:09:5f:c8:e9:b6:98:f2:06:fb: f4:41:02:30:9d:42:df:ee:53:b6:9a:a9:9c:a2:d6: 76:f6:53:d9:d9:1d:be:23:f9:55:75:79:78:5a:ba: 6a:ec:d0:cc:0f:64:a7:b3:3e:71:75:ec:a5:6a:cf: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.128.78.0/23 104.204.232.0/22 198.190.171.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:df:d0:51:f4:01:24:c3:c9:4b:21:27:01:af:87:ea:96:d7: ff:52:c9:1c:da:b0:2d:0b:63:10:4b:a3:50:4b:6a:c4:38:c2: 1b:67:f7:11:d2:7c:0d:5f:73:e4:71:88:60:f2:22:61:02:96: 1a:66:f1:d2:da:a9:07:8a:12:31:76:08:c9:81:03:cc:12:d6: 89:6b:8d:c4:d8:1b:12:5c:1c:ac:e3:a1:22:10:1b:c1:3d:fc: 9d:cb:81:cd:9d:97:56:b4:05:08:a3:5e:09:a7:05:0a:45:26: 0a:90:6f:d6:3d:5b:e5:7f:f0:ad:2c:85:3f:cc:41:31:16:71: 1a:ee:0d:9d:b0:e5:31:32:99:1a:a0:3c:8b:9d:94:68:64:c3: 92:1b:99:45:2a:60:3e:0b:4c:85:62:73:6f:ab:17:74:57:a2: ea:d1:e1:7c:0d:17:8d:cd:ee:95:94:4e:ef:c9:7c:51:2f:93: 78:4a:cd:a3:b5:c6:be:32:9d:94:7b:e5:af:a2:f4:26:00:77: 36:ca:09:5f:8b:23:25:c3:dd:bd:0b:d5:5a:4c:6a:c4:b9:63: 5f:10:9b:ee:a0:4f:f0:80:14:84:a3:ef:8e:d4:b8:06:98:5c: ad:6c:63:7a:11:c0:b6:94:61:59:05:e4:28:9e:b6:81:96:79: f4:d9:45:2a -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEoUuGdlUcdLWDCid4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYwNDE1NDgyOVoXDTI2MTIwNjAxNDUyN1owLzEtMCsGA1UEAxMk MTJlMTA4OGMtZWJlNC00N2NiLWEwNTEtNTM0NGIzNTUxYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYKI6IYYUk41SgHfedq27fe57J0N2IXg8Wwd ROoJxig6yDxWyACHwvQzGZiin+0K0tIrkSqImjKl1c2pCtTpo3PU9sxZNIGOuOP5 GR1OKKgxyiPcN8BIu+3gEOos2d/gcOfvU6/0zPtzTFpWcHQmI4+KKr1rnBXhbvdI AIrvmj3Mg9JMScJP9TYsSenPmtaw5Ile1uwdmvllcrmE9S/Lfnf1xTiXoC8zoeQY VlmdSG1V4pYrGe5EnPPioT/QCPlbplJ7s6fQczMJX8jptpjyBvv0QQIwnULf7lO2 mqmcotZ29lPZ2R2+I/lVdXl4Wrpq7NDMD2Snsz5xdeylas/6VwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFIoDwvnPJpUAgXm8C4XMRJ+7xbXOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x MmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1NTFhODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzEyZTEwODhjLWViZTQtNDdjYi1h MDUxLTUzNDRiMzU1MWE4My8xMmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1 NTFhODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAFogE4DBAJozOgDBADGvqswGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICNTUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZt/QUfQBJMPJSyEnAa+H6pbX/1LJHNqw LQtjEEujUEtqxDjCG2f3EdJ8DV9z5HGIYPIiYQKWGmbx0tqpB4oSMXYIyYEDzBLW iWuNxNgbElwcrOOhIhAbwT38ncuBzZ2XVrQFCKNeCacFCkUmCpBv1j1b5X/wrSyF P8xBMRZxGu4NnbDlMTKZGqA8i52UaGTDkhuZRSpgPgtMhWJzb6sXdFei6tHhfA0X jc3ulZRO78l8US+TeErNo7XGvjKdlHvlr6L0JgB3NsoJX4sjJcPdvQvVWkxqxLlj XxCb7qBP8IAUhKPvjtS4BphcrWxjehHAtpRhWQXkKJ62gZZ59NlFKg== -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:07 2025 by rpki-client