$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer File: 8cce0cef-88a2-481a-91e3-c005827c7890.cer (raw, json) Hash identifier: nqczYQdyQ8e09WGn8Fx7XRhtAvZnC7Pg5SdxE6nKB0g= Subject key identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849E0B7F9C1853C7E1F76207680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 May 2025 00:45:35 +0000 Certificate not after: Fri 20 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 18935 IP: 23.149.216.0/24 IP: 2602:fa96::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:b7:f9:c1:85:3c:7e:1f:76:20:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 17 00:45:35 2025 GMT Not After : Aug 20 00:45:35 2027 GMT Subject: CN=8cce0cef-88a2-481a-91e3-c005827c7890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:75:c7:61:95:53:06:0a:6c:9b:7a:16:9e: 64:a7:6e:43:f7:57:7e:17:a1:3b:a2:87:5d:a6:dd: 39:de:49:a9:3d:cf:1f:c6:70:2f:82:50:f2:7a:e5: 4c:72:6a:18:cf:8e:2c:38:c8:61:6c:e5:0e:44:87: 54:ca:22:5d:e9:cf:77:42:a4:4b:b2:98:4b:05:19: 1f:db:bc:ba:29:52:f9:a4:f6:17:53:fd:b0:16:33: 36:af:ae:f1:da:18:34:83:63:ac:72:27:11:28:69: 59:dd:49:77:d8:f8:f8:a1:f3:53:53:5a:89:00:89: 62:4b:e6:19:0d:3b:6b:72:09:ff:9a:aa:2b:af:fe: f5:cd:40:ea:d8:c6:2d:76:8a:57:36:c9:e2:9c:55: c3:b1:cd:a0:86:48:52:bd:5c:b4:20:88:06:46:af: 83:ad:7d:e3:6b:cc:0e:ef:46:d6:70:ab:47:25:e8: 65:89:13:67:7b:00:18:0d:b6:a8:7a:2e:74:7b:ba: 1e:25:3d:25:0c:bc:48:93:3d:25:92:ab:d8:fc:99: 88:4c:17:b5:2e:60:65:5e:5c:2b:e2:93:9f:b4:40: f0:0f:4d:f9:a5:a9:9c:40:97:39:85:4d:3a:92:34: 20:89:80:5f:e3:72:db:34:80:e9:a4:43:19:fe:fe: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.149.216.0/24 IPv6: 2602:fa96::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:27:20:dd:6a:de:39:ed:aa:b4:5e:02:ca:ef:36:b0:f5:ed: ec:1b:e2:a9:45:60:0f:73:fc:cf:36:9c:2f:f2:0b:f0:b9:57: a8:b9:21:dd:03:6f:24:4f:e8:b6:27:0f:83:3e:99:5f:77:e8: 0a:90:1d:c3:a5:88:37:b8:02:e5:f4:ef:30:35:ac:c9:aa:d5: 7a:3c:1e:2b:a8:c7:92:a3:80:0f:15:59:9b:8c:fd:87:ec:9a: 06:27:f0:71:4d:2f:be:2c:64:1a:cb:9f:ad:2f:ad:60:93:97: 7c:c1:2d:ce:e3:36:06:cb:9c:eb:a1:a6:7c:51:17:24:48:dd: 19:56:87:ee:fd:07:09:5d:89:eb:ec:17:cf:22:b2:10:8e:05: d5:fc:17:e5:d3:b7:0a:c5:37:60:16:14:d7:bd:03:f9:d3:5d: a0:bd:90:cb:70:6a:b1:d0:bf:ba:bf:13:46:72:10:9b:ba:3d: f0:a2:27:f5:89:bb:af:19:8b:2f:94:22:49:d2:33:86:2f:2d: 5b:69:fb:b9:65:a0:10:63:96:be:5e:c3:d7:1f:c4:8a:bf:84: 81:d5:26:0b:74:9e:6e:56:68:2d:65:75:b6:31:01:d2:93:7a: 8a:c5:07:19:8c:12:59:3e:cd:9e:82:db:4f:99:71:f6:36:ce: bd:7e:3a:20 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEngt/nBhTx+H3YgdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxNzAwNDUzNVoXDTI3MDgyMDAwNDUzNVowLzEtMCsGA1UEAxMk OGNjZTBjZWYtODhhMi00ODFhLTkxZTMtYzAwNTgyN2M3ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfZ1x2GVUwYKbJt6Fp5kp25D91d+F6E7oodd pt053kmpPc8fxnAvglDyeuVMcmoYz44sOMhhbOUORIdUyiJd6c93QqRLsphLBRkf 27y6KVL5pPYXU/2wFjM2r67x2hg0g2OscicRKGlZ3Ul32Pj4ofNTU1qJAIliS+YZ DTtrcgn/mqorr/71zUDq2MYtdopXNsninFXDsc2ghkhSvVy0IIgGRq+DrX3ja8wO 70bWcKtHJehliRNnewAYDbaoei50e7oeJT0lDLxIkz0lkqvY/JmITBe1LmBlXlwr 4pOftEDwD035pamcQJc5hU06kjQgiYBf43LbNIDppEMZ/v7JUwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEpTBz7EGqjQLuXSFGULpaoWK865MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 Y2NlMGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1ODI3Yzc4OTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhjY2UwY2VmLTg4YTItNDgxYS05 MWUzLWMwMDU4MjdjNzg5MC84Y2NlMGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1ODI3 Yzc4OTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXldgwDgQCAAIwCAMGBCYC+pYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkn3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG4nIN1q3jntqrReAsrvNrD17ewb 4qlFYA9z/M82nC/yC/C5V6i5Id0DbyRP6LYnD4M+mV936AqQHcOliDe4AuX07zA1 rMmq1Xo8Hiuox5KjgA8VWZuM/YfsmgYn8HFNL74sZBrLn60vrWCTl3zBLc7jNgbL nOuhpnxRFyRI3RlWh+79BwldievsF88ishCOBdX8F+XTtwrFN2AWFNe9A/nTXaC9 kMtwarHQv7q/E0ZyEJu6PfCiJ/WJu68Ziy+UIknSM4YvLVtp+7lloBBjlr5ew9cf xIq/hIHVJgt0nm5WaC1ldbYxAdKTeorFBxmMElk+zZ6C20+ZcfY2zr1+OiA= -----END CERTIFICATE-----Generated at Sun Jun 15 04:46:16 2025 by rpki-client