$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer File: d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer (raw, json) Hash identifier: 89xYMriG9lXfK12w3oIWhlJ8aTwyuJkWiiwzRODCbok= Subject key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A268318F19FC54B99FBC88040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Jun 2025 00:45:37 +0000 Certificate not after: Tue 14 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 400725 IP: 199.45.241.0/24 IP: 2606:dbc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:83:18:f1:9f:c5:4b:99:fb:c8:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 11 00:45:37 2025 GMT Not After : Sep 14 00:45:37 2027 GMT Subject: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:16:bf:14:7b:d6:35:21:29:67:4d:41:18: d6:62:ab:6c:a8:ee:e3:04:9b:b1:96:40:d7:9d:2a: 9a:0d:c3:04:00:35:80:80:25:1d:6e:6a:2b:29:a1: 9d:ec:fd:f2:71:63:78:4c:c4:35:6f:b3:22:9d:e8: c3:a2:74:26:c3:a3:c7:49:2e:ec:14:68:61:35:12: 84:4a:c6:44:7d:52:1a:9f:0d:57:a3:9a:e0:14:65: 18:b9:21:44:ad:3d:96:ae:53:f1:e7:9d:c6:90:ea: 3c:47:02:b7:e1:6e:5d:0c:5f:35:fe:61:4c:27:b8: c5:89:b0:84:98:4a:94:10:f4:b1:a3:4d:8f:63:5e: bf:2d:04:b2:31:03:ca:83:c2:4b:9a:a3:d9:c0:0a: b7:46:37:02:0e:67:83:c5:d0:90:72:66:ff:b7:63: b0:ca:b6:10:b3:de:2b:e8:54:8e:c0:5a:27:44:90: d0:d3:77:c1:39:8f:e0:32:b4:4c:25:63:92:ea:c4: 20:6a:22:66:65:48:31:d1:f2:33:c8:90:7e:72:78: 80:01:32:21:ca:67:50:01:4e:f1:2c:25:07:99:76: 8e:3d:6f:b0:a7:cc:2f:8e:59:d6:41:ac:08:cf:94: fa:97:59:06:fb:28:23:51:ad:5e:2c:fa:17:19:15: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.45.241.0/24 IPv6: 2606:dbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:28:8b:d5:6a:00:fe:be:8a:e6:c1:0a:ba:9d:20:58:00:27: 9f:63:93:e1:25:1b:21:18:46:dc:6e:a8:e6:35:88:17:3a:8d: 70:52:cd:41:cb:b1:5a:17:f7:73:39:0a:81:15:5a:f3:98:03: e5:ec:e2:c8:33:6a:18:57:70:f5:89:9b:8f:03:0c:1c:f5:48: 28:09:b5:23:05:79:19:5a:8d:eb:7b:f0:70:31:fe:14:7f:3a: cb:9d:8c:a4:0d:08:5a:48:29:e1:2a:42:64:e4:db:fa:79:53: 97:2e:88:29:b5:26:8b:07:c8:5f:d5:49:cd:d7:20:4d:d0:49: 5a:50:22:3b:77:fb:16:74:8e:d4:dc:56:bf:31:21:38:a7:df: 54:dc:38:a3:f4:06:15:f4:ac:a0:7e:cb:46:1c:3f:6c:f8:14: 57:76:3e:30:9d:9f:fc:e8:ff:a7:7c:33:e4:6b:4b:02:7f:7a: 3c:10:8e:dc:4b:6b:9f:7e:3c:4d:66:d3:d7:82:0d:6a:cd:41: 15:1f:b5:94:af:3d:27:a3:28:1c:1d:97:11:bb:6b:23:16:94: 17:4f:5f:d6:cd:b2:92:37:45:dd:ae:67:a0:57:e7:e2:45:8e: 44:17:23:bb:6e:44:55:01:6a:59:c2:14:03:12:db:0a:5c:5f: e9:06:78:f3 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEomgxjxn8VLmfvIgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDYxMTAwNDUzN1oXDTI3MDkxNDAwNDUzN1owLzEtMCsGA1UEAxMk ZDA1MGI0ZGUtZjRjOC00ZWU3LTkwN2EtNGRmMzkyNTNlMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXAWvxR71jUhKWdNQRjWYqtsqO7jBJuxlkDX nSqaDcMEADWAgCUdbmorKaGd7P3ycWN4TMQ1b7MinejDonQmw6PHSS7sFGhhNRKE SsZEfVIanw1Xo5rgFGUYuSFErT2WrlPx553GkOo8RwK34W5dDF81/mFMJ7jFibCE mEqUEPSxo02PY16/LQSyMQPKg8JLmqPZwAq3RjcCDmeDxdCQcmb/t2OwyrYQs94r 6FSOwFonRJDQ03fBOY/gMrRMJWOS6sQgaiJmZUgx0fIzyJB+cniAATIhymdQAU7x LCUHmXaOPW+wp8wvjlnWQawIz5T6l1kG+ygjUa1eLPoXGRUnTQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFuBtqm88Yl9Bc1EDfPqDu8dTXjmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k MDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1M2UxYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QwNTBiNGRlLWY0YzgtNGVlNy05 MDdhLTRkZjM5MjUzZTFhZS9kMDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1 M2UxYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHLfEwDQQCAAIwBwMFACYG28AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh1VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGooi9VqAP6+iubBCrqdIFgAJ59j k+ElGyEYRtxuqOY1iBc6jXBSzUHLsVoX93M5CoEVWvOYA+Xs4sgzahhXcPWJm48D DBz1SCgJtSMFeRlajet78HAx/hR/OsudjKQNCFpIKeEqQmTk2/p5U5cuiCm1JosH yF/VSc3XIE3QSVpQIjt3+xZ0jtTcVr8xITin31TcOKP0BhX0rKB+y0YcP2z4FFd2 PjCdn/zo/6d8M+RrSwJ/ejwQjtxLa59+PE1m09eCDWrNQRUftZSvPSejKBwdlxG7 ayMWlBdPX9bNspI3Rd2uZ6BX5+JFjkQXI7tuRFUBalnCFAMS2wpcX+kGePM= -----END CERTIFICATE-----Generated at Mon Jun 16 05:36:44 2025 by rpki-client