$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer File: e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer (raw, json) Hash identifier: 7lpxE7XEXOIyRGTdNZUnEzjW4z0lZHj9+NTa+I3BN5w= Subject key identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849DDED45C9238661A926E2D560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 May 2025 00:45:33 +0000 Certificate not after: Thu 19 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 400735 IP: 23.162.208.0/24 IP: 2605:dfc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:ed:45:c9:23:86:61:a9:26:e2:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 16 00:45:33 2025 GMT Not After : Aug 19 00:45:33 2027 GMT Subject: CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:b5:8c:ee:a4:8f:89:ae:1e:52:22:01:ff: 2e:3f:78:77:1c:36:4a:a8:df:84:a2:07:d4:05:6c: 5e:b4:cf:b4:47:c3:e1:24:c5:8b:73:e5:08:73:9c: 0f:ef:c7:44:a3:1b:2c:bd:4d:79:af:35:cb:02:14: 0f:54:56:d3:99:5e:7c:b6:29:db:5a:07:3d:0f:a9: 54:64:7a:f5:5d:ee:aa:2c:c8:c4:e4:e4:75:c3:fe: 41:4f:f0:11:2d:da:c4:ad:41:f5:95:46:2a:93:70: e8:b6:43:a4:60:d4:fa:0e:1a:5e:9f:03:1e:86:4e: 2b:eb:b8:3d:7c:3a:94:95:fb:6d:b5:c7:61:3c:59: c4:46:6d:86:2c:3b:13:f6:04:82:83:ab:0f:9b:99: 01:c3:8f:4c:05:b4:95:72:d4:5f:21:85:ca:72:59: b3:1f:22:2b:37:34:18:a5:4c:4d:92:b5:da:71:42: 35:61:15:82:1c:b1:aa:b3:d9:c9:a5:d7:cc:c9:60: 79:0a:dc:60:38:c2:e1:85:86:c4:0d:bf:8d:25:b7: e4:d1:15:a6:d3:ca:1c:80:15:2f:a0:48:c0:df:4f: 8c:db:f6:04:d7:c6:a7:ac:56:80:2e:99:3c:03:8a: cd:f3:94:2a:09:87:95:42:50:b7:df:8c:16:53:90: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.162.208.0/24 IPv6: 2605:dfc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400735 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:49:b1:05:fb:77:af:4c:cb:43:1b:af:2d:cb:3e:aa:6e:e5: 90:71:da:ab:13:2c:28:68:75:12:2c:32:d6:70:ec:8e:7e:cf: fc:1b:5a:12:1d:ae:97:2e:35:d8:64:05:61:6a:68:d3:f3:06: ad:b9:fd:e0:4e:1a:d7:5b:1a:41:f0:73:23:a5:aa:84:91:d2: 64:f3:d5:36:aa:fd:ca:f5:d5:03:6d:d3:e6:52:ff:8f:df:a0: 63:34:9d:9e:c0:8f:c9:7a:70:4f:18:ba:1b:b4:fd:2a:e2:5e: 69:5b:5f:79:99:6e:9b:10:2b:d8:85:bd:68:d0:e2:df:bc:2d: 65:bf:91:07:a5:8b:bb:e2:1f:29:db:3e:80:31:4a:af:aa:a5: e8:a5:57:b0:e3:41:0a:d2:c1:1c:12:7b:31:a0:08:eb:38:95: fb:54:47:9e:81:e1:36:70:b8:6f:63:ee:0e:ac:25:f0:98:84: b6:af:a4:4c:bd:a8:e3:31:2b:cc:a6:e7:06:45:c3:81:e9:27: 84:e3:a6:b6:cb:68:64:68:f1:a2:b8:e8:9e:dc:09:06:f4:d3: 00:74:7e:23:fc:97:7c:b9:ac:54:a5:61:7b:fd:26:c1:d1:6e: d4:04:53:0a:37:15:7d:fb:67:51:a4:42:af:d7:55:c7:d0:2d: 51:d6:24:42 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEnd7UXJI4ZhqSbi1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxNjAwNDUzM1oXDTI3MDgxOTAwNDUzM1owLzEtMCsGA1UEAxMk ZTk5NjdlOGYtYTRjMi00ZDg5LTgyZGQtOTVkOWMzZmViODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOC1jO6kj4muHlIiAf8uP3h3HDZKqN+EogfU BWxetM+0R8PhJMWLc+UIc5wP78dEoxssvU15rzXLAhQPVFbTmV58tinbWgc9D6lU ZHr1Xe6qLMjE5OR1w/5BT/ARLdrErUH1lUYqk3DotkOkYNT6DhpenwMehk4r67g9 fDqUlftttcdhPFnERm2GLDsT9gSCg6sPm5kBw49MBbSVctRfIYXKclmzHyIrNzQY pUxNkrXacUI1YRWCHLGqs9nJpdfMyWB5CtxgOMLhhYbEDb+NJbfk0RWm08ocgBUv oEjA30+M2/YE18anrFaALpk8A4rN85QqCYeVQlC334wWU5BPEwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGjl5RMvI228Oxx8CmHkzdCwD+GyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l OTk2N2U4Zi1hNGMyLTRkODktODJkZC05NWQ5YzNmZWI4M2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U5OTY3ZThmLWE0YzItNGQ4OS04 MmRkLTk1ZDljM2ZlYjgzZi9lOTk2N2U4Zi1hNGMyLTRkODktODJkZC05NWQ5YzNm ZWI4M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXotAwDQQCAAIwBwMFACYF38AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh1fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADpJsQX7d69My0Mbry3LPqpu5ZBx 2qsTLChodRIsMtZw7I5+z/wbWhIdrpcuNdhkBWFqaNPzBq25/eBOGtdbGkHwcyOl qoSR0mTz1Taq/cr11QNt0+ZS/4/foGM0nZ7Aj8l6cE8Yuhu0/SriXmlbX3mZbpsQ K9iFvWjQ4t+8LWW/kQeli7viHynbPoAxSq+qpeilV7DjQQrSwRwSezGgCOs4lftU R56B4TZwuG9j7g6sJfCYhLavpEy9qOMxK8ym5wZFw4HpJ4TjprbLaGRo8aK46J7c CQb00wB0fiP8l3y5rFSlYXv9JsHRbtQEUwo3FX37Z1GkQq/XVcfQLVHWJEI= -----END CERTIFICATE-----Generated at Sun Jun 15 04:55:00 2025 by rpki-client