$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed.cer File: 059070b9-988b-4e46-aae7-946425c3b9ed.cer (raw, json) Hash identifier: T/6Nh+Iv4Qq1nm8kh0fkGGkMssAWD4VGilS8oTo/K2k= Subject key identifier: 26:CA:93:45:E9:38:1B:C0:02:94:C1:C0:A6:DE:BA:13:FD:F5:30:D0 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A360C4EC9657CC33BD208D480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/059070b9-988b-4e46-aae7-946425c3b9ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 14:19:13 +0000 Certificate not after: Sun 19 Sep 2027 14:19:13 +0000 Subordinate resources: AS: 5071 IP: 204.244.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:0c:4e:c9:65:7c:c3:3b:d2:08:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 16 14:19:13 2025 GMT Not After : Sep 19 14:19:13 2027 GMT Subject: CN=059070b9-988b-4e46-aae7-946425c3b9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:5f:e2:2a:4e:07:b4:a6:8b:6b:d1:b2:64: 0e:82:0a:54:7c:62:7a:43:5f:39:b4:24:13:ca:97: 8e:35:f5:29:3f:f8:da:51:5d:32:a1:f3:66:78:28: 6a:b2:52:ba:3c:0a:16:ae:21:d2:a0:5f:af:da:d2: b3:18:d8:29:42:3e:73:64:cf:4d:77:0c:23:86:61: 0b:c3:9f:6c:33:e7:87:b0:9f:fa:34:7d:fa:2c:9c: c9:2f:47:b5:d3:e5:9d:0b:ea:fc:93:69:cb:48:e4: 1c:66:3d:76:d9:5d:a1:da:f5:7d:99:7d:e9:cb:58: c9:dd:fc:74:db:1d:d5:6d:e4:62:0e:50:04:d9:c4: 6d:3f:2a:74:11:c9:8e:b5:c6:f1:8a:61:97:94:96: b8:4d:38:3b:03:38:bd:1a:6d:86:14:a6:6b:82:14: 1e:d6:73:03:1e:e7:4d:0c:4a:c2:d0:0b:57:0a:d1: d0:44:91:2f:d9:7b:e9:f4:c0:42:21:34:c8:4f:ad: 01:21:4b:c7:b4:d8:65:f9:a9:19:46:4c:d3:09:9c: cd:1e:2c:7d:d4:27:a6:b6:ec:e9:2b:86:81:a8:a5: 02:a6:08:09:87:a5:1c:30:54:de:68:72:4f:38:b3: 0c:51:cd:2e:03:95:0a:2c:32:6a:a2:ea:f5:d2:95: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:93:45:E9:38:1B:C0:02:94:C1:C0:A6:DE:BA:13:FD:F5:30:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/059070b9-988b-4e46-aae7-946425c3b9ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.244.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f7:45:7a:60:be:76:d0:ce:d0:9d:ec:db:7f:6f:3d:f6:58: 22:c5:85:42:8c:0c:95:af:4f:ca:01:17:92:32:7e:02:89:8e: cb:eb:60:b5:ea:1a:37:15:44:6d:dc:92:57:e2:4e:98:42:19: ab:c5:9b:3f:eb:56:27:62:da:2f:8c:aa:6c:56:7e:2a:66:d3: 04:ca:3b:e0:9e:a4:4d:27:74:8e:5d:73:10:33:14:9f:b0:1f: 24:ae:20:4e:f2:50:81:bd:de:e8:f7:19:59:6a:7b:3e:bd:cd: c7:53:46:56:af:8e:31:20:25:b7:20:06:f6:80:42:cc:3c:44: a3:77:cc:7c:e5:1a:51:53:eb:b1:d9:5a:34:58:92:d7:ca:9b: 6e:13:99:2b:3d:21:44:1b:aa:9d:36:be:5e:bb:01:ac:ae:f3: 9c:96:30:1b:19:2a:fe:9e:de:b2:e9:e7:3a:67:78:29:48:80: 75:aa:c1:3a:82:81:4b:93:f4:b6:5a:81:3c:ce:72:8e:65:13: f3:97:13:5b:71:14:ef:2c:21:42:6d:73:5f:01:78:0c:13:de: 7c:29:f9:f5:71:a3:2e:1f:16:e7:dc:6d:df:8c:68:fb:1e:cf: f0:0b:5d:13:ba:81:ac:20:b9:14:61:3e:de:22:d6:52:78:00: cf:df:db:31 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEo2DE7JZXzDO9II1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxNjE0MTkxM1oXDTI3MDkxOTE0MTkxM1owLzEtMCsGA1UEAxMk MDU5MDcwYjktOTg4Yi00ZTQ2LWFhZTctOTQ2NDI1YzNiOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnBf4ipOB7Smi2vRsmQOggpUfGJ6Q185tCQT ypeONfUpP/jaUV0yofNmeChqslK6PAoWriHSoF+v2tKzGNgpQj5zZM9NdwwjhmEL w59sM+eHsJ/6NH36LJzJL0e10+WdC+r8k2nLSOQcZj122V2h2vV9mX3py1jJ3fx0 2x3VbeRiDlAE2cRtPyp0EcmOtcbximGXlJa4TTg7Azi9Gm2GFKZrghQe1nMDHudN DErC0AtXCtHQRJEv2Xvp9MBCITTIT60BIUvHtNhl+akZRkzTCZzNHix91Cemtuzp K4aBqKUCpggJh6UcMFTeaHJPOLMMUc0uA5UKLDJqour10pX8BwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFCbKk0XpOBvAApTBwKbeuhP99TDQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NTkwNzBiOS05ODhiLTRlNDYtYWFlNy05NDY0MjVjM2I5ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA1OTA3MGI5LTk4OGItNGU0Ni1h YWU3LTk0NjQyNWMzYjllZC8wNTkwNzBiOS05ODhiLTRlNDYtYWFlNy05NDY0MjVj M2I5ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwDM9DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIT zzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAE90V6YL520M7Qnezbf2899lgixYVCjAyVr0/KAReSMn4CiY7L 62C16ho3FURt3JJX4k6YQhmrxZs/61YnYtovjKpsVn4qZtMEyjvgnqRNJ3SOXXMQ MxSfsB8kriBO8lCBvd7o9xlZans+vc3HU0ZWr44xICW3IAb2gELMPESjd8x85RpR U+ux2Vo0WJLXyptuE5krPSFEG6qdNr5euwGsrvOcljAbGSr+nt6y6ec6Z3gpSIB1 qsE6goFLk/S2WoE8znKOZRPzlxNbcRTvLCFCbXNfAXgME958Kfn1caMuHxbn3G3f jGj7Hs/wC10TuoGsILkUYT7eItZSeADP39sx -----END CERTIFICATE-----Generated at Wed Jun 18 23:07:30 2025 by rpki-client