$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer File: 0c9b7b78-0431-4030-be95-6889ed40d6e6.cer (raw, json) Hash identifier: 0ONSp/TtUS4hfqIhzfxYlIY8BtALWJjorgbucG8FBFI= Subject key identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858498BBCEC970E47DB80A34A0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Apr 2025 14:11:51 +0000 Certificate not after: Tue 20 Jul 2027 14:11:51 +0000 Subordinate resources: AS: 18904 IP: 192.34.34.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:bc:ec:97:0e:47:db:80:a3:4a:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 16 14:11:51 2025 GMT Not After : Jul 20 14:11:51 2027 GMT Subject: CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:14:57:9f:c2:48:d3:3c:31:db:d8:e0:f8: 74:b6:70:31:b5:05:86:96:05:1f:57:25:d6:5f:96: af:a8:dd:a8:06:f8:c8:c6:28:b6:8d:08:75:8c:32: f9:07:3c:63:32:1b:96:30:54:a4:11:5c:ae:4f:9d: a3:14:15:1a:20:6b:37:51:6e:0d:d0:42:7f:22:f9: 95:9c:9c:7c:d1:ba:0b:2f:8d:28:e2:78:2a:d4:d2: 1e:e9:49:a3:11:80:c2:f2:ee:ab:4f:27:6d:b1:38: b0:36:10:34:9f:c6:da:f6:a3:1e:4b:3b:d6:e4:9d: d0:f9:95:65:ea:d3:24:4c:c8:dd:23:29:fe:a0:80: 02:e5:07:e8:a3:9c:33:eb:f2:05:f5:e1:3b:1d:53: a4:d4:22:b6:72:44:38:4e:bd:76:ac:99:35:f6:c9: 41:66:76:ca:5a:30:6e:e2:fe:84:7b:ec:8e:a9:28: be:6b:e7:81:98:8c:79:87:37:60:5e:aa:b9:d5:20: ee:ee:7b:e5:f4:69:aa:fa:d8:82:e7:1b:8e:3d:09: fa:81:61:6e:87:3c:19:51:a2:0d:b1:e3:68:97:6a: 89:98:db:d7:4e:c6:f7:50:bd:57:33:43:30:fc:f5: ed:c7:7f:2d:8f:41:e0:db:3c:fc:1d:95:b2:86:16: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.34.34.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18904 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e5:17:55:e9:aa:b6:58:5b:c1:25:4f:39:02:88:49:a1:cb: 4e:6a:31:9d:6f:62:8b:40:9a:ef:e1:ec:9f:90:8e:63:be:40: 39:91:45:ec:2d:75:c2:52:15:e6:15:1f:a6:07:4b:a1:e6:e5: be:b5:91:24:79:9d:2b:c4:c3:0e:73:e1:2d:34:2b:72:7b:23: 4a:be:29:42:dd:68:d7:f8:4e:f7:3e:5e:bb:f1:03:d4:80:9f: 66:e5:40:42:eb:06:ff:74:31:07:b3:81:b3:71:9d:d1:9b:1b: e4:c7:83:fa:25:51:55:65:3d:cc:ea:f1:61:f5:65:10:4b:55: ad:f5:d3:b3:72:77:d1:bd:3c:9a:bc:fe:f7:71:f6:9e:da:e6: 35:5b:a1:e5:c8:ed:b2:e6:fd:b6:29:ce:0a:c6:a5:0f:29:f9: 1b:44:9d:6e:ee:0d:c6:0f:df:48:e8:14:c6:27:45:a3:01:b3: 9c:41:fd:1a:c8:79:55:1f:a5:fe:f1:bc:ae:8e:20:a8:32:6e: f2:63:ad:ac:09:2b:72:94:c5:4d:db:43:ba:db:d0:fd:a6:6c: 94:5f:bc:d2:85:eb:2d:7e:51:74:c0:a5:78:34:38:bc:57:e9: 9b:cb:e1:cf:99:51:e7:72:29:f3:3c:1d:84:ed:3e:ad:2f:2b: 2d:a9:9b:ed -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmLvOyXDkfbgKNKAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNjE0MTE1MVoXDTI3MDcyMDE0MTE1MVowLzEtMCsGA1UEAxMk MGM5YjdiNzgtMDQzMS00MDMwLWJlOTUtNjg4OWVkNDBkNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkcUV5/CSNM8MdvY4Ph0tnAxtQWGlgUfVyXW X5avqN2oBvjIxii2jQh1jDL5BzxjMhuWMFSkEVyuT52jFBUaIGs3UW4N0EJ/IvmV nJx80boLL40o4ngq1NIe6UmjEYDC8u6rTydtsTiwNhA0n8ba9qMeSzvW5J3Q+ZVl 6tMkTMjdIyn+oIAC5Qfoo5wz6/IF9eE7HVOk1CK2ckQ4Tr12rJk19slBZnbKWjBu 4v6Ee+yOqSi+a+eBmIx5hzdgXqq51SDu7nvl9Gmq+tiC5xuOPQn6gWFuhzwZUaIN seNol2qJmNvXTsb3UL1XM0Mw/PXtx38tj0Hg2zz8HZWyhhZOVwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNt9qMUwe/JWv1QGkMWx9IRqQXhGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w YzliN2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5ZWQ0MGQ2ZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBjOWI3Yjc4LTA0MzEtNDAzMC1i ZTk1LTY4ODllZDQwZDZlNi8wYzliN2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5ZWQ0 MGQ2ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAIiIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SdgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEANuUXVemqtlhbwSVPOQKISaHLTmoxnW9ii0Ca7+Hsn5COY75A OZFF7C11wlIV5hUfpgdLoeblvrWRJHmdK8TDDnPhLTQrcnsjSr4pQt1o1/hO9z5e u/ED1ICfZuVAQusG/3QxB7OBs3Gd0Zsb5MeD+iVRVWU9zOrxYfVlEEtVrfXTs3J3 0b08mrz+93H2ntrmNVuh5cjtsub9tinOCsalDyn5G0Sdbu4Nxg/fSOgUxidFowGz nEH9Gsh5VR+l/vG8ro4gqDJu8mOtrAkrcpTFTdtDutvQ/aZslF+80oXrLX5RdMCl eDQ4vFfpm8vhz5lR53Ip8zwdhO0+rS8rLamb7Q== -----END CERTIFICATE-----Generated at Wed Nov 5 04:29:04 2025 by rpki-client