$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer File: 170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer (raw, json) Hash identifier: hbK1iQr1Dhi3etraoviXq2S1KWJ0pPGqceJBRATOwSk= Subject key identifier: 1F:B2:DF:F8:09:2C:B0:75:06:BA:6A:2B:CF:43:01:E6:B0:3B:17:E8 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A04A622AEBF0445494BFEAB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 May 2025 21:38:44 +0000 Certificate not after: Wed 01 Sep 2027 21:38:44 +0000 Subordinate resources: AS: 40505 AS: 55245 IP: 69.58.95.0/24 IP: 192.64.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:04:a6:22:ae:bf:04:45:49:4b:fe:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 29 21:38:44 2025 GMT Not After : Sep 1 21:38:44 2027 GMT Subject: CN=170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:f2:5e:62:23:5d:f9:e8:d7:c6:55:9a:cd: 4f:9c:f8:4a:57:56:21:7a:62:52:f8:24:49:0d:e8: 55:d7:e1:3b:93:72:b5:07:69:43:91:48:9f:b8:55: ac:4e:6f:db:d6:30:94:45:96:95:01:7b:7b:06:15: e3:11:0b:c7:9f:c8:37:28:72:ee:19:dc:90:d6:32: dc:50:ae:2a:78:55:38:6f:cf:d4:83:19:af:94:e4: 04:c0:34:91:5b:99:fd:8d:98:dc:9a:a7:2b:38:31: 8c:a3:17:82:36:ee:43:ee:a9:22:65:20:69:c0:64: f7:5a:6c:c4:fd:a0:12:7a:12:3a:29:32:05:ce:43: 20:4b:15:a8:4f:ee:52:61:14:ec:d8:a6:44:2b:b3: b5:92:f8:59:37:15:85:2d:67:b6:db:07:e6:fc:b5: ad:f9:68:5a:32:a0:c9:e4:aa:b2:d3:00:49:55:3d: 61:df:1a:8f:8c:fc:b8:fd:1b:a0:9a:01:9b:4d:e7: 36:ca:35:c6:f7:1b:d0:76:b4:4e:0a:41:7f:d1:d5: df:74:84:55:df:9a:c1:da:a1:91:19:3b:b2:d4:57: aa:f0:a9:84:e6:37:c9:13:f4:ac:b8:c9:f2:40:ef: 00:eb:67:bb:aa:71:55:c7:1c:14:0c:1b:bb:d6:e3: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:DF:F8:09:2C:B0:75:06:BA:6A:2B:CF:43:01:E6:B0:3B:17:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 69.58.95.0/24 192.64.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40505 55245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ef:40:c7:88:20:a4:6e:e8:4b:74:19:d4:c5:b8:a4:b7:a0: 5b:bc:84:87:bb:b8:38:ac:ce:b9:87:ba:f5:76:a2:cf:10:91: 7f:d2:99:54:8d:54:e6:2a:d7:6a:14:20:d7:21:db:68:4f:48: 3d:d0:07:1f:d0:e7:64:36:11:7c:78:0b:e6:73:bc:67:04:b6: e7:b0:73:0a:8e:eb:cc:bb:4f:9c:ac:64:58:3d:3e:61:15:be: 74:48:d5:12:05:55:24:56:6d:a6:e2:2b:5f:a0:5f:e6:f4:e7: af:79:66:6b:57:64:ae:c5:84:05:fe:5f:e0:8f:a5:ec:b2:e1: 11:bb:f5:54:d5:2f:db:0c:1f:f1:0c:0b:da:2e:1d:0f:34:7a: 79:4b:53:8e:55:df:a7:be:61:57:42:94:43:7a:18:0a:8a:18: 9d:50:90:94:7c:0f:fb:c1:23:84:6c:c2:ba:41:dd:35:62:45: f0:7b:3e:97:e7:8b:fd:e0:12:f9:d0:25:7c:8f:88:09:81:93: 8b:23:17:49:f9:f0:66:20:b8:26:82:6d:1b:50:88:51:0e:90: 10:99:56:b7:e1:c4:c9:25:f7:5e:2b:92:37:39:9a:bc:b6:c2: aa:99:78:41:7e:92:a1:0a:ba:c4:eb:fd:20:a8:79:d1:c1:57: e4:b3:78:fe -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEoEpiKuvwRFSUv+q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyOTIxMzg0NFoXDTI3MDkwMTIxMzg0NFowLzEtMCsGA1UEAxMk MTcwZjA2Y2MtN2FkMC00MzM0LTg4YjItNGFhN2Y5Y2ZjNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jyXmIjXfno18ZVms1PnPhKV1YhemJS+CRJ DehV1+E7k3K1B2lDkUifuFWsTm/b1jCURZaVAXt7BhXjEQvHn8g3KHLuGdyQ1jLc UK4qeFU4b8/UgxmvlOQEwDSRW5n9jZjcmqcrODGMoxeCNu5D7qkiZSBpwGT3WmzE /aASehI6KTIFzkMgSxWoT+5SYRTs2KZEK7O1kvhZNxWFLWe22wfm/LWt+WhaMqDJ 5Kqy0wBJVT1h3xqPjPy4/RugmgGbTec2yjXG9xvQdrROCkF/0dXfdIRV35rB2qGR GTuy1Feq8KmE5jfJE/SsuMnyQO8A62e7qnFVxxwUDBu71uPWhwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFB+y3/gJLLB1BrpqK89DAeawOxfoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x NzBmMDZjYy03YWQwLTQzMzQtODhiMi00YWE3ZjljZmM2Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE3MGYwNmNjLTdhZDAtNDMzNC04 OGIyLTRhYTdmOWNmYzZjYS8xNzBmMDZjYy03YWQwLTQzMzQtODhiMi00YWE3Zjlj ZmM2Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABFOl8DBALAQBQwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJ45AgMA180wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANu9Ax4ggpG7oS3QZ1MW4pLegW7yEh7u4 OKzOuYe69XaizxCRf9KZVI1U5irXahQg1yHbaE9IPdAHH9DnZDYRfHgL5nO8ZwS2 57BzCo7rzLtPnKxkWD0+YRW+dEjVEgVVJFZtpuIrX6Bf5vTnr3lma1dkrsWEBf5f 4I+l7LLhEbv1VNUv2wwf8QwL2i4dDzR6eUtTjlXfp75hV0KUQ3oYCooYnVCQlHwP +8EjhGzCukHdNWJF8Hs+l+eL/eAS+dAlfI+ICYGTiyMXSfnwZiC4JoJtG1CIUQ6Q EJlWt+HEySX3XiuSNzmavLbCqpl4QX6SoQq6xOv9IKh50cFX5LN4/g== -----END CERTIFICATE-----Generated at Wed Jun 18 11:23:42 2025 by rpki-client