$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer (raw, json) Hash identifier: G9KHIBXzOL653CUPLuShs0yBaL+T+3GCEB2lKp7kMws= Subject key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496F114DE716398F588E24B700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Apr 2025 07:43:25 +0000 Certificate not after: Sat 10 Jul 2027 07:43:25 +0000 Subordinate resources: IP: 23.181.248.0/24 IP: 2602:f8a5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:11:4d:e7:16:39:8f:58:8e:24:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 6 07:43:25 2025 GMT Not After : Jul 10 07:43:25 2027 GMT Subject: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:9e:0b:e2:5a:8e:4b:bc:3d:0a:d5:b8:c4: b1:08:f0:e1:90:b0:ee:32:c8:ec:d8:db:a1:9e:ca: 48:30:47:79:04:99:74:82:61:e3:d6:3f:77:5d:d2: ec:c6:38:ef:2b:49:40:78:b6:68:11:71:f7:11:0d: eb:4b:43:fc:49:b6:99:86:0c:fb:1f:3a:76:dc:5e: 40:be:d5:88:95:c5:f4:fe:63:26:c4:ca:a8:f8:3c: bc:1b:d7:27:ae:df:96:c9:04:77:b1:ab:bb:b6:b3: 54:82:d7:3e:06:54:39:d4:c1:f9:3b:11:b2:5a:da: 51:f7:79:ad:75:fe:30:12:1e:5e:73:5d:8a:14:f1: ab:7f:42:82:fa:ab:ca:9f:31:f6:69:e7:1d:bd:da: 6d:c4:8b:e9:47:7e:b0:28:38:82:d6:40:63:df:c2: d3:50:4c:2e:e8:d2:84:4c:b1:f5:0d:b4:de:51:91: d5:8a:64:a2:0c:e6:f5:b0:c5:e8:a6:d9:cd:8b:3c: 87:f4:ec:d3:aa:21:16:9e:72:7b:b4:20:c2:56:ca: 3f:35:04:25:71:57:2e:8c:e7:e2:c4:f7:a4:bf:75: ff:a8:d4:dd:ae:34:7d:d2:4b:b0:e9:1f:b3:75:6d: 02:08:cd:3c:b9:16:96:9f:92:9a:42:e3:8d:e2:d2: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.181.248.0/24 IPv6: 2602:f8a5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ca:03:ba:db:df:63:be:b5:bf:f9:23:d7:ad:02:87:55:95: 9b:6f:63:dd:03:61:a4:76:d7:db:97:aa:76:4d:06:aa:64:c7: e7:b7:d4:5f:83:07:e3:77:f6:3a:e4:66:80:32:52:d1:c9:56: 69:63:59:5a:e8:95:dd:b4:78:3a:29:f4:83:71:55:0a:65:57: 77:9a:11:50:db:34:be:7c:36:42:5a:57:16:4f:ca:5c:23:f2: 5a:9b:dc:a8:e4:6f:be:ee:58:c3:80:8f:e0:c5:da:c1:d7:ac: ef:a8:63:f7:ac:41:1a:58:a7:ae:c4:8b:ff:ff:74:92:20:41: 6a:7d:a5:ee:66:ae:fa:08:6d:5b:cd:bd:47:97:7c:f4:ad:0c: f1:bf:26:e3:43:75:fc:09:f3:07:de:e4:e4:05:70:cb:17:df: db:71:af:26:0c:99:f7:80:d3:ec:ca:77:a3:ea:07:cb:72:e6: ff:62:b9:00:8f:a2:e3:49:1f:f2:5f:54:33:00:09:42:de:dd: 9e:b8:dd:02:02:9d:5b:97:fd:79:10:4d:c2:1c:0f:6a:7b:f4: 8a:90:17:2f:77:2a:3a:cb:3f:2e:02:19:a0:95:bc:c1:d4:73: 0e:62:2c:c0:60:5a:79:3f:e3:a8:66:56:6a:99:14:94:45:6c: 52:93:2a:4a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWElvEU3nFjmPWI4ktwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNjA3NDMyNVoXDTI3MDcxMDA3NDMyNVowLzEtMCsGA1UEAxMk MmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEyM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQSeC+Jajku8PQrVuMSxCPDhkLDuMsjs2Nuh nspIMEd5BJl0gmHj1j93XdLsxjjvK0lAeLZoEXH3EQ3rS0P8SbaZhgz7Hzp23F5A vtWIlcX0/mMmxMqo+Dy8G9cnrt+WyQR3sau7trNUgtc+BlQ51MH5OxGyWtpR93mt df4wEh5ec12KFPGrf0KC+qvKnzH2aecdvdptxIvpR36wKDiC1kBj38LTUEwu6NKE TLH1DbTeUZHVimSiDOb1sMXoptnNizyH9OzTqiEWnnJ7tCDCVso/NQQlcVcujOfi xPekv3X/qNTdrjR90kuw6R+zdW0CCM08uRaWn5KaQuON4tJyxwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCuJCSv/7I94J9iH2RTajiTnTBxiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJiYzY0OGMyLTJmOTUtNDhmNS1h Y2I3LTllOGEyZjkxMjNhNy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5 MTIzYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtfgwDgQCAAIwCAMGACYC+KUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGzKA7rb32O+tb/5I9etAodVlZtvY90DYaR219uXqnZNBqpkx+e31F+DB+N39jrk ZoAyUtHJVmljWVrold20eDop9INxVQplV3eaEVDbNL58NkJaVxZPylwj8lqb3Kjk b77uWMOAj+DF2sHXrO+oY/esQRpYp67Ei///dJIgQWp9pe5mrvoIbVvNvUeXfPSt DPG/JuNDdfwJ8wfe5OQFcMsX39txryYMmfeA0+zKd6PqB8ty5v9iuQCPouNJH/Jf VDMACULe3Z643QICnVuX/XkQTcIcD2p79IqQFy93KjrLPy4CGaCVvMHUcw5iLMBg Wnk/46hmVmqZFJRFbFKTKko= -----END CERTIFICATE-----Generated at Wed Jun 18 12:22:19 2025 by rpki-client