$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer (raw, json) Hash identifier: 8TrD3s6e7R0YnnDHvZyAUME32565dTxaLTeQkAY0Cd8= Subject key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849DA9C7DF581D8303354147720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 20:15:21 +0000 Certificate not after: Tue 17 Aug 2027 20:15:21 +0000 Subordinate resources: AS: 23102 IP: 66.206.176.0/20 IP: 2620:95::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:9c:7d:f5:81:d8:30:33:54:14:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 14 20:15:21 2025 GMT Not After : Aug 17 20:15:21 2027 GMT Subject: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:50:9a:b0:d7:d5:59:54:0b:41:d8:cd:28: c6:71:b3:cb:ed:ae:80:98:83:de:18:af:20:4c:68: 20:a9:57:6a:ed:ce:18:27:16:5c:72:08:48:7d:88: 11:1e:a7:b9:cf:cd:85:75:81:49:95:e8:d2:4a:0d: c9:1a:10:a8:a8:7b:5f:d1:c3:ee:ac:16:03:f4:dd: 51:fb:5a:42:2f:b9:23:8e:05:ce:68:09:29:ad:89: 8d:23:e9:2b:0d:b4:d9:f6:36:bf:6a:f7:50:a1:f6: 0c:7f:09:5e:96:29:5b:21:96:08:1c:c9:6c:11:16: 0e:4f:37:ac:d2:50:48:2f:e7:f2:98:8a:60:14:6e: 65:87:06:fe:b3:89:4f:f3:bf:cf:03:aa:b8:70:0f: 99:02:6f:2b:ff:8d:c3:57:53:0b:9d:cc:7f:f3:18: 99:85:03:51:f7:8f:56:a9:a3:5b:27:f1:59:c6:16: f9:51:c0:38:51:4d:4e:88:15:38:51:65:1e:36:55: 40:b0:1d:66:19:3e:58:aa:2e:9e:d3:55:f2:f6:19: 4c:7d:fa:04:31:14:0b:d7:14:f6:5b:fd:92:70:15: 93:e0:9d:bf:2a:de:3c:e2:a5:d3:b4:dd:5a:0b:aa: 18:88:9e:7a:28:e9:d5:9e:b7:6f:ee:da:46:cb:ae: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.206.176.0/20 IPv6: 2620:95::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23102 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6d:53:17:8d:6d:5a:44:44:1c:19:c2:1a:5e:3e:c3:88:e3: 09:8b:9c:cf:9b:9e:fc:f9:fc:64:b4:f7:ba:d6:a6:0e:9a:85: 7f:48:85:78:92:c3:d8:33:5f:0b:34:9a:5a:b9:ce:d2:b5:db: b6:4c:ce:37:3b:61:0c:13:55:d5:0c:4c:9e:dd:4d:1e:ff:4e: b4:ed:d2:c8:af:c3:e4:47:2d:7b:76:17:42:3b:80:a8:22:57: 62:61:32:43:8e:1a:64:e5:85:5f:3e:da:46:ed:e0:4f:2d:b3: c9:18:5d:4c:a8:79:02:f1:74:ac:8d:b0:40:76:fb:9a:f8:0e: d7:6a:91:64:25:85:4b:6d:1f:16:71:2b:2d:03:b2:e9:c7:87: 2c:95:cf:f6:8b:03:05:53:fc:c4:99:23:44:b5:ee:6f:ac:79: e2:35:07:b7:95:9d:55:88:40:01:b7:a8:ae:71:c7:e9:d5:4d: aa:d9:95:f9:12:e8:fc:69:1d:46:28:4e:6e:bd:4d:01:59:1a: 57:2a:82:1c:76:bb:b9:d9:be:26:21:8f:fd:e2:1f:8b:86:b5: 14:31:21:7a:83:27:99:01:5a:b9:70:36:75:a6:f5:5d:d7:fb: 8a:5e:8e:1f:a1:3e:76:02:48:9b:6d:1f:26:80:24:38:9a:29: fe:96:5d:ff -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnanH31gdgwM1QUdyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxNDIwMTUyMVoXDTI3MDgxNzIwMTUyMVowLzEtMCsGA1UEAxMk M2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCFQmrDX1VlUC0HYzSjGcbPL7a6AmIPeGK8g TGggqVdq7c4YJxZccghIfYgRHqe5z82FdYFJlejSSg3JGhCoqHtf0cPurBYD9N1R +1pCL7kjjgXOaAkprYmNI+krDbTZ9ja/avdQofYMfwlelilbIZYIHMlsERYOTzes 0lBIL+fymIpgFG5lhwb+s4lP87/PA6q4cA+ZAm8r/43DV1MLncx/8xiZhQNR949W qaNbJ/FZxhb5UcA4UU1OiBU4UWUeNlVAsB1mGT5Yqi6e01Xy9hlMffoEMRQL1xT2 W/2ScBWT4J2/Kt484qXTtN1aC6oYiJ56KOnVnrdv7tpGy64B5wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLn6V97bZO0gal6NQS0uhjTXY0sUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z YzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNjOGE5NzFmLWQ3ZGMtNGU5NS1i YzZlLWEwZGIxNWY4MGE4NC8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVm ODBhODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARCzrAwDwQCAAIwCQMHACYgAJUAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJaPjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+bVMXjW1aREQcGcIaXj7DiOMJ i5zPm578+fxktPe61qYOmoV/SIV4ksPYM18LNJpauc7Stdu2TM43O2EME1XVDEye 3U0e/0607dLIr8PkRy17dhdCO4CoIldiYTJDjhpk5YVfPtpG7eBPLbPJGF1MqHkC 8XSsjbBAdvua+A7XapFkJYVLbR8WcSstA7Lpx4cslc/2iwMFU/zEmSNEte5vrHni NQe3lZ1ViEABt6iuccfp1U2q2ZX5Euj8aR1GKE5uvU0BWRpXKoIcdru52b4mIY/9 4h+LhrUUMSF6gyeZAVq5cDZ1pvVd1/uKXo4foT52AkibbR8mgCQ4min+ll3/ -----END CERTIFICATE-----Generated at Wed Jun 18 09:07:12 2025 by rpki-client