$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.cer File: 3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.cer (raw, json) Hash identifier: a/Rq0CCi0OzswngyAt/QzKT4or+wCoO4sfyVGtrSVgo= Subject key identifier: A1:C0:70:EA:E8:06:D1:C5:87:56:0E:09:C4:6B:10:3E:86:41:7F:20 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849ED53B0D9BCD16006967BFA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 May 2025 13:09:02 +0000 Certificate not after: Tue 24 Aug 2027 13:09:02 +0000 Subordinate resources: AS: 22691 IP: 69.48.144.0/24 IP: 69.48.147.0/24 IP: 2610:198::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:53:b0:d9:bc:d1:60:06:96:7b:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 21 13:09:02 2025 GMT Not After : Aug 24 13:09:02 2027 GMT Subject: CN=3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:47:57:ac:06:20:69:d2:65:9b:2f:a3:34: 36:f4:37:f5:2b:ad:4a:9d:aa:da:d4:0c:17:37:a6: 38:8a:8a:68:39:9f:85:3a:67:79:94:46:29:d9:f6: f6:54:c3:79:8a:c6:43:6f:f1:00:e5:69:47:33:bd: b5:8b:0e:aa:fb:54:25:7c:fe:9c:02:4b:7c:2a:14: b8:ab:2a:48:38:a6:6b:c6:7e:16:0d:1f:1b:85:b1: 93:15:2c:0f:2c:9a:12:7d:59:40:cb:18:03:cb:76: e7:3c:2a:03:9b:de:b8:43:d8:a4:ab:4a:6c:ed:00: 1d:4e:44:83:28:46:fa:4b:e1:16:0e:10:76:f6:d6: 0e:7a:14:59:d7:97:41:97:2c:39:42:ab:65:a2:67: 15:18:7e:f5:b8:85:5f:1e:5b:f1:ef:05:d8:7a:50: 7f:0f:98:34:e8:5f:64:df:5c:55:6c:a9:f1:55:9b: 02:63:f1:65:e9:52:a2:a4:98:e2:bc:1e:be:6f:9f: 7e:cb:88:1b:40:7c:b3:9f:3a:06:ba:d3:e1:ca:0f: 8b:9f:5f:e3:0e:f5:3d:1a:5f:e0:0d:16:b7:63:59: 74:6f:55:98:6c:2e:37:63:d3:c6:81:65:77:7c:52: 54:89:68:8e:35:3b:b3:99:ba:58:c3:bb:c9:5b:a6: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C0:70:EA:E8:06:D1:C5:87:56:0E:09:C4:6B:10:3E:86:41:7F:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 69.48.144.0/24 69.48.147.0/24 IPv6: 2610:198::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22691 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:66:f4:8d:95:69:c1:e0:a5:f1:98:89:b7:d6:a9:ef:5a:48: 54:c2:ae:18:3d:57:f9:0b:a7:78:9f:a1:d8:96:db:05:17:62: de:ff:dd:cd:28:0b:76:fe:48:16:d9:98:b9:11:9d:b9:bc:64: 11:3e:a4:90:40:63:cf:93:f5:f1:71:bd:10:06:88:8e:59:b6: 87:fa:ab:4a:44:de:32:01:95:de:23:0a:4f:94:01:9b:48:ae: 9c:8e:ea:0a:c0:45:29:54:47:d9:d9:dd:26:28:b2:8f:cc:8c: f6:3d:85:17:0d:97:e9:78:19:c2:4b:89:44:ee:ad:bc:a5:8e: b6:73:e3:38:f2:fd:f2:ab:f0:89:d7:09:02:89:4c:42:df:fb: df:e4:fc:a2:da:17:83:cc:88:8b:56:d5:5f:ac:74:55:e6:c8: b6:42:23:93:4b:f1:bf:64:31:b5:4a:75:00:2f:e2:5f:cc:83: f3:ae:15:d8:44:16:71:a5:d8:3c:80:73:64:f4:69:72:60:c9: 71:e2:c5:26:10:9b:08:fe:61:9b:d7:49:0d:b7:4f:22:76:60: 27:9c:26:79:72:73:30:0c:ad:d0:2c:57:49:0f:7e:22:c1:9b: f7:6a:71:bf:2a:2e:be:08:e4:97:ed:85:6d:d7:dc:0c:66:2d: 6f:48:4e:5f -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEntU7DZvNFgBpZ7+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyMTEzMDkwMloXDTI3MDgyNDEzMDkwMlowLzEtMCsGA1UEAxMk M2Y3ZjRjYTUtNWZlMi00ZGZiLWFlN2EtNjA2MmEyMGY1OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV1HV6wGIGnSZZsvozQ29Df1K61Knara1AwX N6Y4iopoOZ+FOmd5lEYp2fb2VMN5isZDb/EA5WlHM721iw6q+1QlfP6cAkt8KhS4 qypIOKZrxn4WDR8bhbGTFSwPLJoSfVlAyxgDy3bnPCoDm964Q9ikq0ps7QAdTkSD KEb6S+EWDhB29tYOehRZ15dBlyw5QqtlomcVGH71uIVfHlvx7wXYelB/D5g06F9k 31xVbKnxVZsCY/Fl6VKipJjivB6+b59+y4gbQHyznzoGutPhyg+Ln1/jDvU9Gl/g DRa3Y1l0b1WYbC43Y9PGgWV3fFJUiWiONTuzmbpYw7vJW6aK5wIDAQABo4IELzCC BCswHQYDVR0OBBYEFKHAcOroBtHFh1YOCcRrED6GQX8gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ZjdmNGNhNS01ZmUyLTRkZmItYWU3YS02MDYyYTIwZjU5MTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNmN2Y0Y2E1LTVmZTItNGRmYi1h ZTdhLTYwNjJhMjBmNTkxNC8zZjdmNGNhNS01ZmUyLTRkZmItYWU3YS02MDYyYTIw ZjU5MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBABFMJADBABFMJMwDQQCAAIwBwMFACYQAZgwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICWKMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATmb0jZVpweCl8ZiJt9ap 71pIVMKuGD1X+QuneJ+h2JbbBRdi3v/dzSgLdv5IFtmYuRGdubxkET6kkEBjz5P1 8XG9EAaIjlm2h/qrSkTeMgGV3iMKT5QBm0iunI7qCsBFKVRH2dndJiiyj8yM9j2F Fw2X6XgZwkuJRO6tvKWOtnPjOPL98qvwidcJAolMQt/73+T8otoXg8yIi1bVX6x0 VebItkIjk0vxv2QxtUp1AC/iX8yD864V2EQWcaXYPIBzZPRpcmDJceLFJhCbCP5h m9dJDbdPInZgJ5wmeXJzMAyt0CxXSQ9+IsGb92pxvyouvgjkl+2FbdfcDGYtb0hO Xw== -----END CERTIFICATE-----Generated at Wed Jun 18 19:33:29 2025 by rpki-client