$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013.cer File: 582dd4a9-9d5e-4349-b4cb-fbb66b88b013.cer (raw, json) Hash identifier: YPP5zxpHWZ6z7STVn/g20+3ugsI2ajP+BkZDQry/Jgk= Subject key identifier: F8:D0:47:EB:9F:EE:0E:C4:99:12:81:50:9E:26:3F:A3:DE:2F:67:EC Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849DD048DC0C642A7A583DE0AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/582dd4a9-9d5e-4349-b4cb-fbb66b88b013.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 16:56:39 +0000 Certificate not after: Wed 18 Aug 2027 16:56:39 +0000 Subordinate resources: AS: 17023 IP: 158.106.224.0 -- 158.106.247.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:04:8d:c0:c6:42:a7:a5:83:de:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 15 16:56:39 2025 GMT Not After : Aug 18 16:56:39 2027 GMT Subject: CN=582dd4a9-9d5e-4349-b4cb-fbb66b88b013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:1e:5d:a6:c5:3f:bd:32:dd:12:5b:fe:fd: 29:0e:3b:8d:50:76:18:70:d7:a4:51:0a:87:2d:8e: e4:83:86:c5:c8:6f:31:5b:1f:64:b8:f1:28:d9:19: 5f:42:7c:af:e7:86:fb:72:9a:85:3b:47:e7:2b:3a: 61:ca:51:c3:2f:ac:3e:4c:1d:b2:ca:23:cc:bf:37: 01:b5:99:b0:70:83:f7:89:0d:c3:7c:a9:b0:f4:5f: a3:07:c8:d0:9d:50:af:a1:d3:46:ab:cc:35:1f:3c: 1f:24:ef:e8:87:db:3c:8b:9a:49:bb:ed:17:95:e8: b6:96:4e:c4:6f:c9:85:84:ed:b9:25:26:93:59:ca: 49:ca:b2:07:c1:35:9d:07:a6:c7:bc:91:c1:4e:b2: 6e:6c:32:3e:07:f9:7a:9e:36:c5:ba:f8:78:0a:50: e5:d4:8d:9e:20:b9:06:d9:37:73:28:c6:c0:ac:53: e4:d8:cf:80:0e:58:1b:7e:57:d3:a8:a6:a5:49:3f: 90:9c:9d:fb:66:7d:70:89:40:64:53:cc:cb:76:f3: 20:da:3b:92:39:3d:b2:6e:6f:99:05:59:04:0a:94: f6:00:5c:cc:cd:17:79:f0:19:87:fd:5f:ae:75:f5: 61:57:c8:fa:86:45:ce:9d:04:82:e7:c8:62:99:81: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D0:47:EB:9F:EE:0E:C4:99:12:81:50:9E:26:3F:A3:DE:2F:67:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/582dd4a9-9d5e-4349-b4cb-fbb66b88b013/582dd4a9-9d5e-4349-b4cb-fbb66b88b013.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 158.106.224.0-158.106.247.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17023 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:87:98:ae:b2:23:5f:69:59:05:67:25:fa:9a:cf:53:23:fd: c4:76:0a:49:b9:07:41:85:6e:8d:91:9a:59:87:9b:1c:a8:15: 69:5a:c9:99:5c:9d:23:96:2a:b8:b3:3f:0b:f9:74:80:e9:01: ac:13:ad:d2:91:e7:b3:e9:fe:be:25:df:01:2b:58:b5:79:83: 11:24:9c:a7:3a:74:d3:84:a7:82:55:e5:6b:a1:a0:83:8c:5c: d1:fc:56:2a:7b:54:f8:a6:5d:63:81:67:75:a3:59:a0:c1:5f: e5:2a:60:cf:be:53:ed:8b:e1:8b:cb:37:8f:a0:e8:97:ab:ff: 46:e7:0f:ac:b6:d5:42:18:e6:6d:20:65:03:f5:aa:61:b0:57: d2:1b:81:3f:f6:4e:6c:6c:08:38:b8:d5:54:26:47:56:c8:1b: 7f:46:3f:e5:e1:ed:f2:c2:75:13:8b:d5:b0:1b:fa:65:79:c9: 4c:76:1f:01:d0:d2:24:0d:51:1d:03:fd:b9:5c:40:be:7e:76: a8:8a:11:3c:7d:63:8a:56:ee:e7:e8:23:a2:0b:b1:65:5f:74: 8d:66:44:63:28:71:1b:4f:39:93:55:5e:53:9b:42:8d:89:91: 5e:58:c7:29:e6:ee:00:54:82:0e:c2:eb:22:18:67:c8:39:fa: 39:fa:ff:04 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEndBI3AxkKnpYPeCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxNTE2NTYzOVoXDTI3MDgxODE2NTYzOVowLzEtMCsGA1UEAxMk NTgyZGQ0YTktOWQ1ZS00MzQ5LWI0Y2ItZmJiNjZiODhiMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSQeXabFP70y3RJb/v0pDjuNUHYYcNekUQqH LY7kg4bFyG8xWx9kuPEo2RlfQnyv54b7cpqFO0fnKzphylHDL6w+TB2yyiPMvzcB tZmwcIP3iQ3DfKmw9F+jB8jQnVCvodNGq8w1HzwfJO/oh9s8i5pJu+0Xlei2lk7E b8mFhO25JSaTWcpJyrIHwTWdB6bHvJHBTrJubDI+B/l6njbFuvh4ClDl1I2eILkG 2TdzKMbArFPk2M+ADlgbflfTqKalST+QnJ37Zn1wiUBkU8zLdvMg2juSOT2ybm+Z BVkECpT2AFzMzRd58BmH/V+udfVhV8j6hkXOnQSC58himYFt6wIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFPjQR+uf7g7EmRKBUJ4mP6PeL2fsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 ODJkZDRhOS05ZDVlLTQzNDktYjRjYi1mYmI2NmI4OGIwMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU4MmRkNGE5LTlkNWUtNDM0OS1i NGNiLWZiYjY2Yjg4YjAxMy81ODJkZDRhOS05ZDVlLTQzNDktYjRjYi1mYmI2NmI4 OGIwMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBZ5q4AMEA55q8DAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJCfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLh5iusiNfaVkFZyX6ms9TI/3EdgpJuQdBhW6N kZpZh5scqBVpWsmZXJ0jliq4sz8L+XSA6QGsE63Skeez6f6+Jd8BK1i1eYMRJJyn OnTThKeCVeVroaCDjFzR/FYqe1T4pl1jgWd1o1mgwV/lKmDPvlPti+GLyzePoOiX q/9G5w+sttVCGOZtIGUD9aphsFfSG4E/9k5sbAg4uNVUJkdWyBt/Rj/l4e3ywnUT i9WwG/pleclMdh8B0NIkDVEdA/25XEC+fnaoihE8fWOKVu7n6COiC7FlX3SNZkRj KHEbTzmTVV5Tm0KNiZFeWMcp5u4AVIIOwusiGGfIOfo5+v8E -----END CERTIFICATE-----Generated at Wed Jun 18 07:51:34 2025 by rpki-client