$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer File: 6157cf71-d190-4be0-86fe-894ed130459b.cer (raw, json) Hash identifier: HQ4WITwrJ5ZkByMkIhI3Ep1H4vl+r/7rA7D0/ibRZG8= Subject key identifier: 49:36:2B:6A:7E:28:78:52:A9:B2:9F:84:A9:12:9F:6A:AA:7E:14:39 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B8C5296AF539E591D3379080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 17:19:49 +0000 Certificate not after: Thu 05 Aug 2027 17:19:49 +0000 Subordinate resources: AS: 7849 AS: 22301 IP: 66.59.48.0/20 IP: 2001:4918::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:c5:29:6a:f5:39:e5:91:d3:37:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 2 17:19:49 2025 GMT Not After : Aug 5 17:19:49 2027 GMT Subject: CN=6157cf71-d190-4be0-86fe-894ed130459b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c2:a1:a4:01:ae:52:7c:a9:f1:c0:13:e3:b4: 4b:b0:e4:5c:fd:0e:0d:a9:a1:0d:39:b9:59:e8:42: 76:79:67:2f:b5:bf:5c:1a:5e:4d:68:04:9b:52:c9: e5:f8:3a:f8:44:21:cb:a6:33:84:ef:7c:62:6b:7f: c9:be:24:af:ed:51:4f:72:14:d2:14:1c:f6:ce:22: 42:ce:91:c5:55:0b:a4:cf:50:e6:04:8a:c8:76:2e: ac:a7:6f:de:62:6f:87:4e:ff:8b:d4:fb:68:6d:f8: 63:5b:06:e1:a9:81:0a:fb:ca:b1:77:4d:57:b6:bc: b7:43:c7:37:d3:0b:dc:55:c9:1e:eb:a2:e2:62:e9: 8b:f1:e1:0e:6d:2c:db:4d:bd:cb:34:0b:41:80:16: e4:fe:11:5b:90:9a:54:cd:9f:71:9e:14:cd:6d:c1: ae:6f:7d:9b:41:fa:be:1c:f4:0d:82:99:ea:7a:a7: 9e:83:18:a3:43:b3:80:6c:d3:8f:63:3e:be:4c:c0: f9:38:d6:58:ed:93:af:5d:0b:b8:1b:76:c8:4f:a9: 5c:90:9a:55:96:6b:96:7d:21:b7:6b:b7:11:eb:3d: a4:a5:bc:45:c8:1f:27:fc:e7:98:c6:d0:90:47:36: b6:03:84:c2:8a:4c:5d:61:2e:5b:a0:46:e0:eb:ad: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:36:2B:6A:7E:28:78:52:A9:B2:9F:84:A9:12:9F:6A:AA:7E:14:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.59.48.0/20 IPv6: 2001:4918::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7849 22301 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:77:40:f9:9b:dd:90:d1:65:2e:8b:e1:e5:e9:bc:0c:2e:5f: 62:4d:04:bd:77:81:b6:3e:3e:b5:23:45:3e:56:51:d3:82:1e: f0:72:e1:41:5c:e6:87:65:4f:f5:da:a5:0d:d5:7c:f7:d3:af: bf:c2:2e:b9:de:c1:95:f3:99:de:96:6d:e2:bd:99:3d:63:54: b9:ed:cf:68:38:cc:b3:74:1f:fd:e7:ef:88:ba:59:3a:a8:e3: 48:95:cd:22:9d:3e:6c:b3:56:8b:f0:a9:24:34:5f:dd:2c:4c: bc:f9:be:28:8e:72:cd:11:1f:02:43:89:03:29:cb:67:18:c6: 47:b7:30:1c:2a:0c:2d:5f:01:cf:f9:61:c4:06:26:64:d1:0d: 9d:20:6f:56:6a:8d:ad:73:82:80:11:98:34:dc:a7:7f:e7:aa: 0d:76:ee:dc:55:c7:99:d5:76:1d:75:36:82:57:11:a0:38:e8: 8d:1b:4a:f0:db:47:8a:2c:21:a0:d7:0c:58:d2:ca:69:8d:9d: 02:c7:80:25:3a:36:9d:48:61:a3:71:1e:e9:9d:5f:12:8d:a2: 81:52:99:ad:f1:54:5c:13:49:dd:47:63:6e:94:2e:27:99:06: 24:49:df:b1:ff:42:58:f0:b9:a5:8e:45:8c:dd:54:fb:25:30: e4:ae:0a:7c -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEm4xSlq9TnlkdM3kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwMjE3MTk0OVoXDTI3MDgwNTE3MTk0OVowLzEtMCsGA1UEAxMk NjE1N2NmNzEtZDE5MC00YmUwLTg2ZmUtODk0ZWQxMzA0NTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMKhpAGuUnyp8cAT47RLsORc/Q4NqaENOblZ 6EJ2eWcvtb9cGl5NaASbUsnl+Dr4RCHLpjOE73xia3/JviSv7VFPchTSFBz2ziJC zpHFVQukz1DmBIrIdi6sp2/eYm+HTv+L1PtobfhjWwbhqYEK+8qxd01Xtry3Q8c3 0wvcVcke66LiYumL8eEObSzbTb3LNAtBgBbk/hFbkJpUzZ9xnhTNbcGub32bQfq+ HPQNgpnqeqeegxijQ7OAbNOPYz6+TMD5ONZY7ZOvXQu4G3bIT6lckJpVlmuWfSG3 a7cR6z2kpbxFyB8n/OeYxtCQRza2A4TCikxdYS5boEbg662PlwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFEk2K2p+KHhSqbKfhKkSn2qqfhQ5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 MTU3Y2Y3MS1kMTkwLTRiZTAtODZmZS04OTRlZDEzMDQ1OWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzYxNTdjZjcxLWQxOTAtNGJlMC04 NmZlLTg5NGVkMTMwNDU5Yi82MTU3Y2Y3MS1kMTkwLTRiZTAtODZmZS04OTRlZDEz MDQ1OWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARCOzAwDQQCAAIwBwMFACABSRgwHQYIKwYBBQUH AQgBAf8EDjAMoAowCAICHqkCAlcdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGZ3QPmb3ZDRZS6L4eXpvAwu X2JNBL13gbY+PrUjRT5WUdOCHvBy4UFc5odlT/XapQ3VfPfTr7/CLrnewZXzmd6W beK9mT1jVLntz2g4zLN0H/3n74i6WTqo40iVzSKdPmyzVovwqSQ0X90sTLz5viiO cs0RHwJDiQMpy2cYxke3MBwqDC1fAc/5YcQGJmTRDZ0gb1Zqja1zgoARmDTcp3/n qg127txVx5nVdh11NoJXEaA46I0bSvDbR4osIaDXDFjSymmNnQLHgCU6Np1IYaNx HumdXxKNooFSma3xVFwTSd1HY26ULieZBiRJ37H/QljwuaWORYzdVPslMOSuCnw= -----END CERTIFICATE-----Generated at Wed Nov 5 06:01:59 2025 by rpki-client