$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0.cer File: 64db7e92-777d-4c08-864a-85f57c2290b0.cer (raw, json) Hash identifier: X/dnW1yMoq0WML0nwsO7oH9tJr8tPxtuHyyzvglUXx8= Subject key identifier: 1A:EE:5E:0B:FF:DA:1C:6E:9F:AB:41:1E:B2:81:BF:C8:42:2C:29:2D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A3611C8C0D7852E3E00FF3500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/64db7e92-777d-4c08-864a-85f57c2290b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 14:30:15 +0000 Certificate not after: Sun 19 Sep 2027 14:30:15 +0000 Subordinate resources: AS: 401781 IP: 64.190.218.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:11:c8:c0:d7:85:2e:3e:00:ff:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 16 14:30:15 2025 GMT Not After : Sep 19 14:30:15 2027 GMT Subject: CN=64db7e92-777d-4c08-864a-85f57c2290b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:af:c5:9b:f4:9a:89:52:17:b3:71:8b:bf: f3:9c:d5:4c:a5:f1:12:67:e3:e3:3c:d9:b8:ba:65: 6d:ff:88:f0:3c:9a:ab:af:d8:f7:e8:03:cd:28:fd: 1c:70:3f:76:50:9a:be:f2:44:3a:3d:a3:15:15:b1: 4e:21:2e:ed:45:47:c0:ec:0b:88:bd:e4:b1:a8:4b: b5:43:0a:41:55:95:a0:9a:88:fb:56:26:f4:ed:c4: 78:6a:fc:c7:5c:20:fd:f0:51:cd:35:ff:e0:12:1c: 71:3f:14:ef:7e:24:6f:ed:9c:17:50:fe:9d:98:3f: 6d:d1:35:56:53:5d:29:51:e6:08:ab:eb:36:c7:3d: d4:55:8d:61:e5:ec:62:04:68:96:99:e4:96:59:e9: 58:70:fd:92:ab:95:53:5a:a4:29:03:9d:1c:8f:02: 7c:ec:43:a3:b0:df:09:10:88:2f:d8:95:06:85:41: 99:36:98:a1:44:a7:19:71:9f:ff:99:75:5c:d1:c1: b7:23:66:18:56:35:b4:71:fb:d8:77:ba:83:1b:12: 80:0c:58:09:62:96:8b:c6:a9:13:5f:6b:3c:2d:d0: 24:ea:b3:86:75:e9:79:e2:a7:9d:d2:e8:c2:77:ab: 38:62:96:94:1a:8f:d9:94:f7:9a:35:55:cb:a2:bb: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EE:5E:0B:FF:DA:1C:6E:9F:AB:41:1E:B2:81:BF:C8:42:2C:29:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64db7e92-777d-4c08-864a-85f57c2290b0/64db7e92-777d-4c08-864a-85f57c2290b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.190.218.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401781 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:23:8c:10:4d:32:c8:4a:a2:d3:b1:48:19:ee:8c:33:a0:28: 50:b5:32:1b:08:26:98:d4:8f:27:b5:14:7a:62:e9:11:c6:64: 3f:63:cb:9f:69:60:2a:78:dd:7b:b3:0e:fc:60:52:fa:e8:50: b5:66:9e:11:9f:a6:e2:60:a9:ba:07:33:b9:f1:5d:cc:32:0c: 4c:95:84:d6:14:35:19:5d:41:1a:2d:d1:02:bd:e8:93:9e:19: eb:6d:f3:eb:86:1c:4a:02:02:c8:d5:4b:50:bf:95:49:1f:84: 30:ee:f9:d6:98:4d:d7:8c:a3:b9:63:65:59:0f:65:21:cd:3e: 30:e7:4e:1b:ac:ce:37:81:9e:f4:df:77:1c:91:dd:43:23:bf: 70:0f:30:e4:32:d8:15:a4:6e:3a:57:9c:ec:3d:de:12:e4:e5: 51:36:1a:37:f0:62:3a:16:1d:0b:8e:22:0f:a9:48:e0:2b:1c: e9:35:ef:c8:d0:58:13:12:a6:f6:d5:55:d3:fc:d0:a9:71:76: ee:49:40:64:44:92:be:eb:7a:27:8a:a2:bb:77:21:ee:22:85: f5:4b:9c:5e:72:ee:f5:0c:d9:8d:15:92:04:b0:ca:de:58:6c: 70:8e:0c:a0:b1:53:88:f3:ad:bf:70:4e:aa:94:c2:f2:d1:61: 4a:20:bd:83 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEo2EcjA14UuPgD/NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxNjE0MzAxNVoXDTI3MDkxOTE0MzAxNVowLzEtMCsGA1UEAxMk NjRkYjdlOTItNzc3ZC00YzA4LTg2NGEtODVmNTdjMjI5MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKvxZv0molSF7Nxi7/znNVMpfESZ+PjPNm4 umVt/4jwPJqrr9j36APNKP0ccD92UJq+8kQ6PaMVFbFOIS7tRUfA7AuIveSxqEu1 QwpBVZWgmoj7Vib07cR4avzHXCD98FHNNf/gEhxxPxTvfiRv7ZwXUP6dmD9t0TVW U10pUeYIq+s2xz3UVY1h5exiBGiWmeSWWelYcP2Sq5VTWqQpA50cjwJ87EOjsN8J EIgv2JUGhUGZNpihRKcZcZ//mXVc0cG3I2YYVjW0cfvYd7qDGxKADFgJYpaLxqkT X2s8LdAk6rOGdel54qed0ujCd6s4YpaUGo/ZlPeaNVXLoruhoQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBruXgv/2hxun6tBHrKBv8hCLCktMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 NGRiN2U5Mi03NzdkLTRjMDgtODY0YS04NWY1N2MyMjkwYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY0ZGI3ZTkyLTc3N2QtNGMwOC04 NjRhLTg1ZjU3YzIyOTBiMC82NGRiN2U5Mi03NzdkLTRjMDgtODY0YS04NWY1N2My MjkwYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABAvtowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiF1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEwjjBBNMshKotOxSBnujDOgKFC1MhsIJpjUjye1FHpi6RHG ZD9jy59pYCp43XuzDvxgUvroULVmnhGfpuJgqboHM7nxXcwyDEyVhNYUNRldQRot 0QK96JOeGett8+uGHEoCAsjVS1C/lUkfhDDu+daYTdeMo7ljZVkPZSHNPjDnThus zjeBnvTfdxyR3UMjv3APMOQy2BWkbjpXnOw93hLk5VE2GjfwYjoWHQuOIg+pSOAr HOk178jQWBMSpvbVVdP80Klxdu5JQGREkr7reieKort3Ie4ihfVLnF5y7vUM2Y0V kgSwyt5YbHCODKCxU4jzrb9wTqqUwvLRYUogvYM= -----END CERTIFICATE-----Generated at Thu Jun 19 07:48:20 2025 by rpki-client