$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer File: a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer (raw, json) Hash identifier: HuE9bFz/7OQRFvUNXvj4e/MKDemL2IjtJq1nDbjU3+A= Subject key identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A38F207B29BEFB8581B44A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 15:13:41 +0000 Certificate not after: Mon 20 Sep 2027 15:13:41 +0000 Subordinate resources: AS: 14576 IP: 104.193.252.0/22 IP: 162.244.32.0/22 IP: 162.248.224.0/21 IP: 204.155.28.0/22 IP: 2606:5e00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:f2:07:b2:9b:ef:b8:58:1b:44:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 17 15:13:41 2025 GMT Not After : Sep 20 15:13:41 2027 GMT Subject: CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:43:f2:12:9e:50:36:e0:46:2f:a3:4a:cf: d2:63:fd:4a:23:91:a2:9d:2b:0e:47:a3:a5:18:9b: d4:35:81:52:bb:79:27:b9:a0:f1:52:45:f6:98:63: b9:13:c8:c5:bb:fb:20:ed:34:26:ea:fd:98:12:20: 94:a5:19:87:2e:66:6c:0c:d8:23:f4:77:a5:f6:e6: 13:a7:8e:a6:c8:18:fa:78:1a:57:a6:91:f5:98:7d: a6:8d:c0:4a:d1:ab:9f:3a:2c:b8:f9:f5:90:ee:1d: 04:34:40:01:22:cc:07:b4:34:46:4e:5e:00:c3:30: b0:6b:57:6e:0d:ab:61:dd:3b:66:e4:94:12:24:ee: 97:9d:71:70:52:24:49:bf:89:05:51:0f:7c:1e:95: b2:57:7b:e0:4d:1d:21:c4:0f:09:ac:8b:8b:f5:b0: 89:fb:d1:bd:43:f0:12:26:0d:23:b5:99:cb:5b:2c: c2:21:bb:b2:b0:81:c9:8d:3a:10:f1:67:2b:e8:6c: 60:b7:63:f8:34:bb:2b:f2:e3:b3:f8:42:18:57:43: aa:52:2f:78:64:3d:ad:92:59:d6:16:24:1d:65:80: 08:cb:42:09:a2:e0:6b:40:d5:20:93:b6:ff:0d:fa: 35:dc:47:59:25:8f:e2:a5:91:43:53:1e:4a:d9:2e: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.193.252.0/22 162.244.32.0/22 162.248.224.0/21 204.155.28.0/22 IPv6: 2606:5e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14576 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:27:30:c1:0e:09:0b:12:d1:65:d3:8e:3c:7e:31:62:9d:78: 4e:0e:80:35:69:e0:97:af:3e:c2:8b:c4:e9:e8:a0:a5:88:09: 13:09:35:ea:cc:05:49:07:b7:23:33:fb:36:48:87:cd:f4:af: d2:ae:f3:a3:7d:9b:53:8d:98:e3:b3:66:4b:3c:b8:bd:45:c6: 44:af:12:38:b0:40:4c:20:c2:36:a7:b8:39:d8:32:71:bb:7b: d1:ad:92:cf:86:e9:50:20:f3:f3:44:0a:c9:c8:0d:61:fd:23: 69:21:d9:4d:2e:20:a3:5f:53:a1:22:b8:36:af:d1:5d:3b:b4: 28:3e:2f:8d:e8:46:3a:85:49:07:8c:8b:b9:3c:4a:43:82:85: e1:a9:f5:7e:e6:6d:32:28:42:aa:8d:68:19:4d:a0:48:65:df: 20:c5:f7:8e:ef:b4:61:fc:8f:64:c1:a0:85:6d:34:1f:15:69: 2b:b0:af:bd:03:c5:8a:26:ca:ae:00:b5:da:c7:b6:8a:d8:41: be:87:0a:2b:af:97:f1:4e:b4:e6:06:a5:08:57:6a:7c:5b:31: e1:81:2b:e6:29:54:68:11:ca:7f:20:80:c3:af:82:e6:4c:60: cb:46:99:82:5c:5f:7b:71:c8:31:f9:5c:6c:0a:15:5b:3d:05: 1d:bf:b6:cc -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEo48geym++4WBtEpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxNzE1MTM0MVoXDTI3MDkyMDE1MTM0MVowLzEtMCsGA1UEAxMk YTNlZTAyNTktY2RiMy00MWNlLWJiZjctN2EwMjhmNGI5YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuBD8hKeUDbgRi+jSs/SY/1KI5GinSsOR6Ol GJvUNYFSu3knuaDxUkX2mGO5E8jFu/sg7TQm6v2YEiCUpRmHLmZsDNgj9Hel9uYT p46myBj6eBpXppH1mH2mjcBK0aufOiy4+fWQ7h0ENEABIswHtDRGTl4AwzCwa1du Dath3Ttm5JQSJO6XnXFwUiRJv4kFUQ98HpWyV3vgTR0hxA8JrIuL9bCJ+9G9Q/AS Jg0jtZnLWyzCIbuysIHJjToQ8Wcr6Gxgt2P4NLsr8uOz+EIYV0OqUi94ZD2tklnW FiQdZYAIy0IJouBrQNUgk7b/Dfo13EdZJY/ipZFDUx5K2S4wyQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFLrKscyVioDfyxSUjQVEnqewRii1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h M2VlMDI1OS1jZGIzLTQxY2UtYmJmNy03YTAyOGY0YjliMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2EzZWUwMjU5LWNkYjMtNDFjZS1i YmY3LTdhMDI4ZjRiOWIxMy9hM2VlMDI1OS1jZGIzLTQxY2UtYmJmNy03YTAyOGY0 YjliMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAJowfwDBAKi9CADBAOi+OADBALMmxwwDQQCAAIw BwMFACYGXgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICOPAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAicw wQ4JCxLRZdOOPH4xYp14Tg6ANWngl68+wovE6eigpYgJEwk16swFSQe3IzP7NkiH zfSv0q7zo32bU42Y47NmSzy4vUXGRK8SOLBATCDCNqe4Odgycbt70a2Sz4bpUCDz 80QKycgNYf0jaSHZTS4go19ToSK4Nq/RXTu0KD4vjehGOoVJB4yLuTxKQ4KF4an1 fuZtMihCqo1oGU2gSGXfIMX3ju+0YfyPZMGghW00HxVpK7CvvQPFiibKrgC12se2 ithBvocKK6+X8U605galCFdqfFsx4YEr5ilUaBHKfyCAw6+C5kxgy0aZglxfe3HI MflcbAoVWz0FHb+2zA== -----END CERTIFICATE-----Generated at Wed Jun 18 12:38:46 2025 by rpki-client