$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer File: a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer (raw, json) Hash identifier: xUCDRdNE+sd0QJTM/RIeXumZ/kRZP8k/GK/vdi5rqfY= Subject key identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A011252FC25FCD1FC982FA080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 14:53:29 +0000 Certificate not after: Tue 31 Aug 2027 14:53:29 +0000 Subordinate resources: AS: 36228 IP: 192.43.153.0/24 IP: 2602:f98a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:12:52:fc:25:fc:d1:fc:98:2f:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 28 14:53:29 2025 GMT Not After : Aug 31 14:53:29 2027 GMT Subject: CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:86:cb:dc:2d:76:5c:4d:07:25:08:eb:ba: 53:43:5b:1f:88:a7:fd:09:cf:46:6a:59:40:3a:fa: de:80:c5:1d:bb:88:db:7d:f7:75:6b:07:28:43:c1: c8:54:06:12:c2:5c:14:d1:e0:57:16:3d:f1:e4:b3: e7:fb:7a:26:c9:34:3b:73:3e:93:a7:d2:33:44:b1: 6a:85:12:1a:a5:39:ae:49:2a:b6:46:f2:88:db:91: ef:ed:f2:af:d2:0c:48:d7:bb:9b:d6:2e:ba:49:2b: 82:56:e1:5d:1a:89:d3:5b:f8:ed:55:a6:36:98:a8: 01:93:95:e5:a8:da:a2:b4:ff:33:b6:22:41:f5:43: b7:a8:4e:dd:6e:82:de:8f:8f:6b:6a:f3:65:9f:c2: 21:6f:6d:76:ef:79:b4:d3:8a:b9:6a:a0:5b:ff:af: 24:9e:2d:c9:1e:43:38:42:57:db:17:8a:f1:83:c1: 4f:97:21:81:4b:fd:d9:30:57:3b:4d:f0:f4:b2:d8: 29:61:5d:0f:f3:4c:03:d2:cb:d9:44:32:02:92:5a: 20:3b:df:cf:79:34:91:70:51:b6:f2:56:7a:16:29: 9f:ff:d7:d3:09:57:43:ce:74:67:89:93:96:be:ba: 3a:7b:4e:ac:3b:aa:e8:34:9f:12:95:c7:8b:a2:bd: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 192.43.153.0/24 IPv6: 2602:f98a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:57:22:e3:75:ac:06:b0:f3:9b:5c:62:02:87:b0:65:0f:c0: 5b:67:cb:c5:3d:31:d3:93:49:22:6f:a1:99:0a:f9:f5:55:ed: a5:e5:38:fd:7d:14:3c:6f:d1:61:5c:56:36:7d:a4:f4:af:0b: 03:d5:99:98:a3:89:8d:8b:cc:2f:a8:c3:f2:a9:10:0d:0c:d3: e5:0d:e9:eb:19:a0:e5:dd:38:fa:7c:d3:35:72:7d:1a:d8:af: 49:10:09:60:50:b9:4f:68:ee:33:2f:f9:d4:8c:2d:6a:57:e4: b7:e4:89:e5:bc:3f:11:4d:d1:d4:db:6a:46:4a:a4:76:3e:1c: 5e:54:34:3b:b1:19:13:09:82:4b:f2:c8:28:61:47:08:da:43: 7e:76:8a:ea:ea:33:a9:e4:fd:d9:4f:de:3b:a2:e4:e4:b9:0c: 17:d4:0b:b5:68:e9:8e:4c:90:71:e5:2f:23:44:85:c6:a8:cc: f3:a4:67:f8:04:10:3e:43:6f:c4:ca:81:30:bb:1a:89:86:af: 2a:29:b1:85:bf:65:4c:74:1a:a0:61:22:be:8b:f5:1d:f0:f7: 3b:fb:3e:eb:8a:5b:bf:7a:2a:52:a2:5a:68:3e:ad:b9:95:18: 82:46:74:36:2f:e1:1b:94:60:f9:7b:c7:43:db:56:63:88:f6: bb:38:2a:a1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEoBElL8JfzR/JgvoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyODE0NTMyOVoXDTI3MDgzMTE0NTMyOVowLzEtMCsGA1UEAxMk YTlhMzJkZWItMzE0Zi00YTFmLTk4ZWMtMWI2M2I4ZDMxYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WqGy9wtdlxNByUI67pTQ1sfiKf9Cc9GallA OvregMUdu4jbffd1awcoQ8HIVAYSwlwU0eBXFj3x5LPn+3omyTQ7cz6Tp9IzRLFq hRIapTmuSSq2RvKI25Hv7fKv0gxI17ub1i66SSuCVuFdGonTW/jtVaY2mKgBk5Xl qNqitP8ztiJB9UO3qE7dboLej49ravNln8Ihb21273m004q5aqBb/68kni3JHkM4 QlfbF4rxg8FPlyGBS/3ZMFc7TfD0stgpYV0P80wD0svZRDICklogO9/PeTSRcFG2 8lZ6Fimf/9fTCVdDznRniZOWvro6e06sO6roNJ8SlceLor2TiQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC5eHewVtfKokgaWBKgOg849f1oWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h OWEzMmRlYi0zMTRmLTRhMWYtOThlYy0xYjYzYjhkMzFhZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E5YTMyZGViLTMxNGYtNGExZi05 OGVjLTFiNjNiOGQzMWFkNC9hOWEzMmRlYi0zMTRmLTRhMWYtOThlYy0xYjYzYjhk MzFhZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAK5kwDgQCAAIwCAMGACYC+YoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCNhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5VyLjdawGsPObXGICh7BlD8Bb Z8vFPTHTk0kib6GZCvn1Ve2l5Tj9fRQ8b9FhXFY2faT0rwsD1ZmYo4mNi8wvqMPy qRANDNPlDenrGaDl3Tj6fNM1cn0a2K9JEAlgULlPaO4zL/nUjC1qV+S35InlvD8R TdHU22pGSqR2PhxeVDQ7sRkTCYJL8sgoYUcI2kN+dorq6jOp5P3ZT947ouTkuQwX 1Au1aOmOTJBx5S8jRIXGqMzzpGf4BBA+Q2/EyoEwuxqJhq8qKbGFv2VMdBqgYSK+ i/Ud8Pc7+z7rilu/eipSolpoPq25lRiCRnQ2L+EblGD5e8dD21ZjiPa7OCqh -----END CERTIFICATE-----Generated at Thu Jun 19 09:21:43 2025 by rpki-client